Guides
Evergreen explainers of the rules, items and deadlines behind the disclosures this site logs. 20 guides so far.
Published 2026-10-30
Why a CPA or advisory firm sent you a breach letter: Mercadien, Aldrich, OpportuneWhat breach letters from Mercadien, Aldrich Services and Opportune say about why they held your data, what was exposed, and what they offer.
Published 2026-10-30
Law firm breach notices: what three firms' social engineering incidents say about client dataThree law firm notices filed in October 2026 describe social engineering, files taken, blank data fields and 24-month monitoring offers.
Published 2026-10-29
One Metabase vulnerability, three notices: what two filings showPoppins Payroll names a Metabase flaw; Blueberry Pediatrics filed a breach record. What the two documents say on data, notification and timing.
Published 2026-10-29
ETS and Frontline breaches: what California notices say was exposedWhat the CDE and Frontline Education breach notices filed with the California AG say about exposed student data and who notified whom.
Published 2026-10-28
Why you got a breach letter from a company you never dealt withThree California breach notices show how an accountant, a testing contractor and a deposition vendor each explain why they held your data.
Published 2026-10-28
Why did I get a breach letter from a company I've never heard of?How four breach letters, from an accountant, a court-reporting firm, a testing service and a software vendor, explain their link to you.
Published 2026-10-27
How 8-K filings state the number of people affected, and how that number changesCoupang said 'up to 33 million' accounts, Conduent said 'a significant number', and amendments changed the detail. Here is what each filing says.
Published 2026-10-27
How 8-K filings size an affected population: counts, ranges and 'significant number'Coupang, Conduent and Fidelity National Financial size affected populations differently. What each filing says, and how Coupang's figure changed.
Published 2026-10-27
How 8-K filings count affected people, and when the number arrivesTwo cases, Coupang and Fidelity National Financial, show when 8-K filings give an affected-person count, how it changes in amendments, and what comes first.
Published 2026-10-27
Health data in 8-K cyber filings: Cencora, Amgen and AdaptHealth comparedHow three public companies' 8-K filings describe the health data taken, how it was reached, and when the health-data finding was disclosed.
Published 2026-10-26
Reading a California AG breach notice: what the letter and the AG record each tell youA comparison of two California AG breach filings, from Inner City Education Foundation and City of Foster City, showing what each letter and record says.
Published 2026-10-25
Ransomware in 8-K filings: how companies describe encryption, data theft and extortionFour SEC filings from Brandywine, Jewett-Cameron, Data I/O and ENGlobal, compared on encryption, stolen data, extortion demands and how attackers got in.
Published 2026-10-25
Item 8.01 versus Item 1.05: when a cyber incident moves between themAn SEC staff statement and one company's two Form 8-K filings show when a cyber incident goes under Item 8.01 and what moves it to Item 1.05.
Published 2026-10-25
Extortion and ransom language in 8-K cyber filingsHow Coinbase, Jewett-Cameron, Brandywine and Data I/O described extortion, data theft, encryption and ransom payment in their Item 1.05 filings.
Published 2026-10-24
Operational shutdowns in 8-K filings: how long they last and what companies say about costFour 8-K filings show shutdowns lasting about two weeks up to a recovery with no end date, and very different ways of stating the cost.
Published 2026-10-24
How 8-K/A amendments change an incident disclosureTwo SEC filing pairs, Cencora and Fidelity National Financial, show what an 8-K/A adds on data types, people affected and scope after the first 8-K.
Published 2026-10-23
Vendor and cloud-tenant breaches in 8-K filings: entry point, data, responsibilityHow 8x8, Amgen, Live Nation and the Federal Home Loan Bank of New York described vendor, integration and cloud breaches in their 8-K filings.
Published 2026-10-22
Social engineering in SEC 8-K filings: how attackers got in, what they tookA read of four 8-K filings from Caesars, AdaptHealth, Astrana and iRhythm on social engineering entry points, data taken and response.
Published 2026-10-15
Data breach notification laws by state: twelve states, read directlyNo single US breach law exists. Twelve states' own statutes and AG guidance, read directly: notice deadlines from 30 to 60 days, AG-notice thresholds from 250 to 1,000.
Published 2026-10-08
What is SEC Form 8-K Item 1.05, and what counts as a disclosed cyber incident?Item 1.05 requires a public company to disclose a cybersecurity incident within four business days of deciding it is material, not four days after finding it.