8-K/A: River Financial Corp. Updates Cybersecurity Incident Lawsuits

River Financial Corporation has filed an amendment to its 8-K report, detailing the addition of two new class action lawsuits related to a prior cybersecurity incident, bringing the total to four.

Summary

• River Financial Corporation (River) has filed an amendment to its Form 8-K regarding a material cybersecurity incident.
• As of July 17, 2026, four class action lawsuits have been filed in relation to an unauthorized threat actor gaining access to River's network environment, which includes River Bank & Trust.
• The core issue in these lawsuits is the alleged acquisition of customers' personal identifiable information by cybercriminals.
• River has not yet determined the full nature, scope, and impact of the incident.
• It has also not yet been confirmed whether the incident is reasonably likely to materially impact River's business or financial condition.
• River intends to file an amendment to this report within four business days after determining the availability of the aforementioned information.

Sentiment

Score: 3

Explanation: StockSavvy.ai views this filing negatively due to the ongoing cybersecurity incident, multiple class action lawsuits, and the uncertainty surrounding its impact on the company's financial condition and operations.

Negatives

• Four class action lawsuits have been filed against River Financial Corporation related to a cybersecurity incident.
• The lawsuits allege that cybercriminals may have accessed customers' personal identifiable information.
• The full impact and scope of the cybersecurity incident are still undetermined.
• It is not yet confirmed if the incident will materially impact River's business or financial condition.

Risks

• Potential material impact on business or financial condition due to the cybersecurity incident.
• Ongoing litigation stemming from the alleged data breach.
• Reputational damage due to the cybersecurity incident and potential data compromise.
• Uncertainty regarding the full nature, scope, and impact of the incident.

Future Outlook

River will file an amendment to this Current Report on Form 8-K within four business days after it determines that any of the forgoing information (full nature, scope, impact of the incident, and potential material impact on business or financial condition) is available.

Management Comments

• As of the date of this filing, River has not yet determined the full nature, scope and impact of the incident.
• In addition, it has not yet been confirmed whether the incident is reasonably likely to materially impact business or the financial condition of River.

Industry Context

StockSavvy.ai notes that cybersecurity incidents and subsequent litigation are increasingly common challenges for financial institutions, requiring robust data protection measures and transparent communication with stakeholders.

Legal Proceedings

• Four class action lawsuits have been filed relating to an unauthorized threat actor gaining access to River's network environment.
• The principal issue in each case is whether cybercriminals have acquired access to Rivers customers personal identifiable information.

Stakeholder Impact

• Shareholders: Potential negative impact on stock price due to litigation and uncertainty surrounding the cybersecurity incident's financial implications.
• Customers: Risk of personal identifiable information compromise, leading to potential identity theft or financial fraud.
• Creditors: Potential concern over the financial stability of River if the incident materially impacts its business or financial condition.

Next Steps

• River will file an amendment to this Current Report on Form 8-K within four business days after determining the full nature, scope, and impact of the cybersecurity incident, and whether it is reasonably likely to materially impact business or financial condition.

Key Dates

Recommendation

The company is facing significant legal challenges and operational uncertainty due to a cybersecurity incident. While the full impact is yet to be determined, the ongoing litigation and potential for material financial impact warrant a cautious 'hold' stance until more clarity emerges.

Keywords

cybersecurity incident, class action lawsuit, data breach, personal identifiable information, River Financial Corporation, River Bank & Trust, 8-K filing, litigation