Business Context and Reporting Period
Company: EVERTEC, Inc. (EVTC)
Filing Type: Form 8-K (Current Report)
Date of Report: June 9, 2026
Event Date: May 13, 2026 (Discovery of incident)
Business Context: The Company reported a cybersecurity incident involving potential unauthorized access to customer data via a third-party support platform.
Key Financial Metrics
The filing does not provide specific revenue, profit, cash flow, margin, debt, or liquidity figures. This report focuses on a material event rather than periodic financial results.
Material Changes and Incident Details
- Incident Nature: Unauthorized access to data through a third-party support platform.
- Data Compromised: Financial institution client information, including transaction records, payment card numbers, and in some instances, customer names and contact information.
- Geographic Scope: Primarily impacted financial institution clients in Puerto Rico and their respective customers.
- Operational Impact: No operational disruption or service interruption to customers has occurred to date.
- Containment: The Company believes the unauthorized party no longer has access to the platform.
Outlook, Risks, and Management Commentary
- Financial Impact: The Company expects to incur expenses related to investigation and remediation. The full extent of potential liabilities and insurance coverage applicability remains undetermined.
- Investigation Status: Ongoing forensic investigation with federal law enforcement and external cybersecurity experts. The full scope of impacted data is subject to change.
- Risks: Potential legal, regulatory, reputational, and financial risks associated with the incident.
- Forward-Looking Statements: Management disclaims any obligation to update forward-looking statements regarding the incident's impact unless required by law.
Investor Verification Checklist
- Verify the final scope of data compromised as the forensic investigation concludes.
- Monitor for updates on regulatory inquiries or legal actions stemming from the incident.
- Assess the impact of investigation and remediation costs on future earnings guidance.
- Review the extent of cybersecurity insurance coverage applicable to this specific incident.
- Check for any subsequent service disruptions or customer attrition in the Puerto Rico market.