Told The Regulator Screensaver
The Told The Regulator screensaver shows US public companies filing an 8-K under Item 1. It’s free, runs in your browser, and ESC exits.
Live preview
Press ESC to leave fullscreen. Settings are saved in your browser only.
How the Told The Regulator screensaver works
The saver reads the source described above and draws it on a canvas — no account, no tracking.
US public companies filing an 8-K under Item 1.05, key-less. Since December 2023 a listed company has four business days to disclose a cyber incident it judges material. Not a list of breaches — a list of breaches a company concluded it could not keep quiet.
It refreshes on a schedule, so what you see stays current.
Colours and any options can be changed in settings; nothing is stored beyond your own browser.
Item 1.05 and cyber incident disclosure
The US Securities and Exchange Commission adopted rules on 26 July 2023 requiring public companies to disclose material cybersecurity incidents on Form 8-K, the report used for significant unscheduled events. Under Item 1.05, the filing is generally due four business days after the company determines that an incident is material, not four days from when the incident began, so the clock starts at the judgement. Form 8-K disclosures began on the later of 90 days after Federal Register publication or 18 December 2023.
Filings describe the material aspects of the nature, scope and timing of the incident and its material impact or likely impact. The rule allows a delay if the US Attorney General determines that immediate disclosure would pose a substantial risk to national security or public safety and notifies the Commission in writing. Smaller reporting companies were given an additional 180 days before they had to begin 8-K disclosures.
A filing is a legal statement by the company, not an independent assessment, and companies differ in how much they say. Only incidents a company judges material fall under this item, so the entries reflect what firms judged disclosure-worthy, not how many were attacked, and a filing is not evidence of how severe an incident was.
A worked example
US public companies filing an 8-K under Item 1.05, key-less. Since December 2023 a listed company has four business days to disclose a cyber incident it judges material. Not a list of breaches — a list of breaches a company concluded it could not keep quiet.
Settings & tips
- Accent and Background recolour the display.
- Every value on screen comes from the live source — nothing is simulated.
- Press ESC to leave fullscreen.
Frequently asked questions
- Is this real data?
- Yes — it comes from the source named on this page and is refreshed on a schedule.
- Is a key needed?
- No. This source is fully key-less.
- Is it free?
- Yes, and it runs entirely in your browser.
- Does a filing under Item 1.05 prove a company was breached?
- It means the company disclosed an incident it considered material. The details come from the company's own description.
- Why does the four-day clock not start at the attack?
- The deadline runs from the company's determination that the incident is material, not from the start of the incident, so the gap between attack and filing can vary.
- Do private companies appear here?
- Generally no. The rule applies to companies with reporting obligations to the SEC, so privately held firms are outside it.