STOCK TITAN

Four cyber lawsuits test River Financial Corporation (RVRF) data breach impact

(Neutral)
(Neutral)
Form Type
8-K/A

Rhea-AI Filing Summary

River Financial Corporation, the parent of River Bank & Trust, provides an update on a previously reported material cybersecurity incident involving an unauthorized threat actor accessing its network environment. In connection with this incident, a total of four class action lawsuits have been filed against River.

The principal issue in these cases is whether cybercriminals obtained access to River customers’ personally identifiable information. As of this report, River has not determined the full nature, scope, or impact of the incident, nor confirmed whether it is reasonably likely to materially impact its business or financial condition. River states it will file an amendment within four business days after additional information becomes available.

Positive

  • None.

Negative

  • Four class action lawsuits have been filed against River Financial Corporation related to a cybersecurity incident, creating litigation and potential liability while the full impact on customers and the business remains undetermined.
Item 1.05 Material Cybersecurity Incidents Business
A cybersecurity incident that the company has determined to be material to investors.
Item 9.01 Financial Statements and Exhibits Exhibits
Financial statements, pro forma financial information, and exhibit attachments filed with this report.
Class action lawsuits 4 Total class actions filed against River in connection with the cybersecurity incident
Initial class actions 2 Number of class action lawsuits initially referenced in the earlier report
Earliest event date June 19, 2026 Date of earliest event reported related to the cybersecurity incident
Third lawsuit filing date July 10, 2026 Date the third class action lawsuit was filed against River
Fourth lawsuit filing date July 16, 2026 Date the fourth class action lawsuit was filed against River
Material Cybersecurity Incidents regulatory
"ITEM 1.05 Material Cybersecurity Incidents."
class action lawsuits regulatory
"two class action lawsuits were filed relating to the unauthorized threat actor"
A class action lawsuit is a single legal case brought by a group of people who claim they were harmed in the same way by a company, allowing them to combine resources rather than sue individually. For investors, these suits matter because they can lead to large settlements, legal costs, changes in management or operations, and sudden stock price swings—think of neighbors pooling money to fix a shared problem, which can be cheaper but still costly and disruptive to the property value.
personal identifiable information technical
"whether cybercriminals have acquired access to River’s customers’ personal identifiable information."
unauthorized threat actor technical
"relating to the unauthorized threat actor gaining access to the network environment"
emerging growth company regulatory
"Emerging growth company "
An emerging growth company is a recently public or smaller public firm that qualifies for temporary, lighter regulatory and disclosure rules to reduce the cost and effort of being public. For investors, it means the company may provide less historical financial detail and face fewer reporting requirements than larger firms, so it can grow more quickly but also carries higher uncertainty—like buying a promising early-stage product with fewer user reviews.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google
Add on Google
Learn about SEC filing dates

FAQ

What cybersecurity incident did River Financial Corporation (RVRF) report?

River Financial reported a material cybersecurity incident in which an unauthorized threat actor gained access to the network environment of River Financial Corporation and River Bank & Trust. The key concern is whether cybercriminals accessed customers’ personally identifiable information.

How many class action lawsuits have been filed against River Financial (RVRF) over the incident?

A total of four class action lawsuits have been filed against River in connection with the cybersecurity incident. Two were referenced in a prior report, a third was filed on July 10, 2026, and a fourth on July 16, 2026.

Has River Financial (RVRF) determined the financial impact of the cybersecurity incident?

No. River states it has not yet determined the full nature, scope, and impact of the incident and has not confirmed whether it is reasonably likely to materially impact its business or financial condition.

What further disclosures has River Financial (RVRF) committed to about the cybersecurity incident?

River states it will file an amendment within four business days after it determines that additional information about the nature, scope, impact, or materiality of the cybersecurity incident is available.
0001641601false00016416012026-06-192026-06-19

 

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, DC 20549

FORM 8-K

CURRENT REPORT

PURSUANT TO SECTION 13 OR 15(d)

OF THE SECURITIES EXCHANGE ACT OF 1934

Date of earliest event reported: June 19, 2026

RIVER FINANCIAL CORPORATION

(Exact Name of Registrant as Specified in its Charter)

 

Not Applicable

(Former Name or Former Address, if Changed Since Last Report)

 

Alabama

333-205986

46-1422125

(State or Other Jurisdiction

of Incorporation)

(Commission

File Number)

(IRS Employer

Identification No.)

2611 Legends Drive

Prattville, Alabama

36066

(Address of Principal Executive Offices)

(Zip Code)

(334) 290-1012

(Registrant’s telephone number, including area code)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instructions A.2. below):

Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act: None

Title of each class

Trading Symbol(s)

Name of each exchange on which registered

None

None

None

 

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§ 230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§ 240.12b-2 of this chapter).

Emerging growth company

 

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act.

1

 


ITEM 1.05 Material Cybersecurity Incidents.

 

As set forth in its Form 8-K filed July 10, 2026, two class action lawsuits were filed relating to the unauthorized threat actor gaining access to the network environment of River Financial Corporation, including River Bank & Trust (together, “River”). A third class action was filed against River on July 10, 2026 and a fourth class action was filed against River on July 16, 2026.

 

The principal issue in each case is whether cybercriminals have acquired access to River’s customers’ personal identifiable information. As of the date of this filing, River has not yet determined the full nature, scope and impact of the incident. In addition, it has not yet been confirmed whether the incident is reasonably likely to materially impact business or the financial condition of River. River will file an amendment to this Current Report on Form 8-K within four business days after it determines that any of the forgoing information is available.

 

ITEM 9.01 Financial Statements and Exhibits.

 

(d) Exhibits

 

104

 

Cover Page Interactive Data File (embedded within the Inline XBRL document)

 

 

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.

 

 

 

 

 

 

 

 

 

 

 

 

RIVER FINANCIAL CORPORATION

 

 

 

 

Date: July 17, 2026

 

 

 

By

 

/s/ James M. Stubbs

 

 

 

 

 

 

James M. Stubbs

 

 

 

 

 

 

Chief Executive Officer

 

2

 


Filing Exhibits & Attachments

1 document