Frequently Asked Questions

The SonicWALL data leak impacted every customer who was using SonicWall’s optional Cloud Backup Service. The breach exposed firewall configuration backups containing sensitive VPN credentials and pre-shared keys (PSKs). Attackers were able to obtain these configuration files, which could potentially be used to access internal networks or compromise connected VPN endpoints.

SonicWall confirmed that customers who did not use the Cloud Backup feature were not directly affected by this specific incident. However, due to the risk of shared or reused credentials, all SonicWall users are strongly advised to review their network configurations, rotate pre-shared keys, and verify VPN access logs to ensure their systems remain secure.

To help administrators protect their infrastructure, VPN Tracker has published a detailed 3-step guide to securing SonicWall VPNs that outlines exactly how to update your PSKs and safely roll out new VPN credentials to your team.