Company: KYIV
Filing Date: 2025-07-17
Form Type: F-4/A
Source: 0001213900-25-064873
Chunk: 116

Company: Kyivstar Group Ltd.
Filing Date: 2025-07-17
Form: F-4/A
Chunk 116
---
 cybersecurity threats that have negatively impacted our business activities and could continue to impact our business activities through service degradation, alteration or disruption, including a risk of unauthorized access to our systems or those of third parties. These cybersecurity threats could be carried out against us or against third parties from which we receive services, networks or data by private or state -sponsoredthird parties through exploiting unidentified existing or new weaknesses or flaws in our or a third parties’ network or IT systems or disruption by computer malware or other technical or operational issues. Any of these threats may lead to compromised or inaccessible telecommunications, digital services and/or leaks or unauthorized processing of confidential information, and perceptions of such threats may cause customers to lose confidence in our services. Due to the ongoing war in Ukraine, there is an increased risk of cyber -attacksor cybersecurity incidents that could either directly or indirectly impact our operations. Any attempts by cyber -attackersto disrupt our services or systems, if successful, could harm our business, result in the misappropriation of funds, be expensive to remedy and damage our reputation or brands. Following the onset of the ongoing war in Ukraine, there have been an increasing number of cyber -attackson our information systems and critical infrastructure, which have caused service disruptions in certain instances. For example, on December 12, 2023, we announced that our network had been the target of a widespread external cyber -attackcausing a technical failure. This resulted in a temporary disruption of our network and services, interrupting the provision of voice and data connectivity on mobile and fixed networks, international roaming and SMS services, among others, for our customers in Ukraine and abroad. In response to the attack, we conducted a thorough investigation, together with outside cybersecurity firms, to determine the full nature, extent and impact of the incident and to implement additional security measures to protect against any recurrence. We conducted a high -levelrisk assessment of our IT infrastructure and identified the following risks associated with 32 our operations: compromised user accounts (including due to credential theft and password reuse), unauthorized access to systems and data (through compromised user accounts or vulnerabilities exploitation), data leakage, damage or destruction of systems and/or data (including ransomware attacks on our various servers and files and malware attacks). See “ Business of Kyivstar and Certain Information About Kyivstar — Information Technology and Cybersecurity — Cyber -Attack in December 2023.” The incident had a significant impact on our combined revenue for the years ended December 31, 2023 and 2024, primarily due to the costs related to