Installed Building Products discloses cyber incident in SEC 8-K

What happened

According to a headline from SEC EDGAR dated 2026-11-12, Installed Building Products, Inc. discloses a cyber incident in an SEC Form 8-K filing SEC EDGAR. This advisory rests on that single source, and the claim has no independent verification.

The document available to us at that URL is Exhibit EX-2.1 to the filing, not incident text. According to SEC EDGAR, it is an Agreement and Plan of Merger among Installed Building Products, Inc. (as Purchaser), Platform MSI, Inc., IBP Mechanical & Industrial Installation, LLC, 1981 Holdco, Inc. and Shareholder Representative Services LLC, dated as of November 12, 2026 SEC EDGAR. The excerpt we have contains a table of contents and the opening of the agreement. It says nothing about a cyber incident.

Not confirmed from the sources: what kind of incident occurred, when it was detected, how it happened, who is responsible, whether any data was accessed or taken, which systems were affected, and whether the incident relates to the merger agreement. We do not infer any of these.

Am I affected?

Not confirmed. The sources do not say whether customers, employees, suppliers or any other group are affected, and they name no affected systems, data types or versions. No CVE is referenced.

What to do now

1. Open the filing on SEC EDGAR and read the Form 8-K main document. The exhibit we reviewed does not describe the incident.
2. Watch for direct notices from Installed Building Products, Inc. and treat any message that claims to be from the company with normal caution, using only contact details you have verified yourself.
3. Do not act on rumours about data loss or attribution. None appear in the sources.
4. Check this page for updates if further sourced detail is published.

Sources

• SEC EDGAR: Installed Building Products, Inc. discloses a cyber incident in an SEC Form 8-K filing (EX-2.1, Agreement and Plan of Merger)