Company: GGG
Filing Date: 2025-02-18
Form Type: 10-K
Source: 0000042888-25-000011
Chunk: 17

Company: GRACO INC
Filing Date: 2025-02-18
Form: 10-K
Item: Item 1A
Chunk 17
---
 time to time, including infrastructure changes, human or software errors, upgrade disruptions and capacity constraints. We also face the risk that the measures we have implemented to secure our information systems and networks and prevent unauthorized access to or loss of sensitive data are not effective and our information systems, networks, and those of our third-party service providers may be exposed to risks, including unauthorized access, operational errors, fraudulent activities, system failures, poor password management, and other potential irregularities. Our employees, customers and others may be the subject of social engineering attacks and induced to disclose confidential, proprietary or other sensitive information, including their network credentials, to cybercriminals, who may then gain access to our and our customers’ information, data and information technology systems. Cybersecurity threats are increasing in frequency, sophistication and severity. We have experienced and expect to continue to experience cybersecurity threats and attacks on our systems and networks and those of our third-party service providers. To date, none of the cybersecurity threats and attacks we have experienced have had a material adverse impact on our operations, business or financial condition. 

The tactics and capabilities of cybercriminals are growing increasingly sophisticated, and it is virtually impossible for any organization, including us, to completely eliminate the risk of cyberattacks. Security breaches or intrusion into our information systems or networks or the information systems or networks of the third parties with whom we do business pose a risk to the confidentiality, availability and integrity of our data and of our customers, suppliers and employees, and could lead to any one or more of the following: the compromising of confidential information; manipulation, unauthorized use, theft or destruction of data; product defects or malfunctions; production downtimes and operations disruptions; litigation; regulatory action; reputational harm, including loss of confidence by our customers, suppliers and employees in our ability to adequately protect their information; fines; ransoms; and other costs and adverse consequences. As a manufacturer, our operating technology assets and systems are susceptible to disruption through cyberattacks. We anticipate that meaningful investments in our operating technology infrastructure will be necessary as we continue to 

11

assess our operating technology posture and respond to the increasingly-pronounced risks posed by third-party cyber actors. The occurrence of a security breach or an intrusion into an information system or a network, or the breakdown, interruption or inadequate upgrading or maintenance of our information processing software, hardware or networks or the internet, may adversely affect our business, reputation, results of operations and financial condition. We do not currently maintain specific cyber insurance coverage. Any insurance coverage we do