8X8 INC /DE/

Item 1.05. Material Cyber Security Incident. On June 13, 2026, 8x8, Inc. (the “ Company ” or “ we” ) was informed that an unauthorized third party threat actor exploited the Klue Labs, Inc. (“ Klue ”) third-party application programming integration connected to the Company's Salesforce, Inc. (“ Salesforce ”) customer relationship management system. The threat actor gained unauthorized access and exfiltrated certain information from 8x8’s Salesforce system. This unauthorized access occurred between June 11 and 12, 2026. Upon discovery, 8x8 and Klue, with support from Salesforce, took immediate steps to disable the compromised integration and removed the unauthorized access. The threat actor exfiltrated certain competitively sensitive information about current, former and prospective customers of the Company, including fragmented contract and opportunity information, sales team notes, and contact information (names, business addresses, phone numbers and email addresses of the customers). Our investigation to date indicates that this incident was isolated to information stored in 8x8’s Salesforce system that was accessible through the Klue integration. The Company has and continues to implement additional security measures to reduce the risk of similar unauthorized access in the future. As of the date of this report, other than the Company’s response and remediation activities, the incident has not had an impact on the Company’s business or operations. The Company’s ability to serve customers has not been impacted, and its information systems remain operational and undisrupted. We continue to investigate the extent of the incident including examining the information accessed. We are in the process of notifying the relevant regulatory authorities with respect to the unautho