River Financial Corp 8-K/A

What Happened River Financial Corporation (RVRF) filed a Form 8-K on July 10, 2026 (Item 1.05) reporting that its investigation has determined an unauthorized threat actor accessed portions of its network and removed certain data from its environment. River is still working to determine the nature and scope of the information involved, including whether any personally identifiable information (PII) was affected. To date, River says it is not aware of any reports of fraud directly resulting from the incident. After the public disclosure, two class action lawsuits were filed against the company; River is evaluating the complaints and intends to respond in the ordinary course.

Key Details

• Filing date: July 10, 2026 (Form 8-K, Item 1.05 — Material Cybersecurity Incidents).
• Unauthorized access confirmed and certain data removed from River’s environment; scope and types of data remain undetermined.
• River reports no known fraud reports to date tied directly to the incident.
• Two class action lawsuits have been filed following public disclosure; additional claims or litigation may follow.
• River has not yet determined whether the incident is reasonably likely to materially impact its business or financial condition and will amend the Form 8-K within four business days after that determination.

Why It Matters This is a developing cybersecurity and legal issue that could affect River’s operations, costs, and reputation depending on the scope of data removed and any resulting liabilities. For investors, the key facts are that the breach is confirmed, the company has not yet identified material financial impact, and litigation is already underway—so updates and the company’s forthcoming amendment are important to monitor.