How 8-K filings state the number of people affected, and how that number changes

What this guide covers

This guide reads four documents and answers the question only from their text. The documents are Coupang's Form 8-K and 8-K/A, Fidelity National Financial's 8-K/A, and Conduent's Form 8-K. Only Coupang has both an original filing and an amendment in this set, so it is the only case where a count can be followed from one filing to the next.

Coupang's original 8-K: a ceiling, counted in accounts

Coupang's original Form 8-K reports its incident under Item 1.05, Material Cybersecurity Incidents. It says Coupang Corp., the Korean subsidiary, learned of the incident on November 18, 2025.

The count is written as a maximum. The filing says a former employee may have obtained the name, phone number, delivery address, and email address associated with up to 33 million customer accounts.

Two features of that wording matter for a reader. The verb is "may have obtained," not "obtained." The figure is a ceiling for accounts, and the filing does not give a number of individual customers.

The filing also says the work was not finished. It states that Coupang is continuing its investigation and has engaged external forensic experts. Its forward-looking statements list the potential discovery of additional information among the reasons actual results could differ.

Coupang's 8-K/A: the large number is restated and a small one is added

The 8-K/A (Amendment No. 1) refers back to the original filing. It says the incident was disclosed in the report Coupang, Inc. filed with the SEC on December 16, 2025. It then says Coupang Corp. issued updates on December 24, 2025 and December 28, 2025, both Pacific time.

The amendment restates the large figure with a different qualifier. It says the investigation to date indicates that approximately 33 million accounts were accessed. The original said "up to 33 million" and "may have obtained." The amendment says "approximately 33 million" and "accessed."

The amendment's new information is a second, much smaller number. It says the perpetrator saved limited data from approximately 3,000 customer accounts. It adds that this customer data has been deleted and was not shared.

Read together, the amendment did not lower the 33 million figure. It added a second figure that describes a narrower thing: how many accounts had data saved. Both figures in the amendment are given as "approximately," and both count accounts.

Conduent's 8-K: "a significant number" and no figure

Conduent's Form 8-K, signed April 14, 2025, is the clearest case of a description without a number. The filing says the company experienced an operational disruption on January 13, 2025.

It says the threat actor took files tied to only some clients. The filing states that the threat actor exfiltrated a set of files associated with a limited number of the Company's clients.

On the people affected, the filing gives no figure. It says data mining experts confirmed that the data sets held a significant number of individuals' personal information associated with the clients' end-users. The individuals are therefore described as people connected to Conduent's clients, not as Conduent's own customers.

The filing explains why a figure was missing. It says the company is continuing to analyze and document the precise and detailed impact of the data exfiltrated. It also says that clients are being informed as appropriate.

The document provided is the original 8-K only. No Conduent amendment is among the four documents, so this guide cannot show whether or how its description later changed.

Fidelity National Financial's 8-K/A: no count of people at all

Fidelity National Financial's 8-K/A (Amendment No. 1) says it amends an 8-K filed on November 21, 2023. The original is not among the documents, so the guide cannot compare the two texts.

The amended text says the company became aware of a cybersecurity incident on November 19, 2023, one that impacted certain of its systems.

It describes impact in terms of systems and operations. It states that the company took containment measures such as blocking access to certain systems, resulting in varying levels of disruption to its businesses, and it gives no number of people or accounts.

The amendment does not claim the assessment is complete. It says the company will continue to assess the impact and whether the incident may have a material impact.

Reading across the four documents

None of the four documents states a rule for how a count must be expressed. They show only how these filers chose to write it.

Three patterns appear in the text. Coupang counts accounts and states a figure, first as a ceiling and then as an approximation. Conduent counts individuals and uses a qualitative phrase. Fidelity National Financial's amendment gives no count in the text provided.

Each filing also carries language that the picture may change. Coupang's refers to the potential discovery of additional information, Conduent's to analysis still under way, and Fidelity National Financial's to a continuing assessment. In the one case where an original and an amendment are both available, Coupang's, the change was a restated qualifier on the first number plus a second, smaller number, not a single revised total.