Becton Dickinson and Company: 10-K Risk Factor Changes

The design, manufacture and marketing of medical devices involve certain inherent risks. Manufacturing or design defects, component failures, unapproved or improper use of our products, or inadequate disclosure of risks or other information relating to the use of our products can lead to injury or other serious adverse events. Such events have in the past and could in the future lead to recalls or safety alerts relating to our products (either voluntary or as required by the FDA or similar governmental authorities in other countries), and could result, in certain cases, in the removal of a product from the market. A recall could result in significant costs, lost sales and customers, enforcement actions and/or investigations by state and federal governments or other enforcement bodies, as well as negative publicity and damage to our reputation that could reduce future demand for our products. Personal injuries relating to the use of our products can also result in 24 24 24 24 24 24 Table of Contents Table of Contents Table of Contents significant product liability claims being brought against us. In some circumstances, such adverse events could also cause delays in regulatory approval of new products or the imposition of post-market approval requirements.

The design, manufacture and marketing of medical devices involve certain inherent risks. Manufacturing or design defects, component failures, unapproved or improper use of our products, or inadequate disclosure of risks or other information relating to the use of our products can lead to injury or other serious adverse events. Such events have in the past and could in the future lead to recalls or safety alerts relating to our products (either voluntary or as required by the FDA or similar governmental authorities in other countries), and could result, in certain cases, in the removal of a product from the market. A recall could result in significant costs and lost sales and customers, enforcement actions and/or investigations by state and federal governments or other enforcement bodies, as well as negative publicity and damage to our reputation that could reduce future demand for our products. Personal injuries relating to the use of our products can also result in significant product liability claims being brought against us. In some circumstances, such adverse events could also cause delays in regulatory approval of new products or the imposition of post-market approval requirements.

We purchase many different types of raw materials and components used in our products, some of which are not available from multiple sources. In addition, for quality assurance, cost-effectiveness and other reasons, certain raw materials and components are purchased from sole suppliers. The price and supply of these materials and components has been, and may in the future be, impacted or disrupted for reasons beyond our control, including supplier shutdowns, supplier capacity constraints, supplier insolvencies, labor disruptions or shortages, transportation delays, inflationary pricing pressures, work stoppages, extreme weather events, geopolitical developments, global economic uncertainty or downturns, sanctions and trade restrictions, and other governmental regulatory actions (such as in the area of materials of concern) and any such changes or disruptions could adversely affect our business, results of operations, financial condition and cash flows. We have experienced, and may continue to experience, significant challenges to our global transportation channels and other aspects of our global supply chain network, including to the cost and availability of energy, raw materials and components due to shortages, labor strikes, and cost inflation. We continuously explore 19 19 19 19 19 19 Table of Contents Table of Contents Table of Contents alternative routes, transportation modes, and replenishment timings to preempt and mitigate associated risks, but no assurance can be given that these efforts will adequately address these challenges and disruptions. While we work with suppliers to ensure continuity of supply and service, no assurance can be given that these efforts will be successful. In addition, due to regulatory requirements relating to the qualification of suppliers, we may not be able to establish additional or replacement sources on a timely basis or without excessive cost. The termination, reduction or interruption in supply of these raw materials and components could adversely impact our ability to manufacture and sell certain of our products, which could have an adverse impact on our business, financial condition and results of operations.

We purchase many different types of raw materials and components used in our products, some of which are not available from multiple sources. In addition, for quality assurance, cost-effectiveness and other reasons, certain raw materials and components are purchased from sole suppliers. The price and supply of these materials and components may be impacted or disrupted for reasons beyond our control, including supplier shutdowns, supplier capacity constraints, supplier insolvencies, labor disruptions, transportation delays, inflationary pricing pressures, work stoppages, labor shortages, extreme weather events, geopolitical developments, global economic uncertainty or downturns, sanctions and trade restrictions, and other governmental regulatory actions (such as in the area of materials of concern). We have experienced, and may continue to experience, significant challenges to our global transportation channels and other aspects of our global supply chain network, including to the cost and availability of energy, raw materials and components due to shortages and cost inflation. While we work with suppliers to ensure continuity of supply and service, no assurance can be given that these efforts will be successful. In addition, due to regulatory requirements relating to the qualification of suppliers, we may not be able to establish additional or replacement sources on a timely basis or without excessive cost. The termination, reduction or interruption in supply of these raw materials and components could adversely impact our ability to manufacture and sell certain of our products, which could have an adverse impact on our business, financial condition and results of operations.

Climate change resulting from increased concentrations of carbon dioxide and other greenhouse gases (“GHG”) in the atmosphere may present risks to our business and operations. Extreme weather or other conditions, such as hurricanes, tornadoes, windstorms, wildfires or flooding, which may result from climate change could adversely impact our operations and supply chain, including the availability and cost of raw materials and components required for the operation of our business, and human capital issues for BD and companies within our supply chain. In addition, access to and pricing of certain natural resources, such as water, could impact our manufacturing operations. Such conditions could also result in physical damage to our products, plants and distribution centers, as well as the infrastructure and facilities of our suppliers and of hospitals, medical care facilities and other customers. There has been increased focus by federal, international, state and local regulatory and legislative bodies to combat and/or limit the effects of climate change through a variety of means, including regulating GHG emissions (and requirements to disclose climate-related risks and metrics, including GHG emissions), policies mandating or promoting the use of renewable or zero-carbon energy and sustainability initiatives, and additional taxes on fuel and energy. There has been, and in the future there may be additional, legislation or regulations enacted or promulgated in the United States and in other jurisdictions in which we do business that impose more stringent restrictions and requirements on our operations than our historical legal or regulatory obligations as well as additional disclosure or reporting requirements. We have experienced, and companies in our supply chain may experience, increased compliance burdens and costs to meet the regulatory obligations. Such increased compliance burdens and costs could cause disruption in the sourcing, manufacturing and distribution of our products and adversely affect our business, financial condition or results of operations. Additionally, the impacts of climate change may further influence customer and other stakeholder preferences and requirements. This includes increased demand for more sustainable products, including products with lower environmental footprints, and for companies to produce and demonstrate progress against sustainability goals and GHG reduction targets, including product-level GHG emissions data. Failure to meet stakeholder expectations or our own goals or commitments relating to sustainability or GHG emissions reductions, provide sustainable products or demonstrate GHG reductions could potentially result in loss of market share, reputational impacts, or an inability to attract and retain customers.

Climate change resulting from increased concentrations of carbon dioxide and other greenhouse gases (“GHG”) in the atmosphere may present risks to our business and operations. Extreme weather or other conditions, such as hurricanes, tornadoes, windstorms, wildfires or flooding, which may result from climate change could adversely impact our operations and supply chain, including the availability and cost of raw materials and components required for the operation of our business, and human capital issues for BD and companies within our supply chain. In addition, access to and pricing of certain natural resources, such as water, could impact our manufacturing operations. Such conditions could also result in physical damage to our products, plants and distribution centers, as well as the infrastructure and facilities of our suppliers and of hospitals, medical care facilities and other customers. There has been increased focus by federal, international, state and local regulatory and legislative bodies to combat and/or limit the effects of climate change through a variety of means, including regulating greenhouse gas emissions (and requirements to disclose climate-related risks and metrics, including greenhouse gas emissions), policies mandating or promoting the use of renewable or zero-carbon energy and sustainability initiatives, and additional taxes on fuel and energy. If legislation or regulations are enacted or promulgated in the United States or in any other jurisdiction in which we do business that impose more stringent restrictions and requirements than our current legal or regulatory obligations, we and companies in our supply chain may experience increased compliance burdens and costs to meet the regulatory obligations, which could cause disruption in the sourcing, manufacturing and distribution of our products and adversely affect our business, financial condition or results of operations. Additionally, the impacts of climate change may further influence customer preferences and requirements, such as increased demand for products with lower environmental footprints, and for companies to produce and demonstrate progress against GHG reduction plans and targets. Failure to provide climate-friendly products or demonstrate GHG reductions could potentially result in loss of market share.

A substantial amount of our revenue is derived from international operations, and we anticipate that a significant portion of our future sales will continue to come from outside the U.S. The revenues we report with respect to our operations outside the U.S. have been and may continue to be adversely affected by fluctuations in foreign currency exchange rates, which are caused by a number of factors, including changes in a country's political and economic policies and inflationary conditions. Furthermore, currency exchange rates have been especially volatile in the recent past, and these currency fluctuations have affected, and may continue to affect, the reported value of our assets and liabilities, as well as our cash flows. A discussion of the financial impact of exchange rate fluctuations and the ways and extent to which we may attempt to address any impact is contained in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations. Any exchange rate hedging activities we engage in may only offset a portion of the adverse financial impact resulting from unfavorable changes in foreign currency exchange rates. We cannot predict with any certainty changes in foreign currency exchange rates or the degree to which we can effectively mitigate these risks. 15 15 15 15 15 15 Table of Contents Table of Contents Table of Contents

A substantial amount of our revenue is derived from international operations, and we anticipate that a significant portion of our future sales will continue to come from outside the U.S. The revenues we report with respect to our operations outside the U.S. have been and may continue to be adversely affected by fluctuations in foreign currency exchange rates, which are caused by a number of factors, including changes in a country's political and economic policies and inflationary conditions. Furthermore, currency exchange rates have been especially volatile in the recent past, and these currency fluctuations have affected, and may continue to affect, the reported value of our assets and liabilities, as well as our cash flows. A discussion of the financial impact of exchange rate fluctuations and the ways and extent to which we may attempt to address any impact is contained in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations. Any exchange rate hedging activities we engage in may only offset a portion of the adverse financial impact resulting from unfavorable changes in foreign currency exchange rates. We cannot predict with any certainty changes in foreign currency exchange rates or the degree to which we can effectively mitigate these risks. 13 13 13 13 13 13 Table of Contents Table of Contents Table of Contents

We are or have been a defendant in a number of lawsuits, including, among others, purported class action lawsuits for alleged antitrust violations and violations of federal securities laws, environmental and product liability claims (including pending claims relating to ethylene oxide, our hernia repair implant products, surgical continence and pelvic organ prolapse products for women, vena cava filter products and implantable ports, which involve, or could in the future involve, lawsuits seeking class action status or seeking to establish multi-district litigation or other consolidated proceedings) and suits alleging patent infringement. We also are or have been subject to government investigations and civil investigative demands seeking information with respect to alleged violations of law, including in connection with federal and/or state healthcare programs (such as Medicare or Medicaid), the federal securities laws, federal contracting requirements and/or sales and marketing practices, among other things. A more detailed description of certain litigation to which we are a party is contained in Note 6 to the consolidated financial statements included in “Item 8. Financial Statements and Supplementary Data.” We could be subject to additional lawsuits, governmental investigations, subpoenas and civil investigative demands in the future. Any such lawsuits, governmental investigations, subpoenas and 21 21 21 21 21 21 Table of Contents Table of Contents Table of Contents civil investigative demands could ultimately have a material adverse effect on our results of operations, financial condition and liquidity, and could distract management from the operations of the business. Reserves established for estimated losses with respect to legal proceedings do not represent an exact calculation of our actual liability, but instead represent our estimate of the probable loss at the time the reserve is established to the extent future losses are probable and reasonably estimable. Due to the inherent uncertainty of litigation and our underlying loss reserve estimates, additional reserves may be established or current reserves may be significantly increased from time-to-time. Also, in some instances, we are not able to reasonably estimate the amount or range of loss that could result from an unfavorable outcome of the litigation to which we are a party. In view of these uncertainties, we could incur charges materially in excess of any currently established accruals and, to the extent available, excess liability insurance. In addition, even if the Company believes it has meritorious defenses, from time to time the Company engages in settlement discussions and mediation and considers settlements taking into account various factors including, among other things, developments in such legal proceedings and the resulting risks and uncertainties. These activities have resulted in settlements for certain matters and going forward could result in further settlements, any of which may be confidential and could be significant and result in charges in excess of accruals. Any such future charges, individually or in the aggregate, could have a material adverse effect on our results of operations, financial condition and/or liquidity. With respect to certain litigation, we believe that some settlements and judgments, as well as legal defense costs, may be covered in whole or in part under applicable insurance policies with a limited number of insurance companies, or, in some circumstances, indemnification obligations owed to us by other parties. However, amounts recovered under these arrangements may be less than the stated coverage limits or less than otherwise expected and may not be adequate to cover damages and/or costs. In addition, there is no guarantee that insurers or other parties will pay claims or that coverage or indemnity will be otherwise available. Also, for certain product liability claims or lawsuits, BD does not maintain or has limited remaining insurance coverage, and we may not be able to obtain additional insurance on acceptable terms or at all that will provide adequate protection against potential liabilities.

We are or have been a defendant in a number of lawsuits, including, among others, purported class action lawsuits for alleged antitrust violations and violations of federal securities laws, product liability claims (which may involve lawsuits seeking class action status or seeking to establish multi-district litigation proceedings, including pending claims relating to our hernia repair implant products, surgical continence and pelvic organ prolapse products for women, vena cava filter products and implantable ports), and suits alleging patent infringement. We also are or have been subject to government subpoenas and civil investigative demands seeking information with respect to alleged violations of law, including in connection with federal and/or state healthcare programs (such as Medicare or Medicaid), federal contracting requirements and/or sales and marketing practices. A more detailed description of certain litigation to which we are a party is contained in Note 6 to the consolidated financial statements included in Item 8. Financial Statements and Supplementary Data. We could be subject to additional lawsuits, governmental investigations, subpoenas and civil investigative demands in the future. Any such lawsuits, governmental investigations, subpoenas and civil investigative demands could ultimately have a material adverse effect on our results of operations, financial condition and liquidity, and could distract management from the operations of the business. 18 18 18 18 18 18 Table of Contents Table of Contents Table of Contents Reserves established for estimated losses with respect to legal proceedings do not represent an exact calculation of our actual liability, but instead represent our estimate of the probable loss at the time the reserve is established. Due to the inherent uncertainty of litigation and our underlying loss reserve estimates, additional reserves may be established or current reserves may be significantly increased from time-to-time. Also, in some instances, we are not able to estimate the amount or range of loss that could result from an unfavorable outcome of the litigation to which we are a party. In view of these uncertainties, we could incur charges materially in excess of any currently established accruals and, to the extent available, excess liability insurance. Any such future charges, individually or in the aggregate, could have a material adverse effect on our results of operations, financial condition and/or liquidity. With respect to certain litigation, we believe that some settlements and judgments, as well as legal defense costs, may be covered in whole or in part under applicable insurance policies with a limited number of insurance companies, or, in some circumstances, indemnification obligations owed to us by other parties. However, amounts recovered under these arrangements may be less than the stated coverage limits or less than otherwise expected and may not be adequate to cover damages and/or costs. In addition, there is no guarantee that insurers or other parties will pay claims or that coverage or indemnity will be otherwise available. Also, for certain product liability claims or lawsuits, BD does not maintain or has limited remaining insurance coverage, and we may not be able to obtain additional insurance on acceptable terms or at all that will provide adequate protection against potential liabilities.

We have manufacturing sites all over the world. In some instances, however, the manufacturing of certain of our product lines is concentrated in one or a few of our plants. Interruption to our manufacturing operations resulting from system outages, cybersecurity incidents or breaches, weather or natural disasters, regulatory requirements, labor disruptions, equipment failure or other issues in our manufacturing process, could adversely affect our ability to manufacture our products. In some instances, we may not be able to transition manufacturing to other BD sites or a third party to replace the lost production. A significant interruption of our manufacturing operations could result in lost revenues and damage to our relationships with customers. In addition, many of our products require sterilization prior to sale, and we utilize both BD facilities and third parties for this process. In some instances, only a few facilities are qualified under applicable regulations to conduct this sterilization. To the extent we or our third-party providers are unable to sterilize our products, whether due to lack of capacity, availability of materials for sterilization (including cobalt), regulatory requirements or otherwise, we may be unable to transition sterilization to other sites or modalities in a timely or cost-effective manner, or at all, which could have an adverse impact on our operating results and financial condition. At a broader level, there is increased focus on the use and emission of ethylene oxide by the EPA and state environmental regulatory agencies. Additional regulatory requirements associated with the use and emission of ethylene oxide for sterilization may be imposed in the future, both domestically and outside the U.S. On April 5, 2024, the final National Emission Standards for Hazardous Air Pollutants (“NESHAP”): Ethylene Oxide Emissions Standards for Sterilization Facilities regulation issued by the EPA became effective. Companies generally have two years from the effective date to comply with the new requirements of the NESHAP. We are in the process of implementing certain changes to our facilities in accordance with NESHAP’s requirements, and such measures will require additional implementation and ongoing operational costs, including investments in certain new technologies. In addition, on April 13, 2023, the EPA published a Pesticide Registration Review: Proposed Interim Decision and Draft Risk Assessment Addendum for Ethylene Oxide (“PID”). The EPA has not yet finalized the PID, which regulates the use of ethylene oxide as a sterilant and is intended to mitigate any human health and environmental risks associated with its use. We cannot predict what the final PID adopted by the EPA may require and therefore we are not able to assess the impact on our sterilization facilities, on the third-party sterilization facilities that BD utilizes and our operations more generally. This increased regulation could require BD or sterilization service providers, including providers used by BD, to temporarily suspend operations to install additional emissions control technology, limit the use of ethylene oxide or take other actions, which would impact BD’s operations and further reduce the available capacity to sterilize medical devices and healthcare products, and could also result in additional costs. If any existing regulatory requirements or any such regulatory actions or rulemaking result in the suspension or interruption of sterilization operations at BD or at medical device sterilizers used by BD, or otherwise limit the availability of third-party sterilization capacity, this could interrupt or otherwise adversely impact production of certain of our products or lead to civil litigation or other claims against BD. BD has business continuity plans in 20 20 20 20 20 20 Table of Contents Table of Contents Table of Contents place to mitigate the impact of any such disruption, although these plans may not be able to fully offset such impact, for the reasons noted above. See “Item 1. Business - Regulation” for a discussion of the consent order BD entered into with the Environmental Protection Division of the Georgia Department of Natural Resources and the risk related to sterilization operations generally.

We have manufacturing sites all over the world. In some instances, however, the manufacturing of certain of our product lines is concentrated in one or more of our plants. Interruption to our manufacturing operations resulting from weather or natural disasters, regulatory requirements, equipment failure or other issues in our manufacturing process, could adversely affect our ability to manufacture our products. In some instances, we may not be able to transition manufacturing to other BD sites or a third party to replace the lost production. A significant interruption of our manufacturing operations could result in lost revenues and damage to our relationships with customers. In addition, many of our products require sterilization prior to sale, and we utilize both BD facilities and third parties for this process. In some instances, only a few facilities are qualified under applicable regulations to conduct this sterilization. To the extent we or our third-party providers are unable to sterilize our products, whether due to lack of capacity, availability of materials for sterilization (including cobalt), regulatory requirements or otherwise, we may be unable to transition sterilization to other sites or modalities in a timely or cost-effective manner, or at all, which could have an adverse impact on our operating results and financial condition. At a broader level, there is increased focus on the use and emission of ethylene oxide by the EPA and state environmental regulatory agencies. Additional regulatory requirements associated with the use and emission of ethylene oxide for sterilization may be imposed in the future, both domestically and outside the U.S. In April 2023, the EPA published proposed regulations relating to commercial sterilizers. We cannot predict what any final regulations adopted by the EPA may require and therefore we are not able to assess the impact they may have on our sterilization facilities, on the third-party sterilization facilities that BD utilizes or on our operations more generally. This increased regulation could require BD or sterilization service providers, including providers used by BD, to temporarily suspend operations to install additional emissions control 17 17 17 17 17 17 Table of Contents Table of Contents Table of Contents technology, limit the use of ethylene oxide or take other actions, which would impact BD’s operations and further reduce the available capacity to sterilize medical devices and healthcare products, and could also result in additional costs. If any existing regulatory requirements or any such regulatory actions or rulemaking result in the suspension or interruption of sterilization operations at BD or at medical device sterilizers used by BD, or otherwise limit the availability of third-party sterilization capacity, this could interrupt or otherwise adversely impact production of certain of our products or lead to civil litigation or other claims against BD. BD has business continuity plans in place to mitigate the impact of any such disruption, although these plans may not be able to fully offset such impact, for the reasons noted above. See “Item 1. Business - Regulation” for a discussion of the consent order BD entered into with the Environmental Protection Division of the Georgia Department of Natural Resources and the risk related to sterilization operations generally.

Natural disasters, such as hurricanes, tornadoes, windstorms, earthquakes, wildfires, floods and other extreme weather events (including those caused by climate change), war, global health crises, terrorism, social or political unrest, labor disruptions and international conflicts and other events beyond our control, and actions taken by the U.S. and other governments or by our customers or suppliers in response to such events, could cause significant economic disruption and political and social instability in the U.S. and areas outside of the U.S. in which we operate. These events could result in decreased demand for our products, adversely affect our manufacturing and distribution capabilities, or increase the costs for or cause interruptions in the supply of materials from our suppliers. 26 26 26 26 26 26 Table of Contents Table of Contents Table of Contents

Natural disasters, such as hurricanes, tornadoes, windstorms, earthquakes, wildfires and floods and other extreme weather events (including those caused by climate change), war, global health crises, terrorism, social or political unrest, labor disruptions and international conflicts and other events beyond our control, and actions taken by the U.S. and other governments or by our customers or suppliers in response to such events, could cause significant economic disruption and political and social instability in the U.S. and areas outside of the U.S. in which we operate. These events could result in decreased demand for our products, adversely affect our manufacturing and distribution capabilities, or increase the costs for or cause interruptions in the supply of materials from our suppliers. 22 22 22 22 22 22 Table of Contents Table of Contents Table of Contents

Our results of operations could be negatively impacted by volatility in the cost of raw materials, components, labor, freight, energy and other production costs that, in turn, increases the costs of producing and distributing our products. New laws or regulations adopted in response to climate change could also increase energy, conversion and transportation costs, as well as the costs of certain raw materials and components. In particular, we purchase supplies of resins, which are oil-based components used to manufacture certain products, and any significant increase in resin costs, whether due to inflationary pressure, supply constraints, regulatory changes or otherwise, could adversely impact future operating results. Increases in oil prices can also increase our packaging and transportation costs. The costs of raw materials, transportation, construction, services, and energy necessary for the production and distribution of our products continues to increase and be volatile. These prices may continue to fluctuate based on many factors beyond our control. While we have implemented cost containment measures, progressed selective price increases and taken other actions to mitigate these inflationary pressures in our supply chain, we may not be able to completely offset all the increases in our operational costs.

Our results of operations could be negatively impacted by volatility in the cost of raw materials, components, labor, freight and energy that, in turn, increases the costs of producing and distributing our products. New laws or regulations adopted in response to climate change could also increase energy and transportation costs, as well as the costs of certain raw materials and components. In particular, we purchase supplies of resins, which are oil-based components used in the manufacture of certain products, and any significant increases in resin costs, whether due to inflationary pressure, supply constraints, regulatory changes 16 16 16 16 16 16 Table of Contents Table of Contents Table of Contents or otherwise, could adversely impact future operating results. Increases in oil prices can also increase our packaging and transportation costs. The costs of raw materials, transportation, construction, services, and energy necessary for the production and distribution of our products continues to increase and be volatile. These prices may continue to fluctuate based on many factors beyond our control, including but not limited to, changes in general economic conditions, labor costs, transportation costs, competition and currency exchange rates. While we have implemented cost containment measures, selective price increases and taken other actions to mitigate these inflationary pressures in our supply chain, we may not be able to completely offset all the increases in our operational costs.

Our operations are global and are affected by complex state, federal and international laws relating to healthcare, environmental protection, occupational health and safety, antitrust, anti-corruption, marketing, fraud and abuse (including anti-kickback and false claims laws), export control, product safety and efficacy, employment, labor, privacy and data protection, taxation, artificial intelligence and other areas. Violations of these laws can result in criminal or civil sanctions, including substantial fines and, in some cases, exclusion from participation in healthcare programs such as Medicare and Medicaid. Environmental laws, particularly with respect to climate change and the emission of greenhouse gases, are also becoming more stringent throughout the world, which may increase our costs of operations or necessitate closures of, or changes to, our manufacturing plants or processes or those of our suppliers, or result in liability to BD. The enactment of additional laws and reporting requirements in the future or changes in the interpretation of existing laws or regulations, may increase our compliance costs or otherwise adversely impact our operations and financial performance. For example, the FDA’s increased oversight of laboratory developed tests may impact certain of our customers and, as a result, could affect our financial performance. We are subject to extensive regulation by the FDA pursuant to the Federal Food, Drug and Cosmetic Act, by comparable agencies in foreign countries, and by other regulatory agencies and governing bodies. Most of our products must receive authorization from the FDA or counterpart regulatory agencies in other countries before they can be marketed or sold. This process may require us to incur significant costs in terms of time and resources, and these costs have been increasing due to increased requirements from the FDA and comparable governing bodies for supporting data for submissions. The regulatory process may also require changes to our products or result in limitations on the indicated uses of our products. Governmental agencies may also impose new requirements regarding registration, including, but not limited to, labeling updates or changes to prohibited materials that require us to modify or re-register products already on the market or otherwise impact our ability 22 22 22 22 22 22 Table of Contents Table of Contents Table of Contents to market our products in those countries. In addition, changes we have made, or may make in the future, to our products have been, or may in the future be, subject to U.S. or foreign regulatory review, including additional 510(k) clearance, PMA approval and other marketing authorizations (such as, but not limited to, with respect to BD AlarisTM pumps and related sets and BD VacutainerTM). We have made modifications to certain of our products in the past and have determined based on our review of our internal documentation and data and the applicable FDA or foreign regulations and guidance that in certain instances new 510(k) clearances or other premarket submissions were not required. We may make similar modifications or add additional features in the future that we believe do not require a new clearance or approval. If the FDA or a foreign regulator disagrees with our determinations, we may be required to cease marketing and/or to recall the modified product until we obtain a new marketing authorization, which could result in lost revenue, additional costs and damage to our reputation. Such non-compliance may also subject the Company to civil and criminal, monetary and non-monetary penalties, or other actions being taken with respect to products in the field. Marketing authorization and the time needed to secure such authorization is uncertain and we may not be able to obtain such authorization on the timeline or conditions we expect or at all. Our ability to obtain and maintain regulatory approvals from the FDA or foreign regulators may be difficult and could increase the cost of compliance and impact our ability to market our products. Following the introduction of a product, these agencies also periodically review our manufacturing processes and product performance. Our failure to comply with the applicable good manufacturing practices, adverse event reporting and other post market requirements of these agencies could delay or prevent the production, marketing or sale of our products and result in delays or suspensions of regulatory clearances, warning letters or consent decrees, closure of manufacturing sites, import bans, seizures or recalls of products, civil or criminal sanctions and damage to our reputation. More stringent oversight by the FDA and other agencies in recent years has resulted in increased enforcement activity, which increases our compliance risk. Our CareFusion 303, Inc. subsidiary is operating under a Consent Decree that affects our BD Alaris™ infusion pump business in the U.S. We are also currently operating under two warning letters issued by the FDA for our Dispensing and Specimen Management businesses. For more information regarding the consent decree and warning letters, see “Regulation” under Item 1. Business. As previously disclosed, on July 21, 2023, BD received 510(k) clearance from the FDA for its updated BD Alaris™ Infusion System, which enables both remediation and a return to market for the BD Alaris™ Infusion System. In accordance with our commitments to the FDA, all of the current BD Alaris™ Infusion System devices in the U.S. market will be remediated or replaced with the updated 510(k) cleared version over the next several years. The overall timing and cost of replacement or remediation of the BD Alaris™ Infusion Systems and return to market in the U.S. may be impacted by, among other things, customer readiness, supply continuity, and our continued engagement with the FDA. In addition, the European Union (“EU”) has adopted the EU Medical Device Regulation (the “EU MDR”) and the In Vitro Diagnostic Regulation (the “EU IVDR”), each of which impose stricter requirements for the marketing and sale of medical devices, including in the area of clinical evidence requirements, quality systems and post-market surveillance. The EU MDR has been fully operational for previously approved self-certified medical devices since May 2021. The application of the EU MDR has been extended until 2027 for certain devices considered higher-risk and to 2028 for other devices. This longer transition timeline applies only to devices that are transitioning to MDR and meet other specific conditions set out in the EU IVDR. The EU IVDR has been fully applicable for manufacturers of in vitro diagnostic medical devices since May 2022. Complying with and maintaining devices under these regulations requires us to incur significant expenditures. Additionally, the availability of EU notified body services certified to the new requirements is limited, which may delay the marketing approval for some of our products under the EU MDR. Any such delays, or any failure to meet these requirements could adversely impact our business in the EU and other regions that tie their product registrations to EU conformity requirements. 23 23 23 23 23 23 Table of Contents Table of Contents Table of Contents We are also subject to complex and frequently changing privacy and data protection laws, rules and regulations in the U.S. and a significant number of other countries where BD operates, regarding the collection, use, storage, security, transfer and other processing of personal data. These laws, rules and regulations require companies to, among other things, proactively implement effective programs and enhance internal policies, business practices, processes, and controls and could impose significant limitations and additional compliance costs on us. In addition, these laws, rules and regulations require us to embed privacy, security and data protection requirements in all assets impacting the processing of personal data and could also require us to modify current or future products or services, which may harm our future financial results. Any actual or perceived noncompliance with these laws, rules and regulations, our internal policies and procedures or our contracts governing the processing of personal data could result in significant consequences for BD, including, among other things, business interruption, sanctions and significant pecuniary fines, regulatory inquiries and investigations, adverse publicity, loss of competitive advantage and customer trust, as well as privacy litigation and civil lawsuits with damages. The importance of privacy and data protection laws, rules and regulations for the healthcare and med-tech industry specifically is constantly growing, as personal data is an integral part of doing business in our sector, and the legal standards are evolving and becoming more complex worldwide. A significant number of countries where we operate have enacted privacy or data protection laws, rules and regulations, the majority of which have extraterritorial scope, creating significant compliance challenges as we seek to maintain our global reach, with significant penalties for non-compliance, based on total worldwide annual revenue from the preceding financial year. In some cases, there are restrictions on the transfer of personal data outside the home country. More recently, privacy and data protection regulators are paying special attention to emerging issues linked to new digital technologies, such as the use of artificial intelligence, biometrics, and surveillance technologies, which pose unique challenges to existing privacy and data protection paradigms. In addition, certain privacy and data protection laws, rules and regulations may apply to us indirectly through our customers, manufacturers, suppliers or other third-party partners. For example, non-compliance with applicable laws, rules or regulations by a third-party partner that is processing personal data on our behalf may be deemed non-compliant by us or a failure by us to conduct proper due diligence on the third party, which could result in material fines or litigation. We also could be subject to additional expenses and liabilities in the event of a cybersecurity incident or breach, or the failure of an IT system owned or operated by us or a third party with which we partner or its vendor. Finally, changes in the tax laws and regulations of the jurisdictions in which we operate could increase our tax expense and/or tax payments, increase tax uncertainty and have a material adverse impact on our results of operations. For example, the Organization for Economic Cooperation and Development (OECD) published Pillar Two Model Rules which impose a 15% minimum tax on income of large multinational enterprises in the jurisdictions in which they operate. Pillar Two is effective in some of the jurisdictions in which we operate beginning in fiscal year 2025. We continue to evaluate the impacts of the enacted Pillar Two legislation. Tax laws, inclusive of Pillar Two legislation, in the U.S. and in other countries in which we and our affiliates do business could change on a prospective or retroactive basis, and any such changes could have a material impact on our effective tax rate and on our business, results of operations, financial condition, and cash flows.

Our operations are global and are affected by complex state, federal and international laws relating to healthcare, environmental protection, occupational health and safety, antitrust, anti-corruption, marketing, fraud and abuse (including anti-kickback and false claims laws), export control, product safety and efficacy, employment, privacy and other areas. Violations of these laws can result in criminal or civil sanctions, including substantial fines and, in some cases, exclusion from participation in healthcare programs such as Medicare and Medicaid. Environmental laws, particularly with respect to climate change and the emission of greenhouse gases, are also becoming more stringent throughout the world, which may increase our costs of operations or necessitate closures of, or changes to, our manufacturing plants or processes or those of our suppliers, or result in liability to BD. The enactment of additional laws and reporting requirements in the future or changes in the interpretation of existing laws or regulations may increase our compliance costs or otherwise adversely impact our operations and financial performance. We are subject to extensive regulation by the FDA pursuant to the Federal Food, Drug and Cosmetic Act, by comparable agencies in foreign countries, and by other regulatory agencies and governing bodies. Most of our products must receive clearance or approval from the FDA or counterpart regulatory agencies in other countries before they can be marketed or sold. The process for obtaining marketing approval or clearance may require us to incur significant costs in terms of time and resources, and these costs have been increasing due to increased requirements from the FDA and comparable governing bodies for supporting data for submissions. The regulatory process may also require changes to our products or result in limitations on the indicated uses of our products. Governmental agencies may also impose new requirements regarding registration, including, but not limited to, labeling updates or changes to prohibited materials that require us to modify or re-register products already on the market or otherwise impact our ability to market our products in those countries. Following the introduction of a product, these agencies also periodically review our manufacturing processes and product performance. Our failure to comply with the applicable good manufacturing practices, adverse event reporting and other post market requirements of these agencies could delay or prevent the production, marketing or sale of our products and result in delays or suspensions of regulatory clearances, warning letters or consent decrees, closure of manufacturing sites, import bans, seizures or recalls of products, civil or criminal sanctions and damage to our reputation. More stringent oversight by the FDA and other agencies in recent years has resulted in increased enforcement activity, which increases our compliance risk. We are operating under an amended consent decree with the FDA, entered into by CareFusion in 2007 and amended in 2009, that affects our BD Alaris™ infusion pump business in the U.S. We are also currently 19 19 19 19 19 19 Table of Contents Table of Contents Table of Contents operating under a warning letter issued by the FDA. For more information regarding the consent decree and warning letter, see “Regulation” under Item 1. Business. As previously disclosed, on July 21, 2023, BD received 510(k) clearance from the FDA for its updated BD Alaris™ Infusion System, which enables both remediation and a return to market for the BD Alaris™ Infusion System. In accordance with our commitments to the FDA, all of the current BD Alaris™ Infusion System devices in the U.S. market will be remediated or replaced with the updated 510(k) cleared version over the next several years. The overall timing and cost of replacement or remediation of the BD Alaris™ Infusion Systems and return to market in the U.S. may be impacted by, among other things, customer readiness, supply continuity, and our continued engagement with the FDA. In addition, the European Union (“EU”) has adopted the EU Medical Device Regulation (the “EU MDR”) and the In Vitro Diagnostic Regulation (the “EU IVDR”), each of which impose stricter requirements for the marketing and sale of medical devices, including in the area of clinical evidence requirements, quality systems and post-market surveillance. The EU MDR has been fully operational for previously approved self-certified medical devices since May 2021. In February 2023, the EU Parliament voted to extend the EU MDR transition timeline, which postpones application until 2027 for higher-risk Class III and implantable IIb devices (excluding WET devices) and 2028 for Class IIa, Class IIb (excluding Class IIb implantable non-WET devices), and Class I sterile devices or Class I devices with measuring function. This longer transition timeline applies only to devices that are transitioning to MDR and meet other specific conditions set out in the EU IVDR. The EU IVDR has been fully applicable for manufacturers of in vitro diagnostic medical devices since May 2022. Complying with and maintaining devices under these regulations requires us to incur significant expenditures. Additionally, the availability of EU notified body services certified to the new requirements is limited, which may delay the marketing approval for some of our products under the EU MDR. Any such delays, or any failure to meet these requirements could adversely impact our business in the EU and other regions that tie their product registrations to EU conformity requirements. We are also subject to complex and frequently changing privacy and data protection laws, rules and regulations in the U.S. as well as in all other regions where BD operates, regarding the collection, use, storage, transfer and other processing of personal information. These privacy, security and data protection laws and regulations could impose significant limitations, require changes to our policies, practices, and processes and in some cases impose restrictions on our use or storage of personal information. These limitations and restrictions could require us to modify current or future products or services, which may harm our future financial results. Any actual or perceived noncompliance with these laws, rules and regulations, our internal policies and procedures or our contracts governing the processing of personal information could result in significant consequences for BD, including, among other things, business interruption, sanctions and significant pecuniary fines, regulatory inquiries and investigations, adverse publicity, loss of competitive advantage and customer trust, as well as privacy litigation and civil lawsuits with damages. The importance of privacy laws, rules and regulations for the healthcare and med-tech industry specifically is constantly growing, as personal data has become an integral part of doing business in our sector, and the legal standards are evolving and becoming more complex worldwide. For instance, the European General Data Protection Regulation (the “GDPR”), applicable as of 2018 and still one of the strictest and most comprehensive privacy laws in the world, is being continuously enforced, and increasingly heavy fines for GDPR violations are now being levied on businesses. Fines for noncompliance with the GDPR can amount to up to €20 million or 4% of the total worldwide annual turnover from the preceding financial year (whichever is higher) and may be imposed in conjunction with the exercise of the authority’s investigatory and corrective powers. The GDPR’s extraterritorial scope makes it applicable to our U.S.-based legal entities whenever our business activities, systems and products process the personal data of EU residents. Additionally, privacy laws, rules and regulations are also rapidly developing in other countries and at the state level in the U.S. in parallel with federal privacy laws protecting sensitive health information. These varying laws, rules, regulations and industry standards impact BD businesses to the extent they rely on the use of personal data and create significant compliance challenges while maintaining our global reach. In addition, certain privacy and data protection laws may apply to us indirectly through our customers, manufacturers, suppliers or other third-party 20 20 20 20 20 20 Table of Contents Table of Contents Table of Contents partners. For example, non-compliance with applicable laws or regulations by a third-party partner that is processing personal data on our behalf may be deemed non-compliance by us or a failure by us to conduct proper due diligence on the third party, which could result in material fines or litigation. We also could be subject to additional expenses and liabilities in the event of an information security incident, including a cybersecurity breach, or the failure of an information technology system owned or operated by us or a third party with which we partner or its vendor.

General global economic downturns and macroeconomic trends, including heightened inflation, capital market volatility, interest rate and currency rate fluctuations, economic slowdown or recession, have contributed to conditions that have impacted, and may continue to impact, demand for our products and services, or the prices we can charge for our products, disrupt aspects of our supply chain, impair our ability to produce our products, increase borrowing costs and exacerbate other risks that affect our business, financial condition and results of operations. In addition, general economic conditions may impact the healthcare industry, including reductions in capital spending, changes in the delivery of healthcare services and increasing labor disputes or shortages, which could in turn affect demand for our products and services. Both domestic and international markets experienced inflationary pressures in fiscal year 2024 and we expect inflation to persist in the future but at lower levels than in recent years. In addition, currency exchange rates have been especially volatile in the recent past, and these currency fluctuations have affected, and may continue to affect, the reported value of our 13 13 13 13 13 13 Table of Contents Table of Contents Table of Contents assets and liabilities, as well as our cash flows. We have also experienced, and may continue to experience, challenges in our global supply chain, including shortages in supply, or disruptions in production and shipments, of certain materials or components used in our products, and related price increases. While to date, we have been able to manage the challenges associated with these delays and shortages without significant disruption to our business, no assurance can be given that these efforts will continue to be successful.

General global economic downturns and macroeconomic trends, including heightened inflation, capital market volatility, interest rate and currency rate fluctuations, and economic slowdown or recession, may result in unfavorable conditions that could negatively affect demand for our products and services, or the prices we can charge for our products, disrupt our supply chain, impair our ability to produce our products, increase borrowing costs and exacerbate some of the other risks that affect our business, financial condition and results of operations. In addition, general economic conditions may impact the healthcare industry, including 11 11 11 11 11 11 Table of Contents Table of Contents Table of Contents reductions in capital spending, changes in the delivery of healthcare services and increasing labor disputes, which could in turn affect demand for our products and services. Both domestic and international markets experienced inflationary pressures in fiscal year 2023 and we expect inflation to persist in the future but at lower levels than in fiscal year 2023. In addition, the Federal Reserve in the U.S. and other central banks in various countries have raised, and may again raise, interest rates in response to concerns about inflation, which, coupled with reduced government spending and volatility in financial markets, may have the effect of further increasing economic uncertainty and heightening these risks. Interest rate increases or other government actions taken to reduce inflation could also result in recessionary pressures in many parts of the world. Furthermore, currency exchange rates have been especially volatile in the recent past, and these currency fluctuations have affected, and may continue to affect, the reported value of our assets and liabilities, as well as our cash flows. In addition, we have previously experienced delays in collecting government receivables in certain countries due to economic conditions, and we may experience similar delays in the future in these and other countries or regions experiencing financial problems. We have also experienced, and may continue to experience, significant challenges in our global supply chain, including shortages in supply, or disruptions or delays in shipments, of certain materials or components used in our products, and related price increases. While to date, we have been able to manage the challenges associated with these delays and shortages without significant disruption to our business, no assurance can be given that these efforts will continue to be successful.

We are subject to risks associated with public health crises, such as pandemics and epidemics. Such events could result in preventative or protective measures or other actions by governments and private health institutions that could negatively impact local or global economic conditions and result in reductions in the demand for certain of our products, negatively impacting our business, financial condition and results of operations. In addition, public health crises could result in significant volatility in our global supply chain network, including shortages in supply or disruptions or delays in shipments, as well as price increases, of certain materials or components used in our products and increases in transportation costs. 16 16 16 16 16 16 Table of Contents Table of Contents Table of Contents The scope and duration of any future public health crisis, the pace at which government restrictions are imposed and lifted, the scope of additional actions taken to mitigate the spread of disease, global vaccination and booster rates, the speed and extent to which global markets and utilization rates for our products fully recover from the disruptions caused by such a public health crisis, and the impact of these factors on our business, financial condition and results of operations, will depend on future developments that are highly uncertain and cannot be predicted with confidence. To the extent any such public health crises affect our operations and global economic conditions more generally, it may also have the effect of heightening many of the other risks described herein.

We are subject to risks associated with public health crises, such as pandemics and epidemics, including COVID-19, which could result in reductions in the demand for certain of our products. While the direct impact of COVID-19 and many of the preventive measures moderated in FY2023, any resurgence of COVID-19, or the outbreak of any other epidemic or pandemic, or the reinstatement of similar preventive measures in the future could negatively impact the global economy and our business, financial condition and results of operations. In addition, public health crises and the resulting volatility in supply and demand may impact our global supply chain network, including shortages in supply or disruptions or delays in shipments, as well as price increases, of certain materials or components used in our products and increases in transportation costs. The COVID-19 pandemic changed the ways healthcare services are delivered due to budget constraints and staffing shortages, particularly shortages of nursing staff, which could impact the future demand for our products and services. 14 14 14 14 14 14 Table of Contents Table of Contents Table of Contents The scope and duration of any future public health crisis, including the potential emergence of new variants of the SARS-CoV-2 virus, the pace at which government restrictions are imposed and lifted, the scope of additional actions taken to mitigate the spread of disease, global vaccination and booster rates, the speed and extent to which global markets and utilization rates for our products fully recover from the disruptions caused by such a public health crisis, and the impact of these factors on our business, financial condition and results of operations, will depend on future developments that are highly uncertain and cannot be predicted with confidence. To the extent COVID-19 or other public health crises adversely affect our operations and global economic conditions more generally, it may also have the effect of heightening many of the other risks described herein.

We rely on a large number of information and technology (“IT”) systems and related infrastructure, including services provided to us by third-party vendors to operate our business. We collect, use, store, transfer and otherwise process electronic information in our day-to-day operations, including personal, confidential, or proprietary information of BD and its customers, vendors and other business partners, and patients. Some of our products and systems collect personal, confidential or proprietary information regarding patients and patient therapy on behalf of our customers and some of our products are internet enabled or connect to our IT systems for maintenance and other purposes. We also have products and systems that connect to the internet, hospital networks, electronic medical record systems or electronic health record systems. In addition, we rely on networks and services, including internet sites, cloud and software-as-a-service (“SaaS”) solutions, platform-as-a-service (“PaaS”) solutions, data hosting and processing facilities, artificial intelligence, tools and other hardware, software (including open-source software) and technical applications and platforms, including some 17 17 17 17 17 17 Table of Contents Table of Contents Table of Contents that are managed, hosted, provided and/or used by third-party vendors, to operate our business. Further, we expect that the breadth and complexity of our IT systems and infrastructure will increase as we expand our product offerings to utilize cloud technologies and potentially artificial intelligence, which present inherent enterprise technology risks, including those related to privacy, data protection and cybersecurity, that need to be managed. The foregoing could expose us to further risk of potential breaches, failures, interruptions and disruptions. While we are continuing to modernize our IT systems and infrastructure (such as hardware, software and operating systems), there are still technologies in operation that are more vulnerable to risk of failures, interruptions and disruptions. In addition, while we continue to enhance business continuity and disaster recovery plans and strategies, there is no guarantee that such plans and strategies will be effective or account for all eventualities. We have experienced, and could in the future experience, the failure, interruption or disruption of the functionality of our IT systems and infrastructure, or those of third-party vendors upon which we rely, which could impair our ability or that of our customers, suppliers and other business partners to conduct business, result in the loss of BD trade secrets or otherwise compromise personal, confidential or proprietary information of BD or its customers, suppliers and other business partners, or of patients, result in efficacy or safety concerns for certain of our products, result in reputational harm to our business and result in actions by regulatory bodies or civil litigation. Cyberattacks continue to increase in frequency, sophistication and intensity, and are increasingly difficult to detect for periods of time, especially as they relate to attacks on third-party vendors. Such attacks are often carried out by motivated and highly skilled actors, who are increasingly well-resourced. Our IT systems and infrastructure, as well as those of various third parties on which we rely, have experienced, and are likely to continue to experience, a variety of cyberattacks, including, but not limited to, unauthorized access, malicious code execution and/or phishing attacks, which has resulted, and could in the future result, in our and our customers’ personal, confidential or proprietary information being accessed, destroyed, lost, stolen or otherwise compromised and increased costs for cybersecurity measures or remediation. For example, through our cybersecurity monitoring tools and processes, we recently identified incidents of unauthorized activity on a portion of our IT systems, in which certain information relating to BD’s IT infrastructure and service credentials for certain BD Diagnostics Solutions, BD PyxisTM, and Parata products utilized by laboratories, hospitals and pharmacies (the “Product Service Credentials”) were accessed and/or exfiltrated. After becoming aware of the incidents, BD terminated the unauthorized access, applied additional security measures, and is working with customers to update these Product Service Credentials. While an unauthorized party would have to penetrate a customer’s local network and, in some cases, may also need to be physically present at the instrument in order to use these Product Service Credentials, until these credentials are updated, there is a risk of unauthorized access that may impact the confidentiality, integrity and/or availability of the relevant products and associated systems or data. To date, we have not been made aware of any unauthorized use of these Product Service Credentials. As of the date of this filing, the incidents have not had, and we do not expect them to have, a material impact on BD’s overall business operations, financial condition or results of operations. In addition, certain factors, such as growth through acquisitions, rapid technology evolution, including increased adoption of artificial intelligence, and geopolitical events, have increased cybersecurity risks. In this increasingly hostile environment, we, and our third-party vendors could experience, a loss, unauthorized access to or disclosure or other compromise of personal, confidential or proprietary information, including information regarding third parties, such as customers and patients, due to a number of causes, including, but not limited to, the exploitation of system vulnerabilities, cyberattacks, unauthorized access to our products, improper data handling, breakdowns of our IT systems and infrastructure or other cybersecurity incidents or breaches. These cybersecurity incidents and breaches could adversely affect our reputation, financial condition, results of operations or competitive position in the market and result in other significant negative consequences, including lost revenue, manufacturing challenges or disruption, diversion of management attention, litigation, regulatory action and damage to our relationships with vendors, business partners and customers. 18 18 18 18 18 18 Table of Contents Table of Contents Table of Contents Unauthorized tampering, adulteration or interference with our products, including through cyberattacks, may also create issues with product functionality that could result in a loss of data, risk to patient safety and product recalls or field actions, as well as impact our compliance with privacy, data protection and other laws and regulations and could result in reputational damage and actions by regulatory bodies or civil litigation. In addition, acquisitions, and the integration of acquired companies into the Company’s existing and future IT systems and infrastructure, including with third-party vendors and processes, inherently presents cybersecurity risks, such as exposing us to vulnerabilities and threats that were previously unknown or unmanaged. While we attempt to mitigate these risks through due diligence, risk assessments and the implementation of cybersecurity controls and protocols during and after the acquisition process, there can be no assurance that such measures will be sufficient to prevent, mitigate or remediate cybersecurity incidents or breaches, which could have a material adverse effect on our business, financial condition and results of operations. While we have made investments intended to address threats presented by cybersecurity incidents and breaches, continue to dedicate significant resources intended to protect our products and systems from cybersecurity incidents and breaches, and continue to work with government authorities and third-party vendors to detect and reduce the risk of future cybersecurity incidents and breaches, there can be no assurances that these protective measures will be sufficient to prevent cybersecurity incidents or breaches that could have a material adverse impact on our business.

We use a large number of information and technology systems to operate our business. We process, transmit, and store electronic information in our day-to-day operations, including sensitive personal or proprietary information. In addition, we rely on networks and services, including internet sites, cloud and software-as-a-service (“SaaS”) solutions, platform-as-a-service (“PaaS”) solutions, data hosting and processing facilities, tools and other hardware, software (including open-source software) and technical applications and platforms, including some that are managed, hosted, provided and/or used by third-party providers, to assist in conducting our business. Some of our products include information systems that collect data regarding patients and patient therapy on behalf of our customers and some connect to our systems for maintenance purposes. Cyberattacks continue to increase in frequency, sophistication and intensity, and are becoming increasingly difficult to detect for periods of time, especially as they relate to attacks on third-party providers or their vendors. Such attacks are often carried out by motivated and highly skilled actors, who are increasingly well-resourced. Our information systems, as well as those of various third parties on which we rely, have experienced, and are likely to continue to experience, a variety of cybersecurity attacks including, but not limited to, unauthorized access, malicious code execution and/or phishing- attacks. Geopolitical events have also increased cybersecurity risks on a global basis. In this increasingly hostile environment, we, or our third-party providers, could suffer a loss or disclosure of certain business information (or information regarding third parties stored in our systems) due to any number of causes ranging from catastrophic events or power outages to improper data handling or security breaches. These breaches and cyberattacks could result in our intellectual property and other confidential or proprietary information being accessed, destroyed or stolen, which could adversely affect our competitive position in the market. Likewise, we or our third-party providers could suffer disruption of our operations and other significant negative consequences, including increased costs for security measures or remediation, lost revenue, manufacturing challenges or disruption, diversion of management attention, reputational damage, litigation and damage to our relationships with vendors, business partners and customers. Unauthorized tampering, adulteration or interference with our products may also create issues with product functionality that could result in a loss of data, risk to patient safety and product recalls or field actions. Cyberattacks could also result in unauthorized access to our systems and products, which could impact our compliance with privacy and other laws and regulations and could result in actions by regulatory bodies or civil litigation. Cyberattacks are becoming more sophisticated, frequent and adaptive. While we have made investments to address these threats and continue to dedicate significant resources to protect against unauthorized access of our systems and products, and we continue to work with government authorities and third-party providers to detect and reduce the risk of future cyber incidents, there can be no assurances that these protective measures will prevent future attacks that could have a material adverse impact on our business.