F5 Networks reports nation-state cyberattack on product systems

F5 Networks (NASDAQ: FFIV) disclosed that a nation-state threat actor gained unauthorized access to certain company systems on August 9, 2025, according to a company statement.

The network security company said the threat actor maintained persistent access to F5 systems, including the BIG-IP product development environment and engineering knowledge management platform. Files containing portions of BIG-IP source code and information about undisclosed vulnerabilities were exfiltrated during the breach.

F5 activated incident response processes and engaged external cybersecurity experts following the discovery. The company stated its containment efforts have been successful and no new unauthorized activity has been observed since containment began.

The investigation found no evidence of modifications to F5's software supply chain, source code, or build and release pipelines. Independent cybersecurity research firms validated this assessment, according to the company.

F5 reported no evidence of access to customer relationship management, financial, support case management, or iHealth systems. However, some exfiltrated files from the knowledge management platform contained configuration information for a small percentage of customers. The company said it will communicate directly with affected customers.

The threat actor did not access or modify NGINX source code, the product development environment, F5 Distributed Cloud Services, or Silverline systems, according to the company's findings.

F5 is working with federal law enforcement and government partners regarding the incident and implementing additional security measures.

You May Also Be Interested In

• CalPrivate Bank names Andra Frazier as chief credit officer
• CACI wins U.S. Space Force contract worth up to $981M
• Kaiser Aluminum names Fred Stephan as CEO, effective November 2026