Topic

SEC Form 8-K: news, advisories and analysis

40 articlesUpdated 13 Oct 2026

Since December 2023, US public companies must disclose a material cybersecurity incident on Form 8-K under Item 1.05, generally within four business days of deciding the incident is material. These filings are often the first primary-source account of a breach: what was accessed, when it was detected, whether operations were disrupted, and what the company expects it to cost.

This page collects our coverage of 8-K cyber disclosures and the forensics behind them. Each story reads the filing itself, separates what the company confirmed from what it has not yet determined, and translates the initial access vector into controls defenders can check in their own environment. Amended 8-K/A filings, which often add scope and cost figures weeks later, are covered as follow-ups.

Latest coverage

Cyber AttackGov & Defence
Small Modular Reactor Developer Discloses Infiltration of Reactor Engineering Portal
A publicly traded small modular reactor developer files SEC Form 8-K Item 1.05 following nation-state infiltration of reactor design and core physics software vaults.
CST Editorial Desk13 Oct 20268 min read
Cyber AttackGov & Defence
Defense Aerospace Contractor Discloses Nation-State Intrusion in Satellite Ground Station Software
A premier defense aerospace corporation files SEC Form 8-K Item 1.05 after nation-state actors infiltrate satellite ground station command software.
Priya Raman13 Oct 20268 min read
Cyber AttackCloud & SaaS
EDA Software Firm Discloses Nation-State Exfiltration of 2nm Chip Architecture IP
A major semiconductor EDA software firm files SEC Form 8-K Item 1.05 after nation-state threat actors exfiltrate next-gen 2nm chip design libraries.
Priya Raman12 Oct 20268 min read
Cyber AttackCloud & SaaS
Global Telecom Discloses Nation-State Infiltration of Subsea Cable Management Systems
A global telecommunications consortium files SEC Form 8-K Item 1.05 after nation-state threat actors infiltrate subsea fiber cable network management platforms.
Priya Raman12 Oct 20268 min read
Cyber AttackCloud & SaaS
Electric Vehicle Maker Discloses Unauthorized Access to Global Fleet Telematics Platform
A major electric vehicle manufacturer files SEC Form 8-K Item 1.05 after threat actors breach cloud telematics, accessing vehicle GPS coordinates and remote commands.
Priya Raman12 Oct 20268 min read
Cyber AttackIndustrial & OT
Container Port Operator Discloses Intrusion in Automated Terminal Operating System
A multinational container terminal operator files SEC Form 8-K Item 1.05 after cyber adversaries compromise automated cargo dispatch and container routing systems.
Priya Raman11 Oct 20268 min read
Cyber AttackCloud & SaaS
Semiconductor Foundry Discloses Exfiltration of EUV Lithography Mask Designs
A premier semiconductor foundry submits SEC Form 8-K Item 1.05 after nation-state actors compromise CAD vaults and exfiltrate sub-2nm EUV lithography mask IP.
Priya Raman11 Oct 20268 min read
Cyber AttackGov & Defence
Defense Aerospace Contractor Reports Ransomware Theft of Avionics Blueprints and Telemetry
A premier defense aerospace supplier files SEC Form 8-K Item 1.05 after ransomware actors compromise unclassified R&D enclaves and exfiltrate sensor avionics telemetry.
Priya Raman11 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Commercial Aviation Satellite Connectivity Provider Discloses Telemetry Intrusion
A commercial aviation satellite communications provider files SEC Form 8-K Item 1.05 after nation-state actors breach in-flight telemetry and passenger Wi-Fi systems.
Priya Raman10 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Multi-State Energy Utility Discloses Material Grid SCADA Telemetry Extortion Incident
A major North American energy utility discloses an SEC Form 8-K cyber incident involving extortion over exfiltrated regional transmission telemetry.
Priya Raman10 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Global Logistics Freight Carrier Discloses Container Routing Telemetry Exfiltration
A major international container logistics carrier files SEC Form 8-K Item 1.05 after threat actors exfiltrate intermodal shipping manifests and customs manifests.
Priya Raman10 Oct 20268 min read
Cyber AttackCloud & SaaS
International Airline Reports Network Intrusion Hitting Flight Dispatch and Crew Scheduling
SEC Form 8-K filing reveals an advanced persistent threat breached the corporate IT network of a major commercial airline, accessing flight dispatch and crew scheduling platforms.
Priya Raman9 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Healthcare Medical Device Manufacturer Discloses Ransomware Encryption of Cloud Diagnostic Telemetry
SEC Form 8-K filing reveals an extortion syndicate encrypted corporate cloud servers hosting diagnostic telemetry and proprietary firmware repositories for hospital medical devices.
Priya Raman9 Oct 20268 min read
Cyber AttackCloud & SaaS
Aerospace Defense Contractor Reports CAD Blueprint Theft via Compromised Engineering Portal
SEC Form 8-K filing reveals an advanced persistent threat exfiltrated sensitive aerospace engineering CAD designs and satellite propulsion telemetry.
Priya Raman9 Oct 20268 min read
Cyber AttackIndustrial & OT
Energy Pipeline Operator Reports Extortion Attack Reaching SCADA Telemetry Archive
SEC 8-K filing reveals an advanced extortion group infiltrated the corporate network of a major energy pipeline operator, accessing historical SCADA telemetry archives.
Priya Raman8 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Advanced Semiconductor Foundry Discloses Intellectual Property Theft via Compromised Supplier VPN
Material SEC 8-K disclosure reveals advanced nation-state threat actors pivoted through a third-party equipment vendor SSL VPN to exfiltrate proprietary lithography recipes.
Priya Raman8 Oct 20268 min read
NewsHealthcare & Pharma
SEC Form 8-K Disclosure: Global Pharmaceutical Conglomerate Reports Advanced Clinical Trial Data Breach
Global pharmaceutical enterprise files SEC Form 8-K disclosing a material cyber incident involving unauthorized exfiltration of proprietary Phase 3 clinical trial datasets.
CST Editorial Desk8 Oct 20268 min read
NewsIndustrial & OT
SEC Form 8-K Forensics: Global Maritime Shipping Operator Reports Material Port Terminal Ransomware Attack
Global maritime shipping conglomerate files SEC Form 8-K disclosing a material ransomware intrusion freezing container terminal logistics across international ports.
Daniel Okafor7 Oct 20268 min read
NewsGov & Defence
SEC Form 8-K Filing: Defense Aerospace Supplier Details Unauthorized OAuth Token Pivot and Exfiltration
Defense aerospace contractor files SEC Form 8-K disclosing a material cyber incident involving compromised enterprise OAuth application tokens and telemetry theft.
CST Editorial Desk7 Oct 20268 min read
NewsCloud & SaaS
Semiconductor Maker's Data Exfiltration Traced to Hijacked Okta SSO Tokens
SEC Form 8-K disclosure details a major semiconductor intellectual property theft incident initiated via corporate SSO session token hijacking.
Daniel Okafor7 Oct 20268 min read
NewsIndustrial & OT
Water Utility Discloses Nation-State Breach of SCADA Gateways in SEC Filing
SEC Form 8-K disclosure details a nation-state intrusion targeting municipal water SCADA gateways and programmable logic controllers.
Daniel Okafor6 Oct 20268 min read
NewsBanking & Fintech
Cloud Identity Theft and S3 Exfiltration Fuel Surge in SEC Cyber Disclosures
SEC Form 8-K disclosures reveal a surge in material cyber incidents driven by cloud identity theft and automated data lake exfiltration.
Daniel Okafor6 Oct 20268 min read
ResearchBanking & Fintech
SEC 8-K Cyber Disclosures Study Maps Materiality Gap and Regulatory Extortion
An empirical data study analyzing corporate SEC Form 8-K cyber disclosures, examining the Item 8.01 materiality gap and threat actor regulatory weaponization.
CST Editorial Desk28 Sep 202610 min read
Cyber AttackBanking & Fintech
Bitcoin Depot Discloses SEC Form 8-K Material Incident Following $3.6M Cryptocurrency Wallet Breach
Bitcoin Depot filed an SEC Form 8-K disclosing unauthorized access to IT systems and credential theft resulting in the exfiltration of 50.9 Bitcoin.
Daniel Okafor27 Sep 20268 min read