Cybersecurity incidents
21 filings were classified as cybersecurity incident in the last 90 days. The most recent was Quest Diagnostics Inc. (DGX) on Oct 22, 2026.
Latest filings
| Filed | Issuer | Event | Classified excerpt | Source |
|---|---|---|---|---|
| DGXQuest Diagnostics Inc. | Cybersecurity incident | “On October 21, 2026, Quest Diagnostics Incorporated learned of unauthorized access to its Quanum LSM system, which certain clients use to place test orders, receive and look up results. While the full scope of unauthorized access remains under investigation, at this time the Company believes that an unauthorized party accessed certain patient records.” | 8-K ↗ | |
| CNDTConduent Incorporated | Cybersecurity incident | “The ... consolidated class action lawsuit ... arises from the Company's previously disclosed January 2025 cybersecurity incident (the "cyber incident").” | 8-K ↗ | |
| PARKPark Dental Partners, Inc. | Cybersecurity incident | “On August 28, 2026, Park Dental Partners, Inc. identified unauthorized access to its computer network. The investigation has determined that data was subject to unauthorized acquisition as a result of the incident, including impacted patients' protected health information.” | 8-K ↗ | |
| AMEH | Cybersecurity incident | “The Company continues to assess whether, and to what extent, patient, employee, credentialed provider, confidential business and financial information, intellectual property, or other information may have been accessed, acquired, or exfiltrated and continues to evaluate the potential impact of the unauthorized activity.” | 8-K ↗ | |
| LIFEEthos Technologies Inc. | Cybersecurity incident | “Ethos addressed recent commentary concerning a service disruption affecting systems operated by its carrier partner, TruStage Financial Group, Inc. ("TruStage") that occurred in July 2026. No Ethos systems were penetrated, and no data was exfiltrated from the Company's systems due to the TruStage incident.” | 8-K ↗ | |
| No ticker CIK 0001042773 | Cybersecurity incident | “The Company became aware of an online post by a third party claiming to have obtained a data set containing certain of the Company's customer information. ... the Company has determined that an unauthorized third party obtained personal information relating to a portion of the Company's customers through one of the Company's external facing systems (the “Incident”).” | 8-K ↗ | |
| NUTXNutex Health Inc. | Cybersecurity incident | “On September 10, 2026, we issued a press release containing an update on a previously announced cyber security event.” | 8-K ↗ | |
| CNDTConduent Incorporated | Cybersecurity incident | “...individuals who allegedly received a notification letter that their personal information may have been affected by our previously disclosed cybersecurity incident that took place in January 2025.” | 8-K ↗ | |
| BSXBoston Scientific Corp. | Cybersecurity incident | “The incident involved unauthorized activity on certain of the Company's systems that resulted in a network outage affecting access to certain operating systems and business applications, which impacted the Company's ability to manufacture as well as process and ship customer orders.” | 8-K ↗ | |
| No ticker CIK 0001124804 | Cybersecurity incident | “Veradigm Inc. recently learned that one of its third-party vendors experienced a cybersecurity incident that impacted certain data associated with a small number of the Company's customers. An unauthorized party obtained credentials from the vendor's environment to a Company application programming interface and used these credentials to download copies of certain personal data of patients, including, in some instances, Social Security numbers; no clinical or medical data was involved.” | 8-K ↗ | |
| PARKPark Dental Partners, Inc. | Cybersecurity incident | “The Company is in the process of estimating any financial, legal, operational, and reputational impact of the incident. As of the date of this report, an estimate is not reasonably possible, however, the Company has not identified any material impact on its financial condition, results of operations, or business operations.” | 8-K ↗ | |
| NVCRNovoCure Limited | Cybersecurity incident | “In mid-August 2026, NovoCure Limited (the "Company," "we," or "us") through a subsidiary, became aware of unauthorized access to some of its information systems. Upon detecting the unauthorized access, the Company activated its cybersecurity response plan, implemented containment measures, and initiated an internal investigation of the event.” | 8-K ↗ | |
| NUTXNutex Health Inc. | Cybersecurity incident | “Based on the current status of the Company's ongoing investigation, the Company believes that certain information maintained on the Company's servers was accessed and exfiltrated by an unauthorized third party, including patient and employee, credentialed provider, business and financial information that is private and/or confidential. The third party has threatened to post such information externally.” | 8-K ↗ | |
| MCKMcKesson Corporation | Cybersecurity incident | “On August 25, 2026, McKesson Corporation discovered a cybersecurity incident affecting its information systems. An investigation of the incident is in its early stages.” | 8-K ↗ | |
| BSXBoston Scientific Corp. | Cybersecurity incident | “On August 25, 2026, Boston Scientific Corporation (the "Company") identified a cybersecurity incident affecting certain of its information technology systems that has resulted in a global disruption to the Company's operations. Upon detection, the Company activated its incident response protocols and began an investigation with the assistance of third-party cybersecurity experts to assess and to contain the threat.” | 8-K ↗ | |
| NUTXNutex Health Inc. | Cybersecurity incident | “Nutex Health Inc. (the "Company") recently learned of unauthorized activity involving data stored on its computer network. Based on preliminary findings from the Company's ongoing investigation, the Company believes that certain information maintained on the Company's servers was accessed and exfiltrated by an unauthorized third party, including some information that may be private and/or confidential.” | 8-K ↗ | |
| LEVILevi Strauss & Co. | Cybersecurity incident | “Levi Strauss & Co. (the "Company") recently detected that the Company experienced a cybersecurity incident in which an unauthorized third party gained access to Company files through social engineering techniques that enabled unauthorized access to three employees' Company-issued computers. Based on preliminary findings from the Company's investigation, the Company believes that certain corporate information was accessed and exfiltrated as a result of the incident.” | 8-K ↗ | |
| No ticker CIK 0000050292 | Cybersecurity incident | “On August 4, 2026, IEH Corporation discovered that it sustained a cybersecurity incident whereby a threat actor using an alias gained unauthorized access to the Microsoft 365 mailbox of an employee of the Company. The compromise originated from a phishing attack in which a malicious actor impersonated a prospective business contact and delivered a hyperlink disguised as a Microsoft document-sharing link. The threat actor gained access to mailbox contents, including email messages, attachments, customer communications, purchase orders, engineering-related documentation, and potentially export-controlled technical information.” | 8-K ↗ | |
| AMGNAmgen Inc | Cybersecurity incident | “In July 2026, Amgen Inc. (the "Company") identified unauthorized activity involving data stored in cloud environments hosted by third-party cloud service providers. The Company has since learned that some of its data, including proprietary data, patient protected health information, and other information, has been exfiltrated from these cloud environments. On July 29, 2026, in connection with our evaluation of the volume of the files that appear to have been impacted and the potential that the types of information in such files could be sensitive, the Company determined that this incident is material.” | 8-K ↗ | |
| ADIAnalog Devices, Inc. | Cybersecurity incident | “On June 23, 2026, Analog Devices, Inc. (the "Company") identified unauthorized access to certain Company systems. Following detection of the unauthorized access, the Company immediately activated its incident response protocols and engaged external cybersecurity experts to assist with containment and investigation activities. The Company's investigation has found that certain files were exfiltrated from the affected systems.” | 8-K ↗ | |
| HSTMHealthStream Inc | Cybersecurity incident | “HealthStream, Inc. (the "Company") recently detected that the Company had experienced a cybersecurity incident in which an unauthorized third party gained access to a limited portion of files on the Company's corporate file server. Based on the Company's investigation to date, the Company believes that certain information of the Company's employees, as well as billing related information of certain customers and vendors, and corporate and legal information of the Company, was accessed and/or exfiltrated from the Company's corporate file servers as the result of the incident.” | 8-K ↗ |
GET /stocks/filings/8-K/vX/disclosures?tertiary_category=cybersecurity_incident&filing_date.gte=2026-07-28&sort=filing_date.desc&limit=1000Each category is a separate request; rows are merged and de-duplicated by filing.
{
"status": "OK",
"results": [
{
"tickers": [
"DGX"
],
"cik": "0001022079",
"accession_number": "0000947871-26-000941",
"filing_date": "2026-10-22",
"primary_category": "risk_events",
"secondary_category": "security_and_safety",
"tertiary_category": "cybersecurity_incident",
"supporting_text": "On October 21, 2026, Quest Diagnostics Incorporated learned of unauthorized access to its Quanum LSM system, which certain clients use to place test orders, receive and look up results. While the full scope of unauthorized access remains under investigation, at this time the Company believes that an unauthorized party accessed certain patient records.",
"filing_url": "https://www.sec.gov/Archives/edgar/data/1022079/0000947871-26-000941.txt"
},
{
"tickers": [
"CNDT"
],
"cik": "0001677703",
"accession_number": "0001677703-26-000138",
"filing_date": "2026-10-16",
"primary_category": "risk_events",
"secondary_category": "security_and_safety",
"tertiary_category": "cybersecurity_incident",
"supporting_text": "The ... consolidated class action lawsuit ... arises from the Company's previously disclosed January 2025 cybersecurity incident (the \"cyber incident\").",
"filing_url": "https://www.sec.gov/Archives/edgar/data/1677703/0001677703-26-000138.txt"
}
]
}
// trimmed to 2 resultsWhat these filings mean
- Cybersecurity incident
- Material cybersecurity incident, data breach, ransomware, or information security event affecting systems or data.
How this page works
- Every 8-K disclosure from the last 90 days is classified, and those in the categories above are listed here.
- One row per filing: a filing in several categories appears once.
- Labels are assigned automatically from the filing text, so always check the linked 8-K.
Other 8-K events
- Listing deficiency & delisting notices
- CEO departures
- CFO & executive departures
- Stock splits
- Merger agreements & completions
- Share buyback programs
- Dividend declarations
- Earnings releases
- Guidance updates
- Clinical trial results
- Regulatory decisions
- Bankruptcy filings
- Financial restatements
- Auditor changes
- Layoffs & restructuring
Frequently asked questions
What is an SEC Form 8-K?
An 8-K is how a public company tells investors about a major event between its quarterly reports. Companies usually have four business days to file one.
How recent is this cybersecurity incidents list?
It covers 8-K filings from the last 90 days, classified as cybersecurity incidents and sorted newest first. The Massive 8-K disclosures API has the full, continuously updated record.
Build with AI
Track these filings with your agent
This page is built from the Massive 8-K disclosures endpoint. Ask an agent to watch for new filings:
Using the Massive API (massive.com/docs/llms.txt), check the 8-K disclosures endpoint once a day for new filings classified as cybersecurity incidents (query tertiary_category=cybersecurity_incident) and tell me about each new one, with the company, filing date, excerpt and SEC link.
Live market data from the Massive API and MCP.Get a free API key
Nothing on this page is investment advice. All data and content is provided for informational purposes under our Terms of Service.