FFIV 8-K: F5 discloses nation-state cyber breach; BIG-IP source code exfiltrated; director resigns for new role

F5 discloses nation-state cyber breach; BIG-IP source code exfiltrated; director resigns for new role

F5, INC.

Nation-state threat actor exfiltrated BIG-IP source code and undisclosed vulnerability details; access since August 2025.

No evidence of active exploitation or software supply chain modification; containment efforts successful.

Configuration or implementation info for a small % of customers exfiltrated; affected customers will be contacted.

Director Michael Montoya resigned from board (no disagreement), appointed Chief Technology Operations Officer, reporting to CEO.

F5 released security updates for BIG-IP, F5OS, BIG-IP Next, BIG-IQ, and APM clients; customers advised to update.

Key facts

Extracted from this filing and checked against the source text.

Cybersecurity Incidents SEC 8-K Item 1.05 confidence 0.9

F5, INC. disclosed a cybersecurity incident: A highly sophisticated nation-state threat actor gained unauthorized access to certain Company systems, maintained long-term persistent access to BIG-IP product development environment and engineering knowledge management platform, exfiltrated files including portions of BIG-IP source code and infor. Impact: The incident has not had a material impact on operations; the Company is evaluating the impact on financial condition or results of operations. No evidence of modification to software supply chain, access to CRM/financial/support case management/iHealth systems, or access to NGINX source code or F5. Materiality is still being assessed. Discovered 2025-08-09.

Nature: A highly sophisticated nation-state threat actor gained unauthorized access to certain Company systems, maintained long-term persistent access to BIG-IP product development environment and engineering knowledge management platform, exfiltrated files including portions of BIG-IP source code and infor
Impact: The incident has not had a material impact on operations; the Company is evaluating the impact on financial condition or results of operations. No evidence of modification to software supply chain, access to CRM/financial/support case management/iHealth systems, or access to NGINX source code or F5
Materiality: assessing
Discovery: 2025-08-09

Exact text from the filing

As of the date of this disclosure, this incident has not had a material impact on the Company’s operations, and the Company is evaluating the impact this incident may reasonably have on its financial condition or results of operations.

View on SEC.gov