Daily Briefing for 09.18.25

Top stories.

1. SonicWall discloses breach of its cloud backup service.
2. Insight Partners notifies individuals affected by data breach.
3. UK charges two teens over 2024 Transport for London hack.

SonicWall discloses breach of its cloud backup service.

SonicWall is warning customers to reset their credentials following a breach affecting its cloud backup service for firewalls, SecurityWeek reports. The company stated, "Our investigation found that threat actors accessed backup firewall preference files stored in the cloud for fewer than 5% of our firewall install base. While credentials within the files were encrypted, the files also included information that could make it easier for attackers to potentially exploit the related firewall. We are not presently aware of these files being leaked online by threat actors. This was not a ransomware or similar event for SonicWall; rather, this was a series of brute force attacks aimed at gaining access to the preference files stored in backup for potential further use by threat actors."

SonicWall is notifying affected customers and will provide them with fresh preferences files. SonicWall users who have cloud backups enabled should follow the company's guidance to mitigate their potential exposure.

Insight Partners notifies individuals affected by data breach.

New York-headquartered venture capital giant Insight Partners is notifying thousands of individuals that their personal information was breached during a ransomware attack that took place in January 2025, TechCrunch reports. In a breach notification filed with the Maine Attorney General's Office, the firm said the breach affected more than 12,000 people.

The company hasn't disclosed what specific types of information were stolen, but earlier said the hackers accessed financial and personal data belonging to current and former employees as well as limited partners. TechCrunch notes that this may include "private and unnamed investors who help provide capital to Insight’s venture funds."

UK charges two teens over 2024 Transport for London hack.

The UK has charged two teenagers for their alleged involvement in an August 2024 cyberattack against Transport for London (TfL), the Register reports. The defendants are eighteen-year-old Owen Flowers from Walsall and nineteen-year-old Thalha Jubair from East London. The two teens are accused of being part of the Scattered Spider criminal group.

The UK's National Crime Agency stated, "Both will appear at Westminster Magistrates Court today (18 September), after the Crown Prosecution Service authorised [that] they be charged with conspiring together to commit unauthorised acts against TfL, under the Computer Misuse Act. Flowers was initially arrested for the TfL attack on 6 September 2024, at which point NCA officers identified further potential evidence of offending against US healthcare companies. Therefore, Flowers has today also been charged with conspiring with others to infiltrate and damage the networks of SSM Health Care Corporation and attempting to do the same to Sutter Health’s networks, both based in the US. Jubair has been additionally charged under RIPA for failing to disclose the pin or passwords for devices seized from him."