Company: AIZ
Filing Date: 2025-02-20
Form Type: 10-K
Source: 0001267238-25-000008
Chunk: 81

Company: ASSURANT, INC.
Filing Date: 2025-02-20
Form: 10-K
Item: Item 1A
Chunk 81
---
 secure network systems that provide adequate speed and data capacity. For example, we utilize third-party cloud service providers in connection with certain key aspects of our business and operations, including in the Global Automotive businesses and in implementing an integrated global financial system, and any disruption of, or interference with, our use of such cloud services could have a material adverse impact on our business and operations. We have from time to time experienced operational resiliency issues, including the unavailability of technology systems upon which our clients rely. Such failures could result in loss of business and adversely affect our financial condition and results of operations. For risks relating to the security of our technology systems and cybersecurity incidents, see “ – We could incur significant liability if our technology systems or those of third parties are breached or we or third parties otherwise fail to protect the security of data residing on our respective systems, which could adversely affect our business and results of operations.”

We could incur significant liability if our technology systems or those of third parties are breached or we or third parties otherwise fail to protect the security of data residing on our respective systems, which could adversely affect our business and results of operations. 

We rely on the uninterrupted and secure operation of our technology systems, including information technology systems and operational technology systems, to operate our business and securely process, transmit and store electronic information. This electronic information includes confidential and other sensitive information, including personal data, that we receive from 

34

our customers, vendors and other third parties. Our technology systems and safety control systems and those of our vendors and other third parties with whom we share sensitive information are vulnerable to, and in some cases have been subject to, damage or interruption from a variety of external threats, including cybersecurity incidents, computer viruses, malware and ransomware, as well as targeted attacks against our employees, which have been increasing in frequency.  

Cybersecurity incidents are rapidly evolving and becoming increasingly sophisticated, partly due to the growing use of artificial intelligence by malicious actors. We are at risk of attack, and from time to time have been the subject of an attack, by a growing list of adversaries, including state-sponsored organizations, organized crime, hackers and “hacktivists” (activist hackers), through the use of increasingly sophisticated methods of attack, including long-term, persistent attacks referred to as advanced persistent threats, attacks via yet unknown vulnerabilities referred to as zero-day threats and credential harvesting attacks against our employees. Because the techniques used to obtain unauthorized access or sabotage systems change frequently and generally are not identified until they are launched against a target,