Ardent Health discloses November 2023 cyber incident reference in SEC 8-K
Ardent Health says in a Q3 2026 8-K exhibit it had recoveries from a November 2023 cyber incident; no new incident is described, so monitor only.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- Not confirmed, the filing describes no new incident and gives no technical detail
What happened
Ardent Health, Inc. filed an SEC Form 8-K on November 4, 2026. Exhibit 99.1 of that filing is the company’s third quarter 2026 earnings release. In it, Ardent Health says its Adjusted EBITDA measure excludes “recoveries from the cybersecurity incident in November 2023 (the ‘Cybersecurity Incident’), net of incremental information technology and litigation costs” SEC EDGAR.
The text available from this exhibit does not describe a new cyber incident. The release mentions the November 2023 incident only to explain an accounting adjustment. It does not say how that incident happened, which systems or data were involved, or who was responsible. The cause, scope and data affected are not confirmed by this source, and no independent outlet has verified any further detail.
Am I affected?
Not confirmed. The filing names no affected individuals, data types, systems or products. Ardent Health says it operates 30 acute care hospitals and more than 280 sites of care across six states SEC EDGAR. That describes the size of the company, not who the incident affected.
The source names no software, versions or CVEs for developers to check.
What to do now
- Do not treat this filing as notice of a new breach. The text available from the exhibit refers only to an incident in November 2023 SEC EDGAR.
- If you have a relationship with Ardent Health, follow only direct communications from the company about any incident.
- Watch for later SEC filings from Ardent Health in case the company publishes more detail. This source does not confirm any further detail.