A Form 8-K is a U.S. Securities and Exchange Commission (SEC) filing used by public companies to disclose material events that investors should know about. It is a formal notice, not a technical incident report, and it can cover many events including cyber incidents, leadership changes, or financial developments.
In cybersecurity, an 8-K matters because it often marks the moment a company publicly acknowledges unauthorized access, data theft, or other material impact. The filing may be brief, but it creates a legal record and can signal that an incident crossed from internal response into public disclosure. Defenders, analysts, and threat hunters watch these filings for clues about breach severity, timing, and business risk. For attackers, the existence of an 8-K can also confirm that stolen data or compromised systems were significant enough to affect the company’s reporting obligations.