Company: KHC
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0001637459-25-000011
Chunk: 71

Company: Kraft Heinz Co
Filing Date: 2025-02-13
Form: 10-K
Item: Item 1A
Chunk 71
---
 of positive performance in our stock price may adversely affect our ability to attract or retain key personnel. Changes in immigration laws and policies could also make it more difficult for us to recruit or relocate skilled employees. Any such loss, failure, or limitation could adversely affect our product sales, financial condition, and operating results.

We are significantly dependent on information technology, and we may be unable to protect our information systems against service interruption, misappropriation of data, or breaches of security.

We rely on information technology networks and systems, including the Internet, to process, transmit, and store electronic and financial information, to manage a variety of business processes and activities, and to comply with regulatory, legal, and tax requirements. We also depend on our information technology infrastructure for digital marketing activities and for electronic communications among our locations, personnel, customers, and suppliers. These information technology systems, some of which are managed by third parties, may be susceptible to damage, invasions, disruptions, or shutdowns due to hardware failures, computer viruses, hacker attacks and other cybersecurity risks, telecommunication failures, user errors, catastrophic events, or other factors. Geopolitical tensions or conflicts, and the rapid evolution and increased adoption of artificial intelligence technologies may further heighten the risk of cybersecurity attacks. If our information technology systems suffer severe damage, disruption, or shutdown, by unintentional or malicious actions of employees or contractors or by cyberattacks, and our business continuity plans do not effectively resolve the issues in a timely manner, we could experience business disruptions, reputational damage, transaction errors, processing inefficiencies, the leakage of confidential information, and the loss of customers and sales, causing our product sales, financial condition, and operating results to be adversely affected and the reporting of our financial results to be delayed. While we have developed and implemented security measures and internal controls designed to protect against cyber and other security threats, such measures cannot provide absolute security and may not be successful in preventing future security breaches. Moreover, these threats are constantly evolving, thereby making it more difficult to successfully defend against them or to implement adequate preventative measures. We may not have the 

19

current capability to detect certain vulnerabilities, which may allow those vulnerabilities to persist in our systems over long periods of time. Additionally, it may take considerable time for us to investigate and evaluate the full impact of incidents, particularly for sophisticated attacks. These factors may inhibit our ability to provide prompt, full, and reliable information about the incident to our customers, partners, regulators, and the public. In the past, we have experienced security