Company: ADP
Filing Date: 2025-08-06
Form Type: 10-K
Source: 0000008670-25-000037
Chunk: 26

Company: AUTOMATIC DATA PROCESSING INC
Filing Date: 2025-08-06
Form: 10-K
Item: Item 1A
Chunk 26
---
 and business information and client funds, and we devote significant resources to maintain and regularly update our systems and processes. Nonetheless, the global environment continues to grow increasingly hostile as attacks on information technology systems continue to grow in frequency, complexity and sophistication (including due to the use of AI), and we are regularly targeted by unauthorized parties using malicious tactics, code and viruses. Certain of these unauthorized parties may be state-sponsored and/or supported by significant financial and technological resources. Although this is a global problem, it may affect our businesses more than other businesses because unauthorized parties (which could include our personnel) may focus on the amount and type of personal and business information that our businesses collect, host, store, transfer, process, disclose, use, secure, retain and dispose of, and the client funds that we collect and transmit.We have programs and processes in place designed to prevent, detect and respond to data or cybersecurity incidents. However, as a result of the complexity of our operating environment, the period over which hardware and software has been acquired or other reasons, our programs and processes may not be sufficient or adequate or may fail to prevent, detect or respond to a cybersecurity incident or identify and/or remediate a security vulnerability in our operating environment. The techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently, are increasingly more complex and sophisticated (including due to the use of AI). In addition, new computing technologies, including quantum computing, new discoveries in the field of cryptography or other developments could result in a compromise or breach of the algorithms we or our authorized third parties use or have used to encrypt and protect data. We may fail to anticipate or detect these techniques and/or incidents for long periods of time and, even when we do so, we may be unable or fail to implement adequate or timely preventive or responsive measures. Our ability to address data or cybersecurity incidents may also depend on the timing and nature of assistance that may be provided from relevant governmental or law enforcement agencies. Hardware, software, applications or services that we develop or procure from authorized third parties, or are required by governmental or law enforcement agencies to install on our systems, may contain defects in design or manufacture or other problems that could (or in respect of third party software, may be designed to) compromise the confidentiality, integrity or availability of data or our systems. Unauthorized parties have also attempted to gain (and in certain cases have gained), and will continue to attempt to gain, access to our systems and facilities, and those of our authorized third parties, through fraud, trickery