River Financial Corp Reports Cybersecurity Incident Update

What Happened
River Financial Corporation (RVRF) filed a Current Report on Form 8-K on July 30, 2026 (Item 1.05) to report an ongoing cybersecurity incident. The company says an unauthorized threat actor accessed portions of its network and removed certain data from its environment. River is investigating the nature and scope of the information involved, including whether any personally identifiable information (PII) was affected. As part of its response, River attempted to suppress the affected data and obtained representations from the threat actor that the data in its possession was deleted. The company has not yet determined the full impact and has not confirmed whether the incident is reasonably likely to materially affect its business or financial condition.

Key Details

• Filing date: July 30, 2026 (Current Report on Form 8-K, Item 1.05).
• Incident: Unauthorized access to portions of River’s network and removal of certain data.
• Data scope: Under investigation; River has not confirmed whether any PII was affected.
• Response/action: Company attempted to suppress the data and obtained representations from the threat actor that the data was deleted.
• Next step: River will file an amendment to this 8-K within four business days after it determines additional information is available.

Why It Matters
This update is material because it notifies investors that River experienced unauthorized network access and data removal and is still assessing the scope and impact. Until the investigation concludes, investors do not have clarity on whether customer data or PII were exposed or whether there will be regulatory, legal, operational, or financial consequences. Monitor River’s upcoming amended 8-K and other disclosures for concrete findings, remediation steps, and any potential impact on results or regulatory obligations.