On April 12, 2025, Davita, Inc. reported a cybersecurity attack on Form 8-K.  Interestingly, and appropriately, the company did not report the event on Item 1.05.  The instructions for Item 1.05 begin with:

Item 1.05 Material Cybersecurity Incidents.

(a) If the registrant experiences a cybersecurity incident that is determined by the registrant to be material, describe the material aspects of the nature, scope, and timing of the incident, and the material impact or reasonably likely material impact on the registrant, including its financial condition and results of operations.

As this instruction clearly states, this Form 8-K Item is for material cybersecurity incidents.  That said, many times a company will want to alert investors and others when a cybersecurity incident has occurred, but the company is still in the process of assessing the materiality of the event.  On May 21, 2024, CorpFin issued this Statement addressing how to report a cybersecurity event before a materiality assessment is complete.  In the Statement, CorpFin “encourages” companies to use a different Form 8-K Item, perhaps Item 8.01 or 7.01.

Davita’s Form 8-K was filed under Item 8.01 and includes this language:

Item 8.01. Other Events. 

On April 12, 2025, DaVita Inc. (the “Company” or “we”) became aware of a ransomware incident that has encrypted certain elements of our network. Upon discovery, we activated our response protocols and implemented containment measures, including proactively isolating impacted systems. We are actively working to assess and remediate the incident with the assistance of third-party cybersecurity professionals and have notified law enforcement of the matter.

We have implemented our contingency plans, and we continue to provide patient care. However, the incident is impacting some of our operations, and while we have implemented interim measures to allow for the restoration of certain functions, we cannot estimate the duration or extent of the disruption at this time.

Given the recency of the incident, our investigation and response are ongoing, and the full scope, nature, and potential ultimate impact on the Company are not yet known.

As a final note, remember that Form 8-K Item 8.01 is filed information and Item 7.01 is only furnished.  Careful consideration should be given as to whether a company wants this information to be furnished or filed.

As always, your thoughts and comments are welcome!