Cybersecurity and data breaches
145 of 521 companies dropped a paragraph in Risk Factors that uses one of these words:
cybersecurity, cyber, ransomware, data breach, cyberattack, hackers.
The paragraph was in the earlier 10-K and nothing like it is in the latest.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Rubber & Plastics Footwear | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Apparel & Other Finishd Prods of Fabrics & Similar Matl | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Food and Kindred Products | 1 | 1 |
| Gas & Other Services Combined | 1 | 1 |
| Household Appliances | 1 | 1 |
| In Vitro & In Vivo Diagnostic Substances | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Meat Packing Plants | 1 | 1 |
| Miscellaneous Food Preparations & Kindred Products | 1 | 1 |
| Newspapers: Publishing or Publishing & Printing | 1 | 1 |
| Ordnance & Accessories, (No Vehicles/Guided Missiles) | 1 | 1 |
| Paper Mills | 1 | 1 |
| Retail-Drug Stores and Proprietary Stores | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Home Furniture, Furnishings & Equipment Stores | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Services-Management Services | 1 | 1 |
| Services-Misc Health & Allied Services, NEC | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Television Broadcasting Stations | 1 | 1 |
| Water Supply | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| Wholesale-Motor Vehicle Supplies & New Parts | 1 | 1 |
| Computer Storage Devices | 4 | 5 |
| Retail-Eating Places | 3 | 4 |
| Finance Services | 19 | 28 |
| Computer Communications Equipment | 2 | 3 |
| Surgical & Medical Instruments & Apparatus | 6 | 10 |
| Beverages | 3 | 5 |
| State Commercial Banks | 3 | 6 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 2 | 4 |
| Accident & Health Insurance | 1 | 2 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Cigarettes | 1 | 2 |
| Computer Peripheral Equipment, NEC | 1 | 2 |
| Cutlery, Handtools & General Hardware | 1 | 2 |
| Fats & Oils | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Mining & Quarrying of Nonmetallic Minerals (No Fuels) | 1 | 2 |
| Oil & Gas Field Services, NEC | 1 | 2 |
| Refuse Systems | 1 | 2 |
| Retail-Family Clothing Stores | 1 | 2 |
| Retail-Lumber & Other Building Materials Dealers | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Wholesale-Groceries & Related Products | 1 | 2 |
| National Commercial Banks | 5 | 11 |
| Services-Prepackaged Software | 8 | 19 |
| Biological Products, (No Diagnostic Substances) | 2 | 5 |
| Laboratory Analytical Instruments | 2 | 5 |
| Services-Computer Programming, Data Processing, Etc. | 2 | 5 |
| Investment Advice | 3 | 8 |
| Air-Cond & Warm Air Heatg Equip & Comm & Indl Refrig Equip | 1 | 3 |
| Computer & office Equipment | 1 | 3 |
| Electrical Work | 1 | 3 |
| Measuring & Controlling Devices, NEC | 1 | 3 |
| Services-Consumer Credit Reporting, Collection Agencies | 1 | 3 |
| Crude Petroleum & Natural Gas | 2 | 7 |
| Electric Services | 4 | 15 |
| Semiconductors & Related Devices | 4 | 15 |
| Services-Business Services, NEC | 4 | 16 |
| Fire, Marine & Casualty Insurance | 3 | 12 |
| Services-Computer Processing & Data Preparation | 1 | 4 |
| Real Estate Investment Trusts | 6 | 27 |
| Industrial Instruments For Measurement, Display, and Control | 1 | 5 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 1 | 5 |
| Electric & Other Services Combined | 2 | 12 |
| Petroleum Refining | 1 | 6 |
| Security Brokers, Dealers & Flotation Companies | 1 | 7 |
| Pharmaceutical Preparations | 1 | 11 |
376 paragraphs · Fats & Oils show all sectors
The Company is subject to the EU Network and Information Security (NIS2) directive, which aims to enhance cybersecurity across the EU by establishing more stringent requirements for a broader range of sectors and entities. Although NIS2 has not yet been fully implemented, the Company is proactively working with relevant authorities and stakeholders in various countries as they enact the directive. NIS2 mandates that organizations implement robust cybersecurity measures, including formal business continuity (BC) and disaster recovery (DR) plans, to ensure resilience against cyber threats. Non-compliance with these regulations could result in significant fines, legal penalties, and operational disruptions.
Read in the 10-K filed Feb 20, 2025 ↗