Here is a puzzle that turns up constantly in breach filings: two public companies suffer roughly similar cyber incidents, and one files its 8-K under Item 1.05 while the other files under Item 8.01. Same kind of event, different box on the same form. The choice is not bureaucratic trivia. It is the company telling you, in the SEC's own grammar, what it thinks the incident is.
The distinction is materiality. Item 1.05 is the mandatory channel: once a registrant determines a cybersecurity incident is material, it must disclose under 1.05 within four business days. Item 8.01, "Other Events," is the voluntary channel — a company can use it to disclose an incident it has not concluded is material, or to share information that falls outside any specific 8-K item. So when a breach shows up under 8.01, the filing carries an implicit second statement: and we are not calling this material.
Why would a company volunteer a disclosure it is not legally required to make? Several reasons, and a careful reader weighs them. Sometimes it is transparency — getting ahead of a story that is leaking anyway. Sometimes it is caution — disclosing now under 8.01 to avoid an accusation of hiding it, while preserving the position that the materiality determination is still open. And sometimes a later materiality finding converts the situation, and a follow-on 1.05 appears. The sequence of items across a single incident is a narrative in itself.
The trap to avoid is treating "disclosed" and "deemed material" as the same thing. They are not. An 8.01 filing is a disclosure; it is specifically not a materiality determination. Coverage that reports "Company X disclosed a material breach" when the company filed under 8.01 has put a word in the company's mouth it deliberately withheld. The filing says what it says — and what item it says it under is part of the message.
The practical reading discipline: when a breach 8-K crosses the wire, check the item number first. Under 1.05, the company has made a materiality call and the four-day clock framing applies. Under 8.01, it has chosen to speak without that call. Note timing against discovery, separate confirmed from alleged, and resist the urge to upgrade the company's own characterization. The item number is not paperwork. It is the company's considered answer to the only question the rule actually asks: was this material?