Company: MWA
Filing Date: 2025-11-19
Form Type: 10-K
Source: 0001350593-25-000066
Chunk: 288

Company: Mueller Water Products, Inc.
Filing Date: 2025-11-19
Form: 10-K
Item: Item 1A
Chunk 288
---
 employee errors or malfeasance, technical malfunctions, the actions of third parties such as a cyberattack or other factors.  As previously reported, we have in the past experienced cybersecurity incidents.  If our cyber defenses and other countermeasures are unable to protect personal data, it could be accessed or disclosed improperly, which could expose us to liability, harm our reputation and deter current and potential users from using our products and services.  The regulatory environment related to cyber and information security, data collection and privacy is increasingly rigorous and evolving, with new and constantly changing requirements applicable to our business, and compliance with those requirements could result in additional costs.

Cyberattacks and security vulnerabilities could lead to reduced sales, increased costs, liability claims, unauthorized access to customer data or harm to our reputation.

Cybersecurity threats are constantly evolving and can take a variety of forms, increasing the difficulty of preventing, detecting and successfully defending against them.  Individuals and groups of hackers and sophisticated organizations, including state-sponsored organizations or nation-states, continuously undertake attacks that pose threats to our customers and our information technology systems.  These actors use a wide variety of methods, which may include developing and deploying malicious software or exploiting vulnerabilities in hardware, software, radio communication protocols or other infrastructure to attack our products and services.  Additionally, these actors may reverse-engineer trade secrets or other confidential intellectual property, or gain access to our networks and data centers, using social engineering techniques to induce our employees, users, partners or customers to disclose passwords or other sensitive information or to take other actions to gain access to our data or our users’ or customers’ data, or act in a coordinated manner to launch distributed denial of service attacks, or deny or postpone access to critical water infrastructure telemetry through vulnerabilities in our cloud services and infrastructure, or logging, sensing and telemetry products.  Inadequate account security practices may also result in unauthorized access to confidential data. 

Despite the implementation of a variety of security controls and measures, as well as those of our third-party administrators and vendors, there is no assurance that such actions will be sufficient to prevent or detect another cybersecurity incident or other vulnerabilities, which may allow them to persist in the environment over long periods of time.  Cybersecurity events have had, and in the future may have, cascading impacts that unfold with increasing speed across our internal networks and systems.  Such threats may also impact the networks and systems of our business associates and customers.  Breaches of our facilities, network or data security have in the past and may in the