STX: 10-K Risk Factor Changes

2023 vs 2022  ·  SEC EDGAR  ·  2026-10-16
⚠ AI Risk Brief Interpretation layer — deterministic data below

STX tightened risk language across supply chain, regulation, and geopolitical exposure without adding new risks.

✓ Deterministic extraction — no AI-generated data

Classification is based on semantic text similarity scoring and may include approximations. “No match” means no high-confidence textual match was found — not necessarily that a section was removed.

0
New Risks
1
Removed
16
Modified
25
Unchanged
🟡 Modified Disclosure change7/10

We could suffer a loss of revenue and increased costs, exposure to significant liability including legal and regulatory consequences, reputational harm and other serious negative consequences in the event of cyber-attacks, ransomware or other cyber security breaches or incidents that disrupt our operations or result in unauthorized access to, or the loss, corruption, unavailability or dissemination of proprietary or confidential information of our customers or about us or other third parties.

high match confidence

Sentence-level differences:

  • Reworded sentence: "We manage and store various proprietary information and sensitive or confidential data relating to our operations, as well as to our customers, suppliers, employees and other third parties, and we store subscribers’ data on our edge-to-cloud mass storage platform."
  • Removed sentence: "The costs to us to eliminate or address the foregoing security problems and security vulnerabilities before or after a security breach or incident could be significant."
  • Removed sentence: "System redundancy may be ineffective or inadequate, certain legacy IT systems may not be easily remediated, and our disaster recovery planning may not be sufficient for all eventualities."
  • Removed sentence: "Our remediation efforts may not be successful and could result in interruptions, delays or cessation of service, and loss of existing or potential customers that may impede our sales, manufacturing, distribution or other critical functions."
  • Removed sentence: "We could lose existing or potential customers for cloud and outsourcing services or other IT solutions in connection with any actual or perceived security vulnerabilities in our products and services."

Current (2023):

View prior text (2022)

Our operations are dependent upon our ability to protect our digital infrastructure and data. We manage and store various proprietary information and sensitive or confidential data relating to our operations, as well as to our customers, suppliers, employees and other third parties, and we will store subscribers’ data on our edge-to-cloud mass storage platform. As our operations become more automated and increasingly interdependent and our edge-to-cloud mass storage platform service grows, our exposure to the risks posed by storage, transfer, and maintenance of data, such as corruption, loss or unavailability of, or damage to, and other security risks to, data, will continue to increase. We use third-party vendors to store and otherwise process data for us and they face similar risks. The measures we and our vendors have implemented to secure our computer equipment and data belonging to us, our customers, suppliers, employees or other third parties have been and may continue to be vulnerable to phishing, employee error, hacking, ransomware and other cyberattacks, malfeasance, system error or other irregularities or incidents, including from breaches and incidents or attacks at third party vendors we utilize, and may not be sufficient for all eventualities. We cannot ensure that any limitation-of-liability provisions in our customer and user agreements, contracts with third-party vendors and service providers or other contracts are enforceable or adequate or would protect us from any liabilities or damages with respect to claims relating to a security breach or other security-related matter. Threat actors may be able to penetrate our network security, misappropriate or compromise confidential information and other data, create system disruptions or cause shutdowns. Threat actors also may be able to develop and deploy viruses, worms and other malicious software programs that attack our products and services or otherwise exploit any security vulnerabilities of our products and services. Such attempts are increasing in technical sophistication, number and the ability to evade detection or to obscure such activities. We anticipate that these threats will continue to grow in scope and complexity over time. Because the techniques used to obtain unauthorized access, or to sabotage systems, change frequently and generally are not recognized until launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. Although we take steps to protect against and detect such attempts, our efforts may not be sufficient for all eventualities, including sustained maintenance of remote working requirements. In addition, sophisticated hardware and operating system software and applications that we produce or procure from third parties may contain defects in design or manufacture, including “bugs” and other problems that could unexpectedly interfere with the operation of the system or our services. We have been, and will likely continue to be, subject to computer viruses or other malicious code, cyber-attacks or other computer-related attempts to breach the IT systems we use for these purposes. We have been and may also continue to be subject to IT system failures and network disruptions due to these factors. To date, these attacks have not had a material impact on our operations, but we cannot provide assurance that they will not have a material impact in the future. The insurance coverage we maintain that is intended to address certain data security risks may be insufficient to cover all types of claims or losses that may arise, and such insurance has been increasing in price over time. We cannot be certain that insurance coverage will continue to be available to us on economically reasonable terms, or at all.

The costs to us to eliminate or address the foregoing security problems and security vulnerabilities before or after a security breach or incident could be significant. System redundancy may be ineffective or inadequate, certain legacy IT systems may not be easily remediated, and our disaster recovery planning may not be sufficient for all eventualities. Our remediation efforts may not be successful and could result in interruptions, delays or cessation of service, and loss of existing or potential customers that may impede our sales, manufacturing, distribution or other critical functions. We could lose existing or potential customers for cloud and outsourcing services or other IT solutions in connection with any actual or perceived security vulnerabilities in our products and services. Some of our products and services contain encryption and other measures implemented in an effort to protect third-party content stored on our products. Such measures may be compromised, breached or circumvented or otherwise fail and losses or unauthorized access to or releases of our, our customers’ or third parties’ confidential information may occur. Security breaches or incidents and unauthorized access to, or loss, corruption, unavailability, or the unapproved dissemination of proprietary information or sensitive or confidential data about us or our customers or other third parties, has exposed us and could expose us, our vendors and customers or other third parties affected to a risk of loss or misuse of this information, and result in litigation or governmental investigations, fines, penalties, indemnity obligations and other potential liability and costs for us, materially damage our brand or otherwise materially harm our business. In addition, we rely in certain capacities on third-party data management providers whose possible security problems and security vulnerabilities may have similar effects on us. Our business, brand and reputation could also be materially adversely affected by media or other reports of perceived security vulnerabilities in our products, services, network or processes, even if unsubstantiated.

🟡 Modified Our business is subject to various laws, regulations, governmental policies, litigation, governmental investigations or governmental proceedings that may cause us to incur significant expense or adversely impact our results or operations and financial condition. 🔒
🟡 Modified Shortages or delays in the receipt of, or cost increases in, critical components, equipment or raw materials necessary to manufacture our products, as well as reliance on single-source suppliers, may affect our production and development of products and may harm our operating results. 🔒
🔴 No Match in Current Filing Shortages or delays in critical components, as well as reliance on single-source suppliers, can affect our production and development of products and may harm our operating results. 🔒

And 13 more changes in the full comparison.

16 changes in this historical filing

The complete historical comparison (2023 vs 2022) is available on the Pro plan.

Get Pro access Already a Pro subscriber? View full diff →