Compare peers

• the need to implement controls, procedures and policies appropriate for a larger, U.S.-based public company at companies that prior to acquisition may not have as robust controls, procedures and policies, particularly, with respect to the effectiveness of cyber …

… We have incurred certain immaterial, incremental and one-time costs associated with these cybersecurity incidents related to consultants, experts and data recovery efforts, and we expect to incur additional costs related to cybersecurity protections in the future. We have implemented …

Risks Relating to Information Technology, Cybersecurity and Intellectual Property

… high policy limits of coverage at a cost we believe to be reasonable, including coverage for acts of terrorism, cyber attacks, weather-related damage and disruptions and other perils associated with our operations, including communicable diseases and/or pandemics, artist …

… Both unsuccessful and successful “cyber attacks” on companies have continued to increase in frequency, scope and potential harm in recent years, and the increasing use of AI may intensify these cybersecurity risks. While we develop and maintain systems seeking to …

• cybersecurity protection and practices, including customer and employee privacy and data security;

We regularly experience such cyber-attacks and other security incidents of varying degrees, and we incur significant costs in protecting against or remediating such incidents. In addition, we are subject to a variety of laws and regulations in the United …

Security breaches, improper access to or disclosure of our data or user data, other hacking and phishing attacks on our systems, or other cyber incidents could harm our reputation and adversely affect our business.

• compliance with cybersecurity laws imposing country-specific requirements relating to information systems and network design, security, operations, and use;

… the UK GDPR (as defined below), and other European cyber-security laws, which can be substantial and may be assessed based on a percentage of revenue. Laws and regulations around cybersecurity, including Directive (EU) 2022/2555 or the NIS 2 …

We experience cyber attacks and other attempts to gain unauthorized access to our systems on a regular basis. Cyber attacks continue to evolve in sophistication and volume, and inherently may be difficult to detect for long periods of time. The …

• Google Cloud Platform primarily generates consumption-based fees and subscriptions for infrastructure, platform, and other services. These services provide access to solutions such as AI offerings including our enterprise AI infrastructure, Vertex AI platform, and Gemini Enterprise; cybersecurity offerings; and data and analytics solutions;

… our business activities, and shutdowns or disruptions of, and cybersecurity attacks on, the Systems pose increasing risks. Disruptions to the Systems, such as computer hacking and phishing, theft, computer viruses, ransomware, worms or other destructive software, process breakdowns, denial of …

… From time to time, the Company experiences cybersecurity threats and attacks. Although no cybersecurity incident has been material to the Company’s businesses to date, we expect to continue to be subject to cybersecurity threats and attacks and there can …

… Events affecting the Systems such as computer compromises, cyber threats and attacks, computer viruses or other destructive or disruptive software, process breakdowns, ransomware and denial of service attacks, malicious social engineering or other malicious activities by individuals (including employees) or …

… While the Company maintains cyber risk insurance, this insurance may not be sufficient to cover, or extend to, all costs or damage relating to any cybersecurity incident, and the Company cannot be certain that its current coverage will continue to …

We have developed and maintain an information security program to assess, identify and manage cyber risks and the continued development and maintenance of this program is costly and requires ongoing monitoring and updating as technologies change, including as a result …

RISKS RELATED TO INTELLECTUAL PROPERTY, LITIGATION, CYBERSECURITY AND REGULATORY REQUIREMENTS

Cyberattacks - including through the use of malware, computer viruses, distributed denial of services attacks, ransomware attacks, credential harvesting, social engineering and other means for obtaining unauthorized access to or disrupting the operation of our networks and systems or accessing our …

• The impact from major equipment, software or other failures or errors that disrupt our networks or cyber incidents; the effect of security breaches related to the network or customer information; our inability to obtain handsets, equipment/software or have handsets …

… These incidents include computer hacking, cyber attacks, computer viruses, worms or other destructive or disruptive software, denial of service attacks, phishing attacks, malware, ransomware, malicious social engineering, theft, misconduct, fraud and other malicious activities. Incidents can be caused inadvertently by …

… which expose us to cyber attacks with respect to such third-party suppliers and service providers and their products and services. Due to applicable laws, regulations and contractual obligations, we may be held responsible for cybersecurity breaches or incidents experienced …

Any significant disruption in or unauthorized access to our computer systems or those of third parties that we utilize in our operations, including those relating to cybersecurity or arising from cyber-attacks, could result in a loss or degradation of service, unauthorized access, disclosure or destruction of data, including member and corporate information, or theft of intellectual property, including digital content assets, which could adversely impact our business.

Our computer systems and those of third parties we use in our operations are subject to constantly evolving cybersecurity threats, including cyber-attacks such as computer viruses, malware, ransomware, denial of service attacks, physical or electronic break-ins, or insider …

Risks Relating to Business Continuity, Cybersecurity and Privacy and Data Protection

… These Systems have experienced, and are expected to continue to experience, cybersecurity attacks intended to disrupt our services and operations, exfiltrate, corrupt or prevent our access to and/or use of our data, proprietary information or intellectual property, or exfiltrate …