Current Report Filing (8-k)

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

_____________________________________________

FORM 8-K

_____________________________________________

CURRENT REPORT

Pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934

9/29/2020 (9/29/2020)

Date of Report (Date of earliest event reported)

_____________________________________________

TYLER TECHNOLOGIES, INC.

(Exact name of registrant as specified in its charter)

_____________________________________________

Delaware

1-10485

75-2303920

(State or other jurisdiction of incorporation organization)

(Commission
File Number)

(I.R.S. Employer Identification No.)


5101 TENNYSON PARKWAY	PLANO	Texas	75024
(Address of principal executive offices)	(City)	(State)	(Zip code)

(972) 713-3700

(Registrant’s telephone number, including area code)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instruction A.2. below):

☐ Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)

☐ Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

☐ Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

☐ Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c)


Title of each class	Trading symbol	Name of each exchange on which registered
COMMON STOCK, $0.01 PAR VALUE	TYL	New York Stock Exchange

Indicate by check mark whether the registrant is an emerging growth company as defined in as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter).

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Item 8.01 Other Events

Disclosure of Security Incident

The Company has notified its clients of a security incident involving unauthorized access to its internal telephone and information technology systems by an unknown third party. On September 23, 2020, the Company became aware that an unauthorized intruder had disrupted access to some of the Company’s internal systems. That same day, the Company (1) shut down points of access to external systems and immediately began investigating and remediating the problem; (2) engaged outside IT security and forensics experts to conduct a detailed review and help securely restore affected systems; (3) implemented targeted monitoring systems to supplement the systems the Company already had in place; and (4) notified law enforcement. The Company is cooperating with their investigation.

The Company has confirmed that the malicious software the intruder used was ransomware. Because this is an active investigation, the Company is not providing additional specifics relating to the ransomware at this time. The Company is providing approved updates in client communications and on its corporate website, tylertech.com.

Based on the evidence available to date, all indications are that this incident was directed at the Company’s internal corporate network and telephone systems. The environment where the Company hosts software for its clients is separate and segregated from its internal corporate environment. The Company has detected no compromises in client systems that the Company hosts. The Company did notify clients of suspicious logins reported at two Company client sites, and opened channels for clients to advise of suspicious logins on their networks. Of the limited number of reports received, the Company has no evidence of malicious activity on client systems to date and continues to analyze and work closely with clients.

There have been media reports speculating on a possible connection between this incident and upcoming elections. The Company does not make or provide election software. The Socrata open data platform is a Company product used to provide dashboards that display aggregated data from other sources. It is the only Company product that has any relation to election data and none of the Company’s products support voting or election systems or store individual voting records. Users of the Company’s Socrata open data solution may use the platform to post aggregated election results, to promote transparency around campaign finance, or to post information on polling dates and locations. Very few Company clients enlist the application for this use.

The Socrata product is a SaaS data platform that is hosted offsite on AWS (Amazon Web Services), not on the Company’s internal network that was impacted. The Company has never had a report that a bad actor has used its Socrata platform to display incorrect or misleading election results, polling locations, campaign finance information, or other civic data.

The Company is in the early stages of assessing this incident, and the attack has caused and may continue to cause an interruption in parts of its business. Such interruption may result in a loss of revenue and incremental costs that may adversely impact the Company’s financial results. The Company maintains cybersecurity insurance coverage in an amount that the Company believes is adequate. In addition to the other information set forth in this report, one should carefully consider the discussion of the risks and uncertainties cyber-attacks and security vulnerabilities contained in Part I, “Item 1A. Risk Factors” in our 2019 Annual Report on Form 10-K.

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.