River Financial updates ongoing cybersecurity incident probe

River Financial Corporation is updating investors on an ongoing cybersecurity incident investigation.

Rhea-AI Filing Summary

River Financial Corporation is updating investors on an ongoing cybersecurity incident investigation. The company now believes certain data was potentially impacted and is working to determine the nature and scope of the information involved, including whether any personally identifiable information was affected.

So far, there is no evidence that customer accounts have been impacted. As of this filing, the full nature, scope, and impact of the incident remain undetermined, and the company has not concluded whether it is reasonably likely to materially affect its business or financial condition. River plans to file a further amendment within four business days after relevant information becomes available.

8-K Event Classification

2 items: 1.05, 9.01

2 items

Item 1.05 Material Cybersecurity Incidents Business

A cybersecurity incident that the company has determined to be material to investors.

Item 9.01 Financial Statements and Exhibits Exhibits

Financial statements, pro forma financial information, or exhibit attachments filed with this report.

Key Terms

Material Cybersecurity Incidents, personally identifiable information, Emerging growth company, Financial Statements and Exhibits

4 terms

Material Cybersecurity Incidents regulatory

"ITEM 1.05 Material Cybersecurity Incidents."

personally identifiable information financial

"including whether any personally identifiable information was affected."

Personally identifiable information (PII) is any data that can directly or indirectly identify a single person — for example: full name, home address, national ID numbers, phone or email, financial account details, or unique biometric data. Investors care because mishandling or loss of PII can trigger regulatory fines, costly cleanup and lost customer trust; think of a data breach like losing the keys to many customers’ homes, which can hurt a company’s finances and stock value.

Emerging growth company regulatory

"Emerging growth company "

An emerging growth company is a recently public or smaller public firm that qualifies for temporary, lighter regulatory and disclosure rules to reduce the cost and effort of being public. For investors, it means the company may provide less historical financial detail and face fewer reporting requirements than larger firms, so it can grow more quickly but also carries higher uncertainty—like buying a promising early-stage product with fewer user reviews.

Financial Statements and Exhibits regulatory

"ITEM 9.01 Financial Statements and Exhibits."

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

What cybersecurity issue did River Financial (RVRF) report in this 8-K/A?

River Financial reported an ongoing cybersecurity incident investigation. The company believes certain data may have been impacted and is assessing what information was involved, including any personally identifiable data. The filing does not yet define the full nature, scope, or consequences of the incident.

Has any customer account at River Financial (RVRF) been affected by the incident?

According to the filing, there is currently no evidence that customer accounts have been impacted by the cybersecurity incident. The company continues investigating and evaluating whether any account-related data or activity has been compromised as it clarifies the incident’s scope and details.

Does River Financial (RVRF) know if personally identifiable information was exposed?

River Financial is still determining whether any personally identifiable information was affected. The company states it is analyzing the nature and scope of the impacted data and has not yet confirmed the specific types of information involved or any resulting customer data exposure.

Has River Financial (RVRF) determined the financial impact of the cybersecurity incident?

The company has not yet determined the incident’s financial impact. River Financial states it has not confirmed whether the cybersecurity event is reasonably likely to materially affect its business or financial condition and is continuing its assessment as the investigation proceeds.

Will River Financial (RVRF) provide more updates on the cybersecurity incident?

Yes. River Financial states it will file another amendment within four business days after it determines that additional information on the incident’s nature, scope, and impact is available. This future filing is expected to give more clarity on potential business or customer effects.

Why is River Financial (RVRF) filing an amended 8-K about the incident?

The amendment updates progress on the cybersecurity investigation since the original report. River Financial now believes some data was potentially impacted but still cannot fully define the incident’s scope or impact, so it is providing an interim status and committing to a further amendment later.

AI-generated analysis. How Rhea-AI works. Not financial advice.

Understanding 8-K Material Events →

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Accepted by SEC EDGAR 07/06/2026 - 09:54 AM EDT Learn about SEC filing dates

false000164160100016416012026-06-192026-06-19

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, DC 20549

FORM 8-K

CURRENT REPORT

PURSUANT TO SECTION 13 OR 15(d)

OF THE SECURITIES EXCHANGE ACT OF 1934

Date of earliest event reported: June 19, 2026

RIVER FINANCIAL CORPORATION

(Exact Name of Registrant as Specified in its Charter)

Not Applicable

(Former Name or Former Address, if Changed Since Last Report)

Alabama	333-205986	46-1422125
(State or Other Jurisdiction of Incorporation)	(Commission File Number)	(IRS Employer Identification No.)

2611 Legends Drive Prattville, Alabama		36066
(Address of Principal Executive Offices)		(Zip Code)

(334) 290-1012

(Registrant’s telephone number, including area code)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instructions A.2. below):

☐ Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

☐ Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

☐ Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

☐ Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act: None

Title of each class	Trading Symbol(s)	Name of each exchange on which registered
None	None	None

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§ 230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§ 240.12b-2 of this chapter).

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. 

1

ITEM 1.05 Material Cybersecurity Incidents.

Since the date of the original filing, River’s investigation has progressed. River has reason to believe that certain data was potentially impacted and is working to determine the nature and scope of the information involved, including whether any personally identifiable information was affected. To date, there is no evidence that accounts have been impacted.

As of the date of this filing, the full nature, scope, and impact of the incident have not yet been determined. River has not yet confirmed whether the incident is reasonably likely to materially impact its business or financial condition. River will file an amendment to this Current Report on Form 8-K within four business days after it determines that such information is available.

ITEM 9.01 Financial Statements and Exhibits.

(d) Exhibits

104 Cover Page Interactive Data File (embedded within the Inline XBRL document)

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.

				RIVER FINANCIAL CORPORATION
Date: July 6, 2026				By		/s/ James M. Stubbs
						James M. Stubbs
						Chief Executive Officer

2

Filing Exhibits & Attachments

1 document

Other Documents

• EX-101 XBRL TAXONOMY EXTENSION SCHEMA WITH EMBEDDED LINKBASES DOCUMENT 43.2 KB