8-K Filings

The 8-K is the current report that US public companies must file with the SEC to announce material events — leadership changes, acquisitions, cybersecurity incidents, major contracts, and restructurings.

Every week, we scan SEC EDGAR for new 8-K filings across 8,000+ publicly traded companies. Unlike 10-K and 10-Q filings, 8-Ks are event-driven — companies must file within 4 business days of a material event. Because material events happen constantly, 8-Ks are our highest-volume SEC signal and often the first public disclosure of breaking corporate news.

Each filing is classified into one or more of 70+ event subtypes using a model we've fine-tuned specifically for SEC document analysis. Because 8-Ks capture discrete events rather than comprehensive annual narratives, they typically produce 1-3 highly focused signals per filing.

📎
See real delivered data → Sample Files

Each filing is classified into one or more of 70+ event subtypes (cybersecurity incidents, leadership changes, material contracts, acquisitions, and more) — the specific business events we extract from the document.

Available Subtypes (70+)

Subtype Enum	Description
`acquisitionAnnounced`	Company announced an upcoming acquisition
`acquisitionCompleted`	Company completed an acquisition
`aiInvestment`	Company is investing in AI/ML capabilities
`auditIssue`	Audit findings or concerns identified
`automationInvestment`	Investing in automation initiatives to improve efficiency
`backlogGrowth`	Order backlog is growing significantly
`bankruptcyProceeding`	Bankruptcy filing or proceeding disclosed
`boardChange`	Changes to board of directors
`bookingsDecline`	Decline in bookings or orders
`capacityConstraint`	Facing capacity constraints or limitations
`capexIncrease`	Capital expenditure is increasing
`carbonCommitment`	Carbon reduction or net-zero commitments
`cashFlowConcern`	Facing cash flow challenges or concerns
`ceoChange`	New CEO appointed
`cfoChange`	New CFO appointed
`channelShift`	Shifting sales or distribution channels
`chroChange`	New Chief Human Resources Officer appointed
`cioChange`	New CIO appointed
`cisoChange`	New CISO appointed
`cloudInvestment`	Investing in cloud infrastructure and migration
`cmoChange`	New CMO appointed
`competitorNamed`	Specific competitor mentioned as significant threat
`complianceBurden`	Facing significant regulatory compliance challenges
`cooChange`	New COO appointed
`costReduction`	Actively pursuing cost reduction initiatives
`croChange`	New Chief Revenue Officer appointed
`ctoChange`	New CTO appointed
`customerChurn`	Experiencing customer churn issues
`customerConcentration`	Revenue concentrated in few customers
`cybersecurityIncident`	Cybersecurity breach or incident disclosed
`cybersecurityInvestment`	Investing in cybersecurity measures and infrastructure
`dataInvestment`	Investing in data and analytics capabilities
`debtRefinancing`	Refinancing debt obligations
`deiInitiative`	Diversity, equity, and inclusion initiatives
`digitalTransformation`	Undergoing digital transformation initiatives
`divestiture`	Divesting business units or assets
`environmentalLiability`	Facing environmental liability or remediation
`founderDeparture`	Founder leaving the company
`generalCounselChange`	New General Counsel appointed
`goodwillImpairment`	Taking goodwill impairment charges
`governanceChange`	Corporate governance changes
`hiringFreeze`	Hiring freeze announced
`inflationImpact`	Inflation significantly impacting costs or margins
`internalControlWeakness`	Internal control weaknesses identified
`internationalGrowth`	Expanding international presence
`inventoryIssue`	Facing inventory management challenges
`jointVenture`	Forming joint venture or strategic partnership
`laborShortage`	Facing labor or talent shortages
`layoffs`	Workforce reduction announced
`legacyModernization`	Modernizing legacy systems and technical debt
`litigationMaterial`	Facing material litigation or legal matters
`logisticsChallenge`	Experiencing logistics and distribution difficulties
`majorContractLoss`	Lost significant contract or deal
`majorContractWin`	Won significant contract or deal
`manufacturingIssue`	Facing manufacturing challenges or capacity constraints
`marginPressure`	Profit margins under pressure
`marketExpansion`	Expanding into new markets or segments
`marketShareLoss`	Losing market share to competitors
`materialContract`	Significant contract or agreement disclosed
`platformStrategy`	Pursuing platform-based business strategy
`pricingPressure`	Facing competitive pricing pressure
`productLaunch`	Launching new products or services
`productLiability`	Facing product liability issues
`qualityIssue`	Product or service quality issues
`recurringRevenueShift`	Shifting business model toward recurring revenue
`regulatoryFine`	Regulatory fine or penalty
`regulatoryInvestigation`	Under regulatory investigation
`restructuring`	Undergoing organizational restructuring
`restructuringCharge`	Taking restructuring charges
`softwareImplementation`	Implementing major new software systems
`spinoff`	Spinning off business unit
`successionAnnouncement`	Leadership succession plan announced
`supplierConcentration`	Supply chain concentrated in few suppliers
`supplyChainDisruption`	Experiencing supply chain disruptions
`sustainabilityInvestment`	Investing in ESG and sustainability initiatives

Categories group subtypes into higher-level themes — a common way to filter signals by sales motion or use case.

Signal Categories

Category	Description
`strategic`	M&A, platform strategy, product launches, ESG initiatives
`market`	Expansion, competition, pricing, customer dynamics
`financial`	Margins, capex, debt, revenue model changes
`technology`	AI, automation, digital transformation, cybersecurity investments
`risk`	Compliance, internal controls, concentration risks
`operations`	Supply chain, inventory, restructuring, cost reduction initiatives
`revenue`	Revenue trends, bookings, growth signals
`workforce`	Leadership changes, talent acquisition, labor challenges
`leadership`	Executive and board changes
`esg`	Environmental, social, governance initiatives

Example Signal

What a single entry looks like in a delivered signal file:

{
  "signal_id": "b7e41a92-3f8c-4d19-a5c2-91f7d3028e54",
  "batch_id": "2026-03-15-00-00-00",
  "signal_type": "8k",
  "signal_subtype": "cybersecurityIncident",
  "detected_at": "2026-03-15T08:14:22.337104Z",
  "association": "company",
  "company": {
    "name": "Johnson Controls International plc",
    "domain": "johnsoncontrols.com",            // match on domain
    "linkedin_url": "linkedin.com/company/johnson-controls",  // or match on LinkedIn URL
    "industries": ["Industrial Automation"],
    "employee_count_low": 10001,
    "employee_count_high": 50000,
    "description": "Building technology and smart infrastructure..."
  },
  "contact": [],
  "data": {
    "summary": "Johnson Controls disclosed a ransomware attack that compromised internal systems supporting its OpenBlue smart-building platform...",
    "detail": "The 8-K reveals that threat actors gained access to Johnson Controls' corporate network and deployed ransomware affecting building automation and security systems data. The company engaged external IR counsel and forensic specialists...",
    "relevance": 0.94,                      // 0.0-1.0; higher = more actionable for outreach
    "excerpts": "On September 23, 2025, the Company determined that it experienced a cybersecurity incident involving unauthorized access to its internal IT infrastructure and applications, including portions of the OpenBlue platform...",
    "source_url": "https://www.sec.gov/Archives/edgar/data/833444/000083344426000018/jci-20260312.htm",
    "confidence": "high",                    // how certain this signal is accurate
    "sentiment": "negative",
    "competitors_mentioned": [],
    "vendors_mentioned": ["CrowdStrike", "Mandiant"],
    "technologies_mentioned": [
      "building automation systems",
      "incident response",
      "endpoint detection",
      "network segmentation"
    ],
    "regions_mentioned": ["United States", "Ireland"],
    "fiscal_year_end": "09/30",
    "filing_year": 2026,
    "sales_relevance": "Active incident response and security infrastructure rebuild underway",
    "filing_date": "2026-03-12",
    "signal_category": "risk",
    "metrics": {
      "dollar_millions": 27.0,
      "dollar_context": "Estimated remediation and recovery costs disclosed in the filing",
      "pct": null,
      "pct_context": null,
      "timeframe": "current_year"
    }
  }
}

Field Reference

Standard envelope and entity fields are shared across all signals — see Schema and Resolution. The fields below are specific to this signal:

Signal-Specific Fields

The data object contains everything unique to this signal type — the intelligence extracted from the filing.

Field	Type	Description
`summary`	string	One-line headline describing the signal (e.g., "Johnson Controls disclosed a ransomware attack compromising its OpenBlue platform"). Designed to be shown directly to end users as a notification or list item. Typically 10–20 words, always includes the company name and the core event
`detail`	string	Multi-sentence analysis written for a salesperson or account executive. Explains what the company disclosed, why it matters commercially, and what kind of vendor or solution they might need. Typically 3–5 sentences. Generated by synthesizing the full 8-K filing — not just the excerpt
`relevance`	float (0.0–1.0)	How actionable this signal is for outreach. Higher = stronger commercial signal. Useful for prioritization and filtering
`confidence`	string	Confidence that this event actually occurred and was categorized accurately. `high`, `medium`, or `low`. Useful for filtering in production
`sentiment`	string	Whether the disclosed event is favorable (`positive`), unfavorable (`negative`), or informational (`neutral`) for the company. Useful for segmenting outreach tone
`excerpts`	string	A representative direct quote pulled from the SEC filing that supports this signal. This is one passage that best illustrates the event — the model reads the full document and may synthesize insights from multiple sections that aren't all quoted here. Useful for displaying to users as proof or for fact-checking against the source
`source_url`	string (URL)	Link to the filing on SEC EDGAR. Useful for displaying to users who want to validate or fact-check the signal
`competitors_mentioned`	array[string]	Competitors explicitly named in the filing. Empty array if none found
`vendors_mentioned`	array[string]	Vendors or partners explicitly named. Useful for identifying existing tech stack
`technologies_mentioned`	array[string]	Technologies, platforms, or tools referenced. Useful for building tech-stack-based targeting
`regions_mentioned`	array[string]	Geographic regions referenced. Useful for territory-based routing
`fiscal_year_end`	string	Company's fiscal year end in MM/DD format. Useful for filtering by reporting cycle or aligning to budget seasons
`filing_date`	string (date)	Date the filing was submitted to the SEC. Useful for recency filtering
`filing_year`	integer	Calendar year the filing was submitted
`sales_relevance`	string	Brief phrase describing the outreach angle this signal creates. Useful as a prompt input or display label
`signal_category`	string	Category grouping (see Signal Categories above). Useful for routing signals to the right sales motion
`metrics.dollar_millions`	float \| null	Dollar amount in millions USD when a specific figure is cited in the filing (e.g., "$27M in remediation costs"). Null when the signal doesn't reference a dollar amount. Useful for sorting signals by financial magnitude
`metrics.dollar_context`	string \| null	What the dollar amount refers to. Useful for displaying alongside the number
`metrics.pct`	float \| null	Percentage value when cited (e.g., 0.44 = 44% growth). Null when no percentage is mentioned
`metrics.pct_context`	string \| null	What the percentage refers to
`metrics.timeframe`	string	Time horizon for the event — one of: `immediate`, `current_quarter`, `current_year`, `next_quarter`, `next_year`, `next_two_years`, `next_three_years`, `multi_year`, `last_year`, `ongoing`

Timing & Delivery

detected_at is when we processed the filing. Use filing_date and source_url for the original submission context.
One signal per subtype per company per filing. A single 8-K can produce multiple signals across different subtypes, but won't fire the same subtype twice for the same filing.
Each delivery arrives in a timestamped folder. Treat all signals in a new folder as recent — no need to diff against prior deliveries.

This signal shares its schema with the other SEC filing signals (10-K, 8-K, 10-Q, 20-F, 6-K).

Coverage

Refresh: Weekly
Coverage: 8,000+ US public companies
Best for: Breaking corporate events, cybersecurity incidents, leadership transitions, M&A activity

Contact Sales →

See real delivered data → Sample Files

Example Signal

Field Reference

Signal-Specific Fields

Timing & Delivery

Coverage