Business Context and Reporting Period
Company: Bandwidth Inc.
Filing Type: Form 8-K (Current Report)
Date of Report: October 5, 2021
Context: The filing discloses a significant cybersecurity incident involving a distributed denial of service (DDoS) attack that began on September 25, 2021, affecting the company's communications network.
Key Financial Metrics and Impact
This filing does not report standard quarterly financial results (revenue, profit, cash flow, or margins) but provides a specific financial impact estimate related to the DDoS incident:
- Estimated Revenue Impact: Management estimates that lost transaction volume and potential customer credits will reduce total revenue for the quarter ended September 30, 2021, by between $0.5 million and $1.5 million.
- Operational Status: The network has been largely stable and operating at normal service levels since the evening of September 29, 2021, though intermittent disruptions continue.
Material Changes and Operational Disruptions
The primary material change reported is the onset of a DDoS attack starting September 25, 2021. This event caused intermittent communications service disruptions across certain markets and customers. Mitigation efforts, conducted in conjunction with leading cybersecurity firms, have been largely successful in stabilizing the network.
Outlook, Risks, and Management Commentary
Management Commentary: The company is in the early stages of investigating the incident. Management expects to discuss the attack, the response, third-quarter financial results, and the full-year 2021 outlook during the upcoming earnings conference call.
Risks and Contingencies:
- Cybersecurity Risks: Ongoing risks include data loss, security breaches, and the financial, legal, and reputational consequences of the DDoS attack.
- Forward-Looking Uncertainties: The filing highlights risks related to rapid growth, competition, market expansion, and the realization of benefits from the acquisition of Voxbone.
- Investigation Status: The full extent of the incident's impact is still being assessed.
Key Facts for Investor Verification
- Verify the final revenue impact for Q3 2021 against the estimated range of $0.5 million to $1.5 million.
- Monitor the status of the DDoS attack at the company's operational status page (https://status.bandwidth.com) for any recurrence of disruptions.
- Review the upcoming third-quarter 2021 earnings call for detailed financial results and updated full-year guidance.
- Assess any potential customer churn or contract terminations resulting from the service interruptions.