Cybersecurity and data breaches
144 of 521 companies dropped a paragraph in Risk Factors that uses one of these words:
cybersecurity, cyber, ransomware, data breach, cyberattack, hackers.
The paragraph was in the earlier 10-K and nothing like it is in the latest.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Rubber & Plastics Footwear | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Apparel & Other Finishd Prods of Fabrics & Similar Matl | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Food and Kindred Products | 1 | 1 |
| Gas & Other Services Combined | 1 | 1 |
| Household Appliances | 1 | 1 |
| In Vitro & In Vivo Diagnostic Substances | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Meat Packing Plants | 1 | 1 |
| Miscellaneous Food Preparations & Kindred Products | 1 | 1 |
| Newspapers: Publishing or Publishing & Printing | 1 | 1 |
| Ordnance & Accessories, (No Vehicles/Guided Missiles) | 1 | 1 |
| Paper Mills | 1 | 1 |
| Retail-Drug Stores and Proprietary Stores | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Home Furniture, Furnishings & Equipment Stores | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Services-Management Services | 1 | 1 |
| Services-Misc Health & Allied Services, NEC | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Television Broadcasting Stations | 1 | 1 |
| Water Supply | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| Wholesale-Motor Vehicle Supplies & New Parts | 1 | 1 |
| Computer Storage Devices | 4 | 5 |
| Retail-Eating Places | 3 | 4 |
| Finance Services | 19 | 28 |
| Computer Communications Equipment | 2 | 3 |
| Surgical & Medical Instruments & Apparatus | 6 | 10 |
| Beverages | 3 | 5 |
| State Commercial Banks | 3 | 6 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 2 | 4 |
| Accident & Health Insurance | 1 | 2 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Cigarettes | 1 | 2 |
| Computer Peripheral Equipment, NEC | 1 | 2 |
| Cutlery, Handtools & General Hardware | 1 | 2 |
| Fats & Oils | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Mining & Quarrying of Nonmetallic Minerals (No Fuels) | 1 | 2 |
| Oil & Gas Field Services, NEC | 1 | 2 |
| Refuse Systems | 1 | 2 |
| Retail-Family Clothing Stores | 1 | 2 |
| Retail-Lumber & Other Building Materials Dealers | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Wholesale-Groceries & Related Products | 1 | 2 |
| National Commercial Banks | 5 | 11 |
| Services-Prepackaged Software | 8 | 19 |
| Biological Products, (No Diagnostic Substances) | 2 | 5 |
| Laboratory Analytical Instruments | 2 | 5 |
| Services-Computer Programming, Data Processing, Etc. | 2 | 5 |
| Investment Advice | 3 | 8 |
| Air-Cond & Warm Air Heatg Equip & Comm & Indl Refrig Equip | 1 | 3 |
| Computer & office Equipment | 1 | 3 |
| Electrical Work | 1 | 3 |
| Measuring & Controlling Devices, NEC | 1 | 3 |
| Services-Consumer Credit Reporting, Collection Agencies | 1 | 3 |
| Crude Petroleum & Natural Gas | 2 | 7 |
| Electric Services | 4 | 15 |
| Services-Business Services, NEC | 4 | 16 |
| Fire, Marine & Casualty Insurance | 3 | 12 |
| Services-Computer Processing & Data Preparation | 1 | 4 |
| Real Estate Investment Trusts | 6 | 27 |
| Semiconductors & Related Devices | 3 | 15 |
| Industrial Instruments For Measurement, Display, and Control | 1 | 5 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 1 | 5 |
| Electric & Other Services Combined | 2 | 12 |
| Petroleum Refining | 1 | 6 |
| Security Brokers, Dealers & Flotation Companies | 1 | 7 |
| Pharmaceutical Preparations | 1 | 11 |
378 paragraphs · Computer Storage Devices show all sectors
These outcomes could damage our reputation, harm our business, and lead to significant liabilities. Additionally, a cybersecurity incident or loss of personal information has in the past and could in the future result in remediation costs, disruption of internal operations, increased cybersecurity protection costs, significant fines, and/or lost revenues.
Read in the 10-K filed Jun 9, 2025 ↗
Public health crises may negatively impact our workforce and operations, as well as those of our strategic partners, customers, suppliers and logistics providers. Impacts of public health crises may include, without limitation, closures of our manufacturing facilities; under-absorbed overhead; increased logistics, component and other costs; decreased demand for our products; and manufacturing challenges. Employee infections or government restrictions to contain the spread of infectious disease, like travel restrictions, quarantines, business shutdowns, or trade controls, could harm employees’ productivity and hinder operations in Flash Ventures’ factories or our other worksites and our business and results of operations as a whole. Further, global pandemics and other public health crises may cause financial market instability, credit issues, and increased cybersecurity and data privacy risks as more employees work remotely. The degree to which any public health crises ultimately impact our business will depend on many factors beyond our control, which are highly uncertain and cannot be predicted at this time.
Read in the 10-K filed Aug 21, 2025 ↗
•We could suffer a loss of revenue and increased costs, exposure to significant liability including legal and regulatory consequences, reputational harm and other serious negative consequences in the event of cyber-attacks, ransomware or other cyber security breaches or incidents that disrupt our operations, cause widespread outages, and/or result in unauthorized access to, or the loss, corruption, unavailability or dissemination of proprietary or confidential information of our customers or about us or other third parties.
Read in the 10-K filed Aug 1, 2025 ↗
We could suffer a loss of revenue and increased costs, exposure to significant liability including legal and regulatory consequences, reputational harm and other serious negative consequences in the event of cyber-attacks, ransomware or other cyber security breaches or incidents that disrupt our operations, cause widespread outages, and/or result in unauthorized access to, or the loss, corruption, unavailability or dissemination of proprietary or confidential information of our customers or about us or other third parties.
Read in the 10-K filed Aug 1, 2025 ↗
Despite the measures we and our vendors put in place designed to protect our computer equipment, data and systems, our customers, suppliers, employees or other third parties have been and may continue to be vulnerable to phishing and other forms of social engineering attacks, employee or contractor error, hacking, cyberattacks, ransomware and other malware, malfeasance, system error or other irregularities or incidents, including from attacks or breaches and incidents at third party vendors we utilize. In addition, the measures we and our vendors take may not be sufficient for all eventualities. Threat actors are increasingly using tools and techniques that circumvent controls, evade detection, and remove forensic evidence, which means that we and others may be unable to anticipate, detect, deflect, contain or recover from cyberattacks in a timely or effective manner. As AI capabilities improve and are increasingly adopted, we may be subject to cyberattacks created and/or augmented with AI. For example, attacks could be crafted with an AI tool to attack information systems by creating more effective phishing emails or social engineering or by exploiting vulnerabilities in electronic security programs utilizing false image or voice recognition, or could result from us or our customers, vendors or business partners incorporating the output of AI tools, such as malicious code from an AI-generated source code. Our network and storage applications, as well as those of our customers, business partners, and third-party providers, have been and may in the future be subject to unauthorized access by hackers or breached due to operator error, malfeasance or other system disruptions. Additionally, there have been and may continue to be significant supply chain attacks, and we cannot guarantee that our or our suppliers’ or other vendors’ systems, networks, or other components or infrastructure have not been compromised or do not contain exploitable defects, bugs or vulnerabilities. We anticipate that these threats will continue to grow in scope and complexity over time due to the development and deployment of increasingly advanced tools and techniques.
Read in the 10-K filed Aug 1, 2025 ↗
There can be no assurance that our cybersecurity management program and processes, including our policies, controls or procedures, will be implemented consistently, complied with or effective in protecting our systems and information.
Read in the 10-K filed Aug 1, 2025 ↗
adversarial attacks, which could result in unauthorized access to or leakage of sensitive information. Geopolitical tensions or conflicts may also create heightened risk of cybersecurity incidents.
Read in the 10-K filed Aug 14, 2025 ↗