The Department of Homeland Security and four branches of the U.S. military had purchased the affected software.

Fortinet acknowledged that an employee altered labels on products to make them appear compliant a law prohibiting federal agencies from acquiring products in specific countries.