Company: GEHC
Filing Date: 2025-02-13
Form Type: 10-K
Source: 0001932393-25-000005
Chunk: 43

Company: GE HealthCare Technologies Inc.
Filing Date: 2025-02-13
Form: 10-K
Item: Item 1A
Chunk 43
---
 effect on our business results, cash flows, financial condition, or prospects. 

There are increasingly large volumes of information, including patient data, being generated that need to be securely processed and stored by healthcare organizations. Our IT systems have been subject to computer malware, unauthorized access, and other cyber-attacks. There has been an increase in the frequency and sophistication of the cybersecurity threats we and our service providers face, and we expect these activities to continue to increase. Geopolitical tensions or conflicts, such as the conflict between Russia and Ukraine, and the increased adoption of AI technologies, may further heighten the risk of cyber-attacks. Additionally, leveraging AI capabilities to potentially improve internal functions and operations presents further risks and challenges, including the possibility of 

22

creating new attack methods for adversaries. The use of AI to support business operations carries inherent risks related to data privacy, IP, and security, such as intended, unintended, or inadvertent transmission of proprietary, confidential, or sensitive information, as well as challenges related to implementing and maintaining AI tools, such as developing and maintaining appropriate datasets for such support. If we fail to implement adequate safeguards, the use of AI may introduce additional operational, legal, or regulatory vulnerabilities such as producing inaccurate outcomes based on flaws in the underlying data or methodologies, or unintended results. 

Furthermore, we may also be exposed to a more significant risk if such actions are taken by state or state-affiliated actors. The objectives of these cyber-attacks vary widely and may include, among other things, unauthorized access to personal, customer, or third-party information, disruptions in operations and the provision of services to customers, or theft of IP or other sensitive assets or information belonging to us, our business partners, or customers. As such attacks become more effective, the risks in this area continue to grow. The back-up systems we have in place may not be adequate in the event of a failure or interruption. We may not have current capabilities to identify all vulnerabilities, which may allow others to exploit persistent potential exposures within our IT systems and products. We could suffer significant business disruption, including transaction errors, supply chain or manufacturing interruptions, processing inefficiencies, data loss, loss of customers, reputational damage, the loss of or damage to IP or other proprietary information, litigation, investigations, and possible liability to employees, customers, suppliers, patients, and regulatory authorities as a result of a successful cyber-attack or other disruption impacting our IT systems. Further, our ability to effectively plan, forecast, and execute our business plan and comply with