Company: BCO
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000078890-25-000059
Chunk: 95

Company: BRINKS CO
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 95
---
 and cloud-based services. Hacking, phishing attacks, ransomware, insider threats, physical breaches or other actions may cause confidential information belonging to Brink’s, its employees or customers to be misused. Moreover, the techniques used to obtain unauthorized access to networks or to sabotage systems change frequently and generally are not recognized until launched against a target. We may be unable to anticipate these emerging techniques, react in a timely manner, or implement adequate preventative measures. We have experienced 

11

cybersecurity incidents and unplanned system disruptions in the past, but none of these incidents or disruptions, individually or in the aggregate, have had a material adverse effect on our business, financial condition or results of operations. A significant cybersecurity incident that impacts our system, application or data center that houses sensitive and confidential data, including, but not limited to, personally identifiable information and business sensitive information, could have a material adverse effect on our business, financial condition, results of operations and cash flows. Additionally, such an incident may result in significant challenges and costs related to coordination with third-party service providers in order to resolve related issues.

If our third-party providers do not respond in a timely manner to our needs, disaster recovery, business continuity and crisis management activities could be negatively impacted. We have programs in place that are intended to identify, protect against, detect, respond to, and recover from cybersecurity incidents and breaches and that provides employee awareness training regarding cyber risks; however, due to evolving and advanced sophisticated attackers, cyber attacks remain increasingly difficult to detect and we may need to allocate additional resources to continue to enhance our information security measures and/or to investigate and remediate any security vulnerabilities. Cyber attacks and security breaches may also persist undetected over extended periods of time and may not be mitigated in a timely manner to minimize the impact of a cyber attacks or security breach. Any significant cybersecurity incident, involving Brink's or its third-party service providers, could damage our reputation, expose us to the risks of litigation and liability, disrupt our business or otherwise have a material adverse effect on our business, financial condition, results of operations and cash flows. Although the Company maintains cybersecurity insurance, the Company's insurance may not be adequate to cover all losses that may be incurred in the event of a significant disruption or failure of its information technology systems.

As a global company we must adhere to applicable laws and regulations in numerous regions regarding data privacy, data protection, and data security. Privacy and data protection laws vary between countries and are subject to interpretation, which may create inconsistent or conflicting requirements.