SEC Form 8-K filings · Item 1.05
How many Form 8-K filings report a material cybersecurity incident each month?
In October 2026, 1 Form 8-K filing reported a cyber incident. The newest day we have read is .
Right now
Cyber incidents (Item 1.05), October 2026: 1 filing; the last thirty days: 1.
The item
Item 1.05 of Form 8-K is Material Cybersecurity Incidents. It has been in force since December 2023. A company reports an incident it judges material, so a count of it is a count of those reports and not of every incident.
As filed
Facts as filed with the SEC, and our counts of them. Not investment advice.
A company files a Form 8-K, usually within four business days, when one of these events happens. Each filing lists the items it reports.
A count is of Form 8-K filings, not of companies or of events: a filing that names several companies counts once, a filing that reports more than one of these items counts under each, and one event can be reported in more than one filing.
A filing is counted in the month of the date the SEC gives it, and a month is shown only when every business day of it has been read in full. The month being filled is left out until it is complete.
The item says what kind of event a company reports, not how large it is, who is affected or whether it is settled.
Understanding the counts
Where it stands today
In October 2026, 1 Form 8-K filing reported a cyber incident (Item 1.05).
Where do these counts come from?
Public companies file a Form 8-K with the SEC to report certain events. Each filing lists the numbered items it reports. This page counts the filings that list each of four items.
Read more
The SEC lists every filing of a business day in an index and gives each filing a header that names its items and the companies it is for. We read both, day by day, and count the filings whose header lists the item. The newest business day read in full is .
The numbers behind the chart
How many filings reported cyber incidents in each month?2 months, newest first
| Month | Filings |
|---|---|
| 1 | |
| 3 |
Which filings reported cyber incidents?5 filings, newest first
| Date filed | Company | Accession number |
|---|---|---|
| Park Dental Partners, Inc. | 0001104659-26-115541 | |
| Astrana Health, Inc. | 0001104659-26-109813 | |
| Boston Scientific Corp | 0000885725-26-000059 | |
| Park Dental Partners, Inc. | 0001104659-26-104300 | |
| Nutex Health Inc. | 0001628280-26-059602 |
What do these counts leave out, and where are they from?Limits and source
What this number cannot tell you
- A count is of Form 8-K filings, not of companies or of events: a filing that names several companies counts once, a filing that reports more than one of these items counts under each, and one event can be reported in more than one filing.
- A filing is counted in the month of the date the SEC gives it, and a month is shown only when every business day of it has been read in full. The month being filled is left out until it is complete.
- Filings are read from 1 January 2025 on.
- The item says what kind of event a company reports, not how large it is, who is affected or whether it is settled.
- Item 1.05 of Form 8-K is Material Cybersecurity Incidents. It has been in force since December 2023. A company reports an incident it judges material, so a count of it is a count of those reports and not of every incident.
- Each filing is named by the accession number the SEC gives it; with the number, the filing and its documents can be found at the SEC.
Observed .
Page updated