FEDERALHackingGovernmentGovernmentStolen CredentialsData ExfiltratedDelayed DiscoveryPIIOtherLowActive

V2X, Inc.

bd_55a4d48de0835c24 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Feb 23, 2026

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for V2X, Inc. →

The Company disclosed a 2025 cybersecurity incident in its 10-K Item 1C. An unauthorized third party accessed internal IT systems and exfiltrated data. The investigation is ongoing, but the Company believes there is no material financial impact. Response included external experts and law enforcement cooperation.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 23, 2026

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.No incident reportedView incident

Name: V2X, Inc.
norm: v2x
SEC CIK: 1601548

Name: V2X, Inc.
norm: v2x
SEC CIK: 1601548
Industry: Governmentllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIOther
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: cooperating with federal law enforcement authorities
Initial access: valid_credentials

During the incident: Took steps to respond to the incident with the assistance of leading external cybersecurity experts
Cooperating with federal law enforcement authorities
Changes made: Maintains a comprehensive cybersecurity insurance policy
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1601548/000160154826000015/vec-20251231.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Feb 23, 2026
Raw hash: e494c4c49fab4ba7dfccfc4183792b6fa9b6631b3236534edf9dedbac5a6fc06

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html1.8 MB

Download View at source

Reporting entityV2X, Inc.

Victim entityV2X, Inc.

IncidentUnauthorized Access

Stated responseTook steps to respond to the incident with the assistance of leading external cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing