Incident disclosureDisclosed 2026-06-25River Financial CorpSEC filing

River Financial Corp discloses a cybersecurity incident involving ransomware (SEC 8-K, June 2026)

On or about June 16, 2026, an unauthorized threat actor gained access to the network environment of River Financial Corporation, including River Bank & Trust (together, “River”).

What happened

  • River identified the activity on or about June 19, 2026, and determined that ransomware had been deployed across portions of its server environment.Form 8-K Item 1.05, River Financial Corp, filed 2026-06-25
  • River promptly took containment measures, including disabling affected administrative accounts and taking impacted systems offline.Form 8-K Item 1.05, River Financial Corp, filed 2026-06-25
  • River, with the assistance of a third-party forensic firm, is investigating the nature and scope of the incident, including whether any personally identifiable information was subject to unauthorized access or exfiltration.Form 8-K Item 1.05, River Financial Corp, filed 2026-06-25

The failure pattern

Insufficient segmentation lets a foothold spreadOne compromised account, vendor or network segment reaches management planes, backups and everything else.How to prevent it Audit trail missing actor, target or decisionAfter something goes wrong nobody can tell who or what took the action, on which object, or why.How to prevent it
Watch the pattern: Insufficient segmentation lets a foothold spread

Related standards

CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.

Building something similar?

Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.

Analyze your design

Incidents with the same pattern