Data breaches disclosed to the SEC (8-K Item 1.05)

Incidentsby Glyph

Who is down right now

Down now20 This week248

20 down now · 248 this week

Material cybersecurity incidents filed with the SEC on Form 8-K, Item 1.05, since December 2023.

Park Dental PartnersOn August 28, 2026, Park Dental Partners, Inc. identified unauthorized access to its computer network.HealthcareHealth information

Astrana HealthAstrana Health, Inc. recently became aware that its subsidiary Astrana Health Management, Inc. detected unusual activity within its environment.OtherPhone numbers, Passwords or credentials

Boston ScientificOn August 25, 2026, Boston Scientific Corporation identified a cybersecurity incident that affected certain of its information technology systems and resulted in a global disruption to the Company's operations.Pharma and medical devices

Park Dental PartnersOn August 28, 2026, Park Dental Partners, Inc. identified unauthorized access to its computer network.HealthcareHealth information

Nutex HealthNutex Health Inc. became aware of unauthorized activity involving data stored on its computer network.OtherHealth information

AmgenIn July 2026, Amgen Inc. identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers.Pharma and medical devicesHealth information

AdaptHealthAdaptHealth Corp. is investigating a security incident whereby a threat actor gained unauthorized access to Company systems and exfiltrated certain data therefrom.HealthcareSocial Security numbers, Financial account data, Payment cards +2

NavientOn June 8, 2026, the Company became aware of a cybersecurity incident involving a third party law firm that provides services to the Company.Financial servicesNames, Social Security numbers, Dates of birth

River FinancialOn or about June 16, 2026, an unauthorized threat actor gained access to the network environment of River Financial Corporation, including River Bank & Trust.Financial services

8X8On June 13, 2026, 8x8, Inc. was informed that an unauthorized third party threat actor exploited the Klue Labs, Inc. third-party application programming integration connected to the Company's Salesforce, Inc. customer relationship management system.Software and IT servicesNames, Email addresses, Phone numbers

iRhythm HoldingsOn June 8, 2026, iRhythm Holdings, Inc. identified unauthorized activity involving data maintained on certain third-party-hosted business applications.Pharma and medical devicesFinancial account data, Payment cards, Health information

Oncology InstituteDisclosed a material cybersecurity incident to the SEC.Healthcare

CB Financial ServicesOn May 5, 2026, Community Bank, the wholly-owned subsidiary of CB Financial Services, Inc., became aware of an internal incident involving the handling of certain non public customer information using an unauthorized artificial intelligence-based software application.Financial servicesNames, Social Security numbers, Dates of birth

West Pharmaceutical ServicesOn May 7, 2026, West Pharmaceutical Services, Inc. determined that the Company has experienced a material cybersecurity attack, in which certain data was exfiltrated by an unauthorized party and certain systems were encrypted.Pharma and medical devices

Bitcoin DepotOn March 23, 2026, Bitcoin Depot Inc. discovered that an unauthorized party gained access to certain of its information technology systems.Financial servicesPasswords or credentials

CareCloudOn March 16, 2026, CareCloud, Inc. experienced a temporary network disruption in its CareCloud Health division that partially impacted the functionality and data access to 1 of its 6 electronic health record environments for approximately 8 hours until the Company fully restored…Software and IT services

Trio-tech InternationalOn March 11, 2026, Trio-Tech International identified and responded to a cybersecurity incident in one of its subsidiaries in Singapore.Manufacturing

UFP TechnologiesOn or about February 14, 2026, UFP Technologies, Inc. detected suspicious activity involving its information technology systems.Pharma and medical devices

CoupangOn November 18, 2025, Coupang Corp., a wholly-owned Korean subsidiary of Coupang, Inc., became aware of a cybersecurity incident involving unauthorized access to customer accounts.33M recordsRetail and distributionNames, Email addresses, Phone numbers +2

BayFirst FinancialOn August 14, 2025, BayFirst National Bank was notified of a cybersecurity incident experienced by a third-party provider of marketing services.Financial servicesNames, Social Security numbers, Dates of birth

Jewett Cameron TradingOn October 15, 2025, Jewett-Cameron Trading Co. Ltd. learned that a threat actor had gained unauthorized access to portions of the Company's information technology environment and claimed to have unlawfully accessed certain Company information and data.Retail and distribution

F5On August 9, 2025, F5, Inc. learned that a highly sophisticated nation-state threat actor had gained unauthorized access to certain Company systems.Computer hardwareSource code

Data I/oOn August 16, 2025, Data I/O Corporation experienced a ransomware incident on certain of its internal IT systems.Electronics and semiconductors

Wytec InternationalOn August 25, 2025, Wytec International, Inc. became aware of a cybersecurity incident in which a bad actor published a defaced website at the Company's web address, wytecintl.com.Telecommunications

Data I/oOn August 16, 2025, Data I/O Corporation experienced a ransomware incident on certain of its internal IT systems.Electronics and semiconductors

United Natural FoodsOn June 5, 2025, United Natural Foods, Inc. became aware of unauthorized activity on certain information technology (IT) systems.Retail and distributionHealth information

Zoomcar HoldingsOn June 9, 2025, Zoomcar Holdings, Inc. identified a cybersecurity incident involving unauthorized access to its information systems.8.4M recordsOtherNames, Email addresses, Phone numbers +1

Coinbase GlobalOn May 11, 2025, Coinbase, Inc., a subsidiary of Coinbase Global, Inc., received an email communication from an unknown threat actor claiming to have obtained information about certain Coinbase customer accounts, as well as internal Coinbase documentation, including materials…Financial servicesNames, Social Security numbers, Financial account data +3

NucorNucor Corporation recently identified a cybersecurity incident involving unauthorized third party access to certain information technology systems used by the Company.Manufacturing

ConduentOn January 13, 2025, Conduent Incorporated experienced an operational disruption and learned that a threat actor' gained unauthorized access to a limited portion of the Company's environment.Other

Sensata Technologies HoldingOn April 6, 2025, Sensata Technologies Holding plc experienced a ransomware incident that has encrypted certain devices in the Company's network.Manufacturing

National Presto IndustriesOn March 1, 2025, the Registrant experienced a system outage caused by a cybersecurity incident.Manufacturing

Lee EnterprisesOn February 3, 2025, Lee Enterprises, Inc. experienced a systems outage caused by a cybersecurity attack.Manufacturing

Krispy KremeOn November 29, 2024, Krispy Kreme, Inc. was notified regarding unauthorized activity on a portion of its information technology systems.Retail and distribution

ENGlobalOn November 25, 2024, ENGlobal Corporation became aware of a cybersecurity incident.Other

iLearningEnginesILearningEngines, Inc. recently became aware of a cybersecurity incident.Software and IT services

HalliburtonOn August 21, 2024, Halliburton Company became aware that an unauthorized third party gained access to certain of its systems.Other

Meta MaterialsOn July 25, 2024, Meta Materials Inc. became aware that its website, email system and other related information technology (IT) systems were significantly disrupted and taken offline.Electronics and semiconductors

Crimson Wine GroupOn June 30, 2024, the Company detected a cybersecurity incident in which an unauthorized third party gained access to certain information systems of the Company.Manufacturing

Bassett Furniture IndustriesOn July 10, 2024, Bassett Furniture Industries, Incorporated detected unauthorized occurrences on a portion of its information technology (IT) systems.Manufacturing

AT&TOn April 19, 2024, AT&T Inc. learned that a threat actor claimed to have unlawfully accessed and copied AT&T call logs.TelecommunicationsNames, Phone numbers, Social Security numbers +1

Sonic AutomotiveSonic Automotive, Inc. has experienced disruptions since June 19, 2024 in its access to certain information systems provided to the Company by CDK Global due to a cybersecurity incident experienced by CDK.Retail and distribution

Key TronicOn May 6, 2024, Key Tronic Corporation detected unauthorized third party access to portions of its information technology systems.Electronics and semiconductors

Brandywine Realty TrustOn May 1, 2024, Brandywine Realty Trust detected what was determined to be a cybersecurity incident, whereby a third party gained unauthorized access to portions of its information technology environment.Financial services

DropboxOn April 24, 2024, Dropbox, Inc. became aware of unauthorized access to the Dropbox Sign (formerly HelloSign) production environment.Software and IT servicesPhone numbers, Passwords or credentials

Frontier Communications ParentOn April 14, 2024, Frontier Communications Parent, Inc. detected that a third party had gained unauthorized access to portions of its information technology environment.Telecommunications

OraSure TechnologiesOn or about March 27, 2024, OraSure Technologies, Inc. became aware of a cybersecurity incident in which an unauthorized third party gained access to Company data from certain information systems.Pharma and medical devices

B. Riley FinancialOn April 5, 2024, Targus International, LLC and certain affiliates, each of which is an indirect subsidiary of B. Riley Financial, Inc., discovered that a threat actor gained unauthorized access to certain of Targus' file systems.Financial services

Radiant LogisticsOn or about March 14, 2024, through its information technology systems monitoring tools, Radiant Logistics, Inc. detected what was determined to be the initial stages of a cybersecurity incident related to its Canadian operations.Other

MarineMaxMarineMax, Inc. determined on March 10, 2024, that it experienced a "cybersecurity incident," as defined in applicable Securities and Exchange Commission rules, whereby a third party gained unauthorized access to portions of its information environment.Retail and distribution

Federal Home Loan Bank of New YorkOn February 21, 2024, the Federal Home Loan Bank of New York, through its operational controls, detected unknown persons attempting to fraudulently obtain funds from the Bank.Financial services

CencoraOn February 21, 2024, Cencora, Inc., learned that data from its information systems had been exfiltrated, some of which may contain personal information.Retail and distribution

UnitedHealth GroupOn February 21, 2024, UnitedHealth Group identified a suspected nation-state associated cyber security threat actor had gained access to some of the Change Healthcare information technology systems.Financial services

Prudential FinancialOn February 5, 2024, Prudential Financial, Inc. detected that, beginning February 4, 2024, a threat actor had gained unauthorized access to certain of our systems.Financial services

SouthStateSouthState Bank, N.A., detected what was determined to be a cybersecurity incident on February 6, 2024.Financial services

Hewlett Packard EnterpriseOn December 12, 2023, Hewlett Packard Enterprise Company was notified that a suspected nation-state actor, believed to be the threat actor Midnight Blizzard, the state-sponsored actor also known as Cozy Bear, had gained unauthorized access to HPE's cloud-based email environment.Computer hardware

MicrosoftOn January 12, 2024, Microsoft detected that beginning in late November 2023, a nation-state associated threat actor had gained access to and exfiltrated information from a very small percentage of employee email accounts including members of our senior leadership team and…Software and IT services

First American FinancialFirst American Financial Corporation recently identified unauthorized activity on certain of its information technology systems.Financial services

VFOn December 13, 2023, VF Corporation detected unauthorized occurrences on a portion of its information technology (IT) systems.Manufacturing