diff --git a/src/Events/TwoFactorAuthenticationFailed.php b/src/Events/TwoFactorAuthenticationFailed.php
new file mode 100644
index 00000000..105a7679
--- /dev/null
+++ b/src/Events/TwoFactorAuthenticationFailed.php
@@ -0,0 +1,8 @@
+<?php
+
+namespace Laravel\Fortify\Events;
+
+class TwoFactorAuthenticationFailed extends TwoFactorAuthenticationEvent
+{
+    //
+}
diff --git a/src/Http/Controllers/TwoFactorAuthenticatedSessionController.php b/src/Http/Controllers/TwoFactorAuthenticatedSessionController.php
index 794edf47..1bd04115 100644
--- a/src/Http/Controllers/TwoFactorAuthenticatedSessionController.php
+++ b/src/Http/Controllers/TwoFactorAuthenticatedSessionController.php
@@ -9,6 +9,7 @@
 use Laravel\Fortify\Contracts\TwoFactorChallengeViewResponse;
 use Laravel\Fortify\Contracts\TwoFactorLoginResponse;
 use Laravel\Fortify\Events\RecoveryCodeReplaced;
+use Laravel\Fortify\Events\TwoFactorAuthenticationFailed;
 use Laravel\Fortify\Http\Requests\TwoFactorLoginRequest;
 
 class TwoFactorAuthenticatedSessionController extends Controller
@@ -61,6 +62,8 @@ public function store(TwoFactorLoginRequest $request)
 
             event(new RecoveryCodeReplaced($user, $code));
         } elseif (! $request->hasValidCode()) {
+            event(new TwoFactorAuthenticationFailed($user));
+
             return app(FailedTwoFactorLoginResponse::class)->toResponse($request);
         }
 
diff --git a/tests/AuthenticatedSessionControllerWithTwoFactorTest.php b/tests/AuthenticatedSessionControllerWithTwoFactorTest.php
index dbc93018..564ef307 100644
--- a/tests/AuthenticatedSessionControllerWithTwoFactorTest.php
+++ b/tests/AuthenticatedSessionControllerWithTwoFactorTest.php
@@ -8,6 +8,7 @@
 use Illuminate\Support\Facades\Event;
 use Illuminate\Support\Facades\Hash;
 use Laravel\Fortify\Events\TwoFactorAuthenticationChallenged;
+use Laravel\Fortify\Events\TwoFactorAuthenticationFailed;
 use Laravel\Fortify\Features;
 use Laravel\Fortify\Tests\Models\UserWithTwoFactor;
 use Orchestra\Testbench\Attributes\DefineEnvironment;
@@ -200,6 +201,8 @@ public function test_two_factor_authentication_preserves_remember_me_selection()
 
     public function test_two_factor_challenge_fails_for_old_otp_and_zero_window()
     {
+        Event::fake();
+
         // Setting window to 0 should mean any old OTP is instantly invalid
         Features::twoFactorAuthentication(['window' => 0]);
 
@@ -222,6 +225,8 @@ public function test_two_factor_challenge_fails_for_old_otp_and_zero_window()
             'code' => $previousOtp,
         ]);
 
+        Event::assertDispatched(TwoFactorAuthenticationFailed::class);
+
         $response->assertRedirect('/two-factor-challenge')
                  ->assertSessionHas('login.id')
                  ->assertSessionHasErrors(['code']);