Cybersecurity and data breaches
205 of 521 companies added a paragraph in Risk Factors that uses one of these words:
cybersecurity, cyber, ransomware, data breach, cyberattack, hackers.
The paragraph is in the latest 10-K and nothing like it was in the one before.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Computer Communications Equipment | 3 | 3 |
| Accident & Health Insurance | 2 | 2 |
| Computer Peripheral Equipment, NEC | 2 | 2 |
| Instruments For Meas & Testing of Electricity & Elec Signals | 2 | 2 |
| Men's & Boys' Furnishgs, Work Clothg, & Allied Garments | 2 | 2 |
| Rubber & Plastics Footwear | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Aircraft Parts & Auxiliary Equipment, NEC | 1 | 1 |
| Apparel & Other Finishd Prods of Fabrics & Similar Matl | 1 | 1 |
| Bottled & Canned Soft Drinks & Carbonated Waters | 1 | 1 |
| Canned, Fruits, Veg, Preserves, Jams & Jellies | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electromedical & Electrotherapeutic Apparatus | 1 | 1 |
| Electronic Components & Accessories | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Engines & Turbines | 1 | 1 |
| Gas & Other Services Combined | 1 | 1 |
| General Industrial Machinery & Equipment, NEC | 1 | 1 |
| Grain Mill Products | 1 | 1 |
| Heavy Construction Other Than Bldg Const - Contractors | 1 | 1 |
| In Vitro & In Vivo Diagnostic Substances | 1 | 1 |
| Insurance Carriers, NEC | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Meat Packing Plants | 1 | 1 |
| Misc Industrial & Commercial Machinery & Equipment | 1 | 1 |
| Miscellaneous Manufacturing Industries | 1 | 1 |
| Paints, Varnishes, Lacquers, Enamels & Allied Prods | 1 | 1 |
| Paper Mills | 1 | 1 |
| Real Estate Operators (No Developers) & Lessors | 1 | 1 |
| Retail-Drug Stores and Proprietary Stores | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Home Furniture, Furnishings & Equipment Stores | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Retail-Retail Stores, NEC | 1 | 1 |
| Rolling Drawing & Extruding of Nonferrous Metals | 1 | 1 |
| Services-Advertising Agencies | 1 | 1 |
| Services-Detective, Guard & Armored Car Services | 1 | 1 |
| Services-Misc Health & Allied Services, NEC | 1 | 1 |
| Special Industry Machinery (No Metalworking Machinery) | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Television Broadcasting Stations | 1 | 1 |
| Trucking & Courier Services (No Air) | 1 | 1 |
| Water Supply | 1 | 1 |
| Wholesale-Electronic Parts & Equipment, NEC | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| X-Ray Apparatus & Tubes & Related Irradiation Apparatus | 1 | 1 |
| Finance Services | 21 | 28 |
| Insurance Agents, Brokers & Service | 4 | 6 |
| Electrical Work | 2 | 3 |
| Retail-Auto Dealers & Gasoline Stations | 2 | 3 |
| Services-Computer Integrated Systems Design | 2 | 3 |
| Investment Advice | 5 | 8 |
| Biological Products, (No Diagnostic Substances) | 3 | 5 |
| Computer Storage Devices | 3 | 5 |
| Services-Computer Programming, Data Processing, Etc. | 3 | 5 |
| National Commercial Banks | 6 | 11 |
| Services-Prepackaged Software | 10 | 19 |
| Petroleum Refining | 3 | 6 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 2 | 4 |
| Services-Computer Processing & Data Preparation | 2 | 4 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Cutlery, Handtools & General Hardware | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Mining & Quarrying of Nonmetallic Minerals (No Fuels) | 1 | 2 |
| Oil & Gas Field Services, NEC | 1 | 2 |
| Optical Instruments & Lenses | 1 | 2 |
| Printed Circuit Boards | 1 | 2 |
| Pumps & Pumping Equipment | 1 | 2 |
| Radio & Tv Broadcasting & Communications Equipment | 1 | 2 |
| Retail-Auto & Home Supply Stores | 1 | 2 |
| Services-Computer Programming Services | 1 | 2 |
| Services-General Medical & Surgical Hospitals, NEC | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Telephone Communications (No Radiotelephone) | 1 | 2 |
| Transportation Services | 1 | 2 |
| Trucking (No Local) | 1 | 2 |
| Semiconductors & Related Devices | 7 | 15 |
| Security Brokers, Dealers & Flotation Companies | 3 | 7 |
| Surgical & Medical Instruments & Apparatus | 4 | 10 |
| Industrial Instruments For Measurement, Display, and Control | 2 | 5 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 2 | 5 |
| Services-Business Services, NEC | 6 | 16 |
| Pharmaceutical Preparations | 4 | 11 |
| Electric Services | 5 | 15 |
| Electric & Other Services Combined | 4 | 12 |
| State Commercial Banks | 2 | 6 |
| Air-Cond & Warm Air Heatg Equip & Comm & Indl Refrig Equip | 1 | 3 |
| Computer & office Equipment | 1 | 3 |
| Electronic Computers | 1 | 3 |
| Life Insurance | 1 | 3 |
| Measuring & Controlling Devices, NEC | 1 | 3 |
| Plastic Materials, Synth Resins & Nonvulcan Elastomers | 1 | 3 |
| Services-Commercial Physical & Biological Research | 1 | 3 |
| Soap, Detergents, Cleang Preparations, Perfumes, Cosmetics | 1 | 3 |
| Real Estate Investment Trusts | 8 | 27 |
| Crude Petroleum & Natural Gas | 2 | 7 |
| Fire, Marine & Casualty Insurance | 3 | 12 |
| Retail-Eating Places | 1 | 4 |
| Hospital & Medical Service Plans | 1 | 5 |
| Laboratory Analytical Instruments | 1 | 5 |
| Retail-Variety Stores | 1 | 5 |
528 paragraphs · Retail-Eating & Drinking Places show all sectors
Our information technology systems and those of our third-party service providers, business partners, and licensees—including those supporting point-of-sale, mobile platforms, payment systems, delivery, rewards, and administrative functions—store personal, financial, and confidential data from customers, employees, business partners, and licensees, as well as proprietary business information. Although we have put in place policies, procedures, and technological safeguards designed to protect the security of this information, we cannot guarantee that this information will not be improperly disclosed or accessed. Like other prominent retail companies, we have experienced cyber-attacks (e.g., phishing) and other attempts to breach or gain unauthorized access to our systems, as have our third-party service providers, business partners, and licensees. We expect such threats to continue and evolve, especially with the rapid evolution and increased adoption of artificial intelligence.
Read in the 10-K filed Nov 14, 2025 ↗
Unauthorized access, theft, or destruction of data or any breach, ransomware attack or other incident affecting our systems—whether through external attacks or internal methods—could result in reputational harm, loss of customers, business disruption, regulatory investigations, litigation (including class actions), and significant financial costs. It may take considerable time for us to investigate and evaluate the full impact of incidents, particularly for sophisticated attacks. Responding to cybersecurity incidents may require substantial investments in technology, personnel, legal compliance, and customer support, including notification and credit monitoring. These costs could materially impact our financial results and divert resources from strategic initiatives. Media reports of actual or perceived vulnerabilities—whether involving us or our third-party service providers, business partners, or licensees—can damage our brand and business, regardless of an incident’s scope or validity.
Read in the 10-K filed Nov 14, 2025 ↗
We rely extensively on interconnected information technology systems to support our operations, including point-of-sale, mobile ordering, payments, supply chain management, loyalty programs, and administrative functions. We also depend on third-party providers for key systems and services, which may lack full redundancy within or across markets. Our growth initiatives—particularly those involving digital engagement and convenience-led formats—depend heavily on the reliability and performance of these systems. Any failure, inadequacy, inefficiency, or interruption could disrupt operations and adversely affect financial results. Our contractual and operational safeguards may not be effective in preventing the failure of these systems or services to operate effectively and be available. Failures—whether due to outages, cyber-attacks, software flaws, misconfigurations, or other disruptions—could materially impact product availability, operational efficiency, and financial performance. If our incident response and recovery plans are ineffective or delayed, remediation efforts may incur significant, unplanned costs.
Read in the 10-K filed Nov 14, 2025 ↗
Emerging technologies, including artificial intelligence and machine learning, may not deliver expected efficiencies and could introduce new risks, such as those related to cybersecurity, data privacy, inaccuracies, hallucinations, bias or discrimination and intellectual property infringement, which may become more pronounced as the Company’s reliance on such technologies increases.
Read in the 10-K filed Nov 14, 2025 ↗