Skip to content

F5

Disclosed Oct 15, 202511 months agoConfirmed

SEC filing

Nation-state hackers steal F5 BIG-IP source code and bug details

F5 told the SEC a nation-state actor had long-term access to its BIG-IP development environment and knowledge systems, stealing source code, undisclosed vulnerability details and some customer configuration data; it learned of the intrusion on August 9, 2025 and CISA issued an emergency directive.

What is known

People affectedNot stated in the sources we have
DisclosedOct 15, 2025
DiscoveredAug 9, 2025
AttackHacking
Data exposedSource code, Internal documents, Other
SectorTech · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
SEC 8-KtotalOct 15, 2025
ResearchtotalOct 15, 2025
History of this record
  • 2026-09-25 · attack: unknown to hacking · seed source
  • 2026-09-25 · data_types: [] to ["source-code","internal-docs","other"] · seed source
  • 2026-09-25 · discovered: empty to 2025-08-09 · seed source
  • 2026-09-25 · summary: empty to F5 told the SEC a nation-state actor had long-term access to its BIG-IP development environment and knowledge systems, stealing source code, undisclosed vulnerability details and some customer configuration data; it learned of the intrusion · seed source
  • 2026-09-25 · title: Material cybersecurity incident reported to the SEC (8-K Item 1.05) to Nation-state hackers steal F5 BIG-IP source code and bug details · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (SEC 8-K), confirmed by SEC 8-K. Record counts are as reported. Not legal advice.

Everything about F5

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.