F5 Networks reports nation-state cyberattack on product systems

In Data Breach News
October 16, 2025

This is not an incident involving personally identifiable information or protected health information. It involves source code and information about product vulnerabilities.

Street Insider reports:

F5 Networks (NASDAQ: FFIV) disclosed that a nation-state threat actor gained unauthorized access to certain company systems on August 9, 2025, according to a company statement.

The network security company said the threat actor maintained persistent access to F5 systems, including the BIG-IP product development environment and engineering knowledge management platform. Files containing portions of BIG-IP source code and information about undisclosed vulnerabilities were exfiltrated during the breach.

[…]

F5 reported no evidence of access to customer relationship management, financial, support case management, or iHealth systems. However, some exfiltrated files from the knowledge management platform contained configuration information for a small percentage of customers. The company said it will communicate directly with affected customers.

Read more at Street Insider.