Company: CLH
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0000822818-25-000007
Chunk: 33

Company: CLEAN HARBORS INC
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1
Chunk 33
---
 use technology in substantially all aspects of our business operations. Mobile devices and other online technologies connect our employees to our customers and our networks. Such uses give rise to cybersecurity risks, including security breach, espionage, system disruption, theft, disruption of our business operations, remediation costs for repairs of system damage and inadvertent release of information. Our business involves operational technology integral to our day to day business and the storage and transmission of numerous classes of sensitive and/or confidential information and intellectual property including, but not limited to, private information about employees and financial and strategic information about our Company and our business partners. Furthermore, as we pursue our strategy to grow through acquisitions and new initiatives that improve our operations and cost structure, we are also expanding and improving our information technologies, resulting in a larger technological presence and corresponding exposure to cybersecurity risk.

We maintain what we believe is sufficient insurance coverage that may (subject to certain policy terms and conditions, including deductibles) cover certain aspects of third-party security and cybersecurity risks and business interruption, however, our insurance coverage may not always cover all related costs or losses.

We actively assess our cybersecurity and technology risks and modify our operational response to such risks as circumstances and technology change. If we fail to assess and identify current cybersecurity risks and those associated with acquisitions and new initiatives, we may become increasingly vulnerable to such risks. We have implemented measures aimed at preventing security breaches and cyber incidents, including the establishment of processes, procedures and systems focused on response readiness, planning, disaster recovery and business continuity. To avoid the collection and housing of customer payment records, we partner with a Payment Card Industry compliant third party to handle our customers’ credit card transactions in a secure a manner. Despite our best efforts, our preventative measures and incident response efforts may not be entirely effective. The theft, destruction, loss, misappropriation or release of sensitive and/or confidential information or intellectual property, or interference with our operational technology, information technology systems or the technology systems of third parties on which we rely, could result in business disruption, negative publicity, damage to our assets, brand reputational damage, violation of privacy laws, loss of customers, potential liability and competitive disadvantage, which could have a material adverse effect on our financial position, results of operations or cash flows. 

Natural disasters or other catastrophic events as well as their residual macroeconomic effects, could negatively affect our business.

Natural disasters such as hurricanes, tornados, earthquakes, wildfires or other catastrophic events including public health threats could negatively affect our operations and financial performance and harm our reputation. The direct and indirect