Company: MTZ
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000015615-25-000021
Chunk: 986

Company: MASTEC INC
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 986
---
 customers’ data.  Furthermore, such unauthorized access or cyber-attacks could go unnoticed for some period of time.

These events, among others, could cause system interruptions, delays and/or the loss or release of critical or sensitive data, including the unintentional disclosure of customer, employee or our information, and could delay or prevent operations, including the processing of transactions and reporting of financial results or cause processing inefficiency or downtime.  While we have security, internal control and technology measures in place to protect our systems and network, if these measures fail as a result of a cyber-attack, other third-party action, employee error, malfeasance or other security failure, and someone obtains unauthorized access to our or our employees’ or customers’ information, our reputation could be damaged, our business may suffer and we could incur significant liability, or, in some cases, we may lose access to our business data, all of which could have a material adverse effect on our business, results of operations and financial condition and/or result in significant costs, fines or litigation.  In addition, the rapid evolution and increased adoption of artificial intelligence technologies may intensify our cybersecurity risks.  Similar risks could affect our customers, subcontractors or suppliers, indirectly affecting us.

In the ordinary course of business, we and third-parties on whose systems we rely have been targeted by malicious cyber-attacks, although our systems have been sufficiently resilient to prevent disruption of our operations.  However, while we have not experienced a material cybersecurity incident nor incurred material breach related expenses during the reporting period, because the techniques used to obtain unauthorized access or sabotage systems change frequently and are generally not identified until they are launched against a target, our current or future defenses may not be adequate to protect against new or revised techniques.

23

In addition, the U.S. federal government has continued to raise concerns about the potential for cyberattacks generally as a result of heightened geopolitical tensions and conflicts, including the Russia-Ukraine and Israel-Hamas conflicts and the escalated tensions in the Middle East, among others.  As cyberattacks continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures to protect against the threat of system disruptions and security breaches, and to investigate and remediate any information security vulnerabilities and mitigate problems caused by any such disruptions and breaches.  Any of these events could damage our reputation and have a material adverse effect on our business, results of operations, financial condition and cash flows.  Furthermore, while we maintain insurance policies that we consider to be