SEC - Securities and Exchange Commission

Heritage Financial Reports Cybersecurity Incident, No Customer Impact Detected Heritage Financial Corporation reported a cybersecurity incident detected on March 2, 2026, involving the exfiltration of files from an internal server. The breach did not affect customer accounts or operations. The company initiated a security response, took the affected system offline, and engaged external advisors for investigation and remediation. Regulators, law enforcement, and the cyber insurance carrier were notified. As of the report date, the incident is not deemed material, and no significant financial or operational impact has been identified. The investigation is ongoing, and the company is assessing potential future risks.