In the first half of 2025, seven SEC registrants filed Form 8‑K reports under Item 1.05 for material cyber incidents, though three—Nucor, Sensata Technologies, and Englobal—were later deemed to have reported in error, stating that the incidents would not materially affect their operations. Among the four remaining companies, United Natural Foods suffered disruptions to its ordering and invoicing systems, with its stock price dropping 27% since the June 6 disclosure; the firm anticipates insurance will cover the majority of losses, but full claim resolution may extend into FY 2026.

The other three material incidents included Coinbase, which although hit by a cyber event did not involve operational technology (OT); Conduent, which incurred an estimated $25 million in one-time expenses tied to regulatory notifications after a breach; and Lee Enterprises, whose OT-controlled printing systems suffered disruptions, incurring around $1.9 million in costs and triggering a three-month delay on certain interest payments due to short-term liquidity strain, partially offset by cyber insurance with a $500,000 deductible. Peterson emphasizes that this dataset—drawing from a legally obligated population—offers clear insight into material cyber incidents affecting OT, including concrete financial impacts and insurance coverage, and stresses its value compared to anecdotal reporting.

‍

Source: https://dale-peterson.com/2025/07/09/real-cyber-incident-data-first-half-2025/