FFIV · 10-Q · 2026Q2 · Full report

Cybersecurity Incident

F5, INC. · 2026-08-06 · Importance 53 · Surprise 60 · In source text

On October 15, 2025, F5 disclosed a security incident in which a threat actor maintained long-term, persistent access to F5 systems and exfiltrated certain files. During the nine months ended June 30, 2026, F5 incurred an additional $10.2 million in research and development professional-services costs and $15.3 million in general and administrative professional-services costs in response to the Cyber Incident. The filing does not disclose the nature of the exfiltrated files or any governmental investigation, customer losses, remediation total, or resolution timeframe.

Key facts

• General and administrative professional services expenses increased $15.3 million for the nine months ended June 30, 2026 driven by costs incurred in response to the Cyber Incident. source
• Research and development professional services expenses increased $2.6 million for the three months ended June 30, 2026 driven by costs incurred in response to the Cyber Incident. source
• General and administrative professional services expenses increased $3.2 million for the three months ended June 30, 2026 driven by costs incurred in response to the Cyber Incident. source
• Expenses for professional services related to the Cyber Incident increased $10.2 million for the nine months ended June 30, 2026 from the comparable period in the prior year. source
• Expenses for professional services in general and administrative related to the Cyber Incident increased $15.3 million for the nine months ended June 30, 2026 from the comparable period in the prior year. source
• F5 disclosed a security incident (the "Cyber Incident") on October 15, 2025 in which a threat actor maintained long-term, persistent access to F5 systems and exfiltrated certain files. source

Impact estimates