# cisonews.net

> The CISO Tribune network's log of disclosed security incidents: SEC Form 8-K Item 1.05 filings and related disclosures, each sourced to the filing.

cisonews.net is the Incident & Disclosure Desk of the CISO Tribune network (https://www.cisotribune.com/network). Each entry records what a company disclosed about a security incident, with the filing linked. Published dates are the day an entry went live here (first: 2026-09-27); incident dates are given separately. The security seat field is a record fact from cisotribune.com and implies nothing about the incident.

## Key pages
- [Incident log](https://www.cisonews.net/incidents): all entries, filterable by year, sector and form item
- [Incidents at security vendors](https://www.cisonews.net/vendors): entries whose company sells security products, with its directory category; vendor records live on CISO Tribune (F5: https://www.cisotribune.com/companies/f5; Microsoft: https://www.cisotribune.com/companies/microsoft)
- [Browse by year](https://www.cisonews.net/year): every page filed under the year it is about (for incidents, the year of first disclosure), not the year it was published here
- [Method and sources](https://www.cisonews.net/about): inclusion rules, source tiers, neutrality rule, AI use
- [Corrections](https://www.cisonews.net/corrections)

## Browse by year
- [2026 on cisonews.net](https://www.cisonews.net/year/2026): 16 incidents, 1 analysis
- [2025 on cisonews.net](https://www.cisonews.net/year/2025): 15 incidents
- [2024 on cisonews.net](https://www.cisonews.net/year/2024): 27 incidents
- [2023 on cisonews.net](https://www.cisonews.net/year/2023): 16 incidents
- [2022 on cisonews.net](https://www.cisonews.net/year/2022): 3 incidents

## Analysis
- [Two years of SEC cyber incident disclosures: what companies actually said](https://www.cisonews.net/analysis/two-years-of-sec-cyber-incident-disclosures): 56 Item 1.05 incidents from December 2023 to September 2026: a median six days from detection to first 8-K, a shift toward health care, and the materiality date.

## Incidents
- [Astrana Health, 8-K Item 1.05, first disclosed 2026-09-23](https://www.cisonews.net/incidents/astrana-health-2026-09)
- [Park Dental Partners, 8-K Item 1.05, first disclosed 2026-09-01](https://www.cisonews.net/incidents/park-dental-partners-2026-09)
- [Boston Scientific, 8-K Item 8.01; Item 1.05, first disclosed 2026-08-26](https://www.cisonews.net/incidents/boston-scientific-2026-08)
- [Nutex Health, 8-K Item 8.01; Item 1.05, first disclosed 2026-08-24](https://www.cisonews.net/incidents/nutex-health-2026-08)
- [Amgen, 8-K Item 1.05, first disclosed 2026-07-31](https://www.cisonews.net/incidents/amgen-2026-07)
- [AdaptHealth, 8-K Item 1.05, first disclosed 2026-07-02](https://www.cisonews.net/incidents/adapthealth-2026-07)
- [Navient, 8-K Item 1.05, first disclosed 2026-07-02](https://www.cisonews.net/incidents/navient-2026-07)
- [River Financial, 8-K Item 1.05, first disclosed 2026-06-25](https://www.cisonews.net/incidents/river-financial-2026-06)
- [8x8, 8-K Item 1.05, first disclosed 2026-06-23](https://www.cisonews.net/incidents/8x8-2026-06)
- [iRhythm Holdings, 8-K Item 1.05, first disclosed 2026-06-15](https://www.cisonews.net/incidents/irhythm-holdings-2026-06)
- [West Pharmaceutical Services, 8-K Item 1.05, first disclosed 2026-05-11](https://www.cisonews.net/incidents/west-pharmaceutical-services-2026-05)
- [Bitcoin Depot, 8-K Item 1.05, first disclosed 2026-04-08](https://www.cisonews.net/incidents/bitcoin-depot-2026-04)
- [CareCloud, 8-K Item 1.05, first disclosed 2026-03-27](https://www.cisonews.net/incidents/carecloud-2026-03)
- [Trio-Tech International, 8-K Item 1.05, first disclosed 2026-03-20](https://www.cisonews.net/incidents/trio-tech-international-2026-03)
- [Stryker, 8-K Item 8.01; 8-K/A Item 1.05, first disclosed 2026-03-11](https://www.cisonews.net/incidents/stryker-2026-03)
- [UFP Technologies, 8-K Item 1.05, first disclosed 2026-02-24](https://www.cisonews.net/incidents/ufp-technologies-2026-02)
- [Coupang, 8-K Item 1.05, first disclosed 2025-12-16](https://www.cisonews.net/incidents/coupang-2025-12)
- [The Oncology Institute, 8-K Item 7.01; Item 1.05, first disclosed 2025-11-06](https://www.cisonews.net/incidents/the-oncology-institute-2025-11)
- [BayFirst Financial, 8-K Item 1.05, first disclosed 2025-10-30](https://www.cisonews.net/incidents/bayfirst-financial-2025-10)
- [Jewett-Cameron Trading, 8-K Item 1.05, first disclosed 2025-10-21](https://www.cisonews.net/incidents/jewett-cameron-trading-2025-10)
- [F5, 8-K Item 1.05, first disclosed 2025-10-15](https://www.cisonews.net/incidents/f5-2025-10)
- [Wytec International, 8-K Item 1.05, first disclosed 2025-08-29](https://www.cisonews.net/incidents/wytec-international-2025-08)
- [Data I/O, 8-K Item 1.05, first disclosed 2025-08-21](https://www.cisonews.net/incidents/data-i-o-2025-08)
- [Zoomcar Holdings, 8-K Item 1.05, first disclosed 2025-06-13](https://www.cisonews.net/incidents/zoomcar-holdings-2025-06)
- [United Natural Foods, 8-K Item 8.01; Item 1.05, first disclosed 2025-06-09](https://www.cisonews.net/incidents/united-natural-foods-2025-06)
- [Coinbase, 8-K Item 1.05, first disclosed 2025-05-15](https://www.cisonews.net/incidents/coinbase-2025-05)
- [Nucor, 8-K Item 1.05, first disclosed 2025-05-14](https://www.cisonews.net/incidents/nucor-2025-05)
- [Conduent, 8-K Item 1.05, first disclosed 2025-04-14](https://www.cisonews.net/incidents/conduent-2025-04)
- [Sensata Technologies, 8-K Item 1.05, first disclosed 2025-04-09](https://www.cisonews.net/incidents/sensata-technologies-2025-04)
- [National Presto Industries, 8-K Item 1.05, first disclosed 2025-03-06](https://www.cisonews.net/incidents/national-presto-industries-2025-03)
- [Lee Enterprises, 8-K Item 1.05, first disclosed 2025-02-18](https://www.cisonews.net/incidents/lee-enterprises-2025-02)
- [Krispy Kreme, 8-K Item 1.05, first disclosed 2024-12-11](https://www.cisonews.net/incidents/krispy-kreme-2024-12)
- [ENGlobal, 8-K Item 1.05, first disclosed 2024-12-02](https://www.cisonews.net/incidents/englobal-2024-12)
- [iLearningEngines, 8-K Item 1.05, first disclosed 2024-11-18](https://www.cisonews.net/incidents/ilearningengines-2024-11)
- [American Water Works, 8-K Item 8.01, first disclosed 2024-10-07](https://www.cisonews.net/incidents/american-water-works-2024-10)
- [Halliburton, 8-K Item 8.01; Item 1.05, first disclosed 2024-08-23](https://www.cisonews.net/incidents/halliburton-2024-08)
- [Microchip Technology, 8-K Item 8.01, first disclosed 2024-08-20](https://www.cisonews.net/incidents/microchip-technology-2024-08)
- [Bassett Furniture Industries, 8-K Item 1.05, first disclosed 2024-07-15](https://www.cisonews.net/incidents/bassett-furniture-industries-2024-07)
- [AT&T, 8-K Item 1.05, first disclosed 2024-07-12](https://www.cisonews.net/incidents/at-t-2024-07)
- [Crimson Wine Group, 8-K Item 8.01; Item 1.05, first disclosed 2024-07-05](https://www.cisonews.net/incidents/crimson-wine-group-2024-07)
- [Sonic Automotive, 8-K Item 8.01; Item 1.05, first disclosed 2024-06-21](https://www.cisonews.net/incidents/sonic-automotive-2024-06)
- [Live Nation Entertainment, 8-K Item 8.01, first disclosed 2024-05-31](https://www.cisonews.net/incidents/live-nation-entertainment-2024-05)
- [Key Tronic, 8-K Item 1.05, first disclosed 2024-05-10](https://www.cisonews.net/incidents/key-tronic-2024-05)
- [Brandywine Realty Trust, 8-K Item 1.05, first disclosed 2024-05-07](https://www.cisonews.net/incidents/brandywine-realty-trust-2024-05)
- [Dropbox, 8-K Item 1.05, first disclosed 2024-05-01](https://www.cisonews.net/incidents/dropbox-2024-05)
- [Frontier Communications, 8-K Item 1.05, first disclosed 2024-04-18](https://www.cisonews.net/incidents/frontier-communications-2024-04)
- [OraSure Technologies, 8-K Item 1.05, first disclosed 2024-04-12](https://www.cisonews.net/incidents/orasure-technologies-2024-04)
- [B. Riley Financial, 8-K Item 1.05, first disclosed 2024-04-08](https://www.cisonews.net/incidents/b-riley-financial-2024-04)
- [Radiant Logistics, 8-K Item 1.05, first disclosed 2024-03-20](https://www.cisonews.net/incidents/radiant-logistics-2024-03)
- [MarineMax, 8-K Item 1.05, first disclosed 2024-03-12](https://www.cisonews.net/incidents/marinemax-2024-03)
- [Federal Home Loan Bank of New York, 8-K Item 1.05, first disclosed 2024-03-01](https://www.cisonews.net/incidents/federal-home-loan-bank-of-new-york-2024-03)
- [Cencora, 8-K Item 1.05, first disclosed 2024-02-27](https://www.cisonews.net/incidents/cencora-2024-02)
- [UnitedHealth Group, 8-K Item 1.05, first disclosed 2024-02-22](https://www.cisonews.net/incidents/unitedhealth-group-2024-02)
- [Prudential Financial, 8-K Item 1.05, first disclosed 2024-02-13](https://www.cisonews.net/incidents/prudential-financial-2024-02)
- [SouthState, 8-K Item 1.05, first disclosed 2024-02-09](https://www.cisonews.net/incidents/southstate-2024-02)
- [Hewlett Packard Enterprise, 8-K Item 1.05, first disclosed 2024-01-24](https://www.cisonews.net/incidents/hewlett-packard-enterprise-2024-01)
- [Microsoft, 8-K Item 1.05, first disclosed 2024-01-19](https://www.cisonews.net/incidents/microsoft-2024-01)
- [loanDepot, 8-K Item 8.01, first disclosed 2024-01-08](https://www.cisonews.net/incidents/loandepot-2024-01)
- [First American Financial, 8-K Item 1.05, first disclosed 2023-12-22](https://www.cisonews.net/incidents/first-american-financial-2023-12)
- [VF Corporation, 8-K Item 1.05, first disclosed 2023-12-18](https://www.cisonews.net/incidents/vf-corporation-2023-12)
- [Fidelity National Financial, 8-K Item 8.01, first disclosed 2023-11-21](https://www.cisonews.net/incidents/fidelity-national-financial-2023-11)
- [Mr. Cooper Group, 8-K Item 8.01, first disclosed 2023-11-02](https://www.cisonews.net/incidents/mr-cooper-group-2023-11)
- [Henry Schein, 8-K Item 7.01, first disclosed 2023-10-16](https://www.cisonews.net/incidents/henry-schein-2023-10)
- [23andMe Holding, 8-K Item 7.01, first disclosed 2023-10-10](https://www.cisonews.net/incidents/23andme-holding-2023-10)
- [Johnson Controls International, 8-K Item 8.01, first disclosed 2023-09-27](https://www.cisonews.net/incidents/johnson-controls-international-2023-09)
- [Caesars Entertainment, 8-K Item 8.01, first disclosed 2023-09-14](https://www.cisonews.net/incidents/caesars-entertainment-2023-09)
- [MGM Resorts International, 8-K Item 7.01, first disclosed 2023-09-13](https://www.cisonews.net/incidents/mgm-resorts-international-2023-09)
- [Clorox, 8-K Item 8.01, first disclosed 2023-08-14](https://www.cisonews.net/incidents/clorox-2023-08)
- [Estée Lauder Companies, 8-K Item 8.01, first disclosed 2023-07-19](https://www.cisonews.net/incidents/estee-lauder-companies-2023-07)
- [Progress Software, 8-K Item 8.01, first disclosed 2023-06-05](https://www.cisonews.net/incidents/progress-software-2023-06)
- [Western Digital, 8-K Item 8.01, first disclosed 2023-04-03](https://www.cisonews.net/incidents/western-digital-2023-04)
- [DISH Network, 8-K Item 8.01, first disclosed 2023-02-28](https://www.cisonews.net/incidents/dish-network-2023-02)
- [MKS Instruments, 8-K Item 8.01, first disclosed 2023-02-06](https://www.cisonews.net/incidents/mks-instruments-2023-02)
- [T-Mobile US, 8-K Item 8.01, first disclosed 2023-01-19](https://www.cisonews.net/incidents/t-mobile-us-2023-01)
- [Rackspace Technology, 8-K Item 7.01, first disclosed 2022-12-06](https://www.cisonews.net/incidents/rackspace-technology-2022-12)
- [Hanesbrands, 8-K Item 8.01, first disclosed 2022-05-31](https://www.cisonews.net/incidents/hanesbrands-2022-05)
- [Expeditors International of Washington, 8-K Item 8.01, first disclosed 2022-02-22](https://www.cisonews.net/incidents/expeditors-international-of-washington-2022-02)