Item 1.05: news, advisories and analysis

Latest coverage

• 

  Insights·Banking & Fintech

  SEC Form 8-K Item 1.05 Material Incident Rules: Ransomware Exfiltration Forensics & Board Disclosure Mandate

  Forensic analysis of SEC Form 8-K Item 1.05 material cybersecurity incident disclosures: 4-day reporting timelines, root causes, and board oversight standards.

  CST Editorial Desk14 Oct 20269 min read
• 

  Research·Banking & Fintech

  SEC 8-K Cyber Disclosures Study Maps Materiality Gap and Regulatory Extortion

  An empirical data study analyzing corporate SEC Form 8-K cyber disclosures, examining the Item 8.01 materiality gap and threat actor regulatory weaponization.

  CST Editorial Desk28 Sep 202610 min read
• 

  Cyber Attack·Banking & Fintech

  SEC Form 8-K Disclosures Reveal Cloud Storage Misconfigurations Fueling Surge in Material Data Breaches

  An analysis of recent SEC Form 8-K Item 1.05 material cyber incident filings shows misconfigured cloud buckets and IAM token leaks driving corporate extortion.

  Mei-Lin Chen27 Sep 20268 min read
• 

  Cyber Attack·Banking & Fintech

  Bitcoin Depot Discloses SEC Form 8-K Material Incident Following $3.6M Cryptocurrency Wallet Breach

  Bitcoin Depot filed an SEC Form 8-K disclosing unauthorized access to IT systems and credential theft resulting in the exfiltration of 50.9 Bitcoin.

  Daniel Okafor27 Sep 20268 min read
• 

  Cyber Attack·Cloud & SaaS

  Halliburton SEC Filing Details System Disconnections Across Global Energy Operations

  Halliburton files SEC Form 8-K Item 1.05 detailing unauthorized corporate network access that forced critical energy infrastructure systems offline across global operations.

  Daniel Okafor25 Sep 202619 min read
• 

  Cyber Attack·Healthcare & Pharma

  AdaptHealth Files SEC Form 8-K Disclosing Unauthorized Network Intrusion and Healthcare Data Exfiltration

  AdaptHealth Corp files an SEC Form 8-K under Item 1.05 disclosing a cyberattack that disrupted internal systems and resulted in unauthorized patient data exfiltration.

  Priya Raman24 Sep 202616 min read
• 

  Cyber Attack·Banking & Fintech

  River Financial Corporation Discloses SEC 8-K Banking Ransomware Extortion and Customer Account Records Exfiltration

  River Financial discloses unauthorized ransomware intrusion and customer data exfiltration in SEC Form 8-K filings following network extortion demands.

  Priya Raman24 Sep 202616 min read
• 

  Cyber Attack·Banking & Fintech

  CB Financial Services Discloses SEC 8-K Breach Triggered by Shadow AI Use

  CB Financial Services files historic SEC Form 8-K Item 1.05 after an employee used an unauthorized AI tool to process non-public customer PII and SSNs.

  CST Editorial Desk24 Sep 202615 min read
• 

  Cyber Attack·Healthcare & Pharma

  Astrana Health Discloses SEC Form 8-K Breach After Phone Spoofing Social Engineering Intrusion

  Astrana Health files SEC Form 8-K Item 1.05 after threat actors spoofed corporate phone numbers to socially engineer IT support and compromise patient systems.

  CST Editorial Desk23 Sep 202614 min read
• 

  Cyber Attack·Banking & Fintech

  Navient Corporation Files SEC Form 8-K After Third-Party Law Firm Ransomware Exfiltrates Borrower Records

  Navient files SEC Form 8-K Item 1.05 after a ransomware attack on an external law firm exposed sensitive student loan borrower PII and Social Security numbers.

  CST Editorial Desk23 Sep 202614 min read
• 

  Cyber Attack·Healthcare & Pharma

  Nutex Health 8-K Discloses Cyber Extortion After Patient PHI Exfiltration and Leak

  Nutex Health files amended SEC Form 8-K Item 1.05 confirming patient PHI and provider records exfiltrated and published following ransomware double extortion.

  Priya Raman23 Sep 202615 min read
• 

  Cyber Attack·Healthcare & Pharma

  West Pharmaceutical Services Discloses Material Cyberattack and Global Manufacturing Outage in SEC Form 8-K Filing

  Injectable drug packaging leader West Pharmaceutical Services files SEC Form 8-K Item 1.05 disclosing data exfiltration and systems encryption halting global manufacturing.

  CST Editorial Desk22 Sep 202616 min read
• 

  Cyber Attack·Healthcare & Pharma

  iRhythm Holdings Discloses Social Engineering Attack and Patient PHI Extortion in SEC Form 8-K Filing

  Digital healthcare firm iRhythm Holdings files SEC Form 8-K Item 1.05 following social engineering compromise of cloud apps and extortion threats over patient cardiac data.

  CST Editorial Desk22 Sep 202616 min read
• 

  Cyber Attack·Healthcare & Pharma

  Amgen Discloses Unauthorized Cloud Data Exfiltration and Patient PHI Theft in SEC Form 8-K Filing

  Biotechnology giant Amgen files SEC Form 8-K Item 1.05 after unauthorized actors infiltrated third-party cloud environments and exfiltrated sensitive patient PHI and clinical research data.

  CST Editorial Desk22 Sep 202616 min read
• 

  Cyber Attack·Healthcare & Pharma

  Park Dental Partners Discloses Network Intrusion and Patient Data Compromise in SEC Form 8-K Filing

  Dental healthcare provider Park Dental Partners files SEC Form 8-K Item 1.05 following unauthorized network intrusion risking patient clinical records and sensitive PII.

  CST Editorial Desk22 Sep 202616 min read
• 

  Cyber Attack·Healthcare & Pharma

  Novocure SEC Form 8-K Discloses Material Network Breach Exposing Oncology Device Systems and Clinical Records

  Oncology medical technology leader Novocure files SEC Form 8-K Item 1.05 disclosing an unauthorized intrusion compromising clinical data and IT infrastructure.

  Priya Raman22 Sep 202615 min read
• 

  Cyber Attack·Healthcare & Pharma

  Boston Scientific SEC Form 8-K Discloses Global Medical Device Manufacturing Outage Following Material Cyberattack

  Boston Scientific files SEC Form 8-K Item 1.05 disclosing a material cybersecurity incident that caused global manufacturing halts and disrupted medical device supply chains.

  Priya Raman21 Sep 202615 min read
• 

  Cyber Attack·Cloud & SaaS

  CenterPoint Energy Form 8-K Disclosure: Unauthorized Access to Customer Accounts via External Web Portal

  CenterPoint Energy files Form 8-K disclosing an unauthorized intrusion into customer account systems via external-facing web portal infrastructure.

  CST Editorial Desk17 Sep 202614 min read