Cybersecurity and data breaches
145 of 521 companies dropped a paragraph in Risk Factors that uses one of these words:
cybersecurity, cyber, ransomware, data breach, cyberattack, hackers.
The paragraph was in the earlier 10-K and nothing like it is in the latest.
It counts text; it does not say how serious a risk is. Words in capitals only (such as AI) must be in capitals.
By sector
Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.
| Sector | Companies | Compared |
|---|---|---|
| Rubber & Plastics Footwear | 2 | 2 |
| Air Courier Services | 1 | 1 |
| Apparel & Other Finishd Prods of Fabrics & Similar Matl | 1 | 1 |
| Electrical Industrial Apparatus | 1 | 1 |
| Electronic Connectors | 1 | 1 |
| Food and Kindred Products | 1 | 1 |
| Gas & Other Services Combined | 1 | 1 |
| Household Appliances | 1 | 1 |
| In Vitro & In Vivo Diagnostic Substances | 1 | 1 |
| Leather & Leather Products | 1 | 1 |
| Meat Packing Plants | 1 | 1 |
| Miscellaneous Food Preparations & Kindred Products | 1 | 1 |
| Newspapers: Publishing or Publishing & Printing | 1 | 1 |
| Ordnance & Accessories, (No Vehicles/Guided Missiles) | 1 | 1 |
| Paper Mills | 1 | 1 |
| Retail-Drug Stores and Proprietary Stores | 1 | 1 |
| Retail-Eating & Drinking Places | 1 | 1 |
| Retail-Home Furniture, Furnishings & Equipment Stores | 1 | 1 |
| Retail-Radio, Tv & Consumer Electronics Stores | 1 | 1 |
| Services-Management Services | 1 | 1 |
| Services-Misc Health & Allied Services, NEC | 1 | 1 |
| Telephone & Telegraph Apparatus | 1 | 1 |
| Television Broadcasting Stations | 1 | 1 |
| Water Supply | 1 | 1 |
| Wholesale-Medical, Dental & Hospital Equipment & Supplies | 1 | 1 |
| Wholesale-Motor Vehicle Supplies & New Parts | 1 | 1 |
| Computer Storage Devices | 4 | 5 |
| Retail-Eating Places | 3 | 4 |
| Finance Services | 19 | 28 |
| Computer Communications Equipment | 2 | 3 |
| Surgical & Medical Instruments & Apparatus | 6 | 10 |
| Beverages | 3 | 5 |
| State Commercial Banks | 3 | 6 |
| Electronic & Other Electrical Equipment (No Computer Equip) | 2 | 4 |
| Search, Detection, Navigation, Guidance, Aeronautical Sys | 2 | 4 |
| Security & Commodity Brokers, Dealers, Exchanges & Services | 2 | 4 |
| Accident & Health Insurance | 1 | 2 |
| Aircraft Engines & Engine Parts | 1 | 2 |
| Cigarettes | 1 | 2 |
| Computer Peripheral Equipment, NEC | 1 | 2 |
| Cutlery, Handtools & General Hardware | 1 | 2 |
| Fats & Oils | 1 | 2 |
| Industrial Organic Chemicals | 1 | 2 |
| Mining & Quarrying of Nonmetallic Minerals (No Fuels) | 1 | 2 |
| Oil & Gas Field Services, NEC | 1 | 2 |
| Refuse Systems | 1 | 2 |
| Retail-Family Clothing Stores | 1 | 2 |
| Retail-Lumber & Other Building Materials Dealers | 1 | 2 |
| Services-Medical Laboratories | 1 | 2 |
| Wholesale-Groceries & Related Products | 1 | 2 |
| National Commercial Banks | 5 | 11 |
| Services-Prepackaged Software | 8 | 19 |
| Biological Products, (No Diagnostic Substances) | 2 | 5 |
| Laboratory Analytical Instruments | 2 | 5 |
| Services-Computer Programming, Data Processing, Etc. | 2 | 5 |
| Investment Advice | 3 | 8 |
| Air-Cond & Warm Air Heatg Equip & Comm & Indl Refrig Equip | 1 | 3 |
| Computer & office Equipment | 1 | 3 |
| Electrical Work | 1 | 3 |
| Measuring & Controlling Devices, NEC | 1 | 3 |
| Services-Consumer Credit Reporting, Collection Agencies | 1 | 3 |
| Crude Petroleum & Natural Gas | 2 | 7 |
| Electric Services | 4 | 15 |
| Semiconductors & Related Devices | 4 | 15 |
| Services-Business Services, NEC | 4 | 16 |
| Fire, Marine & Casualty Insurance | 3 | 12 |
| Services-Computer Processing & Data Preparation | 1 | 4 |
| Real Estate Investment Trusts | 6 | 27 |
| Industrial Instruments For Measurement, Display, and Control | 1 | 5 |
| Orthopedic, Prosthetic & Surgical Appliances & Supplies | 1 | 5 |
| Electric & Other Services Combined | 2 | 12 |
| Petroleum Refining | 1 | 6 |
| Security Brokers, Dealers & Flotation Companies | 1 | 7 |
| Pharmaceutical Preparations | 1 | 11 |
376 paragraphs · State Commercial Banks show all sectors
Fifth Third relies on its systems and certain third-party service providers and certain failures (including those related to cybersecurity or weather events exacerbated by climate change) could materially adversely affect operations.
Read in the 10-K filed Feb 24, 2025 ↗
Fifth Third’s necessary dependence upon automated systems to record and process its transaction volume poses the risk that technical system flaws or employee errors, tampering or manipulation of those systems could result in losses and may be difficult to detect. Fifth Third may also be subject to disruptions of its operating systems arising from events that are beyond its control (for example, cyber-attacks, equipment failure, or electrical or telecommunications outages).
Read in the 10-K filed Feb 24, 2025 ↗
In the U.S., there are numerous federal, state and local data privacy and security laws and regulations governing the collection, sharing, use, retention, disclosure, security, storage, transfer and other processing of personal information. At the federal level, we are subject to, among other laws and regulations, the rules and regulations promulgated under the authority of the Federal Trade Commission and the Gramm-Leach-Bliley Act. Moreover, the U.S. Congress has considered, and may in the future consider, various proposals for more comprehensive data privacy and security legislation, to which we may be subject if enacted. At the state level, we are subject to laws and regulations such as the CCPA. Numerous other states also have enacted, or are in the process of enacting or considering, comprehensive state-level data privacy and security laws and regulations that share similarities with the CCPA. Moreover, laws in all 50 U.S. states require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a data breach.
Read in the 10-K filed Feb 24, 2025 ↗
In particular, we, like other financial services firms, will continue to face increasing cyber-threats,
Read in the 10-K filed Feb 13, 2025 ↗