Company: KYIV
Filing Date: 2025-07-17
Form Type: F-4/A
Source: 0001213900-25-064873
Chunk: 117

Company: Kyivstar Group Ltd.
Filing Date: 2025-07-17
Form: F-4/A
Chunk 117
---
 the implementation of our “customer appreciation” program. We estimate that the impact of these offers on operating revenue for the years ended December 31, 2023 and 2024 was approximately $23million and $46million, respectively. Cybersecurity threats could also lead to the compromise of our physical or virtual assets dedicated to processing or storing customer, employee, financial data and strategic business information, which has in the past and could in the future result in exposing this information to possible leakage, unauthorized dissemination and loss of confidentiality. While we continually invest in improving our information technology (“IT”) and security systems, we rely on older versions of operating systems and applications that may lead to vulnerabilities in our IT network at any particular moment in time and, the process of upgrading to the latest versions of such systems is an ongoing process. We are and will continue to remain a potential target of attempted cyber -attacksand other cybersecurity threats that could lead to compromised or inaccessible telecommunications, digital and financial services and/or leaks or unauthorized processing of confidential information, including customer information. Our systems can be potentially vulnerable to harmful viruses and the spread of malicious software that could compromise the confidentiality, integrity or availability of technology assets. In addition, unauthorized users or hackers may potentially access and process the customer and business information we hold, or authorized users may improperly process such data. Though well -structuredwork to address those challenges is ongoing, such risks are inherent in our business operations, and we will never be able to fully insulate ourselves from these risks. Moreover, we may potentially experience cyber -attacksand IT and network failures and outages due to factors under our control, such as a malfunction of technology assets or services caused by obsolescence, wear or defects in design or manufacturing, faults during standard or extraordinary maintenance procedures, compromised staff user accounts (including due to credential theft and password reuse or sharing), unforeseen absence of key personnel, the inability to protect our systems from phishing attacks or as a result of attacks against third parties that provide IT and network services to us. There is also a possibility that we are not currently aware of certain undisclosed vulnerabilities in our IT systems, processes and other assets or those at third parties that provide such services to us. In such an event, hackers or other cybercrime groups (whether private or state -sponsored) may exploit such vulnerabilities, weaknesses or unidentified backdoors (including previously unidentified designed weaknesses embedded into network or IT equipment allowing access by private or government actors) or may be able to cause harm more quickly than we are able to mitigate (zero -