ITEM 1.05 Material Cybersecurity Incidents.

As set forth in its Form 8-K filed July 10, 2026, two class action lawsuits were filed relating to the unauthorized threat actor gaining access to the network environment of River Financial Corporation, including River Bank & Trust^¹,²,³ (together, “River”). A third class action was filed against River on July 10, 2026 and a fourth class action was filed against River on July 16, 2026.

The principal issue in each case is whether cybercriminals have acquired access to River’s customers’ personal identifiable information^⁴. As of the date of this filing, River has not yet determined the full nature, scope and impact of the incident.^⁵,⁶ In addition, it has not yet been confirmed whether the incident is reasonably likely to materially impact business or the financial condition of River.^⁷,⁸ River will file an amendment to this Current Report on Form 8-K within four business days after it determines that any of the forgoing information is available.