Business Context and Reporting Period
This Form 6-K filing by Nayax Ltd. covers the month of July 2026, specifically dated July 14, 2026. The report serves as an update to a previous announcement regarding a suspected information security incident.
Key Financial Metrics
The filing does not provide specific financial data such as revenue, profit, cash flow, margins, debt, or liquidity figures. The document focuses exclusively on the status of a cybersecurity incident and its potential operational and financial implications.
Material Changes and Incident Status
- System Status: System review and technical remediation are complete; systems are confirmed free of unauthorized access.
- Operational Impact: Production environments and core systems were not impacted; business operations continue normally without disruption.
- Data Exfiltration: Exfiltrated data includes backups of scanned documents, business-related information, and payment transaction records. Crucially, sensitive payment authentication data (e.g., cardholder names, CVV, ID) was not retained in the systems and thus not exfiltrated.
- Transaction Security: A significant portion of transactions utilized digital wallets (Apple Pay, Google Pay) with single-use tokens that hold no value if disclosed.
- Customer Funds: All customer safeguarded funds remain untouched with no unauthorized access.
Management Commentary, Risks, and Outlook
- Extortion Response: The Board of Directors has resolved not to comply with criminal extortion demands, citing the long-term best interests of stakeholders.
- Financial Impact: The company has incurred and may continue to incur costs related to investigation and remediation. While the full financial impact (including insurance offsets and customer behavior effects) is undetermined, management does not currently expect a material effect on financial condition or results of operations.
- Legal Cooperation: The company is cooperating fully with law enforcement authorities who are conducting an intensive investigation.
Investor Verification Checklist
- Verify the final quantification of remediation and investigation costs in future financial reports.
- Monitor for any updates regarding the scope of exfiltrated data or new findings from law enforcement.
- Assess potential impacts on customer retention and partner relationships following the incident.
- Review future filings for any material changes to the company's risk profile or insurance coverage related to cyber incidents.