Cybersecurity and data breaches
205 of 521 companies added a paragraph in Risk Factors that uses one of these words:
cybersecurity, cyber, ransomware, data breach, cyberattack, hackers.
The paragraph is in the latest 10-K and nothing like it was in the one before.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Computer Communications Equipment | 3 | 3 |
| Accident & Health Insurance | 2 | 2 |
| Computer Peripheral Equipment, NEC | 2 | 2 |
| Instruments For Meas & Testing of Electricity & Elec Signals | 2 | 2 |
| Men's & Boys' Furnishgs, Work Clothg, & Allied Garments | 2 | 2 |
| Rubber & Plastics Footwear | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Aircraft Parts & Auxiliary Equipment, NEC | 1 | 1 |
| Apparel & Other Finishd Prods of Fabrics & Similar Matl | 1 | 1 |
| Bottled & Canned Soft Drinks & Carbonated Waters | 1 | 1 |
| Canned, Fruits, Veg, Preserves, Jams & Jellies | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electromedical & Electrotherapeutic Apparatus | 1 | 1 |
| Electronic Components & Accessories | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Engines & Turbines | 1 | 1 |
| Gas & Other Services Combined | 1 | 1 |
| General Industrial Machinery & Equipment, NEC | 1 | 1 |
| Grain Mill Products | 1 | 1 |
| Heavy Construction Other Than Bldg Const - Contractors | 1 | 1 |
| In Vitro & In Vivo Diagnostic Substances | 1 | 1 |
| Insurance Carriers, NEC | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Meat Packing Plants | 1 | 1 |
| Misc Industrial & Commercial Machinery & Equipment | 1 | 1 |
| Miscellaneous Manufacturing Industries | 1 | 1 |
| Paints, Varnishes, Lacquers, Enamels & Allied Prods | 1 | 1 |
| Paper Mills | 1 | 1 |
| Real Estate Operators (No Developers) & Lessors | 1 | 1 |
| Retail-Drug Stores and Proprietary Stores | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Home Furniture, Furnishings & Equipment Stores | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Retail-Retail Stores, NEC | 1 | 1 |
| Rolling Drawing & Extruding of Nonferrous Metals | 1 | 1 |
| Services-Advertising Agencies | 1 | 1 |
| Services-Detective, Guard & Armored Car Services | 1 | 1 |
| Services-Misc Health & Allied Services, NEC | 1 | 1 |
| Special Industry Machinery (No Metalworking Machinery) | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Television Broadcasting Stations | 1 | 1 |
| Trucking & Courier Services (No Air) | 1 | 1 |
| Water Supply | 1 | 1 |
| Wholesale-Electronic Parts & Equipment, NEC | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| X-Ray Apparatus & Tubes & Related Irradiation Apparatus | 1 | 1 |
| Finance Services | 21 | 28 |
| Insurance Agents, Brokers & Service | 4 | 6 |
| Electrical Work | 2 | 3 |
| Retail-Auto Dealers & Gasoline Stations | 2 | 3 |
| Services-Computer Integrated Systems Design | 2 | 3 |
| Investment Advice | 5 | 8 |
| Biological Products, (No Diagnostic Substances) | 3 | 5 |
| Computer Storage Devices | 3 | 5 |
| Services-Computer Programming, Data Processing, Etc. | 3 | 5 |
| National Commercial Banks | 6 | 11 |
| Services-Prepackaged Software | 10 | 19 |
| Petroleum Refining | 3 | 6 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 2 | 4 |
| Services-Computer Processing & Data Preparation | 2 | 4 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Cutlery, Handtools & General Hardware | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Mining & Quarrying of Nonmetallic Minerals (No Fuels) | 1 | 2 |
| Oil & Gas Field Services, NEC | 1 | 2 |
| Optical Instruments & Lenses | 1 | 2 |
| Printed Circuit Boards | 1 | 2 |
| Pumps & Pumping Equipment | 1 | 2 |
| Radio & Tv Broadcasting & Communications Equipment | 1 | 2 |
| Retail-Auto & Home Supply Stores | 1 | 2 |
| Services-Computer Programming Services | 1 | 2 |
| Services-General Medical & Surgical Hospitals, NEC | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Telephone Communications (No Radiotelephone) | 1 | 2 |
| Transportation Services | 1 | 2 |
| Trucking (No Local) | 1 | 2 |
| Semiconductors & Related Devices | 7 | 15 |
| Security Brokers, Dealers & Flotation Companies | 3 | 7 |
| Surgical & Medical Instruments & Apparatus | 4 | 10 |
| Industrial Instruments For Measurement, Display, and Control | 2 | 5 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 2 | 5 |
| Services-Business Services, NEC | 6 | 16 |
| Pharmaceutical Preparations | 4 | 11 |
| Electric Services | 5 | 15 |
| Electric & Other Services Combined | 4 | 12 |
| State Commercial Banks | 2 | 6 |
| Air-Cond & Warm Air Heatg Equip & Comm & Indl Refrig Equip | 1 | 3 |
| Computer & office Equipment | 1 | 3 |
| Electronic Computers | 1 | 3 |
| Life Insurance | 1 | 3 |
| Measuring & Controlling Devices, NEC | 1 | 3 |
| Plastic Materials, Synth Resins & Nonvulcan Elastomers | 1 | 3 |
| Services-Commercial Physical & Biological Research | 1 | 3 |
| Soap, Detergents, Cleang Preparations, Perfumes, Cosmetics | 1 | 3 |
| Real Estate Investment Trusts | 8 | 27 |
| Crude Petroleum & Natural Gas | 2 | 7 |
| Fire, Marine & Casualty Insurance | 3 | 12 |
| Retail-Eating Places | 1 | 4 |
| Hospital & Medical Service Plans | 1 | 5 |
| Laboratory Analytical Instruments | 1 | 5 |
| Retail-Variety Stores | 1 | 5 |
528 paragraphs · Electronic Computers show all sectors
The Company’s business, including its artificial intelligence and machine learning offerings, also depends on access to sufficient compute capacity and storage resources. Demand for cloud compute and storage services and other artificial intelligence infrastructure has increased substantially across the technology industry, resulting in constrained supply, extended lead times, and increasing costs. In addition to its own data center infrastructure, the Company relies on third-party cloud service providers to meet these compute and storage needs. There are limited third-party providers that can reliably meet such demand, and the Company may be unable to secure sufficient capacity on commercially reasonable terms, or at all, to meet customer demand. Investment in data center capacity involves significant expenditures and long-term commitments, including for components and equipment, which increase the Company’s capital expenditures, liabilities and obligations. The ability of the Company and its third-party providers to timely build, expand and operate data centers is subject to operational challenges and other external factors, including restrictions on international trade, supply chain constraints, access to financing, construction delays, the availability of power, water and land, labor shortages, public sentiment, as well as existing and evolving laws governing the permitting, zoning, operation and taxation of data centers. In addition, new or expanding environmental regulations could increase the costs associated with operating and expanding the Company’s or its third-party providers’ data center infrastructure or limit the ability to expand in certain jurisdictions. Data center operations are also subject to risks related to power transmission and other utility outages, telecommunications and network failures, cybersecurity attacks, and other interruptions outside the Company’s control. If the Company is unable to obtain and maintain adequate compute capacity and storage resources in a timely manner or at commercially reasonable rates, this can limit the functionality and availability of the Company’s products, services and features, delay the deployment of new features or offerings, or cause the Company to incur significantly higher costs. In addition, the Company may overestimate or underestimate requirements, which could result in higher-than-expected costs for the Company or an inability to fully satisfy customer demand or expectations.
Read in the 10-K filed Nov 3, 2026 ↗
The rapid advancement and widespread dissemination of artificial intelligence technologies significantly increases the risks associated with cybersecurity attacks. For example, artificial intelligence technologies are producing highly targeted phishing campaigns, automating the discovery or exploitation of vulnerabilities, generating deepfake content designed to bypass authentication protocols, and identifying and exploiting vulnerabilities at a greater scale and at a highly accelerated pace. As increasingly sophisticated and capable artificial intelligence models continue to become available, these risks are intensifying. Sophisticated and widespread cybersecurity attacks pose substantial systemic risks, such as cascading failures across interconnected systems, and potential disruptions to critical infrastructure and market stability. In addition, artificial intelligence technologies are themselves susceptible to security threats, and the development, deployment and use of artificial intelligence by the Company, its employees and its suppliers exposes the Company to additional vulnerabilities and attacks.
Read in the 10-K filed Nov 3, 2026 ↗
For example, the Company’s artificial intelligence efforts may give rise to risks related to, among other things: competition and strategy; recouping costs and returns on investments; product liability; intellectual property infringement; data privacy; cybersecurity; sanctions and export controls; unauthorized access to or inadvertent releases of confidential information or other unexpected access to or use of user information; exposing users to harmful, inaccurate or other negative content or experiences; unintended or unauthorized actions by autonomous or agentic systems; misuse of artificial intelligence by employees and other personnel; changing public sentiment; bias and discrimination; and online safety and protection of minors. While the Company is committed to developing and deploying artificial intelligence responsibly, the Company may be unsuccessful in identifying or resolving all potential issues and failures before they arise. As a result, the Company could be exposed to reputational and competitive harm, regulatory action, legal liability, and other adverse effects to its business.
Read in the 10-K filed Nov 3, 2026 ↗