Showing material events only. Routine administrative filings — bylaw amendments, technical fund updates, procedural FD disclosures — are filtered out so the front page stays signal-dense.
8-K
Cybersecurity Incident
confidence 92%
filed 2026-07-22
Item 8.01
The disclosure describes a material cybersecurity incident involving unauthorized access to an employee's Company-issued computer via social engineering, with exfiltration of files. Although the Company states it does not believe the incident has had a material impact on operations, the fact that it was disclosed on Form 8-K Item 8.01 and involved a threat actor gaining access and exfiltrating data triggers the cybersecurity_incident classification. The incident meets the materiality threshold for disclosure under Item 1.05 (cybersecurity incidents required since 2023), and a reasonable investor would consider unauthorized access and data exfiltration to be material information affecting risk assessment.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 85%
filed 2026-07-21
Item 8.01
The filing discloses a cybersecurity incident involving unauthorized access to "certain non-sensitive customer information and other documents" that was subsequently used to facilitate fraudulent lease-to-own agreements, resulting in approximately $13 million in fraudulent contract losses in the Acima segment during Q2 2026. Although the Company states it "believes that the incidents are not material" based on current knowledge, the quantified financial impact ($13M in losses), the involvement of federal law enforcement notification, and the implementation of significant remediation measures (enhanced authentication, fraud detection capabilities) indicate a material cybersecurity incident under Item 1.05 standards. The $13 million loss impact alone is material to a reasonable investor's assessment of the registrant's financial condition and operational risk.
View raw filing on EDGAR →
6-K
Cybersecurity Incident
confidence 95%
filed 2026-07-20
EX-99.1
This exhibit is a disclosure of a material cybersecurity incident at Ecopetrol, a critical national infrastructure operator. The incident involved unlawful infiltration of 3,300 accounts and downloading of files, with extortion demands from the threat actor. Although the company states no compromise to data integrity or user credentials occurred, the incident is material given Ecopetrol's critical infrastructure status, the scale of affected accounts, ongoing extortion threats, and active collaboration with Colombian government cybersecurity agencies (ColCERT, CCOCI, DIJIN). The disclosure directly addresses the cybersecurity incident previously disclosed on July 17, 2026.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-07-17
Item 8.01
The disclosure describes a material cybersecurity incident involving unauthorized access to three employee accounts through social engineering on July 4, 2026. The threat actor gained access to personally identifiable information and protected health information, triggering immediate incident response procedures, third-party cybersecurity expert involvement, and law enforcement notification. Although the Company states it does not believe the incident will have material impact on business or operations, the disclosure of a data breach affecting member and health information in a healthcare company is a material cybersecurity incident requiring 8-K disclosure under Item 1.05 (or Item 8.01 as here).
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-07-16
Item 8.01
The disclosure describes unauthorized third-party access to fairlife's systems via a ransomware event, resulting in temporary suspension of U.S. production operations. This is a material cybersecurity incident involving a breach of production-related systems and operational disruption, requiring mandatory disclosure under Item 1.05 (or Item 8.01 as here). The incident's materiality is evidenced by the production shutdown and ongoing investigation, despite the company's caveat that full impacts are not yet determined.
View raw filing on EDGAR →
6-K
Cybersecurity Incident
confidence 95%
filed 2026-07-14
The 6-K discloses a material cybersecurity incident involving unauthorized exfiltration of backup data, including payment transaction records and business information, following an initial announcement on July 8, 2026. Although the Company confirms systems are now cleared, production environment unimpacted, and customer funds untouched, the incident involved data exfiltration, criminal extortion demands, and ongoing investigation costs—hallmarks of a material cybersecurity breach requiring disclosure under Item 1.05 (required since 2023).
View raw filing on EDGAR →
6-K
Cybersecurity Incident
confidence 85%
filed 2026-07-13
EX-99.1
The press release discloses a material disruption to subsidiary NetNut Ltd.'s proxy network operations of unknown root cause, with the Company appointing external cybersecurity and forensic experts to investigate whether third parties misused the network or technical issues affected operations. This constitutes a material cybersecurity incident requiring disclosure under Item 1.05. The Company is also implementing workforce reductions affecting approximately one-third of employees and suspending service operations pending investigation and compliance review, indicating material operational impact from the incident.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-07-10
Item 8.01
The disclosure describes an unauthorized actor accessing and acquiring customer data files (names, social security numbers, account numbers, identification documents, dates of birth) from Mercadien's servers. This constitutes a material cybersecurity incident involving data exfiltration of sensitive customer information, triggering mandatory disclosure under Item 1.05 (cybersecurity incidents required since 2023). Although the Company states no material financial impact is expected as of the disclosure date, the incident involves customer PII and creates legal, regulatory, and reputational risks that would affect a reasonable investor's assessment.
View raw filing on EDGAR →
6-K
Cybersecurity Incident
confidence 92%
filed 2026-07-08
The filing discloses "unusual activity" detected in a subsidiary's cloud account that was "immediately blocked and contained," with investigation ongoing by subject matter experts and law enforcement in Israel and the United States. Although the company states no material information exposure and no impact to production systems or business operations, the involvement of law enforcement, the ongoing investigation, and the uncertainty about the scope of information involved constitute a material cybersecurity incident requiring disclosure under Item 1.05 (or equivalent 6-K disclosure).
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 98%
filed 2026-07-02
Item 1.05
AdaptHealth Corp. disclosed a material cybersecurity incident under Item 1.05 involving unauthorized access to cloud-based systems and exfiltration of sensitive data including patient personally identifiable information and protected health information. The Company explicitly determined the incident material on June 27, 2026, due to "the nature and potential volume of the data that is at risk." The incident resulted from a social engineering attack compromising a third-party contractor's user session, and while contained, the full scope and financial impact remain under investigation.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 98%
filed 2026-07-02
Item 1.05
The filing explicitly discloses a material cybersecurity incident under Item 1.05: a ransomware attack on a third-party law firm resulted in unauthorized access to sensitive Company-related borrower data including names, dates of birth, addresses, and Social Security numbers. The Company determined the incident material on June 29, 2026 "in light of the volume and sensitivity of the information involved," triggering mandatory disclosure and notification obligations under federal and state law.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-06-30
Item 8.01
Aflac Japan discovered unauthorized third-party access to its systems between June 15–25, 2026, affecting files containing policy details, personal information, and bank account data. The company engaged third-party cybersecurity experts, notified the Japan Financial Services Agency and affected individuals, and suspended certain systems. This is a material cybersecurity incident requiring disclosure under Item 1.05 (mandatory since 2023) and disclosed here under Item 8.01, with clear potential for legal, reputational, and financial consequences acknowledged in the forward-looking statements.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-06-25
Item 1.05
The filing explicitly discloses a material cybersecurity incident under Item 1.05: unauthorized access to River Financial's network on June 16, 2026, with ransomware deployment discovered June 19, 2026. The company has taken containment measures and engaged third-party forensics to investigate potential personally identifiable information exfiltration. While the full impact remains under investigation, the incident has already impacted certain operations, making it material to investors assessing the registrant's operational continuity and data security posture.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-06-23
Item 1.05
The filing explicitly discloses a material cybersecurity incident under Item 1.05, describing unauthorized access to 8x8's Salesforce system via a compromised Klue third-party integration between June 11-12, 2026. The threat actor exfiltrated competitively sensitive customer information including contract details, sales notes, and contact information. Although the Company states the incident is "not expected to have a material impact" on operations or financial condition, the disclosure of data exfiltration involving customer information and the Company's determination that it is reportable under Item 1.05 clearly establishes this as a material cybersecurity incident requiring classification.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 98%
filed 2026-06-15
Item 1.05
iRhythm disclosed a material cybersecurity incident under Item 1.05 involving unauthorized access to third-party-hosted business applications, exfiltration of sensitive data including patient protected health information, and extortion demands from a threat actor. The Company explicitly determined on June 10, 2026 that "the incident is material in light of the volume of the potentially affected data," and the disclosure covers the required elements: discovery date (June 8), threat actor communications (June 9), confirmation of data exfiltration, and assessment of impact. While the Company states the incident is not reasonably likely to have material financial impact and does not affect clinical systems or patient safety, the materiality determination and the nature of the breach (PHI exfiltration with extortion) clearly qualify this as a material cybersecurity incident under the 2023 8-K cybersecurity disclosure rules.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-06-09
Item 8.01
The filing discloses a material cybersecurity incident at Evertec, a third-party core processing provider, affecting customer data of BPPR (Popular's Puerto Rico subsidiary). The compromised data includes personal information, debit card numbers, and other customer information. Although the Corporation states it does not currently believe the incident is reasonably likely to have material impact, the disclosure itself—involving customer data compromise, regulatory notification, and enhanced fraud monitoring—constitutes a material cybersecurity incident requiring 8-K disclosure under Item 1.05 rules (effective 2023).
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 98%
filed 2026-06-09
Item 8.01
The disclosure describes a material cybersecurity incident discovered on May 13, 2026, involving unauthorized access to customer data through a third-party support platform. The breach compromised financial institution clients' transaction records, payment card numbers, and customer names/contact information, primarily affecting Puerto Rico-based institutions. The Company has engaged law enforcement and external cybersecurity experts, expects to incur investigation and remediation expenses, and acknowledges potential liabilities and insurance coverage uncertainties—all hallmarks of a material cybersecurity incident requiring 8-K disclosure under Item 1.05 (mandatory since 2023).
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 85%
filed 2026-05-29
Item 8.01
The filing discloses a material cybersecurity incident in section (b) whereby a third-party vendor experienced unauthorized access to sensitive personal information of certain Company customers. Although the Company states its own systems were not compromised and no misuse has occurred to date, the disclosure of the incident itself, notification obligations to customers, credit monitoring services, and explicit acknowledgment of potential legal, reputational, and financial risks in the forward-looking statements section establish this as a reportable cybersecurity event under Item 1.05 (required since 2023). The Company's own characterization of potential "legal, reputational, and financial risks" elevates this beyond a purely vendor-related matter.
View raw filing on EDGAR →
8-K
Cybersecurity Incident
confidence 95%
filed 2026-05-22
Item 1.05
The filing explicitly discloses a material cybersecurity incident under Item 1.05, involving unauthorized access to the Company's information systems affecting patient data. Kroll notified the Company on May 20, 2026 that the Vendor detected unauthorized third-party access to systems containing patient information. Although the Company states the incident has not yet had a material operational impact, the disclosure of patient data compromise, potential regulatory and legal risks, and the need for credit monitoring services constitute a material cybersecurity incident requiring disclosure under the 2023 cybersecurity rules.
View raw filing on EDGAR →