band-20211005
FALSE000151441600015144162021-10-052021-10-05

UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549 
___________________________________________________

FORM 8-K
___________________________________________________
CURRENT REPORT
Pursuant to Section 13 or 15(d)
of the Securities Exchange Act of 1934
Date of Report (Date of earliest event reported) October 5, 2021
___________________________________________________
BANDWIDTH INC.
(Exact name of registrant as specified in its charter)
___________________________________________________
Delaware001-3828556-2242657
(State or other jurisdiction
of incorporation)
(Commission
File Number)
(IRS Employer
Identification No.)
900 Main Campus Drive
Raleigh, NC 27606
(Address of principal executive offices) (Zip Code)
(800) 808-5150
Registrant’s telephone number, including area code
Not Applicable
(Former name or former address, if changed since last report)
___________________________________________________
Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions:
Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425)
Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)
Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))
Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act:
Title of each classTrading Symbol(s)Name of each exchange on which registered
Class A Common Stock, par value $0.001 per shareBANDNASDAQ Global Select Market
Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter).
Emerging growth company   
If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. 





Item 7.01 Regulation FD Disclosure.
On October 5, 2021, the Company issued a press release regarding its recent DDoS attack. A copy of the Company’s press release is attached hereto as Exhibit 99.1.
Beginning on September 25, 2021, Bandwidth’s communications network has been subjected to a distributed denial of service (DDoS) attack initially causing intermittent communications services disruptions affecting certain of our markets and customers. Bandwidth’s mitigation efforts, in conjunction with our partners from leading cybersecurity firms, are proving successful. Bandwidth’s network has been largely stable and operating at normal service levels since the evening of Sept. 29, although there have been some continued intermittent disruptions.
We regularly update our customers and partners on our network operational readiness. The status of our network operations may be accessed at https://status.bandwidth.com.
We are in the early stages of our investigation and assessment of this incident. Based on our evaluation of the preliminary data and currently known information, we believe that lost transaction volume and potential customer credits may, in the aggregate, reduce our total revenue for the quarter ended September 30, 2021, by an amount between $0.5 million and $1.5 million.
We look forward to discussing more about this attack and our response, our third quarter financial results, and our full year 2021 outlook in our upcoming third quarter 2021 earnings conference call.
The information set forth under this Item 7.01, including Exhibit 99.1, shall not be deemed “filed” for purposes of Section 18 of the Exchange Act, or incorporated by reference in any filing under the Securities Act of 1933, as amended, or the Exchange Act, except as shall be expressly set forth by specific reference in such a filing.

Forward-Looking Statements
This current report on Form 8-K includes forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. All statements contained in this current report on Form 8-K other than statements of historical facts, are forward-looking statements. The words “anticipate,” “believe,” “continue,” “estimate,” “expect,” “intend,” “guide,” “may,” “will” and similar expressions and their negatives are intended to identify forward-looking statements. We have based these forward-looking statements largely on our current expectations regarding the distributed denial of service (“DDoS”) attack discussed above, as well as data loss or other security breaches, our ability to asses and remedy the DDoS attack referenced above, and legal, reputational and financial risks resulting from this or other cybersecurity incidents. These forward-looking statements are subject to a number of risks and uncertainties, including, without limitation; projections about future events and financial trends that we believe may affect our financial condition, results of operations, business strategy, short-term and long-term business operations and objectives and financial needs, risks related to our rapid growth and ability to sustain our revenue growth rate, competition in the markets in which we operate, market growth, our ability to innovate and manage our growth, our ability to expand effectively into new markets, risks that the anticipated benefits of the acquisition of Voxbone may not be fully realized or may take longer to realize than expected, our ability to operate in compliance with applicable laws, as well as other risks and uncertainties set forth in the “Risk Factors” section of our latest Form 10-K filed with the Securities and Exchange Commission and any subsequent reports that we file with the Securities and Exchange Commission. Moreover, we operate in a very competitive and rapidly changing environment. New risks emerge from time to time. It is not possible for our management to predict all risks, nor can we assess the impact of all factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements we may make. In light of these risks, uncertainties and assumptions, we cannot guarantee future results, levels of activity, performance, achievements or events and circumstances reflected in the forward-looking statements will occur. We are under no obligation to update any of these forward-looking statements after the date of current report on Form 8-K to conform these statements to actual results or revised expectations, except as required by law. You should, therefore, not rely on these forward-looking statements as representing our views as of any date subsequent to the date hereof.





Item 9.01 Financial Statements and Exhibits.

(d) Exhibits
Exhibit No.Description
Press release, dated October 5, 2021
104Cover Page Interactive File (the cover page tags are embedded within the Inline XBRL document)



SIGNATURES
Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.
BANDWIDTH INC.
Date: October 5, 2021By:/s/ Daryl Raiford
Name:Daryl Raiford
Title:Chief Financial Officer


Document

Exhibit 99.1

BANDWIDTH ISSUES STATEMENT ON RECENT DDOS ATTACK 
RALEIGH, N.C. – Oct. 5, 2021 -- Bandwidth Inc. (NASDAQ: BAND), a leading global enterprise cloud communications company, today issued the following statement in a blog post from CEO David Morken:
To our customers and partners:
On Tuesday, Sept. 28, I posted here to inform you of a DDoS attack aimed at Bandwidth and other providers in the VoIP industry. Here’s where we stand now:
I’m pleased to report that our mitigation efforts are proving successful. Bandwidth’s network has been largely stable and operating at normal service levels since the evening of Sept. 29, although there have been some continued intermittent disruptions.
In the midst of some incredibly challenging moments, I have been inspired by the response of our customers. We’ve had some difficult conversations this past week, but for every tough call, we’ve had multiple positive, supportive ones. Even as our customers are understandably concerned, we’ve been moved by the many demonstrations of support we have received. Some of our very largest customers have been at the table with us, fighting shoulder-to-shoulder in unprecedented ways and collaborating with us to defend the ecosystem.
We are staying vigilant, and our confidence is growing.
First, we will continue to vigorously defend against these attacks.
Second, we continue to serve our customers with transparency, candor, and integrity. Some of you may have suffered service impacts as a result of this attack. In every conversation, ticket, and TAC call, we will reinforce that your trust and faith in Bandwidth is deserved.
Finally, we will continue to collaborate with our customers and partners to keep the VoIP ecosystem strong. The attackers took advantage of the unique characteristics of real-time communications, as well as the highly interconnected nature of our industry. Our deep collaboration with some of Bandwidth’s most intrepid customers and partners allowed us to go on the offensive against the perpetrators in an unprecedented way. Our response to this attack is enhancing the playbook for how to fight back against an industry-wide threat for which there is no off-the-shelf response. We will make every effort to share these learnings in hopes of making our entire ecosystem safer.
Thank you for your partnership,
David Morken

About Bandwidth Inc.
Bandwidth (NASDAQ: BAND) is a global communications software company that helps enterprises connect people around the world with cloud-ready voice, messaging, and emergency services. Backed by a global network of more than 60 countries reaching over 90 percent of GDP, companies like Cisco, Google, Microsoft, RingCentral, Uber and Zoom use Bandwidth's APIs to easily embed communications into software and applications. Bandwidth has more than 20 years in the technology space and was the first Communications Platform-as-a-Service (CPaaS) provider to offer a robust selection of APIs built around our own global network. Our award-winning support teams help businesses around the world solve complex communications challenges every day. More information is available at www.bandwidth.com.

Forward-Looking Statements
This current report on Form 8-K includes forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. All statements contained in this current report on Form 8-K other than statements of historical facts, are forward-looking statements. The words “anticipate,” “believe,” “continue,” “estimate,” “expect,”



“intend,” “guide,” “may,” “will” and similar expressions and their negatives are intended to identify forward-looking statements. We have based these forward-looking statements largely on our current expectations regarding the distributed denial of service (“DDoS”) attack discussed above, as well as data loss or other security breaches, our ability to asses and remedy the DDoS attack referenced above, and legal, reputational and financial risks resulting from this or other cybersecurity incidents. These forward-looking statements are subject to a number of risks and uncertainties, including, without limitation; projections about future events and financial trends that we believe may affect our financial condition, results of operations, business strategy, short-term and long-term business operations and objectives and financial needs, risks related to our rapid growth and ability to sustain our revenue growth rate, competition in the markets in which we operate, market growth, our ability to innovate and manage our growth, our ability to expand effectively into new markets, risks that the anticipated benefits of the acquisition of Voxbone may not be fully realized or may take longer to realize than expected, our ability to operate in compliance with applicable laws, as well as other risks and uncertainties set forth in the “Risk Factors” section of our latest Form 10-K filed with the Securities and Exchange Commission and any subsequent reports that we file with the Securities and Exchange Commission. Moreover, we operate in a very competitive and rapidly changing environment. New risks emerge from time to time. It is not possible for our management to predict all risks, nor can we assess the impact of all factors on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements we may make. In light of these risks, uncertainties and assumptions, we cannot guarantee future results, levels of activity, performance, achievements or events and circumstances reflected in the forward-looking statements will occur. We are under no obligation to update any of these forward-looking statements after the date of current report on Form 8-K to conform these statements to actual results or revised expectations, except as required by law. You should, therefore, not rely on these forward-looking statements as representing our views as of any date subsequent to the date hereof.
 
Investor Contact:
Sarah Walas
Bandwidth
919-504-6585
ir@bandwidth.com

Media Contact:
David Doolittle
Bandwidth
919-275-5571
ddoolittle@bandwidth.com