A hacking group called Lapsus$ has made a large amount of Vodafone data public after the company refused to pay a ransom.
In late April 2026, they said they broke into Vodafone systems and gave the company 15 days to pay or they would release the data. Today, the deadline passed, so Lapsus$ announced that Vodafone refused to pay and published everything.
The leaked information includes full details about Vodafone’s computer networks and their complete internal GitHub code storage, with public download links now available through services like AnonFiles and a dedicated server.
This is the second time Lapsus$ has targeted Vodafone after a similar incident in 2022.
Vodafone has not made any public comment yet, and it is still unclear if customer information was affected.