Business Context and Reporting Period
Company: Inotiv, Inc. (NOTV)
Filing Type: Form 8-K (Current Report)
Date of Report: August 8, 2025
Event: Notification of a cybersecurity incident affecting company systems and data.
Key Financial Metrics
This filing does not provide specific financial metrics such as revenue, profit, cash flow, margins, debt, or liquidity figures. The report explicitly states that the full operational and financial impacts of the incident are not yet known.
Material Changes
Cybersecurity Incident: On August 8, 2025, a threat actor gained unauthorized access to and encrypted certain company systems.
- Operational Impact: Disruptions to business operations, including temporary loss of access to networks, internal data storage, and business applications.
- Response Actions: The Company has contained the incident, engaged external cybersecurity specialists, notified law enforcement, and transitioned certain operations to offline alternatives.
- Materiality: The Company has not yet determined if the incident will have a material impact on its financial condition or results of operations.
Outlook, Risks, and Management Commentary
Restoration Timeline: The timeline for full restoration of affected systems is currently unknown.
Investigation Status: Ongoing; the full scope and nature of the data accessed are undetermined.
Identified Risks:
- Potential impairment of system or data integrity.
- Delays in restoring systems and processing information collected via offline alternatives.
- Potential release or fraudulent use of Company or third-party data by the threat actor.
- Adverse impacts on revenue, operating income, cash flows, and liquidity.
- Diversion of management attention, potential litigation, reputational damage, and regulatory scrutiny.
Investor Verification Checklist
- Monitor subsequent filings for updates on the scope of data accessed and the timeline for system restoration.
- Review the Company's next quarterly or annual report for quantified financial impacts on revenue and operating income.
- Assess potential litigation risks and regulatory actions arising from the incident.
- Verify the integrity of data processed during the period of offline operations.
- Check for any announcements regarding customer or supplier relationship impacts.