River Financial Corporation

River Financial Corporation filed a supplemental 8-K (Item 1.05) regarding a cybersecurity incident. The company determined an unauthorized threat actor accessed its network and exfiltrated data. The full scope and nature of the information (including PII) are undetermined. River attempted to suppress data by obtaining representations from the threat actor that it deleted the data. The incident is ongoing and materiality is not yet determined.

River Financial Corporation filed a supplemental 8-K regarding a cybersecurity incident involving unauthorized access by a cybercriminal threat actor to its network environment, including River Bank & Trust. The filing references multiple class action lawsuits filed in July 2026. The scope and impact are undetermined, and it is unconfirmed whether the incident is material. The primary concern is potential access to customer PII.

River Financial Corporation filed a supplemental 8-K regarding a cybersecurity incident. An unauthorized threat actor accessed portions of its network and removed certain data. The nature and scope of the information, including PII, is still being determined. No fraud has been reported. Two class action lawsuits have been filed. The full impact has not yet been determined.

River Financial Corporation filed a supplemental 8-K regarding a cybersecurity incident. The company states it has reason to believe certain data was potentially impacted but has not yet confirmed the nature, scope, or whether PII was affected. No evidence of account impact exists. The full impact is undetermined, and the company plans to file an amendment within four business days after determining the information is available.

River Financial Corporation (including River Bank & Trust) filed an 8-K disclosing a material cybersecurity incident. On or about June 16, 2026, an unauthorized threat actor gained access to the network, deploying ransomware across portions of the server environment. River identified the activity on June 19, 2026, and took containment measures, including disabling accounts and taking systems offline. The investigation into the scope and whether PII was exfiltrated is ongoing.