Technical writing

SEC Form 8-K: The Real-Time Disclosure Feed for Every Material Corporate Event

· 12 min read· AI Analytics
Federal DataSECCorporate DisclosureFinance

When something material happens at a public company—a merger agreement, a bankruptcy filing, an earnings announcement, the abrupt departure of a CEO—federal securities law gives that company four business days to file a Form 8-K with the SEC. The SEC publishes every 8-K on EDGAR the day it arrives. The result is a near-real-time public feed of every significant corporate event across every public company in the United States. Over 100,000 Form 8-Ks are filed annually, spanning routine earnings calls and existential events alike.

This article covers the 8-K's item taxonomy—nine sections, thirty-three specific disclosure items—how each item category is used in practice, the December 2023 cybersecurity disclosure rule that added a new mandatory item, how the earnings release pattern works through Item 2.02, the EDGAR bulk data pipeline for large-scale 8-K analysis, a Python implementation for filtering the quarterly index by item type, and how journalists and investors use 8-K data as a leading indicator of corporate stress, fraud, and executive instability.

What triggers an 8-K

The Form 8-K obligation is triggered by any event listed in the SEC's enumerated item taxonomy. Companies are not required to file 8-Ks for events that fall outside the taxonomy, though they may do so voluntarily under Item 8.01. The four-business-day clock starts on the date the event occurs or—in the case of facts that the company becomes aware of rather than causes—the date the company first becomes aware.

Companies may also file an 8-K/A, an amendment to a prior 8-K, to correct or supplement a prior disclosure. An 8-K/A frequently signals that the original filing was incomplete or that circumstances have changed since the triggering event—for example, a merger agreement amendment filed as an 8-K/A after the original deal terms were renegotiated.

The 8-K item taxonomy

The 8-K form is organized into nine sections (numbered 1 through 9, with section 6 currently reserved). Each section covers a thematic domain; the specific disclosure items are numbered with a decimal, e.g., Item 1.01, Item 2.02. The most analytically significant items:

Section 1: Registrant's business and operations

  • Item 1.01 — Entry into a material definitive agreement. Required when the company enters any agreement—a merger agreement, a major supply contract, a credit facility, a licensing deal—that is material to the company's operations or financial condition. This is one of the highest-frequency items for mid-cap and large-cap companies and is the primary disclosure vehicle for M&A announcements before the deal closes.
  • Item 1.02 — Termination of a material definitive agreement. The counterpart to Item 1.01: filed when a previously disclosed or otherwise material agreement is terminated. Termination of a credit agreement, a major customer contract, or a strategic partnership can be a significant negative event that warrants immediate disclosure. Item 1.02 filings that arrive without an accompanying press release are sometimes an early signal that a company is in distress.
  • Item 1.03 — Bankruptcy or receivership. Required when the company or a significant subsidiary files for bankruptcy protection or is placed into receivership. This is among the most consequential 8-K events: for publicly traded companies with significant bond or equity holder bases, an Item 1.03 filing marks the beginning of the restructuring process and is frequently filed the same day the bankruptcy petition is submitted to the court.
  • Item 1.05 — Material cybersecurity incidents. Added by the SEC's cybersecurity disclosure rules, effective December 18, 2023. Covered in detail in its own section below.

Section 2: Financial information

  • Item 2.01 — Completion of acquisition or disposition of assets. Filed when the company completes the acquisition or disposition of a significant amount of assets, including the closing of a merger or acquisition that was previously announced via Item 1.01. For material acquisitions, Item 2.01 filings must be accompanied by audited financial statements of the acquired business and pro forma financial information, though companies are given up to 71 days to file these financial statements.
  • Item 2.02 — Results of operations and financial condition. This is the quarterly earnings release item. When a company announces quarterly or annual financial results—revenue, earnings per share, guidance—it files an Item 2.02 8-K, typically with an Exhibit 99.1 attachment containing the full press release. Item 2.02 8-Ks are the actual market-moving earnings announcements. Covered in detail below.
  • Item 2.05 — Costs associated with exit or disposal activities. Filed when the company commits to a plan of termination or restructuring that will result in material charges. Often accompanies layoff announcements and facility closures. A cluster of Item 2.05 filings across an industry can be an early indicator of sector-wide contraction.
  • Item 2.06 — Material impairments. Required when the company concludes that a material charge for impairment of assets is required under GAAP. Goodwill impairments, write-downs of long-lived assets, and impairments of investments in subsidiaries all trigger Item 2.06. A large impairment charge frequently signals that the economics of an acquisition or business unit have deteriorated significantly from management's original projections.

Section 3: Securities and trading markets

  • Item 3.01 — Notice of delisting or failure to satisfy listing rules. Filed when the company receives a delisting notice from a national securities exchange (NYSE or Nasdaq) or is otherwise notified that it has failed to satisfy a continued listing standard—typically minimum bid price, minimum stockholders' equity, or minimum market capitalization requirements. An Item 3.01 filing is a severe stress signal; companies that receive delisting notices frequently have 180 days to cure the deficiency, and many fail to do so.

Section 4: Matters related to accountants and financial statements

  • Item 4.01 — Changes in registrant's certifying accountant. Filed when the company dismisses or appoints an independent auditor. The SEC requires disclosure of the reasons for the change, whether any reportable events occurred during the prior auditor's engagement, and whether the outgoing auditor's reports contained any qualifications or adverse opinions. Auditor changes—particularly involuntary changes—are a documented leading indicator of financial reporting problems. Research by Shu (2000) and others has found that companies that fire their auditor experience significantly higher rates of subsequent restatement and regulatory action.
  • Item 4.02 — Non-reliance on previously issued financial statements. Filed when the company or its auditor concludes that previously issued financial statements should no longer be relied upon due to an error or irregularity. An Item 4.02 filing is effectively a restatement notice—it tells the market that prior reported numbers were wrong and will be corrected. Item 4.02 filings are relatively rare but extremely high-signal: they represent cases where management has concluded that investors have been relying on materially incorrect financial information. Academic research has consistently found that restatement announcements are associated with significant negative abnormal returns and elevated fraud risk. For fraud detection purposes, screening the 8-K feed for Item 4.02 filings is one of the most efficient early-warning filters available in public data.

Section 5: Corporate governance and management

  • Item 5.01 — Changes in control of registrant. Required when a change in control of the company occurs. The SEC defines “change in control” broadly to include not only mergers and acquisitions but also the acquisition of a controlling block of shares that gives the acquirer the ability to direct the management and policies of the company.
  • Item 5.02 — Departure of directors or certain officers; election of directors; appointment of certain officers. Among the most frequently monitored items in the 8-K feed. Filed when a named executive officer (CEO, CFO, COO, general counsel, principal accounting officer) departs, is appointed, or when a director joins or leaves the board. The 8-K must disclose the reason for the departure if the officer resigned, retired, or was terminated. Companies often disclose executive departures with anodyne language (“to pursue other opportunities”), but the timing relative to other events—an earnings miss, an SEC inquiry, a restatement—is frequently more informative than the stated reason. A sudden CFO departure within 60 days of an auditor change is a pattern that financial journalists and fraud researchers treat as a high-signal combination.

Sections 7 and 8: Regulation FD and other

  • Item 7.01 — Regulation FD disclosure. Regulation FD, adopted in 2000, prohibits selective disclosure of material non-public information to securities analysts or institutional investors without simultaneously making the same information publicly available. Item 7.01 is the vehicle for disclosures made to comply with Regulation FD—for example, management guidance updates provided at investor conferences that are simultaneously filed with the SEC. Item 7.01 filings are notable because they represent cases where management chose to update investors between regular earnings cycles; abrupt guidance revisions filed under Item 7.01 frequently move the stock significantly.
  • Item 8.01 — Other events. A catchall for material events that do not fit any other enumerated item. Companies use Item 8.01 to disclose litigation outcomes, regulatory enforcement actions, product recalls, natural disaster impacts, and any other significant development they have concluded is material but which the SEC has not specifically enumerated. The volume and content of Item 8.01 filings varies enormously by company and industry.
  • Item 8.02 — Material modifications to rights of security holders. Filed when the company modifies the rights of holders of any class of registered securities. Amendments to the company's charter or bylaws that affect shareholder rights are disclosed here, including the adoption of shareholder rights plans (“poison pills”) adopted in response to unsolicited acquisition attempts.

The December 2023 cybersecurity disclosure rule: Item 1.05

On July 26, 2023, the SEC adopted final rules requiring public companies to disclose material cybersecurity incidents on Form 8-K. The rules became effective December 18, 2023 (with smaller reporting companies given an additional 180-day extension). Item 1.05 requires disclosure of any cybersecurity incident that the company has determined to be material, using the same materiality standard that applies to all other federal securities disclosures: an incident is material if there is a substantial likelihood that a reasonable investor would consider it important in making an investment decision.

The four-business-day clock for Item 1.05 begins on the date the company determines that an incident is material—not the date the incident is first detected. This distinction is significant. A company may discover a breach on Monday, spend two weeks investigating, determine on day fifteen that the breach is material, and then have four business days from that determination to file. The SEC recognized that companies need time to assess whether an incident crosses the materiality threshold, but made clear that the determination itself must be made without unreasonable delay.

The rule also added an annual disclosure requirement in Form 10-K (Item 106 of Regulation S-K) requiring companies to describe their cybersecurity risk management processes and governance structures, and to disclose whether any cybersecurity incidents that occurred during the reporting period were individually or in the aggregate material. The 8-K item and the 10-K item together create a two-part disclosure framework: immediate disclosure of specific material incidents, and annual disclosure of the company's overall cybersecurity posture.

The practical effect of the December 2023 rule has been a measurable increase in 8-K filings related to cybersecurity. In the first year after the rule's effective date, several major companies—including financial institutions, healthcare organizations, and technology companies—filed Item 1.05 8-Ks disclosing incidents ranging from ransomware attacks to third-party vendor breaches. The EDGAR full-text search system allows analysts to filter for “Item 1.05” text in 8-K filings to track this category in near-real-time.

Item 2.02 and the earnings release pattern

The most frequently filed 8-K item by volume across large-cap companies is Item 2.02, results of operations and financial condition. Every quarter, when a public company announces its earnings, it files an Item 2.02 8-K. The filing mechanics follow a consistent pattern:

The company issues a press release—typically distributed via a newswire service such as Business Wire or PR Newswire—containing the headline financial results, management commentary, and updated guidance. Simultaneously or within minutes, the company files an Item 2.02 8-K with the SEC, attaching the same press release as Exhibit 99.1. The 8-K body itself is brief; the substantive disclosure is in the exhibit.

Item 2.02 8-Ks are market-moving events. For S&P 500 companies, earnings announcements frequently cause intraday price moves of two to ten percent or more if results deviate significantly from analyst consensus estimates. Because the 8-K is the official SEC filing of record for the earnings disclosure, financial databases that aggregate earnings data—FactSet, Bloomberg, Refinitiv—use the 8-K accession number and filing date as the canonical timestamp for earnings release timing.

For researchers working with EDGAR data directly, the Item 2.02 8-K with an Exhibit 99.1 attachment is the most reliable way to identify earnings announcements without relying on commercial data vendors. The EDGAR filing index for a given accession number lists all attached exhibits with their document types; a document typed “EX-99.1” in an Item 2.02 8-K is the earnings press release.

Accessing 8-K data via EDGAR

EDGAR provides multiple access paths for 8-K data, from interactive search to programmatic bulk download:

  • EDGAR full-text search. The EDGAR full-text search API at efts.sec.gov/efts/hits.json supports structured queries against the full text of all EDGAR filings. To filter for 8-K filings specifically, append ?q="form-type:8-K" or use the forms=8-K parameter. To find all 8-Ks mentioning a specific item, add the item text to the query: for example, searching for "Item 4.02" within 8-K filings returns all non-reliance disclosures in the search window. The API returns JSON with filing metadata including the accession number, company name, CIK, and filing date.
  • EDGAR quarterly index files. The most efficient path for bulk analysis. The SEC publishes a quarterly index at https://www.sec.gov/Archives/edgar/full-index/, organized by year and quarter. The form.idx file in each directory is a fixed-width text file listing every EDGAR filing: form type, company name, CIK, date filed, and the path to the filing. Filtering this file for form types “8-K” and “8-K/A” gives the complete population for that quarter. Each entry's filename field is the path to the filing index page on EDGAR, from which individual documents can be accessed.
  • EDGAR Submissions API. The SEC's Submissions API at https://data.sec.gov/submissions/CIK{010-digit-CIK}.json returns a JSON document listing all recent filings by a company, including form type, filing date, and accession number. For companies with long filing histories, the API paginates older filings into separate files listed in the files array of the response. The Submissions API is the most convenient programmatic path for retrieving all 8-Ks for a single issuer across its entire filing history.
  • EDGAR company search. The interactive company filing search at https://www.sec.gov/cgi-bin/browse-edgar allows filtering by company name or CIK and by form type. Setting type=8-K returns the 8-K filing history for a single company with links to each filing's index page.

The SEC's access policy for EDGAR data requires that automated requests include a descriptive User-Agent header identifying the requester (name and email address) and respect a rate limit of no more than ten requests per second from a single IP address. The quarterly index files are the most efficient approach for bulk work because a single HTTP request retrieves the complete metadata for an entire quarter.

Filtering by item type with full-text search

The EDGAR full-text search system indexes the complete text of each 8-K filing, making it possible to filter the 8-K universe by the specific item or items disclosed. The item text in each 8-K follows a consistent format: “Item X.XX” appears in the body of the filing, either as a section header or within the narrative. A full-text search for “Item 4.02” within 8-K filings returns only those filings that contain that text—meaning only actual non-reliance disclosures, not all 8-Ks filed by all companies.

This item-level filtering capability enables targeted monitoring of the 8-K feed by event type. An investor focused on auditor quality risk can monitor the Item 4.01 and Item 4.02 subcategories continuously. A credit analyst monitoring distress signals can watch Item 1.03 (bankruptcy) and Item 3.01 (delisting notice) filings. A deal tracker can monitor Item 1.01 (material agreement) filings for new M&A announcements. The filtering can be applied either through the EDGAR full-text search API or by downloading quarterly index files and then fetching and parsing individual filing texts.

Python: filtering the EDGAR 8-K index by item type

The script below downloads the quarterly EDGAR filing index, extracts all 8-K entries, fetches each filing's text, and identifies those containing a specific item—in this case Item 4.02, non-reliance on prior financial statements. Item 4.02 filings function as a fraud early-warning signal: companies do not file them unless their own auditor or management has concluded that previously reported numbers were wrong.

import requests
import csv
import io

BASE = "https://www.sec.gov/Archives/edgar/full-index"
HEADERS = {"User-Agent": "research@example.com"}

def get_8k_index(year: int, quarter: int) -> list[dict]:
    """Download the quarterly EDGAR index and return all 8-K entries."""
    url = BASE + "/" + str(year) + "/QTR" + str(quarter) + "/form.idx"
    r = requests.get(url, headers=HEADERS, timeout=30)
    r.raise_for_status()

    rows = []
    for line in r.text.splitlines():
        # Fixed-width columns: form type (0-11), company (12-73), CIK (74-85),
        # date filed (86-97), filename (98+)
        form_type = line[:12].strip()
        if form_type not in ("8-K", "8-K/A"):
            continue
        company    = line[12:74].strip()
        cik        = line[74:86].strip()
        date_filed = line[86:98].strip()
        filename   = line[98:].strip()
        rows.append({
            "form_type": form_type,
            "company":   company,
            "cik":       cik,
            "date_filed": date_filed,
            "filename":  filename,
        })
    return rows

def fetch_8k_text(filename: str) -> str:
    """Fetch the raw text of a single 8-K filing."""
    url = "https://www.sec.gov/Archives/" + filename
    r = requests.get(url, headers=HEADERS, timeout=30)
    r.raise_for_status()
    return r.text

def filing_contains_item(text: str, item_label: str) -> bool:
    """Return True if the filing text mentions the given item label."""
    needle = item_label.lower()
    return needle in text.lower()

# --- Example: scan Q1 2025 for Item 4.02 non-reliance filings ---
# Item 4.02: Non-Reliance on Previously Issued Financial Statements
# These are a leading indicator of restatements and potential fraud.

year, qtr = 2025, 1
index_rows = get_8k_index(year, qtr)
print("Total 8-K filings in " + str(year) + " Q" + str(qtr) + ": " + str(len(index_rows)))

non_reliance = []
for row in index_rows[:1000]:  # remove slice for full scan
    try:
        text = fetch_8k_text(row["filename"])
        if filing_contains_item(text, "item 4.02") or filing_contains_item(text, "item 4.02"):
            non_reliance.append(row)
    except Exception:
        continue

print("Item 4.02 non-reliance filings found: " + str(len(non_reliance)))
for filing in non_reliance[:10]:
    company    = filing["company"].ljust(40)
    cik        = filing["cik"].rjust(10)
    date_filed = filing["date_filed"]
    print("  " + company + "  CIK: " + cik + "  Filed: " + date_filed)

# --- Submissions API: get all 8-Ks for a specific company ---
def get_company_8ks(cik_padded: str) -> list[dict]:
    """Fetch recent 8-K filings for a company via the EDGAR Submissions API."""
    url = "https://data.sec.gov/submissions/" + cik_padded + ".json"
    r = requests.get(url, headers=HEADERS, timeout=30)
    r.raise_for_status()
    data = r.json()

    filings = data.get("filings", {}).get("recent", {})
    forms      = filings.get("form", [])
    dates      = filings.get("filingDate", [])
    accessions = filings.get("accessionNumber", [])

    results = []
    for form, date, acc in zip(forms, dates, accessions):
        if form in ("8-K", "8-K/A"):
            results.append({"form": form, "date": date, "accession": acc})
    return results

# CIK must be zero-padded to 10 digits, prefixed with "CIK"
example_cik = "CIK0000051143"  # Ford Motor Company
ford_8ks = get_company_8ks(example_cik)
print("Ford 8-K filings (recent): " + str(len(ford_8ks)))
for f in ford_8ks[:5]:
    print("  " + f["date"] + "  " + f["form"] + "  " + f["accession"])

The Submissions API section of the script demonstrates a complementary approach: rather than scanning the quarterly index for all 8-Ks filed by any company, it retrieves the complete 8-K history for a specific issuer. For monitoring a portfolio of companies, the Submissions API call per company is more efficient than parsing the full quarterly index for each quarter. For sector-wide or market-wide surveillance, the quarterly index approach is more practical because it requires fewer API calls.

How journalists and investors use 8-K data

The 8-K feed is one of the most consistently useful public datasets in financial journalism and institutional research because it represents events that companies have themselves determined are material—the disclosure threshold provides a built-in significance filter.

Executive departure tracking. Item 5.02 filings are a beat-monitoring tool for corporate governance reporters. The two-day filing deadline means that when a CFO resigns on Tuesday, a Form 8-K appears on EDGAR by Thursday. Financial journalists monitoring the EDGAR feed can identify unexpected executive departures before they appear in mainstream news coverage. The combination of departure timing, stated reason, and other simultaneous 8-K filings (a concurrent earnings miss, an auditor change, or a pending SEC comment letter) is frequently more informative than the departure announcement itself.

Auditor change surveillance. Item 4.01 filings are among the most consistently predictive leading indicators in public data for subsequent accounting problems. A company that fires its auditor is required to disclose whether any “reportable events” occurred during the prior engagement, including disagreements about accounting treatments, material weaknesses identified by the auditor, and qualifications in prior audit reports. Even when the stated reason for the change is anodyne, the surrounding context—a new auditor from a smaller firm, a long-tenured prior auditor replaced abruptly, a change close to fiscal year-end—provides actionable information.

Material impairment as a lagging stress indicator. Item 2.06 impairment filings frequently reveal that prior acquisition premiums or investment theses have failed. A goodwill impairment charge is an admission that the company overpaid for an asset or that the acquired business has underperformed projections. Tracking Item 2.06 filings across an industry over time reveals which acquirers have systematically overpaid—a pattern with implications for future capital allocation decisions by the same management team.

Non-reliance as a fraud early-warning signal. Item 4.02 non-reliance filings are a high-precision early indicator because they can only be filed after the company itself has concluded that prior financial statements were materially wrong. The universe of Item 4.02 filers in any given year is a small fraction of the total 8-K population—typically a few hundred companies across all reporting periods—but the subsequent incidence of SEC enforcement actions, shareholder litigation, and executive terminations among Item 4.02 filers is significantly elevated relative to the broader public company population. For investigative journalists and short-sellers, a systematic Item 4.02 monitor is one of the most efficient ways to identify companies with potential reporting integrity problems before the full scope of the problem is publicly known.

Cybersecurity incident tracking post-2023. The December 2023 Item 1.05 rule has created a new publicly available dataset on material cybersecurity incidents across public companies. Analysts tracking cyber risk can now monitor EDGAR for Item 1.05 8-Ks to build a real-time picture of breach activity at publicly traded companies—data that was previously available only from informal disclosure, news reports, and regulatory filings after the fact.


For the SEC Form 4 dataset covering insider stock transactions by officers, directors, and ten-percent owners—filed within two business days of each transaction and covering every open-market purchase and sale by corporate insiders: SEC Form 4: the public record of every insider stock transaction →

For the SEC Form 13F dataset covering institutional investor quarterly holdings—the complementary disclosure that shows what large professional money managers own across the market each quarter: Who owns what: indexing SEC Form 13F institutional holdings data →

For the PCAOB audit deficiency dataset—the public inspection data showing which audit firms and which specific audit engagements received Part I.A deficiency findings, covering the same auditor-quality questions that Item 4.01 and Item 4.02 8-Ks surface at the company level: One in four audits flagged: indexing PCAOB deficiency data across the Big 4 →