Every public data breach

47 disclosed this week · 26,367 on record

F5

Disclosed Oct 15, 2025Confirmed

SEC filing

Nation-state hackers steal F5 BIG-IP source code and bug details

F5 told the SEC a nation-state actor had long-term access to its BIG-IP development environment and knowledge systems, stealing source code, undisclosed vulnerability details and some customer configuration data; it learned of the intrusion on August 9, 2025 and CISA issued an emergency directive.

What is known

People affectedNot stated in the sources we have
DisclosedOct 15, 2025
DiscoveredAug 9, 2025
AttackHacking
Data exposedSource codeInternal documentsOther
SectorTech · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to hackingby seedSource
data_types2026-09-25
[] to ["source-code","internal-docs","other"]by seedSource
discovered2026-09-25
empty to 2025-08-09by seedSource
summary2026-09-25
empty to F5 told the SEC a nation-state actor had long-term access to its BIG-IP development environment and knowledge systems, stealing source code, undisclosed vulnerability details and some customer configuration data; it learned of the intrusionby seedSource
title2026-09-25
Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Nation-state hackers steal F5 BIG-IP source code and bug detailsby seedSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (SEC 8-K), confirmed by SEC 8-K. Record counts are as reported. Not legal advice.

Everything about F5