Classification is based on semantic text similarity scoring and may include approximations. “No match” means no high-confidence textual match was found — not necessarily that a section was removed.

🟡 Modified Disclosure change7/10

AbbVie depends on information technology and a failure of, or significant disruption to, those systems, or a failure to adequately adopt emerging technologies such as artificial intelligence, could have a material adverse effect on AbbVie's business.

high match confidence

Sentence-level differences:

Reworded sentence: "Such breaches may cause sensitive data, including intellectual property, trade secrets or personal information belonging to AbbVie, its patients, customers, employees or business partners, to be exposed to unauthorized persons or to the public."
Reworded sentence: "Cybersecurity attacks and incidents are increasing in their frequency, sophistication and intensity and, due to the nature of some of these attacks, there is a risk that they may remain undetected for a period of time."
Reworded sentence: "In addition, AbbVie’s cyber insurance may not be sufficient to | 2024 Form 10-K | 2024 Form 10-K | 2024 Form 10-K | 2024 Form 10-K cover the financial, legal, business or reputational losses that may result from an interruption or breach of AbbVie systems or those of our third-party vendors."

Current (2025):

Read full text

AbbVie relies on sophisticated software applications and complex information technology systems (including cloud services) to operate its business, which are inherently vulnerable to malicious intrusion, random attack, loss of data privacy, disruption, degradation or breakdown. Certain of these applications and systems are managed, hosted, provided or used by third parties. Data privacy or security breaches of our internal systems or those of our information technology vendors may in the future result in the failure of critical business operations. Such breaches may cause sensitive data, including intellectual property, trade secrets or personal information belonging to AbbVie, its patients, customers, employees or business partners, to be exposed to unauthorized persons or to the public. To date, neither AbbVie’s business nor operations have been materially impacted by such incidents, however, the healthcare industry remains a target of cyber-attacks. Cybersecurity attacks and incidents are increasing in their frequency, sophistication and intensity and, due to the nature of some of these attacks, there is a risk that they may remain undetected for a period of time. AbbVie’s investments in the protection of its data and information technology and its efforts to monitor its systems on an ongoing basis may be insufficient to prevent compromises in AbbVie's information technology systems that could have a material adverse effect on AbbVie's business. Such adverse consequences could include loss of revenue or the loss of critical or sensitive information from AbbVie’s or third-party providers’ databases or information technology systems and could also result in legal, financial, reputational or business harm to AbbVie and potentially substantial remediation costs. In addition, AbbVie’s cyber insurance may not be sufficient to

| 2024 Form 10-K

cover the financial, legal, business or reputational losses that may result from an interruption or breach of AbbVie systems or those of our third-party vendors.

Additionally, AbbVie utilizes artificial intelligence (AI) and other emerging technologies in select applications to support its operations. These technologies may present opportunities for AbbVie's business but may also entail risks, including that AI-generated analyses utilized by AbbVie could be deficient or exacerbate regulatory, cybersecurity or other significant risks. Further, our failure to effectively implement these technologies could hinder our ability to compete, as competitors' advancements in AI may lead to more efficient operations.

View prior text (2024)

| 2023 Form 10-K

is a risk that they may remain undetected for a period of time. AbbVie’s investments in the protection of its data and information technology and its efforts to monitor its systems on an ongoing basis may be insufficient to prevent compromises in AbbVie's information technology systems that could have a material adverse effect on AbbVie's business. Such adverse consequences could include loss of revenue or the loss of critical or sensitive information from AbbVie’s or third-party providers’ databases or information technology systems and could also result in legal, financial, reputational or business harm to AbbVie and potentially substantial remediation costs. In addition, AbbVie’s cyber insurance may not be sufficient to cover the financial, legal, business or reputational losses that may result from an interruption or breach of AbbVie systems or those of our third-party vendors.