UPS 8-K that EDGAR says discloses a cyber incident shows only Q3 earnings

What happened

An SEC EDGAR headline says United Parcel Service Inc (UPS) “discloses a cyber incident in an SEC Form 8-K filing,” dated 2026-10-27 (SEC EDGAR). UPS has not confirmed an incident in the document available for this advisory, and there is no independent verification.

The linked document is Exhibit 99.1 to that filing. According to UPS, it is a press release announcing third-quarter 2026 earnings (SEC EDGAR). The exhibit covers revenue, operating profit, segment results and raised full-year guidance. It does not describe any cyber incident.

The only cybersecurity reference in the exhibit is in the standard forward-looking statements section. There, UPS lists “a significant cybersecurity incident, or increased data protection regulations” among general risks that could affect future results (SEC EDGAR). This is general risk language, not a report of an event.

The following are not confirmed by the available source:

• that any cyber incident occurred,
• what systems or data, if any, were involved,
• any cause, entry point or attacker,
• any impact on customers.

Am I affected?

Not confirmed. The source material contains no incident details, affected systems, affected data or customer impact. If other parts of the 8-K filing describe an incident, they are not included in the sources available for this advisory.

What to do now

1. Do not treat this listing as evidence of a UPS breach. The exhibit provided is an earnings release (SEC EDGAR).
2. Monitor UPS’s SEC filings and investor relations disclosures for any later filing that actually describes an incident.
3. If UPS publishes an incident notice, follow the guidance it gives. Do not act on unverified reports.

Sources

• SEC EDGAR: UPS Releases 3Q 2026 Earnings (Form 8-K, Exhibit 99.1)