Privacy and data rules

By sector

Sector is the SEC's industry description of the company. Each count opens that sector's quotes below.

432 paragraphs · Computer & office Equipment show all sectors

In the ordinary course of business, we store sensitive data, including intellectual property, personal data, our proprietary business information and that of our employees, contractors, customers, vendors, partners, suppliers, and other third parties with whom we do business. In addition, we store sensitive data through cloud-based services that may be hosted by third parties and in data center infrastructure maintained by third parties. We have been, and expect to be, subject to cyberattacks and other attempted intrusions into our networks and systems by a wide range of actors, including, but not limited to, nation state actors, criminal enterprises, terrorist organizations, and other organizations or individuals, as well as errors, wrongful conduct or malfeasance by employees and third-party service providers, (collectively, “malicious parties”) who have at times been able to circumvent or bypass our cyber security measures. Geopolitical tensions or conflicts may also heighten the risk of such cyberattacks or exacerbate system vulnerabilities, considering our continued hybrid work environment and our globally dispersed operations, employees, contractors, suppliers, developers, partners, and other third parties.

Read in the 10-K filed Dec 18, 2025 ↗

The cybersecurity threat landscape is rapidly evolving and becoming increasingly sophisticated, and there can be no assurance that our controls and procedures will be sufficient to address future threats or remediate future incidents. Further, there has been an increase in the frequency and sophistication of attacks, and we expect these activities to continue to increase, including malicious actors potentially leveraging AI to develop malicious code or sophisticated phishing attempts. It is possible that such incidents may embolden other malicious actors to perpetrate future attacks that may result in material misappropriation, system disruptions or shutdowns, malicious alteration, or destruction of our confidential or personal information or that of third parties. Additionally, the proliferation of generative AI models within the internal systems, processes, and tools of HPE, our suppliers, our customers, or other third parties with whom we do business may create new attack methods for threat actors. The emergence of deepfakes and advanced social engineering tactics presents new challenges in preventing deception and unauthorized access, underscoring the importance of advanced verification and detection mechanisms. Zero-day vulnerabilities may include newly discovered security flaws in software that are exploited before patches are released, requiring proactive monitoring and immediate remediation efforts. Quantum computing may in the future present a risk to our business by potentially breaking traditional cryptographic methods on which we rely, thereby necessitating the shift to quantum-resistant encryption techniques.

Read in the 10-K filed Dec 18, 2025 ↗

We are involved in various claims, suits, investigations, and legal proceedings that arise from time to time in the ordinary course of business or otherwise. Additional legal claims or regulatory matters affecting us and our subsidiaries may arise in the future and could involve stockholder, consumer, regulatory, compliance, intellectual property, antitrust, tax, trade, privacy, employment, warranty or product claims, and other issues on a global basis. In addition, we have received inquiries, and may be subject to demands, claims, lawsuits, regulatory investigations, and additional inquiries (including those from U.S. or foreign governmental authorities). Litigation is inherently unpredictable. Regardless of the merits of a claim, the expense of initiating and defending, and in some cases entering into settlements of claims, such litigation and investigations may be costly, and may cause us to suffer reputational harm, divert management’s attention from day-to-day operations of our business, and may require us to implement certain remedial measures that could disrupt our business, operations, results of operations, financial condition, or cash flows. In addition, if we fail to comply with the terms of any settlement agreement, we could face more substantial penalties. An unfavorable resolution of one or more of these matters could adversely affect our business, results of operations, financial condition, or cash flows. Even if we are not named a party to a particular suit, we may be subject to indemnification obligations to the named parties, including our directors and executive officers as well as other third parties, that could subject us to liability for damages or other amounts payable as a result of such judgments or settlements.

Read in the 10-K filed Dec 18, 2025 ↗