EVERTEC, INC.

Item 8.01 Other Events On May 13, 2026, EVERTEC, Inc. (“Evertec” or the “Company”) learned of potential unauthorized access to customer data. The Company promptly initiated its cyber incident response protocols to contain the intrusion, assess and investigate the nature and scope of the incident, and implement appropriate remedial measures. The Company also notified federal law enforcement authorities and engaged external cybersecurity experts to assist in the investigation and response efforts. While the full scope of impacted data remains under forensic investigation and is subject to change as the assessment continues, at this time the Company believes that an unauthorized party obtained, through a third-party support platform, certain of our financial institution clients’ information related to transaction records, payment card numbers of some customers and, in some instances, customer names and contact information. Based on our current understanding, the Company believes that the incident has primarily impacted our financial institution clients in Puerto Rico and their respective customers. The Company has taken steps to contain the incident and secure our systems, and believes that the unauthorized party no longer has access to the third-party support platform. The Company also is communicating with affected financial institutions and providing support as it continues to assess the full scope of impacted information. To date, this incident has not resulted in operational disruption or interruption in service to any customers. While the investigation remains ongoing, as of the date of this filing, the Company has not yet determined the full impact of the incident. Among other things, the Company expects to incur expenses related to the investigation and remediation of this matter. Although the Company maintains cybersecurity insurance, it has not yet determined the extent of any potential liabilities associated with this matter or the applicability of insurance coverage. Cautionary Note Regarding Forward-Looking Statements Certain statements in this Current Report on Form 8-K constitute “forward-looking statements” within the meaning of, and subject to the protection of, the Private Securities Litigation Reform Act of 1995. We intend such forward-looking statements to be covered by the safe harbor provisions for forward-looking statements contained in Section 27A of the Securities Act and Section 21E of the Exchange Act. All statements contained in this Current Report on Form 8-K other than statements of historical facts, including, without limitation, statements relating to the Company’s current beliefs, understanding and expectations regarding the cybersecurity incident discussed in this Form 8-K and its scope, nature and impact on the Company’s business, operations and financial results are forward-looking statements. Words such as “believes,” “expects,” “anticipates,” “intends,” “projects,” “estimates,” and “plans” and similar expressions of future or conditional verbs such as “will,” “should,” “would,” “may,” and “could” are forward-looking in nature and not historical facts. Factors that could cause actual results to differ from those expressed in these forward-looking statements include, but are not limited to, the outcome of the Company’s ongoing assessment of the incident and its ability to address the impact of this incident; legal, regulatory, reputational and financial risks resulting from this incident or additional incidents; and other important factors set forth under “Part 1, Item 1A. Risk Factors,” in the Company’s Annual Report on Form 10-K for the fiscal year ended December 31, 2025, filed with the Securities and Exchange Commission (the “SEC”) on March 2, 2026, as any such factors may be updated from time to time in the Company’s subsequent filings with the SEC. Unless required by law, the Company expressly disclaims any obligation to update publicly any forward-looking statements, whether as result of new information, future events or otherwise.