Customer data cyber incident hits Evertec (EVTC) banking clients in Puerto Rico

Filing Impact

(Moderate)

Filing Sentiment

(Neutral)

Form Type

8-K

Rhea-AI Filing Summary

EVERTEC, Inc. reports a cybersecurity incident involving potential unauthorized access to certain customer data. The company believes an outside party obtained, through a third-party support platform, some financial institution client information, including transaction records, payment card numbers and, in some cases, customer names and contact details.

Evertec states the impact appears concentrated among financial institution clients in Puerto Rico and their customers. The company activated its cyber response protocols, engaged external cybersecurity experts, notified federal law enforcement, and believes the third-party platform is now secured. Operations and customer services have not been disrupted.

The full scope and financial impact are still under forensic investigation. Evertec expects to incur expenses for investigation and remediation and notes it carries cybersecurity insurance, though any recoveries and overall liabilities from this incident have not yet been determined.

Positive

None.

Negative

Cybersecurity incident involving payment data: Evertec reports unauthorized access via a third-party platform to some financial institution client data, including payment card numbers and customer information, creating legal, regulatory, reputational and financial risk with investigation and remediation costs expected.

Insights

Evertec faces a payment-data breach with uncertain but potentially material risk.

Evertec reports that an unauthorized party accessed a third-party support platform holding some financial institution client data, including payment card numbers and related customer information. While systems remain operational, the exposure centers on clients in Puerto Rico and their customers’ transaction records.

The company has contained the incident, involved law enforcement, and hired external cybersecurity experts. However, it explicitly acknowledges that the scope of impacted data and overall consequences remain under investigation, and it expects added costs for response and remediation, partially offset by cybersecurity insurance whose coverage impact is not yet known.

Legal, regulatory and reputational risks are highlighted as potential outcomes, alongside financial effects that could emerge as the assessment progresses. Future company filings and updates on the forensic review and any regulatory or customer responses will clarify how significantly this event affects Evertec’s operations and financial results.

8-K Event Classification

2 items: 8.01, 9.01

2 items

Item 8.01 Other Events Other

Voluntary disclosure of events the company deems important to shareholders but not covered by other items.

Item 9.01 Financial Statements and Exhibits Exhibits

Financial statements, pro forma financial information, and exhibit attachments filed with this report.

Key Terms

cyber incident response protocols, third-party support platform, cybersecurity insurance, forward-looking statements, +1 more

5 terms

cyber incident response protocols technical

"The Company promptly initiated its cyber incident response protocols to contain the intrusion"

third-party support platform technical

"obtained, through a third-party support platform, certain of our financial institution clients’ information"

cybersecurity insurance financial

"Although the Company maintains cybersecurity insurance, it has not yet determined the extent of any potential liabilities"

forward-looking statements regulatory

"constitute “forward-looking statements” within the meaning of, and subject to the protection of, the Private Securities Litigation Reform Act of 1995"

Forward-looking statements are predictions or plans that companies share about what they expect to happen in the future, like estimating sales or profits. They matter because they help investors understand a company's outlook, but since they are based on guesses and assumptions, they can sometimes be wrong.

Risk Factors regulatory

"other important factors set forth under “Part 1, Item 1A. Risk Factors,” in the Company’s Annual Report on Form 10-K"

Risk factors are elements or conditions that could cause an investment's value to decrease or lead to potential losses. They are like warning signs or obstacles that can affect the success of an investment, making it uncertain or more unpredictable. Recognizing risk factors helps investors understand the possible challenges and make more informed decisions.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google

Understanding 8-K Material Events →

06/09/2026 - 08:28 AM

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, DC 20549

FORM 8-K

CURRENT REPORT

PURSUANT TO SECTION 13 OR 15(d)

OF THE SECURITIES EXCHANGE ACT OF 1934

Date of report (Date of earliest event reported): June 9, 2026

EVERTEC, Inc.

(EXACT NAME OF REGISTRANT AS SPECIFIED IN ITS CHARTER)


Puerto Rico		66-0783622
(State or other jurisdiction of incorporation or organization)		(I.R.S. employer identification number)

Cupey Center Building,	Road 176, Kilometer 1.3,
San Juan,	Puerto Rico	00926
(Address of principal executive offices)		(Zip Code)

(787) 759-9999

(Registrant’s telephone number, including area code)

Not applicable

(Former name, former address and former fiscal year, if changed since last report)

COMMISSION FILE NUMBER 001-35872

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions:


☐			Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)


☐			Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)


☐			Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))


☐			Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act:


Title of Class	Trading Symbol(s)	Name of each exchange on which registered
Common Stock, $0.01 par value per share	EVTC	New York Stock Exchange

Indicate by check mark whether the registrant is an emerging growth company as defined in as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter).

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Item 8.01 Other Events

On May 13, 2026, EVERTEC, Inc. (“Evertec” or the “Company”) learned of potential unauthorized access to customer data. The Company promptly initiated its cyber incident response protocols to contain the intrusion, assess and investigate the nature and scope of the incident, and implement appropriate remedial measures. The Company also notified federal law enforcement authorities and engaged external cybersecurity experts to assist in the investigation and response efforts. While the full scope of impacted data remains under forensic investigation and is subject to change as the assessment continues, at this time the Company believes that an unauthorized party obtained, through a third-party support platform, certain of our financial institution clients’ information related to transaction records, payment card numbers of some customers and, in some instances, customer names and contact information. Based on our current understanding, the Company believes that the incident has primarily impacted our financial institution clients in Puerto Rico and their respective customers. The Company has taken steps to contain the incident and secure our systems, and believes that the unauthorized party no longer has access to the third-party support platform. The Company also is communicating with affected financial institutions and providing support as it continues to assess the full scope of impacted information.

To date, this incident has not resulted in operational disruption or interruption in service to any customers. While the investigation remains ongoing, as of the date of this filing, the Company has not yet determined the full impact of the incident. Among other things, the Company expects to incur expenses related to the investigation and remediation of this matter. Although the Company maintains cybersecurity insurance, it has not yet determined the extent of any potential liabilities associated with this matter or the applicability of insurance coverage.

Cautionary Note Regarding Forward-Looking Statements

Certain statements in this Current Report on Form 8-K constitute “forward-looking statements” within the meaning of, and subject to the protection of, the Private Securities Litigation Reform Act of 1995. We intend such forward-looking statements to be covered by the safe harbor provisions for forward-looking statements contained in Section 27A of the Securities Act and Section 21E of the Exchange Act. All statements contained in this Current Report on Form 8-K other than statements of historical facts, including, without limitation, statements relating to the Company’s current beliefs, understanding and expectations regarding the cybersecurity incident discussed in this Form 8-K and its scope, nature and impact on the Company’s business, operations and financial results are forward-looking statements. Words such as “believes,” “expects,” “anticipates,” “intends,” “projects,” “estimates,” and “plans” and similar expressions of future or conditional verbs such as “will,” “should,” “would,” “may,” and “could” are forward-looking in nature and not historical facts. Factors that could cause actual results to differ from those expressed in these forward-looking statements include, but are not limited to, the outcome of the Company’s ongoing assessment of the incident and its ability to address the impact of this incident; legal, regulatory, reputational and financial risks resulting from this incident or additional incidents; and other important factors set forth under “Part 1, Item 1A. Risk Factors,” in the Company’s Annual Report on Form 10-K for the fiscal year ended December 31, 2025, filed with the Securities and Exchange Commission (the “SEC”) on March 2, 2026, as any such factors may be updated from time to time in the Company’s subsequent filings with the SEC. Unless required by law, the Company expressly disclaims any obligation to update publicly any forward-looking statements, whether as result of new information, future events or otherwise.


Item 9.01			Financial Statements and Exhibits.


Number			Exhibit
104			Cover Page Interactive Data File (formatted as Inline XBRL and contained in Exhibit 101)

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the Registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.


	EVERTEC, Inc.
	(Registrant)

Date: June 9, 2026	By:	/s/ Karla Cruz Jusino
		Karla Cruz Jusino
		Chief Financial Officer

Source: View Original Filing on SEC EDGAR

FAQ

What cybersecurity incident did EVERTEC (EVTC) disclose?

EVERTEC reported potential unauthorized access to customer data through a third-party support platform. The incident involved certain financial institution clients’ transaction records, payment card numbers and, in some cases, customer names and contact information, and remains under active forensic investigation by the company and external experts.

Which EVERTEC (EVTC) customers appear most affected by the data incident?

Based on current findings, Evertec believes the incident primarily affected its financial institution clients in Puerto Rico and their customers. The accessed information includes transaction records and some payment card and contact details, though the company emphasizes the full scope of impacted data is still being assessed.

Has the EVERTEC (EVTC) cyber incident disrupted operations or services?

Evertec states the incident has not caused operational disruption or service interruptions for any customers. The company activated its cyber response protocols, contained the intrusion, and believes the unauthorized party no longer has access to the third-party support platform used in connection with the compromised data.

What financial impact could the EVERTEC (EVTC) data breach have?

Evertec expects to incur expenses tied to investigating and remediating the incident, and notes potential legal, regulatory, reputational and financial risks. It carries cybersecurity insurance but has not yet determined total liabilities or how much of these costs, if any, insurance will ultimately cover.

How is EVERTEC (EVTC) responding to the cybersecurity incident?

The company initiated cyber incident response protocols, engaged external cybersecurity experts, and notified federal law enforcement. It is communicating with affected financial institutions, supporting them in assessing exposure, and continuing forensic work to determine the full nature, scope, and impact of the unauthorized access event.

Does EVERTEC (EVTC) provide forward-looking statements about this incident?

Yes. Evertec’s discussion of its beliefs and expectations about the cybersecurity incident’s scope, nature and impact are labeled forward-looking statements. It cites risk factors in its Form 10-K and warns that actual results could differ due to legal, regulatory, reputational and financial outcomes from this incident.

Filing Exhibits & Attachments

3 documents