POPULAR, INC.

8-K · d46942d8k.htm

0000763901 2026-06-09 2026-06-09 0000763901 us-gaap:CommonStockMember 2026-06-09 2026-06-09 0000763901 us-gaap:CumulativePreferredStockMember 2026-06-09 2026-06-09
  
  
 UNITED STATES
 SECURITIES AND EXCHANGE COMMISSION
 Washington, D.C. 20549
  
  

 Form 8-K
  
  

 CURRENT REPORT
 Pursuant to Section 13 OR 15(d)
 of the Securities Exchange Act of 1934
 Date of Report (Date of earliest event reported): June 9, 2026
  
  

 POPULAR, INC.
 (Exact name of registrant as specified in its charter)
  
  

  

 Puerto Rico
  
 001-34084
  
 66-0667416

 (State or other jurisdiction of
 incorporation or organization)

  
 (Commission
 File Number)

  
 (IRS Employer
 Identification Number)

  

 209 Muñoz Rivera Avenue
 Hato Rey , Puerto Rico

  
 00918

 (Address of principal executive offices)
  
 (Zip code)

 (787) 765-9800
 (Registrant’s telephone number, including area code)
 NOT APPLICABLE
 (Former name, former address and former fiscal year, if changed since last report)
  
  

 Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions ( see General Instruction A.2. below):
  

  
 ☐
 Written communication pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

  

  
 ☐
 Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

  

  
 ☐
 Pre-commencement communication pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

  

  
 ☐
 Pre-commencement communication pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

 Securities registered pursuant to Section 12(b) of the Act:
  

 Title of each class

  
 Trading
Symbol(s)

  
 Name of each exchange
on which registered

 Common Stock ($0.01 par value)
  
 BPOP
  
 The NASDAQ Stock Market

 6.125% Cumulative Monthly Income Trust Preferred Securities
  
 BPOPM
  
 The NASDAQ Stock Market

 Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter).
 Emerging growth company  ☐
 If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐
  
  
  

 Item 8.01.
 Other Events.

 On May 15, 2026, Popular, Inc. (the “Corporation”) was notified by Evertec, Inc. (“Evertec”), a third-party core financial transaction processing and information technology services provider of the Corporation, that Evertec had experienced a cybersecurity incident affecting certain data of its clients, including that of Banco Popular de Puerto Rico (“BPPR”), the Corporation’s Puerto Rico banking subsidiary. Subsequent to its initial notification, Evertec notified the Corporation that it had identified additional data from BPPR that had been compromised. Based on information gathered to date, the affected data includes personal information of certain BPPR customers, including debit card numbers and certain other information. The Corporation is assessing the situation closely with Evertec and has implemented enhanced fraud monitoring measures to further protect its customers. The Corporation has a contractual right to be covered by Evertec for losses resulting from, and reasonable and customary costs and expenses related to, the incident.
 The Corporation promptly initiated its cybersecurity incident response protocols and has notified applicable regulators. Affected customers will be notified directly, as appropriate.
 The Corporation’s systems were not accessed in or otherwise affected by this incident.
 Based on the information currently available, the Corporation does not believe that the incident is reasonably likely to have a material impact on the Corporation’s operations, financial condition or results of operations.
 Cautionary Note Regarding Forward-Looking Statements
 This Current Report on Form 8-K contains “forward-looking statements” within the meaning of the U.S. Private Securities Litigation Reform Act of 1995, including statements regarding the Corporation’s current expectations regarding the cybersecurity incident and its impacts. These statements are based on management’s current expectations and, by their nature, involve risks and uncertainties. Potential factors, some of which are beyond the Corporation’s control, could cause actual results to differ materially from those expressed in, or implied by, such forward-looking statements. Risks and uncertainties include, without limitation, the results of Evertec’s analysis of the scope and details of the cybersecurity incident and the discovery of new or additional information; any potential adverse impact of the cybersecurity incident on the Corporation’s operations, financial condition or results of operations; diversion of management’s attention from operations of the Corporation to address the cybersecurity incident; potential adverse effects on relationships with customers and other third parties as a result of the cybersecurity incident; regulatory scrutiny of the cybersecurity incident; risks related to the availability of the cost and expense reimbursement and insurance coverage; and other risks described in Part I, Item 1A: Risk Factors included in the Corporation’s Annual Report on Form 10-K for the year ended December 31, 2025 and other reports on file with the Securities and Exchange Commission.

 SIGNATURE
 Pursuant to the requirements of the Securities Exchange Act of 1934, as amended, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.
  

  
  
  
  
 POPULAR, INC.
 (Registrant)

 Date: June 9, 2026
  

  
 By:
  
 /s/ José R. Coleman Tió

  

  

  
 José R. Coleman Tió

  

  

  
 Executive Vice President and Chief Legal Officer