# cisonews.net

> A log of disclosed security incidents: SEC Form 8-K Item 1.05 filings, state attorney-general breach notices and regulator releases, each sourced to the original document.

cisonews.net is an incident and disclosure log. Each entry records what an organization disclosed about a security incident (an SEC filing, a breach notice filed with a state attorney general, or a regulator release), with the source document linked. Published dates are the day an entry went live here (first: 2026-09-27); incident dates are given separately. The security seat field is a record fact from cisotribune.com and implies nothing about the incident.

## Key pages
- [Incident log](https://www.cisonews.net/incidents): all entries, filterable by year, sector and form item
- [Item 1.05 filings tracker](https://www.cisonews.net/filings): 85 Form 8-K/8-K-A filings EDGAR codes under Item 1.05, built directly from EDGAR's full-text search, including filers not yet written up here
- [Repeat Item 1.05 filers](https://www.cisonews.net/filings/repeat-filers): 21 companies with two or more Item 1.05 filings on record, grouped by SEC EDGAR's own CIK
- [FTC data-security enforcement tracker](https://www.cisonews.net/enforcement): 98 FTC cases and proceedings tagged under the FTC's own "Data Security" topic, back to 2000, built from the FTC's own case listing
- [Data-breach class-action litigation tracker](https://www.cisonews.net/litigation): 213 federal data-breach class actions consolidated under an "In re" caption since 2022, built from CourtListener's own RECAP archive
- [Breach outcomes](https://www.cisonews.net/outcomes): 6 companies on record for both an Item 1.05 disclosure and a consolidated data-breach class action over the same incident, joining the filings and litigation trackers by company
- [Incidents at security vendors](https://www.cisonews.net/vendors): entries whose company sells security products, with its directory category; vendor records live on CISO Tribune (F5: https://www.cisotribune.com/companies/f5; Microsoft: https://www.cisotribune.com/companies/microsoft)
- [Browse by year](https://www.cisonews.net/year): every page filed under the year it is about (for incidents, the year of first disclosure), not the year it was published here
- [Browse by sector](https://www.cisonews.net/incidents/sector): the incident log grouped by the sector of the company it happened at
- [Companies](https://www.cisonews.net/companies): every company with an incident on record here, each linking to its canonical page on CISO Tribune
- [Method and sources](https://www.cisonews.net/about): inclusion rules, source tiers, neutrality rule, AI use
- [Glossary](https://www.cisonews.net/glossary): one sourced definition per incident, filing and litigation term (12 terms); the first paragraph of each entry is the definition and may be quoted with attribution
- [Corrections](https://www.cisonews.net/corrections)

## Browse by year
- [2026 on cisonews.net](https://www.cisonews.net/year/2026): 66 incidents, 2 analysis pieces
- [2025 on cisonews.net](https://www.cisonews.net/year/2025): 15 incidents
- [2024 on cisonews.net](https://www.cisonews.net/year/2024): 28 incidents
- [2023 on cisonews.net](https://www.cisonews.net/year/2023): 18 incidents
- [2022 on cisonews.net](https://www.cisonews.net/year/2022): 3 incidents

## Browse by sector
- [Financial services](https://www.cisonews.net/incidents/sector/financial-services): 23 incidents
- [Consumer & retail](https://www.cisonews.net/incidents/sector/consumer-retail): 17 incidents
- [Health care](https://www.cisonews.net/incidents/sector/health-care): 16 incidents
- [Technology](https://www.cisonews.net/incidents/sector/technology): 15 incidents
- [Legal & professional services](https://www.cisonews.net/incidents/sector/legal-professional-services): 10 incidents
- [Industrials & manufacturing](https://www.cisonews.net/incidents/sector/industrials-manufacturing): 9 incidents
- [Education](https://www.cisonews.net/incidents/sector/education): 8 incidents
- [Life sciences & medical devices](https://www.cisonews.net/incidents/sector/life-sciences-medical-devices): 8 incidents
- [Hospitality & entertainment](https://www.cisonews.net/incidents/sector/hospitality-entertainment): 5 incidents
- [Telecommunications](https://www.cisonews.net/incidents/sector/telecommunications): 5 incidents
- [Transportation & logistics](https://www.cisonews.net/incidents/sector/transportation-logistics): 4 incidents
- [Government & public sector](https://www.cisonews.net/incidents/sector/government-public-sector): 4 incidents
- [Real estate](https://www.cisonews.net/incidents/sector/real-estate): 2 incidents
- [Energy & utilities](https://www.cisonews.net/incidents/sector/energy-utilities): 2 incidents
- [Media](https://www.cisonews.net/incidents/sector/media): 1 incident
- [Retail & e-commerce](https://www.cisonews.net/incidents/sector/retail-e-commerce): 1 incident

## Companies
- [23andMe Holding](https://www.cisonews.net/companies/23andme-holding): 1 incident on record, Life sciences & medical devices
- [8x8](https://www.cisonews.net/companies/8x8): 1 incident on record, Technology
- [AdaptHealth](https://www.cisonews.net/companies/adapthealth): 1 incident on record, Health care
- [Advantest America](https://www.cisonews.net/companies/advantest-america): 1 incident on record, Industrials & manufacturing
- [Aldrich Services LLP](https://www.cisonews.net/companies/aldrich-services-llp): 1 incident on record, Legal & professional services
- [Alisal Union School District](https://www.cisonews.net/companies/alisal-union-school-district): 1 incident on record, Education
- [Alma Family Services](https://www.cisonews.net/companies/alma-family-services): 1 incident on record, Health care
- [American Board of Preventive Medicine](https://www.cisonews.net/companies/american-board-of-preventive-medicine): 1 incident on record, Health care
- [American Family Connect Insurance Company](https://www.cisonews.net/companies/american-family-connect-insurance-company): 1 incident on record, Financial services
- [American Water Works](https://www.cisonews.net/companies/american-water-works): 1 incident on record, Energy & utilities
- [Amgen](https://www.cisonews.net/companies/amgen): 1 incident on record, Life sciences & medical devices
- [Apollo Management Holdings](https://www.cisonews.net/companies/apollo-management-holdings): 1 incident on record, Financial services
- [Astrana Health](https://www.cisonews.net/companies/astrana-health): 1 incident on record, Health care
- [AT&T](https://www.cisonews.net/companies/at-t): 1 incident on record, Telecommunications
- [B. Riley Financial](https://www.cisonews.net/companies/b-riley-financial): 1 incident on record, Financial services
- [Baker & McKenzie](https://www.cisonews.net/companies/baker-mckenzie): 1 incident on record, Legal & professional services
- [Bangkok Bank](https://www.cisonews.net/companies/bangkok-bank): 1 incident on record, Financial services
- [BASS Medical Group](https://www.cisonews.net/companies/bass-medical-group): 1 incident on record, Health care
- [Bassett Furniture Industries](https://www.cisonews.net/companies/bassett-furniture-industries): 1 incident on record, Consumer & retail
- [BayFirst Financial](https://www.cisonews.net/companies/bayfirst-financial): 1 incident on record, Financial services
- [Bitcoin Depot](https://www.cisonews.net/companies/bitcoin-depot): 1 incident on record, Financial services
- [Blueberry Pediatrics](https://www.cisonews.net/companies/blueberry-pediatrics): 1 incident on record, Health care
- [Boston Scientific](https://www.cisonews.net/companies/boston-scientific): 1 incident on record, Life sciences & medical devices
- [Brandywine Realty Trust](https://www.cisonews.net/companies/brandywine-realty-trust): 1 incident on record, Real estate
- [Caesars Entertainment](https://www.cisonews.net/companies/caesars-entertainment): 1 incident on record, Hospitality & entertainment
- [California Department of Education](https://www.cisonews.net/companies/california-department-of-education): 1 incident on record, Education
- [CareCloud](https://www.cisonews.net/companies/carecloud): 1 incident on record, Health care
- [Cencora](https://www.cisonews.net/companies/cencora): 1 incident on record, Health care
- [Citizens Bank](https://www.cisonews.net/companies/citizens-bank): 1 incident on record, Financial services
- [City of Foster City](https://www.cisonews.net/companies/city-of-foster-city): 1 incident on record, Government & public sector
- [City of Jacksonville Beach, Florida](https://www.cisonews.net/companies/jacksonville-beach): 1 incident on record, Government & public sector
- [City of McMinnville](https://www.cisonews.net/companies/city-of-mcminnville): 1 incident on record, Government & public sector
- [Clorox](https://www.cisonews.net/companies/clorox): 1 incident on record, Consumer & retail
- [Coinbase](https://www.cisonews.net/companies/coinbase): 1 incident on record, Financial services
- [Conduent](https://www.cisonews.net/companies/conduent): 1 incident on record, Technology
- [Coupang](https://www.cisonews.net/companies/coupang): 1 incident on record, Consumer & retail
- [Covered California](https://www.cisonews.net/companies/covered-california): 1 incident on record, Government & public sector
- [Crimson Wine Group](https://www.cisonews.net/companies/crimson-wine-group): 1 incident on record, Consumer & retail
- [Data I/O](https://www.cisonews.net/companies/data-i-o): 1 incident on record, Technology
- [Del Monte Foods](https://www.cisonews.net/companies/del-monte-foods): 1 incident on record, Consumer & retail
- [Directed Trust Company](https://www.cisonews.net/companies/directed-trust-company): 1 incident on record, Financial services
- [DISH Network](https://www.cisonews.net/companies/dish-network): 1 incident on record, Telecommunications
- [Dorsata](https://www.cisonews.net/companies/dorsata): 1 incident on record, Health care
- [DriveWealth](https://www.cisonews.net/companies/drivewealth): 1 incident on record, Financial services
- [Dropbox](https://www.cisonews.net/companies/dropbox): 1 incident on record, Technology
- [ENGlobal](https://www.cisonews.net/companies/englobal): 1 incident on record, Industrials & manufacturing
- [Estée Lauder Companies](https://www.cisonews.net/companies/estee-lauder-companies): 1 incident on record, Consumer & retail
- [Expeditors International of Washington](https://www.cisonews.net/companies/expeditors-international-of-washington): 1 incident on record, Transportation & logistics
- [F5](https://www.cisonews.net/companies/f5): 1 incident on record, Technology
- [Federal Home Loan Bank of New York](https://www.cisonews.net/companies/federal-home-loan-bank-of-new-york): 1 incident on record, Financial services
- [Fidelity National Financial](https://www.cisonews.net/companies/fidelity-national-financial): 1 incident on record, Financial services
- [First American Financial](https://www.cisonews.net/companies/first-american-financial): 1 incident on record, Financial services
- [Fragomen](https://www.cisonews.net/companies/fragomen): 1 incident on record, Legal & professional services
- [Frazer LLP](https://www.cisonews.net/companies/frazer-llp): 1 incident on record, Legal & professional services
- [Frontier Communications](https://www.cisonews.net/companies/frontier-communications): 1 incident on record, Telecommunications
- [Frontline Education](https://www.cisonews.net/companies/frontline-education): 1 incident on record, Education
- [Halliburton](https://www.cisonews.net/companies/halliburton): 1 incident on record, Energy & utilities
- [Hanesbrands](https://www.cisonews.net/companies/hanesbrands): 1 incident on record, Consumer & retail
- [Harman Fitness](https://www.cisonews.net/companies/harman-fitness): 1 incident on record, Consumer & retail
- [Henry Schein](https://www.cisonews.net/companies/henry-schein): 1 incident on record, Health care
- [Hewlett Packard Enterprise](https://www.cisonews.net/companies/hewlett-packard-enterprise): 1 incident on record, Technology
- [Hibbett Retail](https://www.cisonews.net/companies/hibbett-retail): 1 incident on record, Consumer & retail
- [Hitec Group USA](https://www.cisonews.net/companies/hitec-group-usa): 1 incident on record, Consumer & retail
- [iLearningEngines](https://www.cisonews.net/companies/ilearningengines): 1 incident on record, Technology
- [Inner City Education Foundation](https://www.cisonews.net/companies/inner-city-education-foundation): 1 incident on record, Education
- [iRhythm Holdings](https://www.cisonews.net/companies/irhythm-holdings): 1 incident on record, Life sciences & medical devices
- [Jewett-Cameron Trading](https://www.cisonews.net/companies/jewett-cameron-trading): 1 incident on record, Consumer & retail
- [JM Bullion](https://www.cisonews.net/companies/jm-bullion): 1 incident on record, Consumer & retail
- [John G. Yphantides, a Professional Law Corporation](https://www.cisonews.net/companies/john-g-yphantides-a-professional-law-corporation): 1 incident on record, Legal & professional services
- [Johnson Controls International](https://www.cisonews.net/companies/johnson-controls-international): 1 incident on record, Industrials & manufacturing
- [Kern County Superintendent of Schools](https://www.cisonews.net/companies/kern-county-superintendent-of-schools): 1 incident on record, Education
- [Key Tronic](https://www.cisonews.net/companies/key-tronic): 1 incident on record, Industrials & manufacturing
- [Krispy Kreme](https://www.cisonews.net/companies/krispy-kreme): 1 incident on record, Consumer & retail
- [Lee Enterprises](https://www.cisonews.net/companies/lee-enterprises): 1 incident on record, Media
- [Lexitas](https://www.cisonews.net/companies/lexitas): 1 incident on record, Legal & professional services
- [Lincoln Property Company Commercial LLC](https://www.cisonews.net/companies/lincoln-property-company-commercial-llc): 1 incident on record, Real estate
- [Live Nation Entertainment](https://www.cisonews.net/companies/live-nation-entertainment): 1 incident on record, Hospitality & entertainment
- [loanDepot](https://www.cisonews.net/companies/loandepot): 1 incident on record, Financial services
- [Magna Hospitality Group](https://www.cisonews.net/companies/magna-hospitality-group): 1 incident on record, Hospitality & entertainment
- [MarineMax](https://www.cisonews.net/companies/marinemax): 1 incident on record, Consumer & retail
- [Mercadien, P.C. CPAs](https://www.cisonews.net/companies/mercadien-p-c-cpas): 1 incident on record, Legal & professional services
- [MGM Resorts International](https://www.cisonews.net/companies/mgm-resorts-international): 1 incident on record, Hospitality & entertainment
- [Microchip Technology](https://www.cisonews.net/companies/microchip-technology): 1 incident on record, Technology
- [Microsoft](https://www.cisonews.net/companies/microsoft): 1 incident on record, Technology
- [MKS Instruments](https://www.cisonews.net/companies/mks-instruments): 1 incident on record, Industrials & manufacturing
- [MLD Mortgage (The Money Store)](https://www.cisonews.net/companies/mld-mortgage-the-money-store): 1 incident on record, Financial services
- [Mr. Cooper Group](https://www.cisonews.net/companies/mr-cooper-group): 1 incident on record, Financial services
- [National Presto Industries](https://www.cisonews.net/companies/national-presto-industries): 1 incident on record, Industrials & manufacturing
- [Navient](https://www.cisonews.net/companies/navient): 1 incident on record, Financial services
- [Navigate360](https://www.cisonews.net/companies/navigate360): 1 incident on record, Education
- [Neuro Wellness Spa](https://www.cisonews.net/companies/neuro-wellness-spa): 1 incident on record, Health care
- [Nishiyamato Academy](https://www.cisonews.net/companies/nishiyamato-academy): 1 incident on record, Education
- [Nucor](https://www.cisonews.net/companies/nucor): 1 incident on record, Industrials & manufacturing
- [Nutex Health](https://www.cisonews.net/companies/nutex-health): 1 incident on record, Health care
- [Opportune LLP](https://www.cisonews.net/companies/opportune-llp): 1 incident on record, Legal & professional services
- [OraSure Technologies](https://www.cisonews.net/companies/orasure-technologies): 1 incident on record, Life sciences & medical devices
- [Park Dental Partners](https://www.cisonews.net/companies/park-dental-partners): 1 incident on record, Health care
- [Photon Health](https://www.cisonews.net/companies/photon-health): 1 incident on record, Technology
- [Poppins Payroll](https://www.cisonews.net/companies/poppins-payroll): 1 incident on record, Financial services
- [Progress Software](https://www.cisonews.net/companies/progress-software): 1 incident on record, Technology
- [Prudential Financial](https://www.cisonews.net/companies/prudential-financial): 1 incident on record, Financial services
- [Quatrro Business Support Services](https://www.cisonews.net/companies/quatrro-business-support-services): 1 incident on record, Technology
- [Rackspace Technology](https://www.cisonews.net/companies/rackspace-technology): 1 incident on record, Technology
- [Radiant Logistics](https://www.cisonews.net/companies/radiant-logistics): 1 incident on record, Transportation & logistics
- [River Financial](https://www.cisonews.net/companies/river-financial): 1 incident on record, Financial services
- [Sarku Japan](https://www.cisonews.net/companies/sarku-japan): 1 incident on record, Hospitality & entertainment
- [Sensata Technologies](https://www.cisonews.net/companies/sensata-technologies): 1 incident on record, Industrials & manufacturing
- [Sheppard, Mullin, Richter & Hampton LLP](https://www.cisonews.net/companies/sheppard-mullin-richter-hampton-llp): 1 incident on record, Legal & professional services
- [Sonic Automotive](https://www.cisonews.net/companies/sonic-automotive): 1 incident on record, Consumer & retail
- [SouthState](https://www.cisonews.net/companies/southstate): 1 incident on record, Financial services
- [Sports Warehouse Inc.](https://www.cisonews.net/companies/sports-warehouse): 1 incident on record, Retail & e-commerce
- [Stryker](https://www.cisonews.net/companies/stryker): 1 incident on record, Life sciences & medical devices
- [STS Aviation Group](https://www.cisonews.net/companies/sts-aviation-group): 1 incident on record, Transportation & logistics
- [T-Mobile US](https://www.cisonews.net/companies/t-mobile-us): 1 incident on record, Telecommunications
- [TD Ameritrade, Inc.](https://www.cisonews.net/companies/td-ameritrade): 1 incident on record, Financial services
- [The Oncology Institute](https://www.cisonews.net/companies/the-oncology-institute): 1 incident on record, Health care
- [Toyo Tire Holdings of Americas](https://www.cisonews.net/companies/toyo-tire-holdings-of-americas): 1 incident on record, Industrials & manufacturing
- [Tradier Brokerage](https://www.cisonews.net/companies/tradier-brokerage): 1 incident on record, Financial services
- [Trio-Tech International](https://www.cisonews.net/companies/trio-tech-international): 1 incident on record, Technology
- [Troutman Pepper Locke](https://www.cisonews.net/companies/troutman-pepper-locke): 1 incident on record, Legal & professional services
- [Tulare Joint Union High School District](https://www.cisonews.net/companies/tulare-joint-union-high-school-district): 1 incident on record, Education
- [UFP Technologies](https://www.cisonews.net/companies/ufp-technologies): 1 incident on record, Life sciences & medical devices
- [United Natural Foods](https://www.cisonews.net/companies/united-natural-foods): 1 incident on record, Consumer & retail
- [UnitedHealth Group](https://www.cisonews.net/companies/unitedhealth-group): 1 incident on record, Health care
- [VF Corporation](https://www.cisonews.net/companies/vf-corporation): 1 incident on record, Consumer & retail
- [West Pharmaceutical Services](https://www.cisonews.net/companies/west-pharmaceutical-services): 1 incident on record, Life sciences & medical devices
- [Western Digital](https://www.cisonews.net/companies/western-digital): 1 incident on record, Technology
- [Wytec International](https://www.cisonews.net/companies/wytec-international): 1 incident on record, Telecommunications
- [zHealth](https://www.cisonews.net/companies/zhealth): 1 incident on record, Health care
- [Zoomcar Holdings](https://www.cisonews.net/companies/zoomcar-holdings): 1 incident on record, Transportation & logistics

## Analysis
- [September 2026: 10 disclosed incidents logged, up from 2 in August](https://www.cisonews.net/analysis/incident-disclosures-2026-09): The log holds 10 entries for September 2026, against 2 in August. A look at forms, sectors, and the 76-day median from detection to disclosure.
- [Two years of SEC cyber incident disclosures: what companies actually said](https://www.cisonews.net/analysis/two-years-of-sec-cyber-incident-disclosures): 56 Item 1.05 incidents from December 2023 to September 2026: a median six days from detection to first 8-K, a shift toward health care, and the materiality date.

## Guides
- [Why a CPA or advisory firm sent you a breach letter: Mercadien, Aldrich, Opportune](https://www.cisonews.net/guides/why-a-cpa-or-advisory-firm-sent-you-a-breach-letter-mercadien-aldrich): published 2026-10-30, 3 sources
- [Law firm breach notices: what three firms' social engineering incidents say about client data](https://www.cisonews.net/guides/law-firm-breach-notices-what-three-firms-social-engineering-incidents): published 2026-10-30, 3 sources
- [One Metabase vulnerability, three notices: what two filings show](https://www.cisonews.net/guides/one-metabase-vulnerability-three-notices-what-two-filings-show): published 2026-10-29, 2 sources
- [ETS and Frontline breaches: what California notices say was exposed](https://www.cisonews.net/guides/ets-and-frontline-breaches-what-california-notices-say-was-exposed): published 2026-10-29, 3 sources
- [Why you got a breach letter from a company you never dealt with](https://www.cisonews.net/guides/why-you-got-a-breach-letter-from-a-company-you-never-dealt-with): published 2026-10-28, 3 sources
- [Why did I get a breach letter from a company I've never heard of?](https://www.cisonews.net/guides/why-did-i-get-a-breach-letter-from-a-company-i-ve-never-heard-of): published 2026-10-28, 4 sources
- [How 8-K filings state the number of people affected, and how that number changes](https://www.cisonews.net/guides/how-8-k-filings-state-the-number-of-people-affected-and-how-that-numbe): published 2026-10-27, 4 sources
- [How 8-K filings size an affected population: counts, ranges and 'significant number'](https://www.cisonews.net/guides/how-8-k-filings-size-an-affected-population-counts-ranges-and-signific): published 2026-10-27, 4 sources
- [How 8-K filings count affected people, and when the number arrives](https://www.cisonews.net/guides/how-8-k-filings-count-affected-people-and-when-the-number-arrives): published 2026-10-27, 4 sources
- [Health data in 8-K cyber filings: Cencora, Amgen and AdaptHealth compared](https://www.cisonews.net/guides/health-data-in-8-k-cyber-filings-cencora-amgen-and-adapthealth-compare): published 2026-10-27, 4 sources
- [Reading a California AG breach notice: what the letter and the AG record each tell you](https://www.cisonews.net/guides/reading-a-california-ag-breach-notice-what-the-letter-and-the-ag-recor): published 2026-10-26, 4 sources
- [Ransomware in 8-K filings: how companies describe encryption, data theft and extortion](https://www.cisonews.net/guides/ransomware-in-8-k-filings-how-companies-describe-encryption-data-theft): published 2026-10-25, 4 sources
- [Item 8.01 versus Item 1.05: when a cyber incident moves between them](https://www.cisonews.net/guides/item-8-01-versus-item-1-05-when-a-cyber-incident-moves-between-them): published 2026-10-25, 3 sources
- [Extortion and ransom language in 8-K cyber filings](https://www.cisonews.net/guides/extortion-and-ransom-language-in-8-k-cyber-filings): published 2026-10-25, 4 sources
- [Operational shutdowns in 8-K filings: how long they last and what companies say about cost](https://www.cisonews.net/guides/operational-shutdowns-in-8-k-filings-how-long-they-last-and-what-compa): published 2026-10-24, 4 sources
- [How 8-K/A amendments change an incident disclosure](https://www.cisonews.net/guides/how-8-k-a-amendments-change-an-incident-disclosure): published 2026-10-24, 4 sources
- [Vendor and cloud-tenant breaches in 8-K filings: entry point, data, responsibility](https://www.cisonews.net/guides/vendor-and-cloud-tenant-breaches-in-8-k-filings-entry-point-data-respo): published 2026-10-23, 4 sources
- [Social engineering in SEC 8-K filings: how attackers got in, what they took](https://www.cisonews.net/guides/social-engineering-in-sec-8-k-filings-how-attackers-got-in-what-they-t): published 2026-10-22, 4 sources
- [Data breach notification laws by state: twelve states, read directly](https://www.cisonews.net/guides/data-breach-notification-laws-by-state): published 2026-10-15, 13 sources
- [What is SEC Form 8-K Item 1.05, and what counts as a disclosed cyber incident?](https://www.cisonews.net/guides/what-is-sec-item-105): published 2026-10-08, 2 sources

## Glossary
- [Breach notification law](https://www.cisonews.net/glossary/breach-notification-law): A breach notification law requires notice to affected people, and often a regulator, after personal data is exposed. How US state and federal duties stack.
- [Business email compromise (BEC)](https://www.cisonews.net/glossary/business-email-compromise-bec): Business email compromise is fraud that uses a compromised or spoofed business email account to divert payments. How it shows up in 8-Ks and SEC enforcement.
- [Consent order](https://www.cisonews.net/glossary/consent-order): A consent order is a binding order a company agrees to so it can settle a regulator's charges, usually without admitting liability. How FTC and SEC orders work.
- [Data breach class action](https://www.cisonews.net/glossary/data-breach-class-action): A data breach class action is a lawsuit brought for everyone whose data a breach exposed. How Rule 23, federal jurisdiction and standing shape breach dockets.
- [Double extortion](https://www.cisonews.net/glossary/double-extortion): Double extortion is a ransomware tactic: attackers encrypt systems and steal data, then threaten to leak it unless paid. How it reads in 8-K filings.
- [Form 8-K Item 1.05](https://www.cisonews.net/glossary/form-8-k-item-1-05): Form 8-K Item 1.05 is where a US public company reports a cybersecurity incident it has judged material. How the item reads on EDGAR and in this record.
- [GDPR Article 33 (breach notification to the supervisory authority)](https://www.cisonews.net/glossary/gdpr-article-33): GDPR Article 33 requires a controller to notify its supervisory authority of a personal data breach within 72 hours where feasible. What triggers it, and fines.
- [HIPAA Breach Notification Rule](https://www.cisonews.net/glossary/hipaa-breach-notification-rule): The HIPAA Breach Notification Rule requires covered entities to notify individuals, HHS and sometimes the media after a breach of unsecured health information.
- [Multidistrict litigation (MDL)](https://www.cisonews.net/glossary/multidistrict-litigation-mdl): Multidistrict litigation moves related federal cases to one judge for pretrial work under 28 U.S.C. 1407. How the panel decides and how a breach MDL forms.
- [Ransomware](https://www.cisonews.net/glossary/ransomware): Ransomware is malware that encrypts files and systems so attackers can demand payment. How it reads in SEC filings, HIPAA breach rules and sanctions advisories.
- [SEC enforcement action (cybersecurity)](https://www.cisonews.net/glossary/sec-enforcement-action): An SEC cybersecurity enforcement action is a civil case or administrative order over cyber disclosures or controls. How the cases are brought and how they read.
- [Significant incident (NIS2)](https://www.cisonews.net/glossary/nis2-significant-incident): Under NIS2, a significant incident causes or could cause severe disruption, financial loss or considerable damage. It triggers staged reports to national authorities.

## Incidents
- [Bangkok Bank, State breach notice (California AG), first disclosed 2026-10-29](https://www.cisonews.net/incidents/bangkok-bank-2026-10)
- [Del Monte Foods, State breach notice (California AG), first disclosed 2026-10-29](https://www.cisonews.net/incidents/del-monte-foods-2026-10)
- [Photon Health, State breach notice (California AG), first disclosed 2026-10-28](https://www.cisonews.net/incidents/photon-health-2026-10)
- [Troutman Pepper Locke, State breach notice (California AG), first disclosed 2026-10-28](https://www.cisonews.net/incidents/troutman-pepper-locke-2026-10)
- [Baker & McKenzie, State breach notice (California AG), first disclosed 2026-10-27](https://www.cisonews.net/incidents/baker-mckenzie-2026-10)
- [Directed Trust Company, State breach notice (California AG), first disclosed 2026-10-27](https://www.cisonews.net/incidents/directed-trust-company-2026-10)
- [Hitec Group USA, State breach notice (California AG), first disclosed 2026-10-27](https://www.cisonews.net/incidents/hitec-group-usa-2026-10)
- [Sarku Japan, State breach notice (California AG), first disclosed 2026-10-27](https://www.cisonews.net/incidents/sarku-japan-2026-10)
- [Tradier Brokerage, State breach notice (California AG), first disclosed 2026-10-27](https://www.cisonews.net/incidents/tradier-brokerage-2026-10)
- [Frontline Education, State breach notice (California AG), first disclosed 2026-10-26](https://www.cisonews.net/incidents/frontline-education-2026-10)
- [Apollo Management Holdings, State breach notice (California AG), first disclosed 2026-10-23](https://www.cisonews.net/incidents/apollo-management-holdings-2026-10)
- [Navigate360, State breach notice (California AG), first disclosed 2026-10-23](https://www.cisonews.net/incidents/navigate360-2026-10)
- [BASS Medical Group, State breach notice (California AG), first disclosed 2026-10-22](https://www.cisonews.net/incidents/bass-medical-group-2026-10)
- [Lexitas, State breach notice (California AG), first disclosed 2026-10-22](https://www.cisonews.net/incidents/lexitas-2026-10)
- [Opportune LLP, State breach notice (California AG), first disclosed 2026-10-22](https://www.cisonews.net/incidents/opportune-llp-2026-10)
- [Dorsata, State breach notice (California AG), first disclosed 2026-10-21](https://www.cisonews.net/incidents/dorsata-2026-10)
- [Toyo Tire Holdings of Americas, State breach notice (California AG), first disclosed 2026-10-20](https://www.cisonews.net/incidents/toyo-tire-holdings-of-americas-2026-10)
- [Alma Family Services, State breach notice (California AG), first disclosed 2026-10-19](https://www.cisonews.net/incidents/alma-family-services-2026-10)
- [Citizens Bank, State breach notice (California AG), first disclosed 2026-10-19](https://www.cisonews.net/incidents/citizens-bank-2026-10)
- [STS Aviation Group, State breach notice (California AG), first disclosed 2026-10-19](https://www.cisonews.net/incidents/sts-aviation-group-2026-10)
- [California Department of Education, State breach notice (California AG), first disclosed 2026-10-16](https://www.cisonews.net/incidents/california-department-of-education-2026-10)
- [Covered California, State breach notice (California AG), first disclosed 2026-10-16](https://www.cisonews.net/incidents/covered-california-2026-10)
- [Frazer LLP, State breach notice (California AG), first disclosed 2026-10-16](https://www.cisonews.net/incidents/frazer-llp-2026-10)
- [Inner City Education Foundation, State breach notice (California AG), first disclosed 2026-10-16](https://www.cisonews.net/incidents/inner-city-education-foundation-2026-10)
- [John G. Yphantides, a Professional Law Corporation, State breach notice (California AG), first disclosed 2026-10-16](https://www.cisonews.net/incidents/john-g-yphantides-a-professional-law-corporation-2026-10)
- [Neuro Wellness Spa, State breach notice (California AG), first disclosed 2026-10-16](https://www.cisonews.net/incidents/neuro-wellness-spa-2026-10)
- [City of Foster City, State breach notice (California AG), first disclosed 2026-10-15](https://www.cisonews.net/incidents/city-of-foster-city-2026-10)
- [MLD Mortgage (The Money Store), State breach notice (California AG), first disclosed 2026-10-15](https://www.cisonews.net/incidents/mld-mortgage-the-money-store-2026-10)
- [Kern County Superintendent of Schools, State breach notice (California AG), first disclosed 2026-10-14](https://www.cisonews.net/incidents/kern-county-superintendent-of-schools-2026-10)
- [American Board of Preventive Medicine, State breach notice (California AG), first disclosed 2026-10-13](https://www.cisonews.net/incidents/american-board-of-preventive-medicine-2026-10)
- [JM Bullion, State breach notice (California AG), first disclosed 2026-10-13](https://www.cisonews.net/incidents/jm-bullion-2026-10)
- [Magna Hospitality Group, State breach notice (California AG), first disclosed 2026-10-13](https://www.cisonews.net/incidents/magna-hospitality-group-2026-10)
- [Tulare Joint Union High School District, State breach notice (California AG), first disclosed 2026-10-13](https://www.cisonews.net/incidents/tulare-joint-union-high-school-district-2026-10)
- [Mercadien, P.C. CPAs, State breach notice (California AG), first disclosed 2026-10-12](https://www.cisonews.net/incidents/mercadien-p-c-cpas-2026-10)
- [Blueberry Pediatrics, State breach notice (California AG), first disclosed 2026-10-10](https://www.cisonews.net/incidents/blueberry-pediatrics-2026-10)
- [Alisal Union School District, State breach notice (California AG), first disclosed 2026-10-07](https://www.cisonews.net/incidents/alisal-union-school-district-2026-10)
- [Harman Fitness, State breach notice (California AG), first disclosed 2026-10-06](https://www.cisonews.net/incidents/harman-fitness-2026-10)
- [Advantest America, State breach notice (California AG), first disclosed 2026-10-05](https://www.cisonews.net/incidents/advantest-america-2026-10)
- [Fragomen, State breach notice (California AG), first disclosed 2026-10-02](https://www.cisonews.net/incidents/fragomen-2026-10)
- [Sheppard, Mullin, Richter & Hampton LLP, State breach notice (California AG), first disclosed 2026-10-02](https://www.cisonews.net/incidents/sheppard-mullin-richter-hampton-llp-2026-10)
- [Aldrich Services LLP, State breach notice (California AG), first disclosed 2026-10-01](https://www.cisonews.net/incidents/aldrich-services-llp-2026-10)
- [Lincoln Property Company Commercial LLC, State breach notice (California AG), first disclosed 2026-10-01](https://www.cisonews.net/incidents/lincoln-property-company-commercial-llc-2026-10)
- [American Family Connect Insurance Company, State breach notice (California AG), first disclosed 2026-09-30](https://www.cisonews.net/incidents/american-family-connect-insurance-company-2026-09)
- [DriveWealth, State breach notice (California AG), first disclosed 2026-09-30](https://www.cisonews.net/incidents/drivewealth-2026-09)
- [Nishiyamato Academy, State breach notice (California AG), first disclosed 2026-09-30](https://www.cisonews.net/incidents/nishiyamato-academy-2026-09)
- [City of McMinnville, State breach notice (California AG), first disclosed 2026-09-29](https://www.cisonews.net/incidents/city-of-mcminnville-2026-09)
- [Poppins Payroll, State breach notice (California AG), first disclosed 2026-09-29](https://www.cisonews.net/incidents/poppins-payroll-2026-09)
- [Astrana Health, 8-K Item 1.05, first disclosed 2026-09-23](https://www.cisonews.net/incidents/astrana-health-2026-09)
- [zHealth, State breach notice (Washington AG), first disclosed 2026-09-11](https://www.cisonews.net/incidents/zhealth-2026-09)
- [Quatrro Business Support Services, State breach notice (Washington AG), first disclosed 2026-09-09](https://www.cisonews.net/incidents/quatrro-business-support-services-2026-09)
- [Hibbett Retail, State breach notice (Washington AG), first disclosed 2026-09-08](https://www.cisonews.net/incidents/hibbett-retail-2026-09)
- [Park Dental Partners, 8-K Item 1.05, first disclosed 2026-09-01](https://www.cisonews.net/incidents/park-dental-partners-2026-09)
- [Boston Scientific, 8-K Item 8.01; Item 1.05, first disclosed 2026-08-26](https://www.cisonews.net/incidents/boston-scientific-2026-08)
- [Nutex Health, 8-K Item 8.01; Item 1.05, first disclosed 2026-08-24](https://www.cisonews.net/incidents/nutex-health-2026-08)
- [Amgen, 8-K Item 1.05, first disclosed 2026-07-31](https://www.cisonews.net/incidents/amgen-2026-07)
- [AdaptHealth, 8-K Item 1.05, first disclosed 2026-07-02](https://www.cisonews.net/incidents/adapthealth-2026-07)
- [Navient, 8-K Item 1.05, first disclosed 2026-07-02](https://www.cisonews.net/incidents/navient-2026-07)
- [River Financial, 8-K Item 1.05, first disclosed 2026-06-25](https://www.cisonews.net/incidents/river-financial-2026-06)
- [8x8, 8-K Item 1.05, first disclosed 2026-06-23](https://www.cisonews.net/incidents/8x8-2026-06)
- [iRhythm Holdings, 8-K Item 1.05, first disclosed 2026-06-15](https://www.cisonews.net/incidents/irhythm-holdings-2026-06)
- [West Pharmaceutical Services, 8-K Item 1.05, first disclosed 2026-05-11](https://www.cisonews.net/incidents/west-pharmaceutical-services-2026-05)
- [Bitcoin Depot, 8-K Item 1.05, first disclosed 2026-04-08](https://www.cisonews.net/incidents/bitcoin-depot-2026-04)
- [CareCloud, 8-K Item 1.05, first disclosed 2026-03-27](https://www.cisonews.net/incidents/carecloud-2026-03)
- [Trio-Tech International, 8-K Item 1.05, first disclosed 2026-03-20](https://www.cisonews.net/incidents/trio-tech-international-2026-03)
- [Stryker, 8-K Item 8.01; 8-K/A Item 1.05, first disclosed 2026-03-11](https://www.cisonews.net/incidents/stryker-2026-03)
- [UFP Technologies, 8-K Item 1.05, first disclosed 2026-02-24](https://www.cisonews.net/incidents/ufp-technologies-2026-02)
- [Coupang, 8-K Item 1.05, first disclosed 2025-12-16](https://www.cisonews.net/incidents/coupang-2025-12)
- [The Oncology Institute, 8-K Item 7.01; Item 1.05, first disclosed 2025-11-06](https://www.cisonews.net/incidents/the-oncology-institute-2025-11)
- [BayFirst Financial, 8-K Item 1.05, first disclosed 2025-10-30](https://www.cisonews.net/incidents/bayfirst-financial-2025-10)
- [Jewett-Cameron Trading, 8-K Item 1.05, first disclosed 2025-10-21](https://www.cisonews.net/incidents/jewett-cameron-trading-2025-10)
- [F5, 8-K Item 1.05, first disclosed 2025-10-15](https://www.cisonews.net/incidents/f5-2025-10)
- [Wytec International, 8-K Item 1.05, first disclosed 2025-08-29](https://www.cisonews.net/incidents/wytec-international-2025-08)
- [Data I/O, 8-K Item 1.05, first disclosed 2025-08-21](https://www.cisonews.net/incidents/data-i-o-2025-08)
- [Zoomcar Holdings, 8-K Item 1.05, first disclosed 2025-06-13](https://www.cisonews.net/incidents/zoomcar-holdings-2025-06)
- [United Natural Foods, 8-K Item 8.01; Item 1.05, first disclosed 2025-06-09](https://www.cisonews.net/incidents/united-natural-foods-2025-06)
- [Coinbase, 8-K Item 1.05, first disclosed 2025-05-15](https://www.cisonews.net/incidents/coinbase-2025-05)
- [Nucor, 8-K Item 1.05, first disclosed 2025-05-14](https://www.cisonews.net/incidents/nucor-2025-05)
- [Conduent, 8-K Item 1.05, first disclosed 2025-04-14](https://www.cisonews.net/incidents/conduent-2025-04)
- [Sensata Technologies, 8-K Item 1.05, first disclosed 2025-04-09](https://www.cisonews.net/incidents/sensata-technologies-2025-04)
- [National Presto Industries, 8-K Item 1.05, first disclosed 2025-03-06](https://www.cisonews.net/incidents/national-presto-industries-2025-03)
- [Lee Enterprises, 8-K Item 1.05, first disclosed 2025-02-18](https://www.cisonews.net/incidents/lee-enterprises-2025-02)
- [Krispy Kreme, 8-K Item 1.05, first disclosed 2024-12-11](https://www.cisonews.net/incidents/krispy-kreme-2024-12)
- [ENGlobal, 8-K Item 1.05, first disclosed 2024-12-02](https://www.cisonews.net/incidents/englobal-2024-12)
- [iLearningEngines, 8-K Item 1.05, first disclosed 2024-11-18](https://www.cisonews.net/incidents/ilearningengines-2024-11)
- [American Water Works, 8-K Item 8.01, first disclosed 2024-10-07](https://www.cisonews.net/incidents/american-water-works-2024-10)
- [Halliburton, 8-K Item 8.01; Item 1.05, first disclosed 2024-08-23](https://www.cisonews.net/incidents/halliburton-2024-08)
- [Microchip Technology, 8-K Item 8.01, first disclosed 2024-08-20](https://www.cisonews.net/incidents/microchip-technology-2024-08)
- [Bassett Furniture Industries, 8-K Item 1.05, first disclosed 2024-07-15](https://www.cisonews.net/incidents/bassett-furniture-industries-2024-07)
- [AT&T, 8-K Item 1.05, first disclosed 2024-07-12](https://www.cisonews.net/incidents/at-t-2024-07)
- [Crimson Wine Group, 8-K Item 8.01; Item 1.05, first disclosed 2024-07-05](https://www.cisonews.net/incidents/crimson-wine-group-2024-07)
- [Sonic Automotive, 8-K Item 8.01; Item 1.05, first disclosed 2024-06-21](https://www.cisonews.net/incidents/sonic-automotive-2024-06)
- [Live Nation Entertainment, 8-K Item 8.01, first disclosed 2024-05-31](https://www.cisonews.net/incidents/live-nation-entertainment-2024-05)
- [Key Tronic, 8-K Item 1.05, first disclosed 2024-05-10](https://www.cisonews.net/incidents/key-tronic-2024-05)
- [Brandywine Realty Trust, 8-K Item 1.05, first disclosed 2024-05-07](https://www.cisonews.net/incidents/brandywine-realty-trust-2024-05)
- [Dropbox, 8-K Item 1.05, first disclosed 2024-05-01](https://www.cisonews.net/incidents/dropbox-2024-05)
- [Frontier Communications, 8-K Item 1.05, first disclosed 2024-04-18](https://www.cisonews.net/incidents/frontier-communications-2024-04)
- [OraSure Technologies, 8-K Item 1.05, first disclosed 2024-04-12](https://www.cisonews.net/incidents/orasure-technologies-2024-04)
- [B. Riley Financial, 8-K Item 1.05, first disclosed 2024-04-08](https://www.cisonews.net/incidents/b-riley-financial-2024-04)
- [Radiant Logistics, 8-K Item 1.05, first disclosed 2024-03-20](https://www.cisonews.net/incidents/radiant-logistics-2024-03)
- [MarineMax, 8-K Item 1.05, first disclosed 2024-03-12](https://www.cisonews.net/incidents/marinemax-2024-03)
- [Federal Home Loan Bank of New York, 8-K Item 1.05, first disclosed 2024-03-01](https://www.cisonews.net/incidents/federal-home-loan-bank-of-new-york-2024-03)
- [Cencora, 8-K Item 1.05, first disclosed 2024-02-27](https://www.cisonews.net/incidents/cencora-2024-02)
- [UnitedHealth Group, 8-K Item 1.05, first disclosed 2024-02-22](https://www.cisonews.net/incidents/unitedhealth-group-2024-02)
- [Prudential Financial, 8-K Item 1.05, first disclosed 2024-02-13](https://www.cisonews.net/incidents/prudential-financial-2024-02)
- [SouthState, 8-K Item 1.05, first disclosed 2024-02-09](https://www.cisonews.net/incidents/southstate-2024-02)
- [City of Jacksonville Beach, Florida, State breach notice (Maine AG), first disclosed 2024-01-29](https://www.cisonews.net/incidents/jacksonville-beach-2024-01)
- [Hewlett Packard Enterprise, 8-K Item 1.05, first disclosed 2024-01-24](https://www.cisonews.net/incidents/hewlett-packard-enterprise-2024-01)
- [Microsoft, 8-K Item 1.05, first disclosed 2024-01-19](https://www.cisonews.net/incidents/microsoft-2024-01)
- [loanDepot, 8-K Item 8.01, first disclosed 2024-01-08](https://www.cisonews.net/incidents/loandepot-2024-01)
- [First American Financial, 8-K Item 1.05, first disclosed 2023-12-22](https://www.cisonews.net/incidents/first-american-financial-2023-12)
- [VF Corporation, 8-K Item 1.05, first disclosed 2023-12-18](https://www.cisonews.net/incidents/vf-corporation-2023-12)
- [Fidelity National Financial, 8-K Item 8.01, first disclosed 2023-11-21](https://www.cisonews.net/incidents/fidelity-national-financial-2023-11)
- [Mr. Cooper Group, 8-K Item 8.01, first disclosed 2023-11-02](https://www.cisonews.net/incidents/mr-cooper-group-2023-11)
- [Henry Schein, 8-K Item 7.01, first disclosed 2023-10-16](https://www.cisonews.net/incidents/henry-schein-2023-10)
- [23andMe Holding, 8-K Item 7.01, first disclosed 2023-10-10](https://www.cisonews.net/incidents/23andme-holding-2023-10)
- [Johnson Controls International, 8-K Item 8.01, first disclosed 2023-09-27](https://www.cisonews.net/incidents/johnson-controls-international-2023-09)
- [Caesars Entertainment, 8-K Item 8.01, first disclosed 2023-09-14](https://www.cisonews.net/incidents/caesars-entertainment-2023-09)
- [MGM Resorts International, 8-K Item 7.01, first disclosed 2023-09-13](https://www.cisonews.net/incidents/mgm-resorts-international-2023-09)
- [Clorox, 8-K Item 8.01, first disclosed 2023-08-14](https://www.cisonews.net/incidents/clorox-2023-08)
- [Estée Lauder Companies, 8-K Item 8.01, first disclosed 2023-07-19](https://www.cisonews.net/incidents/estee-lauder-companies-2023-07)
- [Progress Software, 8-K Item 8.01, first disclosed 2023-06-05](https://www.cisonews.net/incidents/progress-software-2023-06)
- [TD Ameritrade, Inc., State breach notice (Maryland AG), first disclosed 2023-05-30](https://www.cisonews.net/incidents/td-ameritrade-incident-its-litigation)
- [Sports Warehouse Inc., State attorney general settlement (New York), first disclosed 2023-05-25](https://www.cisonews.net/incidents/running-warehouse-incident-its-litigation)
- [Western Digital, 8-K Item 8.01, first disclosed 2023-04-03](https://www.cisonews.net/incidents/western-digital-2023-04)
- [DISH Network, 8-K Item 8.01, first disclosed 2023-02-28](https://www.cisonews.net/incidents/dish-network-2023-02)
- [MKS Instruments, 8-K Item 8.01, first disclosed 2023-02-06](https://www.cisonews.net/incidents/mks-instruments-2023-02)
- [T-Mobile US, 8-K Item 8.01, first disclosed 2023-01-19](https://www.cisonews.net/incidents/t-mobile-us-2023-01)
- [Rackspace Technology, 8-K Item 7.01, first disclosed 2022-12-06](https://www.cisonews.net/incidents/rackspace-technology-2022-12)
- [Hanesbrands, 8-K Item 8.01, first disclosed 2022-05-31](https://www.cisonews.net/incidents/hanesbrands-2022-05)
- [Expeditors International of Washington, 8-K Item 8.01, first disclosed 2022-02-22](https://www.cisonews.net/incidents/expeditors-international-of-washington-2022-02)