AWS Launches New Nova AI Models And a Service That Gives Customers More Control

Cyber Giant F5 Networks Says Government Hackers Had ‘Long-Term’ Access To Its Systems, Stole Code And Customer Data

Cyber giant F5 Networks says government hackers had ‘long-term’ access to its systems, stole code and customer data, raising major concerns about supply chain security and the safety of enterprise software. The company revealed that hackers with state backing infiltrated its network for months, accessing sensitive information, internal tools, and even confidential customer configurations.

Image Credits:Piotr Swat / SOPA Images / LightRocket / Getty Images

F5 Confirms Long-Term Intrusion And Data Theft

According to F5’s filing with the U.S. Securities and Exchange Commission, the breach involved “persistent access” to its network infrastructure. The company, based in Seattle, discovered the intrusion on August 9 and says it has since contained the threat.

F5 Networks, known globally for its BIG-IP application security platform, reported that attackers reached its product development systems and knowledge management databases. These systems contained source code and undisclosed vulnerabilities that could pose long-term risks if exploited.

No Software Modifications Detected, But Risk Remains

F5 clarified that, so far, there is no evidence hackers modified its software or exploited the vulnerabilities found. However, it did confirm that customer system configurations and implementation details were stolen—data that could help attackers uncover weaknesses in customer environments.

To mitigate potential fallout, F5 has rolled out critical security updates for its BIG-IP platform and urged customers to apply patches immediately.

U.S. DOJ Allowed Disclosure Delay

The company revealed that the U.S. Department of Justice permitted a delay in public disclosure, citing potential risks to national security or public safety. F5 did not elaborate on the reason for the delay, but this indicates the severity and sensitivity of the cyberattack.

F5’s Massive Global Footprint Raises Concerns

F5’s technology is embedded across industries, protecting more than 85% of Fortune 500 companies, including banks, tech giants, and critical infrastructure providers. With such a large customer base, the impact of stolen configurations could be far-reaching if the data is weaponized by the attackers.

U.K. And U.S. Governments Issue Security Warnings

Following F5’s announcement, the U.K.’s National Cyber Security Centre (NCSC) warned that compromised F5 systems could allow hackers to exploit software vulnerabilities.

Similarly, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive, requiring federal agencies to patch affected systems by October 22 to avoid potential breaches.

Attribution Still Unclear

F5 has not named any specific nation-state or hacking group behind the attack. A company spokesperson, Dan Sorensen, declined to confirm how the hackers gained initial access or how many customers were affected. The lack of attribution adds to growing tension in the cybersecurity community as more global firms face similar state-sponsored cyberattacks.

Part Of A Broader Trend Of Government-Backed Attacks

F5 joins a growing list of major tech companies targeted by government-linked hackers. In recent years, Microsoft suffered multiple breaches attributed to China and Russia, while Hewlett Packard Enterprise (HPE) and other enterprise providers faced similar compromises.

These incidents underscore how state-sponsored cyber operations increasingly target critical infrastructure and enterprise vendors that power much of the global internet ecosystem.

F5’s Response And Ongoing Investigation

F5 maintains that its containment actions were successful and that it continues to work with law enforcement and cybersecurity partners to assess the full scope of the breach. The company’s transparency—albeit delayed—signals a commitment to responsible disclosure amid a challenging cyber environment.

However, experts warn that long-term access to a company’s development environment could allow attackers to learn its architecture intimately, potentially aiding future espionage or sabotage efforts.

Industry Impact And Next Steps

Cybersecurity analysts say this incident could prompt stricter oversight of vendors providing software to governments and Fortune 500 companies. With stolen source code and internal documentation, attackers could reverse-engineer products or uncover previously unknown vulnerabilities.

Organizations using F5 technologies are urged to:

• Install all recent security patches immediately.

• Audit access logs and configurations.

• Re-evaluate network segmentation and update credentials.

Global Cybersecurity Implications

The F5 Networks breach demonstrates how even industry-leading cybersecurity companies remain vulnerable to sophisticated government-backed actors. It also highlights the growing geopolitical dimension of cyber warfare—where critical enterprise software can become a national security target.

As more details emerge, the case of F5 Networks says government hackers had ‘long-term’ access to its systems, stole code and customer data could serve as a major wake-up call for the entire tech industry.

The revelation that F5 Networks says government hackers had ‘long-term’ access to its systems, stole code and customer data reinforces the urgent need for companies to adopt a zero-trust security model and improve monitoring across supply chains. For a cybersecurity firm like F5 to fall victim to such an attack shows just how relentless and capable state-backed hackers have become.