CISA warns Fortinet users to secure devices after FortiBleed credential leak

Impact verdict

Low impact. Exposed credentials for ~74,000 Fortinet firewall/VPN devices create plausible intrusion risk across enterprise networks globally. Cyber underwriters should monitor for emerging claims and potential systemic exposure given the scale of affected devices. No confirmed loss estimate or specific insured losses reported yet, but credential leakage could trigger first-party cyber and third-party liability claims if exploited. London Market impact pathway remains gated LOW absent evidence of concrete insured losses, named asset damage, claims estimates, or market pricing impact.