Company: NOTV
Filing Date: 2025-09-25
Form Type: 8-K
Source: 0001628280-25-042837
Chunk: 2

Company: Inotiv, Inc.
Filing Date: 2025-09-25
Form: 8-K
Item: Item 8.01
Chunk 2
---
, and the related receivable, to $11.0 million as of September 30, 2025.

Privacy Class Actions

The Company has been named as a defendant in three putative class actions relating to the cybersecurity incident reported in the Current Report on Form 8-K filed by the Company on August 18, 2025 (the “2025 Cybersecurity Incident”) pending in the United States District Court for the Northern District of Indiana: (1) Doyal v. Inotiv, Inc., Case No. 4:25-cv-00046 (filed on August 21, 2025); (2) Merrell v. Inotiv, Inc., Case No. 4:25-cv-00047 (filed on August 25, 2025); and (3) Wagner v. Inotiv, Inc., Case No. 4:25-cv-00049 (filed on September 2, 2025). The complaints filed in each action generally allege that the plaintiffs and the proposed class members were harmed when their personally identifying information and protected health information (together, “ Private Information”) was impacted by the 2025 Cybersecurity Incident. The purported class includes all persons in the United States whose Private Information allegedly was impacted by the 2025 Cybersecurity Incident. The complaints seek (i) an order certifying the cases as class actions, (ii) unspecified amounts of monetary damages, restitution, punitive damages, attorneys’ fees and costs, and (iii) certain injunctive or equitable relief relating to (a) the safeguarding of proposed class members’ Private Information, and (b) the implementation of technical and administrative cybersecurity programs, procedures and controls.

Update on Cybersecurity Incident

The 2025 Cybersecurity Incident has caused, and is expected to continue to cause, disruptions to certain business operations of the Company. The Company has restored availability and access to most of the Company’s networks and systems. While the Company is working diligently to restore additional affected functions and systems access, the timeline for completion of restoration efforts is not yet known. The Company continues to accept, and execute on, requests for delivery of its products and services.

The Company’s investigation of the 2025 Cybersecurity Incident is ongoing, and the full scope, nature and impacts, including operational and financial impacts, of the incident are not yet known. Accordingly, the Company has not yet determined whether the 2025 Cybersecurity Incident is reasonably likely to have a material impact on