Company: GFS
Filing Date: 2025-11-12
Form Type: 6-K
Source: 0001709048-25-000071
Chunk: 39

Company: GLOBALFOUNDRIES Inc.
Filing Date: 2025-11-12
Form: 6-K
Chunk 39
---
 our customers’ intellectual property and proprietary or confidential business information relating to our business and that of our customers and business partners. Our and our service providers’ information technology ("IT") and computer systems store and transmit customer information, trade secrets, corporate data and personal information, and are otherwise essential to the operation of our production lines, which may make us a target for cyberattacks. The secure maintenance of this information is critical to our business and reputation. In addition, our accreditation as a Trusted Foundry by the Defense Microelectronics Activity and our processing of sensitive information has in the past and may continue to make us an attractive and frequent target for attacks by third parties, including industrial or nation-state espionage, organized criminals, and terrorist cyberattacks. Further, we depend on our employees and the employees of our service providers to appropriately handle confidential and sensitive data and deploy our IT resources in a safe and secure manner that does not expose our network systems to security breaches or the loss of data. However, there is always a risk that inadvertent disclosure or actions or internal malfeasance by our employees or those of our service providers could result in a loss of data or a breach or interruption of our IT systems.

As a result of the nature of our business and operations, we have been subject to and will continue to be subject to cyberattacks from various bad actors. Over the past few years, we have identified a few cybersecurity incidents. The incidents were thoroughly investigated, and in each case we concluded that there was no material adverse impact to our business, operations or financial results. While we continue to enhance and strengthen our cybersecurity monitoring and preventative controls, state actors have significant resources at their disposal. There can be no assurance that a third party (including a state actor) will not successfully gain unauthorized access to our systems or that future cyberattacks will not have a material adverse effect on our business, operations, or financial results.

We continue to make significant investments in cybersecurity and data security, as well as other efforts to combat breach and misuse of our systems and unauthorized access to our and our customers’ data by third parties. While we seek to continuously review and assess our cybersecurity policies and procedures to ensure their adequacy and effectiveness, all IT and computer systems are vulnerable to attacks, especially via methods that have not been observed yet or quickly evolve. The risk of security breaches may be higher during times of a natural disaster or pandemic due to remote working arrangements. Also, the development and proliferation of AI/ML in addition to other related technologies, may increase our exposure to cyberattacks and other