Company: LAWIL
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0000750004-25-000016
Chunk: 35

Company: Light & Wonder, Inc.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1A
Chunk 35
---
 consequences.

Our information technology systems and infrastructure are subject to cyber-attacks from many vectors, including but not limited to viruses, ransomware, malicious software, break-ins, theft, computer hacking, employee error or malfeasance or other security breaches. Hackers and data thieves are increasingly sophisticated and operate large-scale and complex automated attacks. The gaming industry, specifically, has been, and could remain, a heightened target of cyber-attacks. Threats to our information technology systems and infrastructure include:

•experienced computer programmers and hackers who are able to penetrate our security controls and misappropriate or compromise sensitive personal, proprietary or confidential information, create system disruptions or cause shutdowns or who are able to develop and deploy malicious software programs that attack our systems or otherwise exploit any security vulnerabilities; 

•security incidents, acts of vandalism or theft, coordinated attacks by activist entities, misplaced or lost data, human errors or other similar events that could negatively affect our systems and the data stored on those systems, and the data of our business partners; and

•third parties, such as hosted solution providers, that provide services to us, are also a source of security risk in the event of a failure of their own security systems and infrastructure.

The costs to eliminate or address the foregoing security threats and vulnerabilities before or after a cyber incident could be significant. Our remediation efforts may not be successful and could result in interruptions, delays or cessation of service, and loss of existing or potential suppliers or customers. In addition, breaches of our security measures and the unauthorized dissemination of sensitive personal, proprietary or confidential information about us, our business partners or other third parties could expose us to significant potential liability and reputational harm. We have made, and will continue to make, significant investments in the protection of our systems, networks and intellectual property. We conduct a program of continuous self-evaluation and improvement as we seek to mitigate cyber risk. However, as threats related to cyber-attacks develop and grow, we may also find it necessary to make further investments to protect our data and infrastructure, which may impact our results of operations. Although we have insurance coverage for protecting against damages resulting from cyber-attacks, it may not be sufficient to cover all possible claims, and we may suffer losses that could have a material adverse effect on our business. Our insurance coverage for protecting against damages resulting from cyber-attacks does not cover incidents which occur at companies we acquire after such cyber-attack. Any successful cyber-attack or breach of our cybersecurity measures, or those of our service providers or other third parties