River Financial Corp

ITEM 1.05 Material Cybersecurity Incidents. As set forth in its Form 8-K filed July 10, 2026, two class action lawsuits were filed relating to the unauthorized threat actor gaining access to the network environment of River Financial Corporation, including River Bank & Trust (together, “River”). A third class action was filed against River on July 10, 2026 and a fourth class action was filed against River on July 16, 2026. The principal issue in each case is whether cybercriminals have acquired access to River’s customers’ personal identifiable information. As of the date of this filing, River has not yet determined the full nature, scope and impact of the incident. In addition, it has not yet been confirmed whether the incident is reasonably likely to materially impact business or the financial condition of River. River will file an amendment to this Current Report on Form 8-K within four business days after it determines that any of the forgoing information is available.