The Signal Edition
Add as preferred source on Google
Tracker · Cybersecurity

Cyber incident disclosures

Public companies must tell investors within four business days once they decide a cybersecurity incident is material. Every disclosure filed under that rule, in one list.

Updated Nov 3, 2026, 9:40 a.m. ET from SEC EDGAR
Disclosures since Dec 18, 2023
59
Companies
57
Filed in 2026
18
15 in 2025
First disclosures per quarter
The current quarter is incomplete. Updates to earlier disclosures (8-K/A) are not counted. Source: SEC EDGAR.

All filings, newest first

Download CSV

85 entries. Page 2 of 2.

FiledCompanyTickerIndustryFiling
Aug 5, 2024Sonic Automotive IncSAHRetail-Auto Dealers & Gasoline StationsUpdate (8-K/A)
Aug 1, 2024Meta Materials Inc.MMATQSemiconductors & Related DevicesFirst disclosure
Jul 31, 2024Cencora, Inc.CORWholesale-Drugs, Proprietaries & Druggists' SundriesUpdate (8-K/A)
Jul 25, 2024Crimson Wine Group, LtdCWGLBeveragesFirst disclosure
Jul 15, 2024Bassett Furniture Industries IncBSETWood Household Furniture, (No Upholstered)First disclosure
Jul 12, 2024At&T Inc.TTelephone Communications (No Radiotelephone)First disclosure
Jul 5, 2024Sonic Automotive IncSAHRetail-Auto Dealers & Gasoline StationsFirst disclosure
Jun 14, 2024Key Tronic CorpKTCCPrinted Circuit BoardsUpdate (8-K/A)
May 28, 2024Brandywine Realty TrustBDNReal Estate Investment TrustsUpdate (8-K/A)
May 10, 2024Key Tronic CorpKTCCPrinted Circuit BoardsFirst disclosure
May 7, 2024Brandywine Realty TrustBDNReal Estate Investment TrustsFirst disclosure
May 1, 2024Dropbox, Inc.DBXServices-Prepackaged SoftwareFirst disclosure
Apr 24, 2024Unitedhealth Group IncUNHHospital & Medical Service PlansUpdate (8-K/A)
Apr 18, 2024Frontier Communications Parent, Inc.FYBRTelephone Communications (No Radiotelephone)First disclosure
Apr 12, 2024Orasure Technologies IncOSURSurgical & Medical Instruments & ApparatusFirst disclosure
Apr 8, 2024B. Riley Financial, Inc.RILYInvestment AdviceFirst disclosure
Apr 1, 2024Marinemax IncHZORetail-Auto & Home Supply StoresUpdate (8-K/A)
Mar 29, 2024SouthState CorpSSBState Commercial BanksUpdate (8-K/A)
Mar 20, 2024Radiant Logistics, IncRLGTArrangement of Transportation of Freight & CargoFirst disclosure
Mar 12, 2024Marinemax IncHZORetail-Auto & Home Supply StoresFirst disclosure
Mar 8, 2024Unitedhealth Group IncUNHHospital & Medical Service PlansUpdate (8-K/A)
Mar 8, 2024Microsoft CorpMSFTServices-Prepackaged SoftwareUpdate (8-K/A)
Mar 1, 2024Federal Home Loan Bank of New York–Federal & Federally-Sponsored Credit AgenciesFirst disclosure
Feb 27, 2024Cencora, Inc.CORWholesale-Drugs, Proprietaries & Druggists' SundriesFirst disclosure
Feb 22, 2024Unitedhealth Group IncUNHHospital & Medical Service PlansFirst disclosure
Feb 21, 2024Prudential Financial IncPFHLife InsuranceUpdate (8-K/A)
Feb 13, 2024Prudential Financial IncPFHLife InsuranceFirst disclosure
Feb 9, 2024SouthState CorpSSBState Commercial BanksFirst disclosure
Jan 24, 2024Hewlett Packard Enterprise CoHPEComputer & office EquipmentFirst disclosure
Jan 19, 2024Microsoft CorpMSFTServices-Prepackaged SoftwareFirst disclosure
Jan 18, 2024V F CorpVFCMen's & Boys' Furnishgs, Work Clothg, & Allied GarmentsUpdate (8-K/A)
Jan 12, 2024First American Financial CorpFAFTitle InsuranceUpdate (8-K/A)
Dec 29, 2023First American Financial CorpFAFTitle InsuranceUpdate (8-K/A)
Dec 22, 2023First American Financial CorpFAFTitle InsuranceFirst disclosure
Dec 18, 2023V F CorpVFCMen's & Boys' Furnishgs, Work Clothg, & Allied GarmentsFirst disclosure

How this tracker works

Since December 18, 2023, SEC rules require public companies to report a cybersecurity incident under Item 1.05 of Form 8-K within four business days of determining that it is material. We search SEC filings every six hours and keep each 8-K and amendment tagged with Item 1.05.

Some companies disclose incidents they have not judged material under Item 8.01 instead; those are not included. Each filing links to the company’s own description of the incident.