SEC 8-K Item 1.05 cybersecurity incident filings, by month
Quick answer, Nov 11, 2026In the October 2026 edition (filing dates 1 to 29 October, cut at 12:00 ET on 29 October), one Form 8-K filing reported a material cybersecurity incident under Item 1.05: Park Dental Partners, filed 13 October 2026. Quest Diagnostics disclosed a cybersecurity matter under Item 8.01 on 22 October. Filings on 30 and 31 October are not counted.
Monthly counts
| Edition | EDGAR filing dates | Item 1.05 filings | Note |
|---|---|---|---|
| October 2026 | 1–29 Oct 2026, cut 12:00 ET on 29 Oct | 1 | 30–31 Oct not in this edition; full-month count UNKNOWN |
Each edition is a dated page, frozen at its cut. The October 2026 edition links the Item 1.05 filing and the Item 8.01 disclosure on EDGAR.
Item 1.05 and Item 8.01
Item 1.05 is the item a company uses for an incident it has judged material; Item 8.01 carries a disclosure without that judgment, so the two lines are reported separately. In the October 2026 edition, Quest Diagnostics Incorporated disclosed a cybersecurity matter under Item 8.01 rather than Item 1.05 in an 8-K filed 22 October 2026. The full number of Item 8.01 cyber disclosures in the window is UNKNOWN until the classification rule is stated.
For how the two items read, see SEC 8-K Item 1.05 cybersecurity incident disclosures.
How this count is made
What was reviewed. Current reports on Form 8-K filed with the SEC on EDGAR that report a cybersecurity incident under Item 1.05 (material cybersecurity incidents), plus a separate line for 8-Ks that disclose a cybersecurity incident under Item 8.01 (other events).
Date window. EDGAR filing dates from 1 October 2026 to 29 October 2026, cut off at 12:00 ET on 29 October 2026. Filings on 30 and 31 October 2026 are not in this edition; the full-month count is UNKNOWN until they are added.
How filings were found. An EDGAR full-text search for the exact phrase "Item 1.05" on Form 8-K for the window (the query). Every hit was then read to confirm that the item reports an incident rather than mentioning the item in passing. The Item 8.01 line comes from Distributed Risk's list_cyber_incident_filings tool, which reads EDGAR; the rule it uses to classify an Item 8.01 filing as a cyber disclosure is UNKNOWN on this page.
What counts. A filing counts once, on its EDGAR filing date. Exhibits that only quote "Item 1.05" (for example, an audit committee charter) are excluded. Totals are by filing date, not incident date; the incident can be earlier.
Amendments. 8-K/A filings that amend an earlier Item 1.05 report are counted on their own line. Whether the linked query captures 8-K/A: UNKNOWN.
Limits.
- Only Form 8-K filers are in the count.
- A company that discloses an incident in a different filing (for example a periodic report) does not appear here.
- Full-text search returns boilerplate; each hit is read before counting, so the count depends on that reading.
- The count says nothing about the size or cause of any incident.