Company: L
Filing Date: 2025-02-11
Form Type: 10-K
Source: 0000060086-25-000036
Chunk: 241

Company: LOEWS CORP
Filing Date: 2025-02-11
Form: 10-K
Item: Item 1A
Chunk 241
---
 or those of our or their customers, vendors or others with whom we and they do business, could materially disrupt business operations. Computer, telecommunications and other business facilities and systems could become unavailable or impaired from a variety of causes, including cyber attacks or other cyber incidents, storms and other natural disasters, terrorist attacks, fires, utility outages, theft, design defects, human error or complications encountered as existing systems are replaced or upgraded. Cyber attacks and other cyber incidents are occurring more frequently, are constantly evolving in nature, are becoming more difficult to prevent, detect and remediate, and are being carried out by groups and individuals with a wide range of expertise and motives, and that may have the backing of foreign governmental actors. The U.S. government has issued public warnings that indicate energy assets may be specific targets of cyber attacks, which can have catastrophic consequences, and hotel chains, among other consumer-facing businesses, have been subject to various cyber attacks targeting payment card and other sensitive consumer information. Cyber attacks and cyber incidents take many forms, including cyber extortion, denial of service, social engineering, introduction of viruses or malware, exploiting vulnerabilities in hardware, software or other infrastructure, hacking, website defacement, theft of passwords and other credentials, unauthorized use of computing resources for digital currency mining and business email compromise. 

As with other large companies, we and our subsidiaries and our and their third party vendors have experienced cyber attacks and other cyber incidents and expect this to continue. For example, CNA was subjected to a sophisticated cybersecurity incident involving ransomware in March 2021. In addition, one of CNA’s former vendors and a current vendor experienced cybersecurity incidents during the third quarter of 2024. For additional information about these incidents, see “Risks Related to Us and Our Subsidiary, CNA Financial Corporation” above under this Part I, Item 1A, and for a discussion of certain aspects of our approach to cybersecurity risk management and strategy, see Item 1C. Cybersecurity. If we and our subsidiaries and our and their third party vendors do not allocate and effectively manage the resources necessary to continue to build and maintain our and their information technology security infrastructure, or if we or our subsidiaries or our or our subsidiaries’ vendors fail to timely identify or appropriately respond to cyber attacks or other cyber incidents, then this may, in addition to other consequences, disrupt our and our subsidiaries’ operations, cause 

40

significant damage to our or their assets and surrounding areas, cause loss of life or serious bodily injury, impact our or their data