F5 Says Nation-State Hackers Stole Source Code and Vulnerability Data

F5 reveals state-sponsored hack, theft of BIG-IP source code, and client data; suspected Chinese involvement, no critical flaws compromised.

By Content Team

Oct 15, 2025

ON THIS PAGE

F5 disclosed that state-sponsored hackers breached its systems and stole sensitive data, including BIG-IP source code and information on undisclosed vulnerabilities. The attackers maintained persistent access to development systems, though F5 says no critical vulnerabilities or remote code execution flaws were compromised.

The company detected the August 9 attack but delayed disclosure with Justice Department permission. Some customer configuration data from a "small percentage" of clients was also stolen from an engineering platform.

While F5 found no evidence of supply chain tampering or access to financial systems, the attack profile suggests Chinese state-sponsored involvement. Chinese hackers frequently target major software companies hunting for zero-day vulnerabilities.

Source: Security Week

Have questions about protecting your software?

Our escrow experts are standing by to help.

Book a free demo

Want more insights like this?