Lapsus$ Leaks Vodafone Source Code and Database Credentials
The Lapsus$ group publicly dumped approximately 7.1GB of Vodafone internal source code after the company reportedly refused to pay an extortion demand. The leaked materials include production and testing application code for services such as OnePortal and Cyberhub, repository structures, internal configurations, and hardcoded PostgreSQL database credentials. The dump provides a potential blueprint of Vodafone's backend infrastructure.
- source-code
- credentials
- internal-configurations
On May 11, 2026, the Lapsus$ group publicly released approximately 7.1GB of Vodafone source code and database credentials after the telecommunications provider declined to meet an extortion demand. The leak contains production and testing application code for internal services including OnePortal and Cyberhub, repository structures, internal configurations, and hardcoded PostgreSQL credentials that could map the company’s backend infrastructure.
Public reporting from Cybernews confirms the materials were uploaded to a GitHub repository before being widely mirrored. The exposed data includes functional source code rather than customer personal information, yet the presence of live credentials and configuration details creates immediate risk for the organization and any third parties whose systems interact with Vodafone’s environment. Available reporting describes the incident as a classic extortion-to-leak sequence typical of Lapsus$ operations observed in prior years.
Want the rest of this breakdown?
Sign up free to keep reading. Members get extended access, the weekly breach digest, and a complimentary DoxxScan™ to see if their identity is exposed in the breaches we cover.
A breach leaks your credentials. Then hackers chain those credentials to your address, family, phone, and employer using public broker sites. We’re the only tool built around that chain.
⚠ Were you in this breach?
Free email scanner. We check your address against 15B+ leaked records (including this breach) in 15 seconds — then show you the $14.99 cleanup that removes you from the broker sites aggregating leaked data.
Check my email — free →
