Cybercriminal group Lapsus$ steals Vodafone source code
Telecommunications company Vodafone has confirmed it was the target of a cyberattack. The criminal group Lapsus$ gained access to the company's software source code, with the stolen data now being distributed online.
Telecommunications provider Vodafone has confirmed it fell victim to a cyberattack, with source code for its software among the data stolen by the criminal group Lapsus$.
The group has reportedly published an archive of approximately 180 gigabytes on a darknet site, allegedly containing software source code, network maps, and other internal information from Vodafone. The leak was dated to the past Thursday, according to the group's website.
Vodafone acknowledged the incident, stating that an unauthorized party gained access to a limited number of software source code files in March 2026. The company confirmed the copied files were published on May 10. Vodafone emphasized that no sensitive customer information was compromised and that the attack did not affect internal systems, networks, or operational infrastructure.
Details regarding the attack vector and any ransom demands remain undisclosed. This is not Vodafone's first security incident, with previous breaches involving partners and resulting in significant fines for the company related to customer data misuse.