River Financial Corporation (including River Bank & Trust) filed an 8-K disclosing a material cybersecurity incident. On or about June 16, 2026, an unauthorized threat actor gained access to the network, deploying ransomware across portions of the server environment. River identified the activity on June 19, 2026, and took containment measures, including disabling accounts and taking systems offline. The investigation into the scope and whether PII was exfiltrated is ongoing.