[
 {
  "company": "V.F. Corporation",
  "ticker": "VFC",
  "filed": "2023-12-18",
  "discovered": "2023-12-13",
  "sector": "Consumer",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Material",
  "summary": "An intruder encrypted some IT systems and stole personal data. VF later put the number of affected consumers at about 35.5 million, and the incident disrupted fulfillment and store replenishment.",
  "url": "https://www.sec.gov/Archives/edgar/data/103379/000095012323011228/d659095d8k.htm"
 },
 {
  "company": "First American Financial Corporation",
  "ticker": "FAF",
  "filed": "2023-12-22",
  "discovered": null,
  "sector": "Financials",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 2,
  "material": "Not yet determined",
  "summary": "Unauthorized activity forced the title insurer to take systems and its website offline, and a later amendment said the incident would materially affect Q4 2023 results.",
  "url": "https://www.sec.gov/Archives/edgar/data/1472787/000095017023072513/faf-20231220.htm"
 },
 {
  "company": "Microsoft Corporation",
  "ticker": "MSFT",
  "filed": "2024-01-19",
  "discovered": "2024-01-12",
  "sector": "Technology",
  "incident_type": "Nation-state",
  "threat_actor": "Midnight Blizzard",
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Not yet determined",
  "summary": "A Russian state-linked actor broke into corporate email accounts of senior leaders and security and legal staff and took information from them. An amendment added that the actor later went after source code repositories.",
  "url": "https://www.sec.gov/Archives/edgar/data/789019/000119312524011295/d708866d8k.htm"
 },
 {
  "company": "Hewlett Packard Enterprise Company",
  "ticker": "HPE",
  "filed": "2024-01-24",
  "discovered": "2023-12-12",
  "sector": "Technology",
  "incident_type": "Nation-state",
  "threat_actor": "Midnight Blizzard",
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "Midnight Blizzard accessed HPE's cloud email environment and took data from a small share of employee mailboxes, starting in May 2023.",
  "url": "https://www.sec.gov/Archives/edgar/data/1645590/000164559024000009/hpe-20240119.htm"
 },
 {
  "company": "SouthState Corporation",
  "ticker": "SSB",
  "filed": "2024-02-09",
  "discovered": "2024-02-06",
  "sector": "Financials",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 1,
  "material": "Not yet determined",
  "summary": "The bank found unauthorized activity, isolated parts of its network, and saw some business processes disrupted. It later mailed notices to individuals whose personal information may have been involved.",
  "url": "https://www.sec.gov/Archives/edgar/data/764038/000095010324002017/dp206600_8k.htm"
 },
 {
  "company": "Prudential Financial, Inc.",
  "ticker": "PRU",
  "filed": "2024-02-13",
  "discovered": "2024-02-05",
  "sector": "Financials",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Not yet determined",
  "summary": "A cybercrime group got into administrative systems and some employee and contractor accounts, and an amendment confirmed it took limited client and personal data.",
  "url": "https://www.sec.gov/Archives/edgar/data/1137774/000119312524033753/d770643d8k.htm"
 },
 {
  "company": "UnitedHealth Group Incorporated",
  "ticker": "UNH",
  "filed": "2024-02-22",
  "discovered": "2024-02-21",
  "sector": "Healthcare",
  "incident_type": "Ransomware",
  "threat_actor": "ALPHV/BlackCat",
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 2,
  "material": "Not yet determined",
  "summary": "An attack on Change Healthcare systems forced UnitedHealth to isolate them, which disrupted claims and pharmacy transaction processing across the U.S. health system.",
  "url": "https://www.sec.gov/Archives/edgar/data/731766/000073176624000045/unh-20240221.htm"
 },
 {
  "company": "Cencora, Inc.",
  "ticker": "COR",
  "filed": "2024-02-27",
  "discovered": "2024-02-21",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Not yet determined",
  "summary": "The drug distributor found data taken from its systems, including personal and health information mostly held by a patient-support subsidiary. Its operations were not affected.",
  "url": "https://www.sec.gov/Archives/edgar/data/1140859/000110465924028288/tm247267d1_8k.htm"
 },
 {
  "company": "Federal Home Loan Bank of New York",
  "ticker": null,
  "filed": "2024-03-01",
  "discovered": "2024-02-21",
  "sector": "Financials",
  "incident_type": "Third-party/vendor",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not material",
  "summary": "Unknown parties used a compromised fourth-party vendor to try to get funds from the bank fraudulently, but controls blocked any transfer.",
  "url": "https://www.sec.gov/Archives/edgar/data/1329842/000165495424002505/fhlbny_8k.htm"
 },
 {
  "company": "MarineMax, Inc.",
  "ticker": "HZO",
  "filed": "2024-03-12",
  "discovered": "2024-03-10",
  "sector": "Consumer",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Not yet determined",
  "summary": "A cybercrime group got into part of the boat retailer's systems, and containment disrupted some business. An amendment confirmed it took limited customer and employee data.",
  "url": "https://www.sec.gov/Archives/edgar/data/1057060/000095017024030041/hzo-20240310.htm"
 },
 {
  "company": "Radiant Logistics, Inc.",
  "ticker": "RLGT",
  "filed": "2024-03-20",
  "discovered": "2024-03-14",
  "sector": "Industrials",
  "incident_type": "Other",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "An incident in its Canadian operations led the logistics company to isolate them from the rest of its network, which delayed service to Canadian customers.",
  "url": "https://www.sec.gov/Archives/edgar/data/1171155/000095017024033954/rlgt-20240319.htm"
 },
 {
  "company": "B. Riley Financial, Inc.",
  "ticker": "RILY",
  "filed": "2024-04-08",
  "discovered": "2024-04-05",
  "sector": "Financials",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not material",
  "summary": "An intruder got into file systems at Targus, a B. Riley subsidiary, and containment steps temporarily interrupted Targus's operations.",
  "url": "https://www.sec.gov/Archives/edgar/data/1464790/000121390024031252/ea0203500-8k_briley.htm"
 },
 {
  "company": "OraSure Technologies, Inc.",
  "ticker": "OSUR",
  "filed": "2024-04-12",
  "discovered": "2024-03-27",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not material",
  "summary": "An outside party got into some of the diagnostics maker's information systems and took certain files, while its core financial and operational systems kept running.",
  "url": "https://www.sec.gov/Archives/edgar/data/1116463/000119312524094797/d825009d8k.htm"
 },
 {
  "company": "Frontier Communications Parent, Inc.",
  "ticker": "FYBR",
  "filed": "2024-04-18",
  "discovered": "2024-04-14",
  "sector": "Communication Services",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "A likely cybercrime group got into Frontier's IT environment and accessed personal information. Shutting down systems to contain it caused an operational disruption the company said could be considered material.",
  "url": "https://www.sec.gov/Archives/edgar/data/20520/000119312524100764/d784189d8k.htm"
 },
 {
  "company": "Dropbox, Inc.",
  "ticker": "DBX",
  "filed": "2024-05-01",
  "discovered": "2024-04-24",
  "sector": "Technology",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not material",
  "summary": "An intruder got into the Dropbox Sign production environment and accessed every user's emails, usernames, and account settings, plus phone numbers and hashed passwords for some users.",
  "url": "https://www.sec.gov/Archives/edgar/data/1467623/000146762324000024/dbx-20240429.htm"
 },
 {
  "company": "Brandywine Realty Trust",
  "ticker": "BDN",
  "filed": "2024-05-07",
  "discovered": "2024-05-01",
  "sector": "Real Estate",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Not material",
  "summary": "A third party got into the REIT's corporate IT systems, deployed encryption, and took files containing personal information, which disrupted its financial and reporting applications.",
  "url": "https://www.sec.gov/Archives/edgar/data/790816/000119312524133132/d824906d8k.htm"
 },
 {
  "company": "Key Tronic Corporation",
  "ticker": "KTCC",
  "filed": "2024-05-10",
  "discovered": "2024-05-06",
  "sector": "Technology",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 2,
  "material": "Not material",
  "summary": "An intruder got into the contract manufacturer's IT systems, halting its U.S. and Mexico operations for about two weeks. A later amendment said the incident would materially affect Q4 FY2024 results.",
  "url": "https://www.sec.gov/Archives/edgar/data/719733/000071973324000015/ktcc-20240506.htm"
 },
 {
  "company": "Sonic Automotive, Inc.",
  "ticker": "SAH",
  "filed": "2024-07-05",
  "discovered": "2024-06-19",
  "sector": "Consumer",
  "incident_type": "Third-party/vendor",
  "threat_actor": "BlackSuit",
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 1,
  "material": "Material",
  "summary": "Dealer software provider CDK Global suffered a cyberattack that took Sonic's DMS and CRM functions offline, slowing vehicle sales enough that Sonic expected a material hit to Q2 2024 results.",
  "url": "https://www.sec.gov/Archives/edgar/data/1043509/000104350924000060/sah-20240705.htm"
 },
 {
  "company": "AT&T Inc.",
  "ticker": "T",
  "filed": "2024-07-12",
  "discovered": "2024-04-19",
  "sector": "Communication Services",
  "incident_type": "Third-party/vendor",
  "threat_actor": "UNC5537",
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not material",
  "summary": "Threat actors copied call and text metadata records for nearly all AT&T wireless customers from an AT&T workspace on a third-party cloud platform, with disclosure delayed twice at the DOJ's request.",
  "url": "https://www.sec.gov/Archives/edgar/data/732717/000073271724000046/t-20240506.htm"
 },
 {
  "company": "Bassett Furniture Industries, Inc.",
  "ticker": "BSET",
  "filed": "2024-07-15",
  "discovered": "2024-07-10",
  "sector": "Consumer",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 1,
  "material": "Material",
  "summary": "An attacker encrypted data files on Bassett's IT systems, idling its manufacturing plants and hampering order fulfillment while stores and e-commerce stayed open.",
  "url": "https://www.sec.gov/Archives/edgar/data/10329/000143774924022743/bset20240715_8k.htm"
 },
 {
  "company": "Crimson Wine Group, Ltd.",
  "ticker": "CWGL",
  "filed": "2024-07-25",
  "discovered": "2024-06-30",
  "sector": "Consumer",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "An unauthorized party broke into Crimson's systems and took files possibly containing personal information, forcing system shutdowns that the company judged a material impact on operations but not on financial results.",
  "url": "https://www.sec.gov/Archives/edgar/data/1562151/000156215124000032/cwgl-20240725.htm"
 },
 {
  "company": "Meta Materials Inc.",
  "ticker": "MMATQ",
  "filed": "2024-08-01",
  "discovered": "2024-07-25",
  "sector": "Technology",
  "incident_type": "Other",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "A former executive deliberately deactivated the company's website and cancelled its renewal, knocking website and email offline for several days until the company forced reinstatement.",
  "url": "https://www.sec.gov/Archives/edgar/data/1431959/000095017024089345/mmat-20240725.htm"
 },
 {
  "company": "Halliburton Company",
  "ticker": "HAL",
  "filed": "2024-09-03",
  "discovered": "2024-08-21",
  "sector": "Energy & Utilities",
  "incident_type": "Ransomware",
  "threat_actor": "RansomHub",
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not material",
  "summary": "An unauthorized party accessed and removed information from Halliburton systems, prompting it to take systems offline and disrupting some business applications, though it called the financial impact not material.",
  "url": "https://www.sec.gov/Archives/edgar/data/45012/000004501224000052/hal-20240830.htm"
 },
 {
  "company": "iLearningEngines, Inc.",
  "ticker": "AILE",
  "filed": "2024-11-18",
  "discovered": null,
  "sector": "Technology",
  "incident_type": "Fraud/BEC",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "A threat actor got into the company's environment, deleted emails, and misdirected a $250,000 wire payment that was not recovered, which the company expected to be material to its Q4 2024 operations.",
  "url": "https://www.sec.gov/Archives/edgar/data/1835972/000121390024099394/ea0221424-8k_ilearning.htm"
 },
 {
  "company": "ENGlobal Corporation",
  "ticker": "ENG",
  "filed": "2024-12-02",
  "discovered": "2024-11-25",
  "sector": "Industrials",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 1,
  "material": "Not yet determined",
  "summary": "An attacker accessed ENGlobal's IT system and encrypted data files, leaving access limited to essential business operations with no firm restoration timeline.",
  "url": "https://www.sec.gov/Archives/edgar/data/933738/000165495424015098/eng_8k.htm"
 },
 {
  "company": "Krispy Kreme, Inc.",
  "ticker": "DNUT",
  "filed": "2024-12-11",
  "discovered": "2024-11-29",
  "sector": "Consumer",
  "incident_type": "Ransomware",
  "threat_actor": "Play",
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "Unauthorized activity on Krispy Kreme's IT systems disrupted online ordering in parts of the U.S., with the company expecting lost digital sales and recovery costs to be material.",
  "url": "https://www.sec.gov/Archives/edgar/data/1857154/000185715424000123/dnut-20241211.htm"
 },
 {
  "company": "Lee Enterprises, Inc.",
  "ticker": "LEE",
  "filed": "2025-02-18",
  "discovered": "2025-02-03",
  "sector": "Communication Services",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Material",
  "summary": "Attackers encrypted critical applications and took files, delaying print distribution and disrupting billing, collections and vendor payments; the company said the incident is reasonably likely to have a material impact.",
  "url": "https://www.sec.gov/Archives/edgar/data/58361/000162828025005855/lee-20250212.htm"
 },
 {
  "company": "National Presto Industries, Inc.",
  "ticker": "NPK",
  "filed": "2025-03-06",
  "discovered": "2025-03-01",
  "sector": "Industrials",
  "incident_type": "Other",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "A cybersecurity incident caused a systems outage that temporarily disrupted shipping, receiving, some manufacturing and back-office functions while the scope remained under investigation.",
  "url": "https://www.sec.gov/Archives/edgar/data/80172/000143774925006475/npk20250306_8k.htm"
 },
 {
  "company": "Sensata Technologies Holding plc",
  "ticker": "ST",
  "filed": "2025-04-09",
  "discovered": "2025-04-06",
  "sector": "Industrials",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "Ransomware encrypted devices on Sensata's network and files were taken, temporarily disrupting shipping, receiving, manufacturing and support functions.",
  "url": "https://www.sec.gov/Archives/edgar/data/1477294/000147729425000047/st-20250406.htm"
 },
 {
  "company": "Conduent Incorporated",
  "ticker": "CNDT",
  "filed": "2025-04-14",
  "discovered": "2025-01-13",
  "sector": "Industrials",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "A threat actor gained access, caused a short operational disruption and exfiltrated client files containing personal data of many individuals, leading to material non-recurring expenses in Q1.",
  "url": "https://www.sec.gov/Archives/edgar/data/1677703/000167770325000067/cndt-20250409.htm"
 },
 {
  "company": "Nucor Corporation",
  "ticker": "NUE",
  "filed": "2025-05-14",
  "discovered": null,
  "sector": "Materials",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Not material",
  "summary": "Unauthorized third-party access to IT systems led Nucor to halt production at several sites; a June amendment said limited data was exfiltrated and the incident was not reasonably likely to be material.",
  "url": "https://www.sec.gov/Archives/edgar/data/73309/000119312525119311/d795264d8k.htm"
 },
 {
  "company": "Coinbase Global, Inc.",
  "ticker": "COIN",
  "filed": "2025-05-15",
  "discovered": "2025-05-11",
  "sector": "Financials",
  "incident_type": "Other",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "Overseas support contractors and employees were bribed to pull customer data, which an unknown actor then used in an extortion demand; Coinbase estimated $180M to $400M in costs.",
  "url": "https://www.sec.gov/Archives/edgar/data/1679788/000167978825000094/coin-20250514.htm"
 },
 {
  "company": "Zoomcar Holdings, Inc.",
  "ticker": "ZCAR",
  "filed": "2025-06-13",
  "discovered": "2025-06-09",
  "sector": "Consumer",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "An outside actor accessed Zoomcar systems and personal information of about 8.4 million users, with no material operational impact reported.",
  "url": "https://www.sec.gov/Archives/edgar/data/1854275/000121390025054319/ea0245724-8k_zoomcar.htm"
 },
 {
  "company": "United Natural Foods, Inc.",
  "ticker": "UNFI",
  "filed": "2025-06-26",
  "discovered": "2025-06-05",
  "sector": "Consumer",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "Unauthorized activity on IT systems forced UNFI to take systems offline, disrupting order fulfillment and distribution, and was reasonably likely to materially affect fiscal Q4 results.",
  "url": "https://www.sec.gov/Archives/edgar/data/1020859/000102085925000036/unfi-20250621.htm"
 },
 {
  "company": "Data I/O Corporation",
  "ticker": "DAIO",
  "filed": "2025-08-21",
  "discovered": "2025-08-16",
  "sector": "Technology",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 1,
  "material": "Material",
  "summary": "Ransomware entering through a third-party firewall vulnerability disrupted communications, shipping and manufacturing; a September update put costs near $388,000 and called the impact likely material.",
  "url": "https://www.sec.gov/Archives/edgar/data/351998/000165495425009925/daio_8k.htm"
 },
 {
  "company": "Wytec International, Inc.",
  "ticker": "WYTC",
  "filed": "2025-08-29",
  "discovered": "2025-08-25",
  "sector": "Communication Services",
  "incident_type": "Other",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 1,
  "material": "Not yet determined",
  "summary": "An unknown actor repeatedly defaced the company website, forcing it offline and causing a scheduled seminar to be cancelled.",
  "url": "https://www.sec.gov/Archives/edgar/data/1560143/000168316825006583/wytec_8k.htm"
 },
 {
  "company": "F5, Inc.",
  "ticker": "FFIV",
  "filed": "2025-10-15",
  "discovered": "2025-08-09",
  "sector": "Technology",
  "incident_type": "Nation-state",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "A nation-state actor kept long-term access to F5's BIG-IP development and engineering knowledge systems and stole source code and details of undisclosed vulnerabilities.",
  "url": "https://www.sec.gov/Archives/edgar/data/1048695/000104869525000149/ffiv-20251015.htm"
 },
 {
  "company": "Jewett-Cameron Trading Company Ltd.",
  "ticker": "JCTC",
  "filed": "2025-10-21",
  "discovered": "2025-10-15",
  "sector": "Consumer",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "An intruder deployed encryption and monitoring software, exfiltrated data and threatened to release it unless paid, disrupting business applications.",
  "url": "https://www.sec.gov/Archives/edgar/data/885307/000107997325001631/jctc_8k.htm"
 },
 {
  "company": "BayFirst Financial Corp.",
  "ticker": "BAFN",
  "filed": "2025-10-30",
  "discovered": "2025-08-14",
  "sector": "Financials",
  "incident_type": "Third-party/vendor",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "A breach at an unnamed marketing services vendor exposed some customers' names, birth dates and Social Security or tax ID numbers.",
  "url": "https://www.sec.gov/Archives/edgar/data/1649739/000164973925000246/bafn-20251028.htm"
 },
 {
  "company": "Coupang, Inc.",
  "ticker": "CPNG",
  "filed": "2025-12-16",
  "discovered": "2025-11-18",
  "sector": "Consumer",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Material",
  "summary": "A former employee accessed contact and delivery details for up to 33 million Korean customer accounts, saving data from about 3,000 of them, and Coupang planned about $1.2 billion in customer vouchers.",
  "url": "https://www.sec.gov/Archives/edgar/data/1834584/000183458425000196/cpng-20251215.htm"
 },
 {
  "company": "UFP Technologies, Inc.",
  "ticker": "UFPT",
  "filed": "2026-02-24",
  "discovered": "2026-02-14",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "The medical device maker found an intruder in many of its IT systems, which hit billing and shipping-label functions and led to some files being stolen or destroyed, though it expects no material financial impact.",
  "url": "https://www.sec.gov/Archives/edgar/data/914156/000162828026011152/ufpt-20260219.htm"
 },
 {
  "company": "Trio-Tech International",
  "ticker": "TRT",
  "filed": "2026-03-20",
  "discovered": "2026-03-11",
  "sector": "Technology",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "Ransomware encrypted files at the company's Singapore subsidiary, which took its network offline, and the incident was escalated to possibly material after company data was disclosed on March 18.",
  "url": "https://www.sec.gov/Archives/edgar/data/732026/000143774926009193/trt20260320_8k.htm"
 },
 {
  "company": "CareCloud, Inc.",
  "ticker": "CCLD",
  "filed": "2026-03-27",
  "discovered": "2026-03-16",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "An unauthorized party disrupted one of six electronic health record environments for about eight hours, and the company deemed it material because of the sensitive patient data potentially involved.",
  "url": "https://www.sec.gov/Archives/edgar/data/1582982/000149315226013239/form8-k.htm"
 },
 {
  "company": "Bitcoin Depot Inc.",
  "ticker": "BTM",
  "filed": "2026-04-08",
  "discovered": "2026-03-23",
  "sector": "Financials",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": false,
  "amendments": 0,
  "material": "Material",
  "summary": "An intruder took control of credentials for the company's digital asset settlement accounts and moved about 50.9 bitcoin (roughly $3.7 million) out of company wallets.",
  "url": "https://www.sec.gov/Archives/edgar/data/1901799/000119312526147772/btm-20260406.htm"
 },
 {
  "company": "Stryker Corporation",
  "ticker": "SYK",
  "filed": "2026-04-09",
  "discovered": "2026-03-11",
  "sector": "Healthcare",
  "incident_type": "Nation-state",
  "threat_actor": "Handala",
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "A March attack on Stryker's Microsoft environment, publicly claimed by the Iran-linked Handala group, disrupted global operations, and an amendment reclassified it under Item 1.05 as material to first-quarter results.",
  "url": "https://www.sec.gov/Archives/edgar/data/310764/000119312526149607/d112875d8ka.htm"
 },
 {
  "company": "CB Financial Services, Inc.",
  "ticker": "CBFV",
  "filed": "2026-05-11",
  "discovered": "2026-05-05",
  "sector": "Financials",
  "incident_type": "Other",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "Customer names, Social Security numbers and birth dates were exposed when non-public data was handled using an unauthorized AI software application, which the bank deemed material given the volume and sensitivity.",
  "url": "https://www.sec.gov/Archives/edgar/data/1605301/000160530126000021/cbfv-20260507.htm"
 },
 {
  "company": "West Pharmaceutical Services, Inc.",
  "ticker": "WST",
  "filed": "2026-05-11",
  "discovered": "2026-05-04",
  "sector": "Healthcare",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 1,
  "material": "Material",
  "summary": "Attackers encrypted systems and stole data, forcing a global shutdown that halted manufacturing and shipping at several sites until operations were restored later in May.",
  "url": "https://www.sec.gov/Archives/edgar/data/105770/000010577026000068/wst-20260507.htm"
 },
 {
  "company": "The Oncology Institute, Inc.",
  "ticker": "TOI",
  "filed": "2026-05-22",
  "discovered": "2026-05-20",
  "sector": "Healthcare",
  "incident_type": "Third-party/vendor",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "A software vendor told the company that a third party had gained unauthorized access to company systems holding patient data, and the company is still assessing the impact.",
  "url": "https://www.sec.gov/Archives/edgar/data/1799191/000107997326000721/toi_8k.htm"
 },
 {
  "company": "iRhythm Holdings, Inc.",
  "ticker": "IRTC",
  "filed": "2026-06-15",
  "discovered": "2026-06-08",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "A social-engineering attacker stole data, including patient health information, from third-party-hosted business applications and demanded payment to keep it private.",
  "url": "https://www.sec.gov/Archives/edgar/data/1388658/000138865826000055/irtc-20260610.htm"
 },
 {
  "company": "8x8, Inc.",
  "ticker": "EGHT",
  "filed": "2026-06-23",
  "discovered": "2026-06-13",
  "sector": "Technology",
  "incident_type": "Third-party/vendor",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "An attacker exploited a Klue Labs integration with 8x8's Salesforce CRM to take customer contract, sales-note and contact data, with no effect on services.",
  "url": "https://www.sec.gov/Archives/edgar/data/1023731/000102373126000084/eght-20260617.htm"
 },
 {
  "company": "River Financial Corporation",
  "ticker": "RVRF",
  "filed": "2026-06-25",
  "discovered": "2026-06-19",
  "sector": "Financials",
  "incident_type": "Ransomware",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": true,
  "amendments": 4,
  "material": "Not yet determined",
  "summary": "An intruder deployed ransomware across parts of River Bank & Trust's servers and removed data, forcing systems offline, and later amendments added lawsuits and the attacker's assurance that the data was deleted.",
  "url": "https://www.sec.gov/Archives/edgar/data/1641601/000119312526282946/ck0001641601-20260619.htm"
 },
 {
  "company": "Navient Corporation",
  "ticker": "NAVI",
  "filed": "2026-07-02",
  "discovered": "2026-06-08",
  "sector": "Financials",
  "incident_type": "Third-party/vendor",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "A ransomware attack on an outside law firm exposed Navient borrower names, birth dates, addresses and Social Security numbers, with no intrusion into Navient's own systems.",
  "url": "https://www.sec.gov/Archives/edgar/data/1593538/000114036126027441/ef20077249_8k.htm"
 },
 {
  "company": "AdaptHealth Corp.",
  "ticker": "AHCO",
  "filed": "2026-07-02",
  "discovered": "2026-06-15",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "A social-engineering attack on a contractor's user session let a threat actor steal patient personal and health information, along with a billing password file.",
  "url": "https://www.sec.gov/Archives/edgar/data/1725255/000110465926080297/ahco-20260627x8k.htm"
 },
 {
  "company": "Amgen Inc.",
  "ticker": "AMGN",
  "filed": "2026-07-31",
  "discovered": null,
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Material",
  "summary": "Unauthorized access to third-party-hosted cloud environments led to theft of proprietary data and patient health information, deemed material because of the volume and sensitivity of the files.",
  "url": "https://www.sec.gov/Archives/edgar/data/318154/000031815426000119/amgn-20260729.htm"
 },
 {
  "company": "Nutex Health Inc.",
  "ticker": "NUTX",
  "filed": "2026-08-31",
  "discovered": null,
  "sector": "Healthcare",
  "incident_type": "Ransomware",
  "threat_actor": "The Gentlemen",
  "ops_disrupted": false,
  "data_exfiltrated": true,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "After an earlier Item 8.01 notice, Nutex reported that an outside party stole patient, employee, provider and financial data and threatened to leak it, and a class action followed.",
  "url": "https://www.sec.gov/Archives/edgar/data/1479681/000162828026059602/nutx-20260831.htm"
 },
 {
  "company": "Park Dental Partners, Inc.",
  "ticker": "PARK",
  "filed": "2026-09-01",
  "discovered": "2026-08-28",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": false,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Not yet determined",
  "summary": "The dental support organization found unauthorized access to its network and is investigating whether patient personal or health information was compromised.",
  "url": "https://www.sec.gov/Archives/edgar/data/2069604/000110465926104300/park-20260828x8k.htm"
 },
 {
  "company": "Boston Scientific Corporation",
  "ticker": "BSX",
  "filed": "2026-09-08",
  "discovered": "2026-08-25",
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "A cyberattack caused a global network outage that halted manufacturing and order shipping, and the company expects to miss its Q3 and full-year 2026 sales and EPS guidance.",
  "url": "https://www.sec.gov/Archives/edgar/data/885725/000088572526000059/bsx-20260907.htm"
 },
 {
  "company": "Astrana Health, Inc.",
  "ticker": "ASTH",
  "filed": "2026-09-23",
  "discovered": null,
  "sector": "Healthcare",
  "incident_type": "Unauthorized access",
  "threat_actor": null,
  "ops_disrupted": true,
  "data_exfiltrated": null,
  "amendments": 0,
  "material": "Material",
  "summary": "Attackers posed as staff and spoofed the corporate phone number to get into systems, which forced credential resets and restores from backup, and the company deemed it material because of the sensitive data involved.",
  "url": "https://www.sec.gov/Archives/edgar/data/1083446/000110465926109813/asth-20260922x8k.htm"
 }
]