Company: PRGO
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001585364-25-000014
Chunk: 351

Company: PERRIGO Co plc
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 351
---
 unauthorized access and computer viruses. Such events may be difficult to detect, and once detected, their impact may be difficult to assess and address. 

Cyber-attacks have become increasingly common. We have experienced immaterial business disruption, monetary loss and data loss as a result of phishing, business email compromise and other types of attacks. In addition, the rapid evolution and increased adoption of new technologies, such as artificial intelligence, may intensify our cybersecurity risks. While we continue to employ resources to monitor our systems and protect our infrastructure, these measures may prove insufficient, and that could subject us to significant risks, including, without limitation:

•Ransomware attacks, other cyber breaches or disruptions that impair our ability to develop products, meet regulatory approval requirements or deadlines, produce or ship products, take or fulfill orders, and/or collect or make payments on a timely basis;

•System issues, whether as a result of an intentional breach, a natural disaster or human error that damage our reputation and cause us to lose customers, experience lower sales volume, and/or incur significant liabilities;

•Significant expense to remediate the results of any attack or breach and to ensure compliance with any required disclosures mandated by the numerous global privacy and security laws and regulations; and

•Interruptions, security breaches, or loss, misappropriation, or unauthorized access, use or disclosure of confidential information,

which, individually or collectively, could result in financial, legal, business or reputational harm to us and could have a material adverse effect on our business, financial condition and results of operations.

We are also subject to numerous laws and regulations designed to protect personal data, such as the California Consumer Privacy Act in the U.S., the U.K.'s Data Protection Act of 2018 and the European General Data Protection Regulation ("GDPR"). These data protection laws introduced more stringent data protection requirements and significant potential fines, as well as increased our responsibility and potential liability in relation to personal data that we process and possess. Compliance with such laws require significant time and resources and may impose significant challenges that are likely to continue to increase over time, particularly as additional regulatory agencies adopt similar or new requirements. We have put mechanisms in place to ensure compliance with applicable data protection laws, but there can be no guarantee of their effectiveness. For more information regarding our cybersecurity activities, please refer to Item 1C. Cybersecurity.

Management transition creates uncertainties, and any difficulties we experience in managing such transitions may negatively impact our business.

We have experienced significant changes to our leadership team over the past several