Company: CRUS
Filing Date: 2025-05-23
Form Type: 10-K
Source: 0000772406-25-000014
Chunk: 24

Company: CIRRUS LOGIC, INC.
Filing Date: 2025-05-23
Form: 10-K
Item: Item 1A
Chunk 24
---
 actors. We manage and store various proprietary information and sensitive or confidential data relating to our business and our employees. In addition, we manage and store a significant amount of proprietary and sensitive or confidential information from third parties, such as our customers and suppliers. Unauthorized insiders and/or third-party threat actors may be able to penetrate our security measures, evade our controls, or exploit vulnerabilities in our systems or our third-party providers' systems and misappropriate or compromise our, our customers' or our suppliers' proprietary and confidential information, including intellectual property and personal information of our current and former employees, create system disruptions, or cause shutdowns.  Threat actors also may be able to develop and deploy viruses, worms, phishing attempts, ransomware, and other malicious software that attack our websites, computer systems, access to critical information, products, or otherwise exploit security vulnerabilities.  The sophistication, scale and frequency of cyber-attacks has continued to increase and evolve at a rapid pace, and the risk of attack may be heightened when our employees are working remotely. Artificial intelligence and machine learning also may be used for certain cybersecurity attacks, improving or expanding the existing capabilities of threat actors in manners we cannot predict at this time, resulting in greater risks of security incidents and breaches. The risk of state-sponsored or geopolitical-related cybersecurity incidents has also increased due to ongoing geopolitical tensions with China or incidents, such as the war in Ukraine or the Israel-Hamas war.  Our prioritization of security measures and remediation of known vulnerabilities may prove inadequate and we may be unable to anticipate or protect against attacks.  If an incident occurs, we may be unable to detect it for an extended period of time.              Any breach of our security measures or the loss, inadvertent disclosure, or unapproved dissemination of proprietary information or sensitive or confidential data about us, our customers, our suppliers or our employees, including the potential loss or disclosure of such information or data, could result in numerous risks and adverse consequences. Such consequences include remediation costs, litigation and potential liability for us, including as a result of U.S. or foreign governmental investigations or enforcement actions, penalties for violation of applicable laws or regulations, including laws and regulations in the United States and other jurisdictions relating to the collection, use and security of user and other personally identifiable information and data, damage to our brand and reputation, the loss of sales and customer or supplier relationships, negative impacts to our employee recruiting and retention, loss of intellectual property protection, risk of inadequate insurance coverage and increased insurance premiums, and numerous other financial, legal and business