- Published on
Incident at Vodafone: Cybergang Lapsus$ steals software source codes
- Authors
- Name
- aimode.news
- @aimode_news
Vodafone has become the victim of cyber criminals. The criminal online cleaning Lapsus$ has penetrated IT systems and has picked up software source texts. After apparently unsuccessful extortion attempts, the data has now landed openly on the network.
The Darknet website of Lapsus$ is a new article that announces the data claw at Vodafone. It dates back to last Thursday and is intended to include documents on “full infrastructure, source text files, GitHub-Tree and internal network cards”. According to the information provided there, the archive “VODA FULL DUMP.tar.xz” has a volume of 180 GByte of data. The archive is also linked and can be downloaded from the Darknet-Leaksite of the Lapsus$ band.
Vodafone confirms data leak
On request from heise online Vodafone confirms the involuntary data outflow. “Vodafone can confirm that in March 2026 a criminal organization has obtained unauthorized access to a very limited number of software source code files. The copied files were released on May 10,” explains the company. Security experts from Vodafone would have immediately recognized and curbed the incident in March 2026. The telecommunications provider attaches importance to the finding that no sensitive information has been copied by customers.
There has also been no access to internal systems. Consequently, there was no impairment of internal infrastructure, networks or production systems.
Video by heise
It remains unclear how the attack proceeded and which systems were compromised. Nothing is known about the amount of the ransom claim. It is not the first IT incident from the Vodafone environment. In the middle of 2023, cyber criminals were able to copy sensitive data from a sales partner. Last year, the Federal Commissioner for Data Protection and Freedom of Information (BfDI) Louisa Specht-Riemenschneider imposed two fines of EUR 15 and 30 million against Vodafone. Among other things, it was customer data that sales partners have used for customer acquisition on behalf of Vodafone.
(dmk)
