Cybersecurity disclosure obligations
Search documents
LEVI & KORSINSKY, LLP: CYBERSECURITY BREACH PRACTICES AT CENTER OF F5, INC. SECURITIES LITIGATION
Prnewswire· 2026-02-04 22:29
Core Viewpoint - A class action lawsuit has been filed against F5, Inc. for allegedly misrepresenting its cybersecurity practices, particularly regarding its BIG-IP platform, which is marketed as providing "best-in-class" security capabilities [1] Group 1: Allegations of Cybersecurity Breach - F5 allegedly knew about a significant security breach affecting its BIG-IP product development environment as early as August 2025 but continued to market its products as secure [1] - The lawsuit claims that a nation-state threat actor gained "long-term, persistent" access to F5's systems, potentially compromising source code and vulnerability information [1] - The breach reportedly led to reduced sales and renewals, elongated sales cycles, and increased remediation expenses for F5 [1] Group 2: Impact on Business Operations - Following the public disclosure of the breach, F5 revised its fiscal 2026 revenue guidance to a growth range of 0-4%, significantly below prior expectations for mid-single digit expansion [1] - Customer trust allegedly deteriorated after the breach disclosure, impacting sales cycles [1] - Management continued to promote the "best-in-class" security capabilities during the period when the breach was known but not disclosed [1] Group 3: Importance of Cybersecurity Credibility - For enterprise software companies, security credibility is a fundamental business asset, and F5's representations about its security posture were material to investor decisions during the class period [1] - The case raises important questions about cybersecurity disclosure obligations in the enterprise software sector [1]