Company: RKLIF
Filing Date: 2025-03-26
Form Type: 20-F
Source: 0001104659-25-027944
Chunk: 9

Company: RENTOKIL INITIAL PLC /FI
Filing Date: 2025-03-26
Form: 20-F
Item: Item 3
Chunk 9
---
, worms, malware, ransomware, phishing, spoofing, malicious or destructive code, social engineering, denial-of-service attacks, and other cyber attacks have become more prevalent and sophisticated in recent years. Because the techniques used by computer hackers and others to access or sabotage networks and computer systems constantly evolve and generally are not recognised until launched against a target, we and our third-party service providers may be unable to anticipate, detect, react to, counter or mitigate against all of these techniques or remediate any resulting incident. Cyber security risk has increased due to increased online and remote activity and we have in the past experienced, and may continue to experience, increases in the number and seriousness of cyber attacks, including distributed denial-of-service attacks and ransomware incidents. In 2024, our organisation encountered seven cyber security incidents, each effectively addressed through our established incident response protocol and none of which had a material impact on our business. All of these incidents were reported to the Board or Audit Committee, who have oversight of the risks from cyber security threats, by management, who are responsible for managing prevention, detection, mitigation and remediation of cyber security incidents. Although such attacks have been detected and mitigated before they were able to have a material impact on the business in the past, it is possible that future cyber attacks could avoid detection or prevention and have a material impact.

6

Any IT system disruptions or breaches may lead to unauthorised release of data (including colleague, customer and supplier personal data that we hold) and inefficient business operations, including poor supply chain management, and have a negative impact on customer service, resulting in a loss of customers, which could have a material adverse effect on our business, reputation, results of operations, financial condition and/or prospects.
We may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate or remediate any cyber security vulnerabilities, breaches, attacks or other similar incidents. Any cyber security incident, attack or other similar incident, or our failure to make adequate or timely disclosures to the public, regulators, or law enforcement agencies following any such event, could harm our competitive position, result in violations of applicable data privacy or cyber security laws or regulations, result in a loss of customer confidence in the adequacy of threat mitigation and detection processes and procedures, cause disruption to business activities, divert management attention and other resources or otherwise adversely affect our internal operations and reputation, degrade financial results, cause us to incur significant costs to remedy the damages caused by the incident or defend legal claims, subject us to