{"filing":{"accession_number":"0000943374-26-000261","cik":"0001951276","ticker":"SRBK","company_name":"SR Bancorp, Inc.","form":"8-K","filing_date":"2026-07-10","report_date":null,"primary_document":"srbk-20260706.htm","primary_document_url":"https://www.sec.gov/Archives/edgar/data/1951276/000094337426000261/srbk-20260706.htm"},"events":[{"id":17348,"run_id":15528,"accession_number":"0000943374-26-000261","anchor_item_number":"8.01","event_type":"cybersecurity_incident","event_domain":"legal","is_material":true,"confidence":0.95,"summary":"The disclosure describes an unauthorized actor accessing and acquiring customer data files (names, social security numbers, account numbers, identification documents, dates of birth) from Mercadien's servers. This constitutes a material cybersecurity incident involving data exfiltration of sensitive customer information, triggering mandatory disclosure under Item 1.05 (cybersecurity incidents required since 2023). Although the Company states no material financial impact is expected as of the disclosure date, the incident involves customer PII and creates legal, regulatory, and reputational risks that would affect a reasonable investor's assessment.","company_name":"SR Bancorp, Inc.","ticker":"SRBK","filing_date":"2026-07-10","form":"8-K","submitted_at":null,"items":[{"id":15787,"accession_number":"0000943374-26-000261","item_number":"8.01","item_title":null,"event_type":"cybersecurity_incident","event_domain":"legal","is_material":true,"confidence":0.95,"reasoning":"The disclosure describes an unauthorized actor accessing and acquiring customer data files (names, social security numbers, account numbers, identification documents, dates of birth) from Mercadien's servers. This constitutes a material cybersecurity incident involving data exfiltration of sensitive customer information, triggering mandatory disclosure under Item 1.05 (cybersecurity incidents required since 2023). Although the Company states no material financial impact is expected as of the disclosure date, the incident involves customer PII and creates legal, regulatory, and reputational risks that would affect a reasonable investor's assessment.","classifier_version":"claude-haiku-4-5-20251001+prompt-a85dd512","taxonomy_version":"v1.3","classified_at":"2026-07-11T00:05:09.766679+00:00","company_name":"","ticker":null,"filing_date":""}]}],"classifications":[{"id":15787,"accession_number":"0000943374-26-000261","item_number":"8.01","item_title":null,"event_type":"cybersecurity_incident","event_domain":"legal","is_material":true,"confidence":0.95,"reasoning":"The disclosure describes an unauthorized actor accessing and acquiring customer data files (names, social security numbers, account numbers, identification documents, dates of birth) from Mercadien's servers. This constitutes a material cybersecurity incident involving data exfiltration of sensitive customer information, triggering mandatory disclosure under Item 1.05 (cybersecurity incidents required since 2023). Although the Company states no material financial impact is expected as of the disclosure date, the incident involves customer PII and creates legal, regulatory, and reputational risks that would affect a reasonable investor's assessment.","classifier_version":"claude-haiku-4-5-20251001+prompt-a85dd512","taxonomy_version":"v1.3","classified_at":"2026-07-11T00:05:09.766679+00:00","company_name":"SR Bancorp, Inc.","ticker":"SRBK","filing_date":"2026-07-10"}]}