River Financial updates cybersecurity incident lawsuits
River Financial Corporation, the parent of River Bank & Trust, provides an update on a previously reported material cybersecurity incident involving an unauthorized threat actor accessing its network environment.
Rhea-AI Filing Summary
River Financial Corporation, the parent of River Bank & Trust, provides an update on a previously reported material cybersecurity incident involving an unauthorized threat actor accessing its network environment. In connection with this incident, a total of four class action lawsuits have been filed against River.
The principal issue in these cases is whether cybercriminals obtained access to River customers’ personally identifiable information. As of this report, River has not determined the full nature, scope, or impact of the incident, nor confirmed whether it is reasonably likely to materially impact its business or financial condition. River states it will file an amendment within four business days after additional information becomes available.
Positive
- None.
Negative
- Four class action lawsuits have been filed against River Financial Corporation related to a cybersecurity incident, creating litigation and potential liability while the full impact on customers and the business remains undetermined.
8-K Event Classification
2 items: 1.05, 9.01
2 items
Item 1.05
Material Cybersecurity Incidents
Business
A cybersecurity incident that the company has determined to be material to investors.
Item 9.01
Financial Statements and Exhibits
Exhibits
Financial statements, pro forma financial information, or exhibit attachments filed with this report.
Key Figures
Class action lawsuits: 4
Initial class actions: 2
Earliest event date: June 19, 2026
+2 more
5 metrics
Class action lawsuits
4
Total class actions filed against River in connection with the cybersecurity incident
Initial class actions
2
Number of class action lawsuits initially referenced in the earlier report
Earliest event date
June 19, 2026
Date of earliest event reported related to the cybersecurity incident
Third lawsuit filing date
July 10, 2026
Date the third class action lawsuit was filed against River
Fourth lawsuit filing date
July 16, 2026
Date the fourth class action lawsuit was filed against River
Key Terms
Material Cybersecurity Incidents, class action lawsuits, personal identifiable information, unauthorized threat actor, +1 more
5 terms
Material Cybersecurity Incidents regulatory
"ITEM 1.05 Material Cybersecurity Incidents."
class action lawsuits regulatory
"two class action lawsuits were filed relating to the unauthorized threat actor"
A class action lawsuit is a single legal case brought by a group of people who claim they were harmed in the same way by a company, allowing them to combine resources rather than sue individually. For investors, these suits matter because they can lead to large settlements, legal costs, changes in management or operations, and sudden stock price swings—think of neighbors pooling money to fix a shared problem, which can be cheaper but still costly and disruptive to the property value.
personal identifiable information technical
"whether cybercriminals have acquired access to River’s customers’ personal identifiable information."
unauthorized threat actor technical
"relating to the unauthorized threat actor gaining access to the network environment"
emerging growth company regulatory
"Emerging growth company "
An emerging growth company is a recently public or smaller public firm that qualifies for temporary, lighter regulatory and disclosure rules to reduce the cost and effort of being public. For investors, it means the company may provide less historical financial detail and face fewer reporting requirements than larger firms, so it can grow more quickly but also carries higher uncertainty—like buying a promising early-stage product with fewer user reviews.
FAQ
What cybersecurity incident did River Financial Corporation (RVRF) report?
River Financial reported a material cybersecurity incident in which an unauthorized threat actor gained access to the network environment of River Financial Corporation and River Bank & Trust. The key concern is whether cybercriminals accessed customers’ personally identifiable information.
How many class action lawsuits have been filed against River Financial (RVRF) over the incident?
A total of four class action lawsuits have been filed against River in connection with the cybersecurity incident. Two were referenced in a prior report, a third was filed on July 10, 2026, and a fourth on July 16, 2026.
Has River Financial (RVRF) determined the financial impact of the cybersecurity incident?
No. River states it has not yet determined the full nature, scope, and impact of the incident and has not confirmed whether it is reasonably likely to materially impact its business or financial condition.
What further disclosures has River Financial (RVRF) committed to about the cybersecurity incident?
River states it will file an amendment within four business days after it determines that additional information about the nature, scope, impact, or materiality of the cybersecurity incident is available.
AI-generated analysis. How Rhea-AI works. Not financial advice.
