Recent Cybersecurity 8-K events

Recent 8-Ks about cybersecurity incidents, remediation, customer impact, and incident updates.

• September 23, 2026, 7:30 AM ET ASTH Astrana Health, Inc. negative materiality 0.85

  Astrana Health discloses cybersecurity incident; data possibly accessed via social engineering

  JSON Markdown SEC source
• September 14, 2026, 5:15 PM ET CNP CENTERPOINT ENERGY INC negative materiality 0.60

  CenterPoint Energy discloses cyber incident exposing customer personal info

  JSON Markdown SEC source
• September 10, 2026, 5:53 PM ET NUTX Nutex Health Inc. negative materiality 0.70

  Nutex Health says stolen patient data published on web; class actions filed

  JSON Markdown SEC source
• September 8, 2026, 4:29 PM ET Veradigm Inc. negative materiality 0.55

  Veradigm discloses vendor cyber incident exposing patient data including SSNs

  JSON Markdown SEC source
• September 8, 2026, 6:15 AM ET BSX BOSTON SCIENTIFIC CORP negative materiality 0.90

  Boston Scientific cyber incident to materially hit Q3 and FY 2026 results; will miss guidance

  JSON Markdown SEC source
• September 1, 2026, 4:05 PM ET PARK Park Dental Partners, Inc. negative materiality 0.60

  Park Dental Partners reports unauthorized network access; possible patient data compromise

  JSON Markdown SEC source
• September 1, 2026, 7:00 AM ET NVCR NovoCure Ltd negative materiality 0.50

  NovoCure discloses cyber incident exposing patient ID numbers and contact info

  JSON Markdown SEC source
• August 31, 2026, 4:25 PM ET NUTX Nutex Health Inc. negative materiality 0.90

  Nutex Health confirms data exfiltration in cyber incident; faces class action lawsuit

  JSON Markdown SEC source
• August 28, 2026, 4:05 PM ET MCK MCKESSON CORP negative materiality 0.50

  McKesson discloses cybersecurity incident on Aug 25, 2026; investigation early

  JSON Markdown SEC source
• August 26, 2026, 6:06 AM ET BSX BOSTON SCIENTIFIC CORP negative materiality 0.75

  Boston Scientific discloses cybersecurity incident disrupting global operations

  JSON Markdown SEC source
• August 24, 2026, 4:02 PM ET NUTX Nutex Health Inc. negative materiality 0.80

  Nutex Health discloses unauthorized data access and exfiltration from its network

  JSON Markdown SEC source
• August 7, 2026, 6:04 AM ET LEVI LEVI STRAUSS & CO negative materiality 0.40

  Levi Strauss discloses cyber incident; corporate info exfiltrated, no consumer data

  JSON Markdown SEC source
• August 6, 2026, 1:14 PM ET IEHC IEH Corp negative materiality 0.40

  IEH Corporation reports cybersecurity incident involving unauthorized access to employee Microsoft 365 mailbox

  JSON Markdown SEC source
• July 31, 2026, 4:03 PM ET AMGN AMGEN INC negative materiality 0.75

  Amgen reports material cybersecurity incident with data exfiltration from cloud environments

  JSON Markdown SEC source
• July 30, 2026, 11:40 AM ET RVRF River Financial Corp negative materiality 0.60

  River Financial reports cybersecurity incident with unauthorized data access; investigation ongoing

  JSON Markdown SEC source
• July 29, 2026, 5:15 PM ET ADI ANALOG DEVICES INC negative materiality 0.55

  Analog Devices reports unauthorized access and data exfiltration on June 23, 2026

  JSON Markdown SEC source
• July 29, 2026, 4:30 PM ET HSTM HEALTHSTREAM INC negative materiality 0.55

  HealthStream reports cybersecurity incident; employee and billing data accessed

  JSON Markdown SEC source
• July 22, 2026, 5:19 PM ET FIVE FIVE BELOW, INC negative materiality 0.35

  Five Below reports social-engineering cyber incident; no PII exfiltrated, no material impact

  JSON Markdown SEC source
• July 21, 2026, 5:42 PM ET UPBD UPBOUND GROUP, INC. negative materiality 0.70

  Upbound Group reports cyber incidents leading to $13M fraudulent contract losses in Acima segment

  JSON Markdown SEC source
• July 17, 2026, 4:05 PM ET CLOV CLOVER HEALTH INVESTMENTS, CORP. /DE negative materiality 0.45

  Clover Health reports cyber incident; three employee accounts compromised via social engineering

  JSON Markdown SEC source
• July 17, 2026, 12:20 PM ET RVRF River Financial Corp negative materiality 0.65

  River Financial discloses four class action lawsuits over cybersecurity incident; impact undetermined

  JSON Markdown SEC source
• July 16, 2026, 4:20 PM ET KO COCA COLA CO negative materiality 0.70

  Coca-Cola reports ransomware attack at fairlife subsidiary; US production suspended

  JSON Markdown SEC source
• July 10, 2026, 4:29 PM ET SRBK SR Bancorp, Inc. negative materiality 0.60

  SR Bancorp reports data security incident at service provider Mercadien; customer PII accessed

  JSON Markdown SEC source
• July 10, 2026, 2:30 PM ET RVRF River Financial Corp negative materiality 0.65

  River Financial discloses data breach; two class action lawsuits filed

  JSON Markdown SEC source
• July 6, 2026, 9:54 AM ET RVRF River Financial Corp negative materiality 0.65

  River Financial updates cybersecurity incident: data potentially impacted, PII under review, no account compromise yet.

  JSON Markdown SEC source
• July 2, 2026, 4:15 PM ET NAVI NAVIENT CORP negative materiality 0.70

  Navient discloses ransomware attack at third-party law firm exposing borrower data

  JSON Markdown SEC source
• July 2, 2026, 4:01 PM ET AHCO AdaptHealth Corp. negative materiality 0.75

  AdaptHealth reports material cybersecurity incident; patient data exfiltrated via social engineering

  JSON Markdown SEC source
• June 30, 2026, 6:03 AM ET AFL AFLAC INC negative materiality 0.75

  Aflac Japan discovers unauthorized access to systems; personal and bank info compromised

  JSON Markdown SEC source
• June 25, 2026, 4:52 PM ET RVRF River Financial Corp negative materiality 0.70

  River Financial discloses ransomware attack; investigation ongoing, impact undetermined

  JSON Markdown SEC source
• June 23, 2026, 5:10 PM ET EGHT 8X8 INC /DE/ negative materiality 0.65

  8x8 discloses cyber breach via Klue Labs Salesforce integration; customer data exfiltrated

  JSON Markdown SEC source
• June 15, 2026, 4:30 PM ET IRTC iRhythm Holdings, Inc. negative materiality 0.75

  iRhythm discloses cyber incident with data exfiltration; threat actor demanded payment

  JSON Markdown SEC source
• June 9, 2026, 8:30 AM ET BPOP POPULAR, INC. negative materiality 0.50

  Popular Inc. reports Evertec data breach affecting BPPR customer debit card info

  JSON Markdown SEC source
• June 9, 2026, 8:28 AM ET EVTC EVERTEC, Inc. negative materiality 0.65

  EVERTEC discloses data breach via third-party platform; payment card info exposed

  JSON Markdown SEC source
• May 22, 2026, 4:30 PM ET TOI Oncology Institute, Inc. negative materiality 0.70

  Oncology Institute patient data accessed in Vendor cybersecurity incident; operations sustained

  JSON Markdown SEC source
• May 20, 2026, 4:04 PM ET WST WEST PHARMACEUTICAL SERVICES INC neutral materiality 0.60

  West Pharmaceutical provides update on May 4 cyberattack; fully operational, no material financial impact

  JSON Markdown SEC source
• May 11, 2026, 5:06 PM ET WST WEST PHARMACEUTICAL SERVICES INC negative materiality 1.00

  West Pharmaceuticals discloses material cyberattack; data exfiltrated, systems encrypted on May 4 2026

  JSON Markdown SEC source
• May 11, 2026, 4:15 PM ET CBFV CB Financial Services, Inc. negative materiality 0.90

  CB Financial Services discloses material cyber incident exposing customer SSNs and DOBs

  JSON Markdown SEC source
• May 8, 2026, 7:59 PM ET SAIL SailPoint, Inc. neutral materiality 0.35

  SailPoint detects unauthorized GitHub access on April 20; no customer data compromised

  JSON Markdown SEC source
• May 1, 2026, 7:59 PM ET ITRI ITRON, INC. negative materiality 0.50

  Itron provides update on April 13 cyber incident; no further unauthorized activity observed

  JSON Markdown SEC source
• April 27, 2026, 7:59 PM ET MMED MiniMed Group, Inc. negative materiality 0.50

  MiniMed parent Medtronic discloses unauthorized third-party data access; MiniMed IT not compromised

  JSON Markdown SEC source
• April 27, 2026, 7:59 PM ET MDT Medtronic plc negative materiality 0.65

  Medtronic discloses unauthorized access to corporate IT systems; no patient or product impact found

  JSON Markdown SEC source
• April 24, 2026, 7:59 PM ET ITRI ITRON, INC. negative materiality 0.60

  Itron reports unauthorized third-party access to systems; investigation ongoing, operations continue

  JSON Markdown SEC source
• April 24, 2026, 7:59 PM ET ADT ADT Inc. negative materiality 0.55

  ADT reports unauthorized cloud access; limited customer data accessed, no material impact expected

  JSON Markdown SEC source
• April 13, 2026, 7:59 PM ET RICK RCI HOSPITALITY HOLDINGS, INC. negative materiality 0.70

  RCI Hospitality discloses cybersecurity incident; contractor PII accessed, no customer data breached

  JSON Markdown SEC source
• April 9, 2026, 7:59 PM ET SYK STRYKER CORP negative materiality 0.85

  Stryker says cyber incident materially impacted Q1 operations and financial results; full-year guidance unchanged

  JSON Markdown SEC source
• April 8, 2026, 7:59 PM ET BTM Bitcoin Depot Inc. negative materiality 0.75

  Bitcoin Depot loses ~50.9 BTC ($3.7M) in cybersecurity incident; deems event material

  JSON Markdown SEC source
• April 1, 2026, 7:59 PM ET HAS HASBRO, INC. negative materiality 0.70

  Hasbro reports unauthorized network access on March 28, 2026; systems taken offline

  JSON Markdown SEC source
• March 27, 2026, 7:59 PM ET CCLD CareCloud, Inc. negative materiality 0.75

  CareCloud reports cybersecurity incident affecting patient data in one EHR environment

  JSON Markdown SEC source
• March 23, 2026, 7:59 PM ET SYK STRYKER CORP negative materiality 0.70

  Stryker updates cyber incident: contained, no customer data accessed per Unit 42

  JSON Markdown SEC source
• March 23, 2026, 7:59 PM ET HFWA HERITAGE FINANCIAL CORP /WA/ negative materiality 0.55

  Heritage Financial detects cyber incident; files exfiltrated may contain personal info

  JSON Markdown SEC source