UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, D.C. 20549

FORM 8-K

CURRENT REPORT

Pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934

Date of Report (Date of earliest event reported): November 5, 2022

PGT Innovations, Inc.

(Exact name of Registrant as Specified in Its Charter)

Registrant’s Telephone Number, Including Area Code: 941 480-1600

(Former Name or Former Address, if Changed Since Last Report)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions:

Securities registered pursuant to Section 12(b) of the Act:

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§ 230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§ 240.12b-2 of this chapter).

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

ITEM 8.01. Other Events.

On November 5, 2022, PGT Innovations, Inc. (the “Company”) detected a ransomware infection that impacted portions of its network and caused disruption to daily business operations. Immediately, upon discovery, the Company engaged outside cybersecurity experts familiar with these types of incidents to conduct a forensic investigation and assess the extent and scope of the incident. This investigation is in its early stages and ongoing. To date, there is no evidence of personal information being accessed or acquired.

Security is a top priority for the Company, and the Company continues to work to take a series of measures to safeguard the integrity of its information technology systems. Upon detecting the security event, the Company took immediate steps designed to contain the incident and implement its business continuity plans to restore and support continued operations. The Company has notified appropriate law enforcement authorities.

The Company is also working closely with cybersecurity experts and legal counsel. The Company is in the early stages of its investigation and assessment of the security event and cannot determine, at this time, the extent of the impact from such event on its business, results of operations or financial condition or whether such impact will have a material adverse effect. The Company carries insurance, including cyber insurance, commensurate with the size and the nature of its operations. Further, while the Company is communicating with its customers regarding this disruption, it cannot guarantee that its customer relationships will not be harmed as a result of this event. In addition to these risks and other information set forth in this report, one should carefully consider the discussion on the other risks and uncertainties that cybersecurity incidents may have on us, contained in Part I, “Item 1A. Risk Factors” in the Company’s Annual Report on Form 10-K/A for the year ended January 1, 2022.

Forward-Looking Statements

This Current Report on Form 8-K contains “forward-looking statements” within the meaning of the safe harbor provisions of the U.S. Private Securities Litigation Reform Act of 1995. Examples of forward-looking statements include, among others, statements the Company makes regarding its expectations regarding its ability to contain the impacts of the incident and implement business continuity plans; the extent of the impact caused by the incident; and the Company’s ability to continue ongoing operations and safeguard the integrity of its information technology infrastructure, data and customer information. These statements are neither promises nor guarantees, but are subject to a variety of risks and uncertainties, many of which are beyond the Company’s control, which could cause actual results to differ materially from those contemplated in these forward-looking statements. Investors and others are cautioned not to place undue reliance on forward-looking statements. All forward-looking statements contained in this press release speak only as of the date of this Current Report on Form 8-K. Factors that could cause actual results to differ materially from those expressed or implied include the ongoing assessment of the incident, legal, reputational and financial risks resulting from this and/or additional cybersecurity incidents, the effectiveness of business continuity plans during the incident, and the other risks and uncertainties further described in the Part I, “Item 1A. Risk Factors” in the Company’s Annual Report on Form 10-K/A for the year ended January 1, 2022, as well as in the Company’s other reports filed with or furnished to the United States Securities and Exchange Commission, available at www.sec.gov. Forward-looking statements should be considered in light of these risks and uncertainties. These forward-looking statements speak only as of the date of this report or as of the date to which they refer, and the Company assumes no obligation to update any forward-looking statements as a result of new information or future events or developments, except as required by law.

SIGNATURES

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.