Company: GFS
Filing Date: 2025-11-12
Form Type: 6-K
Source: 0001709048-25-000071
Chunk: 40

Company: GLOBALFOUNDRIES Inc.
Filing Date: 2025-11-12
Form: 6-K
Chunk 40
---
 cybersecurity risks by providing third parties with enhanced capabilities to breach our systems, and may require us to spend additional resources to further strengthen our defenses against such threats. We cannot guarantee that our IT and computer systems which control or maintain vital corporate functions, such as our manufacturing operations and enterprise accounting, would be immune to cyberattacks. In the event of a serious cyberattack, our systems may lose important customer information, trade secrets, corporate data or personal information, or our production lines may be shut down pending the resolution of such an attack.

We employ certain third-party service providers for us and our affiliates worldwide with whom we need to share highly sensitive and confidential information to enable them to provide the relevant services. Some of our third-party service providers have experienced cyberattacks of which we have been made aware.

<div align='center'>-28-</div>

#### GLOBALFOUNDRIES INC.
Despite requiring certain third-party service providers to comply with the confidentiality and security requirements in our service agreements with them, there is no assurance that each of them will strictly fulfill any of their obligations or that they will be successful in preventing further cyberattacks. The on-site network systems and the off-site cloud computing networks such as servers maintained by these service providers and/or their contractors are also subject to risks associated with cyberattacks. While we attempt to take prompt action once we are alerted to a cyberattack against one of our third-party service providers and implement steps designed to mitigate associated risks to our systems and data, we may in the future not be made aware of such events in a timely manner or may be unable to successfully sever network connectivity or otherwise limit the risk to our own systems.

If we or our service providers are not able to timely contain, remediate and resolve the respective issues caused by cyberattacks and data breaches, or ensure the integrity and availability of our systems and data (or data belonging to our customers or other third parties) or control of our or our service providers’ IT or computer systems, then such attacks, breaches or failures could:

• disrupt the proper functioning of these networks and systems and, therefore, our operations and/or those of certain of our customers;

• result in the unauthorized access to, and destruction, loss, theft, misappropriation or release of, proprietary, confidential, sensitive or otherwise valuable information of ours, our customers or our employees, including trade secrets, which could be used to compete against us or for disruptive, destructive or otherwise harmful purposes and outcomes;

• result in litigation and governmental investigation and proceedings that could expose us to civil or criminal liabilities;

•