Fortinet controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile7 entries
2024
SharePoint data breach
Fortinet confirmed that an attacker had accessed data from a company Microsoft SharePoint environment. The company said the exposed information included limited data relating to a small number of customers.
2023
State-linked exploitation of FortiGate devices
Microsoft and Five Eyes partners reported a broad, continuing cyberattack targeting Fortinet FortiGuard or FortiGate devices and attributed the activity to a state-sponsored actor in China.
2021
Fortinet VPN credential exposure
A large set of login names and passwords associated with Fortinet VPN devices was reportedly published online. The credentials were linked to devices affected by a 2018 vulnerability, CVE-2018-13379.
2019
Whistleblower case over government sales
Fortinet settled a whistleblower lawsuit concerning allegedly intentionally mislabeled Chinese-made equipment sold to United States government end users. The company described the matter as an isolated incident.
2005
GPL source-code dispute
A German court issued a preliminary injunction involving Fortinet's UK subsidiary and source code associated with GPL-licensed components. The matter ended after Fortinet agreed to make the relevant source code available on request.
2005
Myanmar censorship controversy
An OpenNet study reported use of FortiGuard technology by Myanmar's military government in an internet-censorship context. Fortinet said its products were sold by third-party resellers and referenced its obligations concerning United States embargoes.
2004
Trend Micro patent dispute
Trend Micro alleged that FortiGate products infringed patents concerning server-based antivirus technology. The dispute involved proceedings before the United States International Trade Commission, while the patents at issue were later declared invalid.