River Financial Reports Cybersecurity Incident; Four Class Actions Filed

What Happened River Financial Corporation (including River Bank & Trust) filed a Form 8-K on July 17, 2026 reporting an unauthorized threat actor gained access to its network environment. The filing notes four class-action lawsuits have been filed alleging the cybercriminals accessed customers’ personally identifiable information — two were referenced in River’s July 10, 2026 8-K, a third was filed July 10, 2026, and a fourth was filed July 16, 2026. As of July 17, River says it has not yet determined the full nature, scope or impact of the incident and has not confirmed whether the incident is reasonably likely to have a material impact on its business or financial condition.

Key Details

• Incident reported in current report on Form 8-K filed July 17, 2026 (originally referenced in a July 10, 2026 8-K).
• Four class-action lawsuits now pending alleging access to customers’ personally identifiable information.
• River has not yet determined the full scope, impact, or whether the incident will be material to results.
• River will file an amendment to the 8-K within four business days after it determines any of the foregoing information.

Why It Matters This filing creates legal and operational uncertainty for investors: there are active lawsuits alleging customer data exposure, but River has not quantified the breach, potential regulatory consequences, remediation costs, or any effect on financial results. Investors should monitor River’s upcoming amendment for updates on the breach scope, possible financial impact, and litigation developments before making investment decisions.