Compare companies, side by side

Although we have implemented certain processes, procedures and internal controls to help mitigate cybersecurity risks and cyber intrusions, these measures, as well as our increased awareness of the nature and extent of a risk of a cyber incident, do not guarantee that our financial results, operations or confidential information will not be negatively impacted by such an incident.

Word for word as last year Item 1A, Risk Factors, 10-K Feb 11, 2026open_in_new

• the occurrence of cyber-security breaches, terrorist attacks, industrial accidents or natural disasters;

Word for word as last year Item 7, MD&A, 10-K Feb 11, 2026open_in_new

… to, or affected by damage or interruption resulting from, cybersecurity issues, including cyber attacks (including AI-powered cyberattacks), security breaches, fraud (including through phishing or social engineering attempts), malware (including ransomware and other programs that operate with malicious intent), power …

Marked against last year's 10-K

As part of our business, we collect and handle information about our business, customers, employees and suppliers. Despite the security measures we have in place, our facilities and systems systems, and those of third parties we rely on or do business with, may be vulnerable to to, or affected by damage or interruption resulting from, cybersecurity incidents, attacks, issues, including cyber attacks (including AI-powered cyberattacks), security breaches, fraud (including through phishing or social engineering attempts), malware (including ransomware and other programs that operate with malicious intent), power outages, system failures, acts of vandalism, human or technical errors, fraud (including through phishing or other social engineering attempts) or other similar events or disruptions.

Item 1A, Risk Factors, 10-K Feb 19, 2026open_in_new

Disruptions to our information technology systems, including due to digitization efforts or cybersecurity incidents, may interfere with our operating and financial processes, result in the compromise or loss of critical and confidential information and severely harm our business.

Word for word as last year Item 1A, Risk Factors, 10-K Feb 19, 2026open_in_new

… systems, there can be no assurance that a system or network failure, or cybersecurity breach or attack, will be prevented, whether due to attacks by cyber criminals or due to employee, contractor or other error or malfeasance. This could lead …

Marked against last year's 10-K

Although we believe we have adopted procedures, training programs, and controls to adequately protect our sensitive data, networks and information and operating technology and systems, there can be no assurance that a system or network failure, or cybersecurity breach or attack, will be prevented, whether due to attacks by cyber criminals or due to employee, contractor or other error or malfeasance. This could lead to system interruption, production delays or downtimes and operational disruptions, and the disclosure, modification or destruction of sensitive data, which may adversely affect our reputation, customer and supplier relationships, financial results and results of operations, and could result in litigation or regulatory investigations, actions, fines or penalties, as well as increased cybersecurity monitoring and protection costs, including the cost or availability of insurance. Additionally, as cybersecurity threats continue to evolve and become more sophisticated, we may need to invest additional time, resources and finances to protect the security of our sensitive data, systems and information networks. We maintain an information security risk insurance policy to mitigate the impact of cybersecurity threats.

Item 1A, Risk Factors, 10-K Feb 27, 2026open_in_new

and protection costs, including the cost or availability of insurance. Additionally, as cybersecurity threats continue to evolve and become more sophisticated, we may need to invest additional time, resources and finances to protect the security of our sensitive data, systems and information networks. We maintain an information security risk insurance policy to mitigate the impact of cybersecurity threats.

Marked against last year's 10-K

Although we believe we have adopted procedures, training programs, and controls to adequately protect our sensitive data, networks and information and operating technology and systems, there can be no assurance that a system or network failure, or cybersecurity breach or attack, will be prevented, whether due to attacks by cyber criminals or due to employee, contractor or other error or malfeasance. This could lead to system interruption, production delays or downtimes and operational disruptions, and the disclosure, modification or destruction of sensitive data, which may adversely affect our reputation, customer and supplier relationships, financial results and results of operations, and could result in litigation or regulatory investigations, actions, fines or penalties, as well as increased cybersecurity monitoring and protection costs, including the cost or availability of insurance. Additionally, as cybersecurity threats continue to evolve and become more sophisticated, we may need to invest additional time, resources and finances to protect the security of our sensitive data, systems and information networks. We maintain an information security risk insurance policy to mitigate the impact of cybersecurity threats.

Item 1A, Risk Factors, 10-K Feb 27, 2026open_in_new

Increased global information cybersecurity threats and more sophisticated, targeted computer crime pose a risk to the confidentiality, availability and integrity of our data, operations and infrastructure. Our cybersecurity and infrastructure protection technologies, disaster recovery plans and systems, employee training and …

Word for word as last year Item 1A, Risk Factors, 10-K Feb 20, 2026open_in_new

Increased IT and cybersecurity threats and more sophisticated and targeted computer crime could pose a risk to our systems, networks, data, products, facilities and services, and the expansion of related regulatory requirements could increase our costs and disrupt our operations.

Word for word as last year Item 1A, Risk Factors, 10-K Feb 20, 2026open_in_new

Increased cyber-attacks, including computer viruses, ransomware, unauthorized access attempts, phishing, hacking, and other types of attacks pose a risk to the security and availability of our information technology systems, including those provided by third parties. Artificial intelligence ("AI") technologies …

Marked against last year's 10-K

Increased cyber-attacks, including computer viruses, ransomware, unauthorized access attempts, phishing, hacking, and other types of attacks pose a risk to the security and availability of our information technology systems, including those provided by third parties. Emerging artificial Artificial intelligence ("AI") technologies have also enabled threat actors to identify vulnerabilities at an accelerated pace, which increases the scale and sophistication of threats and which may intensify these cybersecurity risks. In addition to traditional attacks, we face threats from sophisticated nation-state and nation-state-supported actors who engage in attacks, including advanced persistent threat intrusions. We have experienced and expect to continue to experience actual and attempted cyber-attacks on our information technology systems by threat parties of all types (including nation-states, criminal enterprises, individuals, or advanced persistent threat groups). Geopolitical instability, including as a result of the Russia-Ukraine conflict, conflict in the Middle East, evolution, scope, and sophistication of cyber-attacks, accessibility of our data by third parties through interconnected networks, and work-from-home arrangements heighten the risk of cyber-attacks.

Item 1A, Risk Factors, 10-K Aug 14, 2026open_in_new

safeguards may not always be able to prevent a cyber-attack from impacting our systems and we may not be able to successfully and timely execute our business recovery protocol, which could have a material impact on our business, financial …

Marked against last year's 10-K

We have operational safeguards in place to detect and prevent cyber-attacks, such as employee training, monitoring of our networks and systems, ensuring strong data protection standards, and maintaining and upgrading security systems but it is virtually impossible to entirely eliminate this risk. To date, we have not experienced any significant impacts. However, our safeguards may not always be able to prevent a cyber-attack from impacting our systems and we may not be able to successfully and timely execute our business recovery protocol or successfully integrate Berry into our cybersecurity risk programs, protocol, which could have a material impact on our business, financial condition, results of operations, or cash flows. Further, as cybersecurity threats continue to evolve, we may be required to make significant investments to modify or enhance our systems to improve our ability to respond and recover. In addition, our customers, suppliers, and third-party service providers are susceptible to cyber-attacks and disruption to their information technology systems, which could result in reduced demand for our products or limit our ability to supply our products.

Item 1A, Risk Factors, 10-K Aug 14, 2026open_in_new

The operation of our facilities, pipelines, and delivery systems inherently entails hazards that require continuous oversight and control, such as pipeline leaks and ruptures, fire, explosions, toxic releases, mechanical failures, vehicle accidents, or cyber incidents. If operational risks materialize, they …

Word for word as last year Item 1A, Risk Factors, 10-K Nov 20, 2025open_in_new

As with most large systems, our information technology systems have in the past been, and in the future likely will be subject to computer viruses, malicious codes, unauthorized access and other cyber-attacks, and we expect the sophistication and frequency …

Marked against last year's 10-K

As with most large systems, our information technology systems have in the past been, and in the future likely will be subject to computer viruses, malicious codes, unauthorized access and other cyber-attacks, and we expect the sophistication and frequency of such attacks to continue to increase. In addition, advancements in, and the deployment of, intelligent automation, including artificial intelligence tooling and “bots”, may increase our and our vendors’ vulnerability to such attacks. To date, we are not aware of any significant impact on our operations or financial results from such attempts; however, unauthorized access could disrupt our business operations, result in the loss of assets, and have a material adverse effect on our business, financial condition, or results of operations. Any of the attacks, breaches or other disruptions or damage described above could: interrupt our operations at one or more sites; delay production and shipments; result in the theft of our and our customers’ intellectual property and trade secrets; damage customer and business partner relationships and our reputation; result in defective products or services, physical damage to facilities, pipelines or delivery systems, including those we own or operate for third parties, parties; result in legal claims and proceedings, including liability and penalties under applicable privacy laws, or laws; lead to increased costs for security and remediation; or raise concerns regarding our internal control environment and internal control over financial reporting. Each of these consequences could adversely affect our business, reputation and our financial statements.

Item 1A, Risk Factors, 10-K Nov 20, 2025open_in_new

… damage or interruptions resulting from obsolescence, natural disasters, power failures, human error, viruses, social engineering, phishing, ransomware or other malicious attacks and cybersecurity events. We upgrade and install new systems, which, if installed or programmed incorrectly or on a delayed …

Word for word as last year Item 1A, Risk Factors, 10-K Feb 25, 2026open_in_new

Cybersecurity risk and ransomware attacks on companies continue to significantly increase and there can be no assurance that we have fully protected our information, that third parties to whom we have disclosed such information or with whom we have stored …

Marked against last year's 10-K

Cybersecurity risk and ransomware attacks on companies continue to significantly increase and there can be no assurance that we have fully protected our information, that third parties to whom we have disclosed such information or with whom we have stored such information (in data centers and in the cloud) have taken effective precautions, or that we will not experience hacking or intrusion attempts that could have a material adverse effect on our business. In addition to maintaining a comprehensive set of endpoint, network, email and cloud security solutions, we continue to take steps to further improve the security of our networks and systems, including further strengthening authentication; continuing to mature maturing our zero trust architecture and strategy; maturing our operational technology security program; furthering our advanced prevention and detection measures; further enhancing and testing our security incident response plan; upgrading legacy systems to simplify and standardize business processes and applications; maturing our operational technology security program; implementing more robust cloud security across multiple platforms; adopting establishing AI policies, governance and risk management; continuously improving information technology project and portfolio management discipline; enhancing accountability with more aggressive key performance indicator targets; continuing to mature maturing our data loss prevention framework to protect our critical data, network and site access controls; advancing our user access management program; limiting USB drive access across our company; increasing network segmentation; enhancing our focus on third party risk management; and improving our capabilities based on threat intelligence and the publicized incidents experienced by other companies, as well as ones that we have experienced despite their minimal operational or financial impact to date.

Item 1A, Risk Factors, 10-K Feb 25, 2026open_in_new

… Geopolitical tensions or conflicts, such as Russia’s invasion of Ukraine, may further heighten the risk of cybersecurity attacks. While we have continually matured our security program and capabilities and have had no material incidents to date, cyber threats continue …

Marked against last year's 10-K

We rely to a large extent upon information technology systems and infrastructure to operate our business. The size and complexity of our information technology systems and those of strategic vendors make them vulnerable to failure, malicious intrusion and random attack. Acquisitions have resulted in further de-centralization of systems and additional complexity in our systems infrastructure. Likewise, data security breaches by employees or others with permitted access to our systems or to the systems of strategic vendors pose a risk that sensitive data may be exposed to unauthorized persons or to the public. Geopolitical tensions or conflicts, such as Russia’s invasion of Ukraine, may further heighten the risk of cybersecurity attacks. While we have continually matured our security program and capabilities and have had no material incidents to date, cyber threats continue to evolve evolve, such as with the use of artificial intelligence, resulting in sophisticated new attack methods that are increasingly automated, targeted, and difficult to defend against, and there can be no assurance that our efforts will prevent cybersecurity attacks or breaches in our systems or in the systems of strategic vendors, including cloud providers, that could cause reputational damage, business disruption or legal and regulatory costs; could result in third-party claims; could result in compromise or misappropriation of our intellectual property, trade secrets or sensitive information; or could otherwise materially adversely affect our business, including our business strategy, results of operations, or financial condition. Certain of our customer offerings include digital components, such as remote monitoring of certain customer operations. A breach of those remote monitoring systems could expose customer data giving rise to potential third-party claims and reputational damage. Additionally, it may take considerable time for us to investigate and evaluate the full impact of cyber-attacks, particularly for sophisticated attacks, which may inhibit our ability to provide prompt, full, and reliable information about cybersecurity incidents to our customers, regulators, and the public. There may also be other related challenges and risks as we complete implementation of our ERP system upgrade. upgrade, and businesses which we have acquired, or may in the future acquire, may have information technology system vulnerabilities which could increase our risk of cybersecurity attacks. Although we maintain insurance, our insurance coverage may not be sufficient in type or amount to prevent or recover losses resulting from cybersecurity attacks.

Item 1A, Risk Factors, 10-K Feb 23, 2026open_in_new

Cybersecurity Risks: AI systems can be vulnerable to cybersecurity threats, such as data breaches and unauthorized access. These threats could result in financial losses, legal liabilities, and damage to our reputation.

Word for word as last year Item 1A, Risk Factors, 10-K Feb 23, 2026open_in_new

• delays or defects in information technology integration, cybersecurity controls, or data privacy compliance can disrupt operations, increase costs, or expose us to cyber incidents;

New this year Item 1A, Risk Factors, 10-K Feb 19, 2026open_in_new

… Breaches of our technology systems and those of acquired companies, or those of our vendors and customers, whether from circumvention of security systems, denial-of-service attacks or other cyber-attacks, hacking, “phishing” or "quishing" attacks, computer viruses, ransomware or …

Marked against last year's 10-K

While we have experienced attacks to breach the security of our information technology systems, we are not aware that we have experienced a material cybersecurity incident during the 2024 2025 fiscal year. Breaches of our technology systems, systems and those of acquired companies, or those of our vendors and customers, whether from circumvention of security systems, denial-of-service attacks or other cyber-attacks, hacking, “phishing” or "quishing" attacks, computer viruses, ransomware or malware, employee or insider error, malfeasance, social engineering, vendor software supply chain compromises, physical breaches or other actions, may result in manipulation or corruption of sensitive data, material interruptions or malfunctions in our Company’s or such vendors’ and customers’ websites, applications, data processing and certain products and services, or disruption of other business operations. Furthermore, any such breaches could compromise the confidentiality and integrity of material information held by our Company (including information about our business, employees or customers), as well as sensitive personally identifiable information, the disclosure of which could lead to identity theft and liability under data privacy laws. Breaches of our products that rely on technology and internet connectivity can expose our Company to product and other liability risk and reputational harm. Measures that we take to avoid, detect, mitigate or recover from material incidents may be insufficient, circumvented, or may become ineffective.

Item 1A, Risk Factors, 10-K Feb 19, 2026open_in_new

Numerous and evolving information security threats, including advanced persistent threats and ransomware, pose a risk to the security of our systems, networks and services, as well as to the confidentiality, availability and integrity of our data and of our critical business operations. The techniques, tools and tactics used in cyber-attacks evolve rapidly, including

New this year Item 1A, Risk Factors, 10-K Feb 19, 2026open_in_new

… Notwithstanding our cybersecurity preparedness activities, we cannot guarantee that our security efforts or the security efforts of our third-party service providers will prevent all cybersecurity events. A material cybersecurity event could result in negative publicity, theft or other financial …

Marked against last year's 10-K

Numerous and evolving information security threats, including advanced persistent threats and ransomware, pose a risk to the security of our systems, networks and services, as well as to the confidentiality, availability and integrity of our data and of our critical business operations. The techniques, tools and tactics used in cyber-attacks evolve rapidly, including from emerging technologies such as advanced automation or artificial intelligence and may be difficult to detect for periods of time. As a result we may face difficulties in anticipating and implementing adequate preventative measures or fully mitigating harms after such an attack. Our information technology systems, networks and services have been, and will likely continue to be, subject to cybersecurity attacks. We have implemented and operate a cybersecurity program designed to protect and preserve the confidentiality, integrity and availability of our networks and systems as well as information that we own or is in our care. Notwithstanding our cybersecurity preparedness activities, we cannot guarantee that our security efforts or the security efforts of our third-party service providers will prevent all cybersecurity events. A material cybersecurity event could result in negative publicity, theft or other financial loss, modification or destruction of proprietary information or key information, manufacture of defective products, theft of personally identifiable information, and/or production downtimes and operational disruptions, which could adversely affect our results of operations.

Item 1A, Risk Factors, 10-K Feb 19, 2026open_in_new

… While these measures mitigate cybersecurity risks, potential threats are constantly evolving and becoming more sophisticated, and conducted by a diverse group of actors, such as foreign governments, cyber terrorists, cyber criminals, malicious employees and other insiders and outsiders. The risks …

Marked against last year's 10-K

and routine testing of our We rely on information technology systems. We believe that these preventative actions provide adequate measures of protection against systems, including third-party providers, to support critical business processes such as product development, manufacturing, sales, distribution, financial reporting, regulatory compliance, and data storage. To mitigate risks, we maintain an information security breaches/incidents program with updated technology, policies, controls, insurance, governance, training, monitoring, and generally reduce our testing. While these measures mitigate cybersecurity risks, however, cybersecurity incidents, data breaches and operational disruptions potential threats are constantly evolving, evolving and becoming more sophisticated, including through the increasing use of AI, and conducted by groups and individuals with a wide range diverse group of expertise and motives, including actors, such as foreign governments, cyber terrorists, cyber criminals, malicious employees and other insiders and outsiders. Additionally, continued geopolitical turmoil, including the ongoing conflicts in the Middle East The risks and between Russia and Ukraine, heightened the risk of cyber incidents. We and our third-party providers are subject to the risks posed by such incidents, which potential threats can take many forms, including such as code anomalies, “Acts of God,” data leakage, hardware or software failures, human errors, cyber extortion, password theft or introduction of viruses, malware and ransomware, including through phishing emails. Geopolitical conflicts, such as those in the Middle East and Russia-Ukraine, further heighten cyber risk.

Item 1A, Risk Factors, 10-K Feb 27, 2026open_in_new

• cybersecurity incidents, artificial intelligence related risks, data privacy and compliance with data protection laws;

New this year Item 7, MD&A, 10-K Feb 27, 2026open_in_new

… attract and retain skilled labor; strikes; disease; pandemic; labor cost changes; technological developments and innovations; the ability to manage cyber threats; litigation; inflation; pension changes; changes in the rates of return on assets of Ball’s defined benefit retirement plans …

Marked against last year's 10-K

This report contains and other public filings, earnings news releases, quarterly earnings conference calls and other written and oral communications made by Ball contain statements which are not historical facts and constitute “forward-looking” statements as that term is used in the Private Securities Litigation Reform Act of 1995 (the “Reform Act”). Forward-looking statements are generally statements that express or imply an expectation or belief concerning future events and or financial performance. Words such as “expects,” “anticipates,” “estimates,” “will,” “believe,” “continue,” “goal” and similar expressions typically identify forward looking statements, which are generally any statements other than statements of historical fact. statements. Such statements are based on current expectations or views of the future and are subject to risks and uncertainties, which could cause actual results or events to differ materially from those expressed or implied. You should therefore not place undue reliance upon any forward-looking statements, and they should be read in conjunction with, and qualified in their entirety by, the cautionary statements referenced below. Ball undertakes no obligation to publicly update or revise any forward-looking statements, whether as a result of new information, future events or otherwise. Key factors, risks Forward-looking statements are not guarantees of future performance, and you should therefore not place undue reliance upon such statements. Rather, these statements involve estimates, assumptions uncertainties that could cause actual outcomes and results to be different are summarized in filings with the Securities known and Exchange Commission, including Exhibit 99 in Ball’s Form 10-K, unknown risks, many of which are available on Ball’s website outside our control, and at www.sec.gov. such statements are therefore qualified in their entirety by reference to the factors listed below and the risks discussed in Item 1A, Risk Factors and elsewhere in this report. Additional important factors that might affect: a) Ball’s packaging segments include product capacity, supply, among others: supply and demand constraints and constraints, fluctuations and changes in consumption patterns; availability/cost of raw materials, equipment, and logistics; competitive packaging, pricing and substitution; power and supply chain interruptions; customer and supplier consolidation; changes in climate and weather and related events such as drought, wildfires, storms, hurricanes, tornadoes and floods; major customer or supplier contracts or loss of a major customer or supplier; inability to pass-through increased costs; footprint adjustments and other manufacturing changes, including the opening and closing of facilities and lines; failure to achieve synergies, productivity improvements or cost reductions; unfavorable mandatory deposit or packaging laws; customer and supplier consolidation; power and supply chain interruptions; changes in major customer or supplier contracts or loss of a major customer or supplier; inability to pass-through increased costs; war, political instability instability, sanctions, and sanctions, other uncertainties surrounding geopolitical events and governmental policies including relating to the situation in Russia and Ukraine and its impact on Ball’s supply chain and its ability to operate operations in Europe, the Middle East and Africa regions generally; regions; changes in foreign exchange or tax rates; and tariffs, trade actions, or other governmental actions, actions; unfavorable mandatory deposit or packaging laws; regulatory actions or issues including business restrictions those related to tax, environmental regulation, social and orders governance reporting, competition, health and workplace safety, including governmental actions or public concerns affecting goods produced by Ball products filled in Ball’s containers, or chemicals or substances used in raw materials or in its supply chain, including imported raw materials; the manufacturing process; changes in climate and b) Ball weather and related events such as a whole include those listed above plus: drought, wildfires, storms, hurricanes, tornadoes and floods; the extent to which sustainability-related opportunities arise and can be capitalized upon; changes in senior management, succession, and the ability to attract and retain skilled labor; regulatory actions or issues including those related to tax, environmental, social and governance reporting, competition, environmental, health and workplace safety, including U.S. Federal Drug Administration and other actions or public concerns affecting products filled in Ball’s containers, or chemicals or substances used in raw materials or in the manufacturing process; strikes; disease; pandemic; labor cost changes; technological developments and innovations; the ability to manage cyber threats; litigation; strikes; disease; pandemic; labor cost inflation; pension changes; inflation; changes in the rates of return on assets of Ball’s defined benefit retirement plans; pension changes; uncertainties surrounding geopolitical events and governmental policies; reduced cash flow; interest rates affecting Ball’s debt; successful or unsuccessful joint ventures, acquisitions and divestitures, and their effects on Ball’s operating results and business generally.

Item 7, MD&A, 10-K Feb 19, 2026open_in_new

We are aware that there are potential cybersecurity risks associated with third-party service providers. Prior to engaging with third-party providers, Ball conducts thorough security assessments. We monitor for third-party cyber incidents and manage any third-party cyber …

New this year 10-K, 10-K Feb 19, 2026open_in_new

… inadequacies, inadequate controls or procedures, operating failures, unauthorized access, service interruptions or failures, security breaches, malicious intrusions, theft, exfiltration, ransomware, cyberattacks, or other compromises of our systems. Any of these events could result in material financial, operational, legal, business, or …

Word for word as last year Item 1A, Risk Factors, 10-K Feb 25, 2026open_in_new

Our cybersecurity strategy prioritizes governance, identification, protection, detection, analysis, response and recovery to known, anticipated, or unexpected cyber threats. The strategy emphasizes effective management of cyber risks and resilience against cyber threats. We maintain a formal cybersecurity program structured around …

New this year 10-K, 10-K Feb 25, 2026open_in_new

Linde may be subject to information technology system failures, network disruptions and cybersecurity breaches or other related incidents.

Marked against last year's 10-K

Linde may be subject to information technology system failures, network disruptions and cybersecurity breaches in data security. or other related incidents.

Item 1A, Risk Factors, 10-K Feb 25, 2026open_in_new

… Despite these steps, however, our information technology systems have in the past been and in the future will likely be subject to increasingly sophisticated cyber attacks and disruptions. Operational failures and breaches of security from such attempts could lead to …

Marked against last year's 10-K

Linde has taken steps to address these risks and concerns by implementing advanced security technologies, internal controls, network and data center resiliency and recovery processes. Despite these steps, however, our information technology systems have in the past been and in the future will likely be subject to increasingly sophisticated cyber attacks. attacks and disruptions. Operational failures and breaches of security from such attempts could lead to the loss or disclosure of confidential information or personal data belonging to Linde or our employees and customers or suppliers. These failures and breaches could result in business interruption or malfunction and lead to legal or regulatory actions that could result in a material adverse impact on Linde’s operations, reputation and financial results. To date, such attempts have not had any significant impact on Linde's operations or financial results.

Item 1A, Risk Factors, 10-K Feb 25, 2026open_in_new

• terrorism, armed conflict or other malicious intentional acts, including cybersecurity risks such as attempts to gain unauthorized access to, or disable, our information technology systems, or our costs of addressing malicious intentional acts;

Word for word as last year Item 7, MD&A, 10-K Feb 27, 2026open_in_new

increase, the risks associated with cybersecurity increase. These risks apply to us, our employees, and to third parties on whose systems we rely to conduct our business. To our knowledge, we have not experienced any material cybersecurity incidents of our …

Marked against last year's 10-K

We utilize and rely upon information technology systems in many aspects of our business, including internal and external communications and the management of our accounting, financial, production and supply chain functions. As we become more dependent on information technologies to conduct our operations, and as the number and sophistication of cyberattacks increase, the risks associated with cybersecurity increase. These risks apply to us, our employees, and to third parties on whose systems we rely to conduct our business. To our knowledge, we have not experienced any material cybersecurity incidents of our technology systems. Failure to effectively anticipate, prevent, detect and recover from the increasing number and sophistication of cyberattacks could result in theft, loss or misuse of, or damage or modification of our information, and cause disruptions or delays in our business, reputational damage and third-party claims, which could have a material adverse effect on our results of operations or financial condition.

Item 1A, Risk Factors, 10-K Feb 27, 2026open_in_new

… For further discussion pertaining to cybersecurity strategy and related roles and responsibilities, see “Part I, Item 1C. Cybersecurity” of this Form 10-K.

Word for word as last year Item 1A, Risk Factors, 10-K Feb 26, 2026open_in_new

… We believe these measures together with our cyber risk management program as well as our policies, processes and procedures set a high benchmark for our employees to address and respond to cybersecurity threats.

New this year 10-K, 10-K Feb 26, 2026open_in_new

… In addition, the rapid evolution and increased adoption of AI and machine learning technologies may intensify our cybersecurity risks. Because the techniques used to obtain unauthorized access or sabotage information technology systems change frequently, become more sophisticated and generally are …

Marked against last year's 10-K

We are dependent on information technology systems (our own and those of our service providers such as Amazon Web Services), providers), and these systems contain non-public data about our business, employees, suppliers and customers - The protection of our information technology systems and the data contained therein is critical to us. We leverage these systems and data to support the performance of our business processes, to enhance accuracy and security, and to improve productivity and analytics capabilities, among other uses. Additionally, we have started to assess and use artificial intelligence (AI) technology to drive further business value. We have a dedicated information security team that executes our information security program and routinely tests the security of our applications, networks, databases, etc. While we have security measures and technology in place designed to protect proprietary or classified information about our business, employees, suppliers and customers, there can be no assurance that our efforts will prevent all threats to our information technology systems (or those of our service providers). In addition, the rapid evolution and increased adoption of artificial intelligence AI and machine learning technologies may intensify our cybersecurity risks. Because the techniques used to obtain unauthorized access or sabotage information technology systems change frequently, become more sophisticated and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. The loss of use of information technology systems (whether ours or our service providers), regardless of the cause, could disrupt our business operations. The failure to keep secure the confidential and sensitive data about our business, employees, suppliers and customers (regardless of the reason for such failure) failure); identify or failure by us to resolve deficient, inaccurate or biased outputs from the use of AI; or comply with applicable laws, rules or regulations regulations, could expose us, our employees, suppliers and/or our customers to the misuse of such data and could damage our reputation, cause us to incur significant liability liability, and have a material adverse effect on our business, financial condition and results of operations.

Item 1A, Risk Factors, 10-K Feb 19, 2026open_in_new

… Furthermore, we have a set of Company-wide policies and procedures concerning cybersecurity matters, which include an IT Security Policy and Cyber Incident Response Plan, as well as other policies that directly or indirectly relate to cybersecurity, non-public information …

New this year 10-K, 10-K Feb 19, 2026open_in_new

We are subject to information technology and cybersecurity threats which could have an adverse effect on our business and results of operations.

Word for word as last year Item 1A, Risk Factors, 10-K Feb 25, 2026open_in_new

… We continuously evaluate our cybersecurity systems and practices, assess potential threats, and improve our information technology networks, policies and procedures to address potential vulnerabilities. Despite efforts to assure secure and uninterrupted operations, threats from increasingly sophisticated cyberattacks or system failures …

Marked against last year's 10-K

We utilize various information technology systems to efficiently address business functions ranging from the operation of our production equipment to administrative computation to the storage of data such as intellectual property and proprietary business information. We also utilize third-party service providers for certain information technology services that are important to our operations. We continuously evaluate our cybersecurity systems and practices, assess potential threats, and improve our information technology networks, policies and procedures to address potential vulnerabilities. Despite efforts to assure secure and uninterrupted operations, threats from increasingly sophisticated cyberattacks or system failures could result in materially adverse operational disruptions or security breaches of our systems or those of our third-party service providers. These risks could result in disclosure or destruction of key proprietary information or personal data or reputational damage, theft of assets or trade secrets, or could adversely affect our ability to physically produce or transport steel, resulting in lost revenues, as well as delays in reporting our financial results. We also could be required to spend significant financial and other resources to remedy the damage caused by a cyber-security cybersecurity breach, including to repair or replace networks and information technology systems. We may also contend with potential liability for stolen information, increased cyber-security cybersecurity protection costs, litigation expense and increased insurance premiums.

Item 1A, Risk Factors, 10-K Feb 25, 2026open_in_new

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.

Not mentioned in the latest 10-K.