F5
Disclosed Oct 15, 2025Confirmed
Nation-state hackers steal F5 BIG-IP source code and bug details
F5 told the SEC a nation-state actor had long-term access to its BIG-IP development environment and knowledge systems, stealing source code, undisclosed vulnerability details and some customer configuration data; it learned of the intrusion on August 9, 2025 and CISA issued an emergency directive.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Oct 15, 2025 |
| Discovered | Aug 9, 2025 |
| Attack | Hacking |
| Data exposed | Source codeInternal documentsOther |
| Sector | Tech · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
unknown to hackingby seedSource
[] to ["source-code","internal-docs","other"]by seedSource
empty to 2025-08-09by seedSource
empty to F5 told the SEC a nation-state actor had long-term access to its BIG-IP development environment and knowledge systems, stealing source code, undisclosed vulnerability details and some customer configuration data; it learned of the intrusionby seedSource
Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Nation-state hackers steal F5 BIG-IP source code and bug detailsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (SEC 8-K), confirmed by SEC 8-K. Record counts are as reported. Not legal advice.