Item 8.01 section not located in normalized markdown

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

Form 8-K

CURRENT REPORT

Pursuant to Section 13 OR 15(d)

of the Securities Exchange Act of 1934

Date of Report (Date of earliest event reported): June 9, 2026

POPULAR, INC.

(Exact name of registrant as specified in its charter)

| Puerto Rico | 001-34084 | 66-0667416 | ||
| (State or other jurisdiction of incorporation or organization) |
(Commission File Number) |
(IRS Employer Identification Number) |

| 209 Muñoz Rivera Avenue Hato Rey, Puerto Rico |
00918 | |
| (Address of principal executive offices) | (Zip code) |

(787) 765-9800

(Registrant’s telephone number, including area code)

NOT APPLICABLE

(Former name, former address and former fiscal year, if changed since last report)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instruction A.2. below):

| ☐ | Written communication pursuant to Rule 425 under the Securities Act (17 CFR 230.425) |

| ☐ | Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12) |

| ☐ | Pre-commencement communication pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b)) |

| ☐ | Pre-commencement communication pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c)) |

Securities registered pursuant to Section 12(b) of the Act:

| Title of each class |
Trading |
Name of each exchange | ||
| Common Stock ($0.01 par value) | BPOP | The NASDAQ Stock Market | ||
| 6.125% Cumulative Monthly Income Trust Preferred Securities | BPOPM | The NASDAQ Stock Market |

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter).

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

| Item 8.01. | Other Events. |

On May 15, 2026, Popular, Inc. (the “Corporation”) was notified by Evertec, Inc. (“Evertec”), a third-party core financial transaction processing and information technology services provider of the Corporation, that Evertec had experienced a cybersecurity incident affecting certain data of its clients, including that of Banco Popular de Puerto Rico (“BPPR”), the Corporation’s Puerto Rico banking subsidiary. Subsequent to its initial notification, Evertec notified the Corporation that it had identified additional data from BPPR that had been compromised. Based on information gathered to date, the affected data includes personal information of certain BPPR customers, including debit card numbers and certain other information. The Corporation is assessing the situation closely with Evertec and has implemented enhanced fraud monitoring measures to further protect its customers. The Corporation has a contractual right to be covered by Evertec for losses resulting from, and reasonable and customary costs and expenses related to, the incident.

The Corporation promptly initiated its cybersecurity incident response protocols and has notified applicable regulators. Affected customers will be notified directly, as appropriate.

The Corporation’s systems were not accessed in or otherwise affected by this incident.

Based on the information currently available, the Corporation does not believe that the incident is reasonably likely to have a material impact on the Corporation’s operations, financial condition or results of operations.

Cautionary Note Regarding Forward-Looking Statements

This Current Report on Form 8-K contains “forward-looking statements” within the meaning of the U.S. Private Securities Litigation Reform Act of 1995, in