Back in 2022, Fortinet warned that somebody had a zero day vulnerability and was using it to exploit Fortigate firewalls https://www.fortinet.com/blog/psirt-blogs/update-regarding-cve-2022-40684

Today, Belsen Group publicly released Fortigate firewall configs from just over 15k unique devices:

Roughly 25 million of the passwords have never been seen before by widely used service.

• Check Point Research (CPR) has analyzed the files that are for sale on the Dark Web, whose sellers claim are from WhatsApp users, revealing the leak includes 360 million phone numbers from 108 countries
• Full list went on sale for 4 days, and is now being distributed freely amongst Dark Web users
• Users are advised to be aware of links and unknown senders, while using any messaging services

Incident just the latest iteration of the back and forth between Israeli and Iranianian-aligned hackers.