Compare peers

… We have historically and may in the future incur significant costs in protecting against potential security breaches, cyber-based attacks, or other cybersecurity incidents. We and our third-party service providers are targeted by malicious actors and expect such incidents …

If our information technology systems are breached, damaged or fail to function properly due to any number of causes, such as security breaches or cyber-based attacks, systems implementation difficulties, catastrophic events or power outages, and our security, contingency disaster …

… codes, ransomware, unauthorized access attempts, denial of service attacks, phishing (including the use of adversarial AI techniques), social engineering, credential stuffing, automated vulnerability discovery, data encryption or exfiltration, deep fakes, hacking, supply chain software compromise and other cyber-attacks. Such …

In addition, if a ransomware attack, other cybersecurity incident or operational disruption occurs, either internally or at our third-party providers, we could be prevented from accessing our data or systems, which may cause interruptions or delays in our business …

… breaches, espionage, cyber-attacks, viruses, theft and inadvertent release of information. In the normal course of business, we and our third-party providers experience cybersecurity threats and incidents of varying degrees from time-to-time, including ransomware, ransom-related extortion …

… These systems are potentially vulnerable to cyber-based attacks and security breaches. In addition, through the use of social engineering, cyber criminals are increasing their attacks on individual employees with business email compromise scams and targeted phishing attacks designed to …

… We have programs in place to detect, contain, and respond to information security, cybersecurity, and data privacy incidents. However, we may be unable to anticipate security incidents, detect attacks, or implement adequate preventive measures as cyber threats continue to evolve …

The legal and regulatory environment regarding information security, cybersecurity, and data privacy is dynamic and has strict requirements, including for the use and treatment of personal information. Complying with current or contemplated information security, cybersecurity, data privacy, data protection, and …

… Such cyberattacks and cyber incidents can take many forms, including cyber extortion, social engineering, password theft or introduction of viruses or malware, such as ransomware. In addition, the techniques used in cyberattacks and cyber incidents continue to evolve and develop …

A cybersecurity incident, data incident or a failure of key technology systems could adversely impact our business.

… the Company is regularly subject to cyber threats, ransomware and other security breaches. See “Risk Factors” in Item 1A of this Annual Report on Form 10-K for more information on risks from cybersecurity threats that are reasonably likely to …

… The IT/OT systems of the Company, its customers, business partners, suppliers, and third-party providers have been, and will continue to be, subject to cyber-threats, including malware, ransomware, unauthorized access and other attacks.

For additional discussion of the company’s cybersecurity posture, including risk management and governance, please see “Item 1C. Cybersecurity.”

… This may be as the result of deliberate breach in the security of these systems or platforms by bad actors, including through malicious software, ransomware and other cyberattacks, which may originate from state actors and may increase during times of …

… These information technology systems, some of which are managed by third parties, may be susceptible to damage, invasions, disruptions, or shutdowns due to hardware failures, computer viruses, hacker attacks and other cybersecurity risks, telecommunication failures, user errors, catastrophic events, or …

… While we maintain a cyber insurance policy that provides coverage for security incidents, we cannot be certain that our coverage will be adequate for liabilities actually incurred, that insurance will continue to be available to us on financially reasonable terms …

… have contracted, have, in the past, and may, in the future, be vulnerable to cyber-threats such as computer viruses or other malicious codes, ransomware, cyber extortion, security incidents, denial of service attacks, unauthorized access, phishing attacks, social engineering and …

Cyber-threats are becoming more sophisticated, are constantly evolving and are being made by groups and individuals with a wide range of expertise and motives, and this increases the difficulty of detecting and successfully defending against them. We have incurred …

… result of cybersecurity attacks, phishing attacks, viruses, malware, ransomware, hacking or similar breaches experienced by our bottling partners. These risks may also be heightened to the extent a business or bottler we have acquired maintains separate cybersecurity systems and environments …

If we are unable to protect our information systems against service interruption, misappropriation of data or cybersecurity incidents, our operations could be disrupted, we may suffer financial losses and our reputation may be damaged.

… Cybersecurity incidents may be difficult to detect for periods of time, and include, but are not limited to, malicious software (malware, ransomware and viruses), phishing and social engineering, attempts to gain unauthorized access to networks, computer systems and data, malicious …

Our Chief Information Officer and his team are responsible for leading our cybersecurity strategy, policy, standards, architecture, and processes. Our cybersecurity leadership team has more than 40 years of combined experience in cyber and information security matters. Our cybersecurity program …

… Many groups on a worldwide basis have experienced increases in electronic security breaches, cyberattacks, and other hacking activities such as phishing attacks, denial of service, malware, ransomware, and cyber extortion, and there is the possibility of retaliatory cyberattacks, including by …

Reliance upon complex information systems and third-party global networks; cybersecurity; AI

… Furthermore, the rapid evolution of emerging technologies such as artificial intelligence may intensify our cybersecurity risks. We are regularly the target of attempted cyber and other security threats. Therefore, we continuously monitor and update our IT networks and infrastructure to …

• a disruption, failure, or security breach of our or our suppliers’ information technology systems, including, but not limited to, ransomware attacks;

Our business and reputation could suffer if we are unable to protect our information technology systems against, or effectively respond to, cyber attacks, other cyber incidents or security breaches or if our information technology systems are otherwise disrupted.

We have in the past experienced, and may in the future face, cyber attacks, other cyber incidents, disruptions or security breaches, and there can be no assurance that we will always be able to sufficiently mitigate the impact to our …

… These attacks may include phishing, state-sponsored cyber-attacks, industrial espionage, insider threats, computer denial-of-service attacks, computer viruses, ransomware and other malware, payment fraud or other cyber incidents. Increased IT security and social engineering threats and more sophisticated …

The Company’s systems, processes, and sites are subject to cybersecurity and other incidents, which could expose the Company to operational and various regulatory risks.

… We believe that these preventative actions provide adequate measures of protection against security breaches and generally reduce our cybersecurity risks. However, cyber-threats are constantly evolving, are becoming more sophisticated including through the increased adoption of artificial intelligence and are …

Our operations and reputation may be impaired if our information technology systems fail to perform adequately or if we are the subject of a data breach or cyber-attack.

The Company may be adversely impacted if the Company is affected by cybersecurity attacks or other security breaches. IT systems are an important part of the Company’s business operations. The Company also increasingly relies upon third-party service providers …

parties with whom it does business have experienced information security, cybersecurity, and data privacy incidents. None of these incidents have had a material impact on the Company's business strategy, results of operations, or financial condition. If the Company or …

… Cyberattacks and cyber incidents take many forms including cyber extortion, denial of service, social engineering, deepfake attacks and disinformation campaigns, introduction of viruses or malware (such as ransomware), exploiting vulnerabilities in hardware, software or other infrastructure (including zero-day vulnerabilities …

Future cyber incidents and other disruptions to our information systems can adversely affect our business.

Increased information technology security threats and more sophisticated computer crime, including viruses and malware, ransomware attacks, misuse of artificial intelligence and machine learning technologies, denial of service and phishing attacks and advanced persistent threats, pose a potential risk to the …

Our information technology systems and our third-party providers’ systems, have been, and will likely continue to be, subject to advanced computer viruses or other malicious codes, ransomware, unauthorized access attempts, denial of service attacks, phishing, social engineering, hacking and …

… Cybersecurity incidents can be caused by ransomware, distributed denial-of-service attacks, worms, and other malicious software programs or other attacks, including the covert introduction of malware to our information technology, and the use of techniques or processes that change …

In addition, a cybersecurity incident could require that we expend significant additional resources on remediation, restoration and enhancement of our information technology.

We use a combination of insurance and self-insurance to provide for potential liability for workers’ compensation, automobile and general liability, property, director and officers’ liability, cyber risk exposure and associate health care benefits. Any actuarial projection of losses is …

… and global economy and our business, it may also heighten other risks described in this section, including but not limited to those related to consumer behavior and expectations, competition, implementation of strategic initiatives, cybersecurity threats, payment-related risks, supply chain …

… While past cyberattacks and hacking activities have not materially impacted our business or disrupted our operations, increased IT security threats and more sophisticated cybercrimes and cyberattacks, including computer viruses and other malicious codes, ransomware, unauthorized access attempts, denial-of-service …

We rely on information technology (IT) systems to manage our business operations. A cyber breach, a failure or corruption of one or more of our key IT systems, networks, processes, associated sites, or service providers, or a failure to comply with personal data privacy laws could have a material adverse impact on our business.

Although the cybersecurity incidents that we have experienced to date, as well as those reported to us by our third-party service providers, have not had a material effect on our business, financial condition, or results of operations, such incidents …

… In addition, our continuity of business applications and operations has been, and may in the future be, disrupted by other issues, including cybersecurity attacks (which may include social engineering, business email compromise, cyber extortion, denial of service, attempts to exploit …

We have been subject to cyber attacks, ransomware, and other security breaches, though these incidents historically have not had a significant impact on our business operations. The techniques that are used to obtain unauthorized access, disable or degrade service or …

We, and our third-party service providers, are regularly the target of rapidly evolving cyber threats, including denial of service attacks, ransomware, spyware, misinformation, phishing/smishing/vishing attacks, business compromise attacks, typosquatting, automated attacks, employee errors, negligence or malfeasance, the …

… The rapid evolution and increased adoption of artificial intelligence technologies may also heighten our cybersecurity risks by making cyber-attacks more difficult to detect, contain, and mitigate. In addition, similar events at vendors, third-party service providers or other market …

Our business and our reputation could be adversely affected by a cyber or data security incident or the failure to protect sensitive guest, Team Member or supplier data, or the failure to comply with applicable regulations relating to data security and privacy.

… cases, these attempts are successful. Cybersecurity attacks may range from random attempts to coordinated and targeted attacks, including sophisticated computer crimes and advanced persistent threats. Phishing attacks are particularly prominent, including as vectors for ransomware attacks, which have increased in …

The potential impacts of a cybersecurity attack include reputational damage, litigation, government enforcement actions, penalties, disruption to systems and operations, unauthorized release of confidential or otherwise protected information, corruption of data, diminution in the value of our investment in IT …

… Furthermore, if a vendor is the victim of a cyberattack, including a ransomware attack, such attack could have a corresponding material effect on our ability to do business with that vendor or to receive information that may be required to …

… Such systems are subject to damage or interruption from power surges and outages, facility damage, physical theft, computer and telecommunications failures, inadequate or ineffective redundancy, malicious code (including malware, ransomware, or similar), successful attacks (e.g., account compromise; phishing; denial …