Topic
SEC rule requiring public companies to disclose material cybersecurity incidents via Form 8-K, typically within four business days of determining materiality.
CenterPoint Energy told the Texas Attorney General that a breach compromised Social Security and driver's license numbers of 1,062,060 Texans. A forum actor claimed 7.49 million records; the all-state total is unclear.
Reality
Cameron Curry got two years for extorting Brightly Software with stolen payroll data. The demand started one day after his contract ended, which is where the control gap sits.
Reality
The distributor found the intrusion on August 25, 2026, the same day ShinyHunters says its four-day exfiltration ended. It has not named the vendor applications involved, so customers are left scoping their own integrations.
Perspective Coverage
9 publishersReality
Veradigm told the SEC that an attacker took credentials from a vendor's environment and used them against a Veradigm API to download patient data including Social Security numbers, while The Gentlemen gang claims 3.5 million records.
Reality
CenterPoint Energy's 8-K says an unauthorized party took customer personal information through an external-facing system. The person selling the file says it came out of a public API with no rate limiting.
Perspective Coverage
6 publishersReality
The Gentlemen gave the Houston hospital operator nine days to pay after an August 31 filing confirmed patient, employee and provider files were taken, and a class action had already landed on August 27.
Perspective Coverage
3 publishersReality