Waystar 8-K cyber incident disclosure reported, details not confirmed
An SEC EDGAR headline says Waystar disclosed a cyber incident in an 8-K, but the linked exhibit is an earnings release, so watch for Waystar’s own notice.
- Published
- Ecosystem
- Enterprise software
- Exploitation
- No, the available source text does not mention exploitation, an attacker or any incident details
What happened
An SEC EDGAR headline says that Waystar Holding Corp. disclosed a cyber incident in an SEC Form 8-K filing dated 2026-11-02 (SEC EDGAR).
The document at that link is Exhibit 99.1, titled “Waystar Reports Third Quarter 2026 Results.” It is an earnings release. In the release, Waystar describes itself as “a provider of leading healthcare payment software” and says the release and the related Form 8-K were furnished on November 2, 2026 (SEC EDGAR).
The exhibit text available to us does not mention a cyber incident. These details are not confirmed:
- The nature of the incident
- When it was detected
- Which systems were involved
- Whether any client or patient data was affected
- The cause
- Any attacker
This advisory relies on one source only. There is no independent verification.
Am I affected?
Not confirmed. The available source does not name any affected product, service, client group or data type. If your organisation uses Waystar’s services, whether you are affected cannot be determined from this source.
What to do now
- Read the Form 8-K itself and any later Waystar filings on SEC EDGAR. Look for an incident description, which the exhibit cited here does not contain.
- Watch the Investor Relations page of Waystar’s website. The earnings release says Waystar uses it to disclose material information (SEC EDGAR).
- If you are a Waystar client, ask your account contact directly whether your organisation or data is involved. Do not rely on secondhand reports.
- Do not act on unverified claims about scope, data loss or attribution until Waystar or an official source states them.