Company: IHETW
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001400891-25-000009
Chunk: 53

Company: iHeartMedia, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 53
---
 to accelerate on a global basis in frequency and magnitude and, as a result, we may be unable to anticipate, investigate, remediate, or recover from future cyberattacks and other security incidents, or to avoid a material adverse impact to our IT Systems, Confidential Information, or business. We and certain of our third-party providers have experienced from time to time in the past cyberattacks and other incidents, and we expect to experience these in the future. Our IT Systems and Confidential Information are vulnerable to a range of cybersecurity risks and threats, including software bugs, computer viruses, internet worms, break-ins, phishing and social engineering attacks, attempts to overload servers with denial-of-service, or other attacks and similar disruptions (for example, due to ransomware), any of which could lead to system interruptions, delays, shutdowns, or theft or loss of Confidential Information. Our remote and hybrid working arrangements for employees (and employees of third-party providers) also present additional risks due to the prevalence of social engineering and other cyberattacks that are launched in relation to non-corporate and home networking environments and remote access into our computer networks.

A security breach could occur due to the actions of outside parties, employee error, malfeasance or a combination of these or other actions. Any failure to maintain performance, reliability, security, and availability of our services and technical infrastructure to the satisfaction of our listeners may harm our reputation and our ability to retain existing listeners and attract new listeners. We or third parties we rely on may not be able to implement security controls as intended for various reasons, including if we do not recognize or underestimate a particular risk. We cannot assure you that our cybersecurity risk management program or the policies, controls, and/or processes that we or our third-party providers have designed to protect our Confidential Information and IT Systems will be effective. In addition, security controls, no matter how well designed or implemented, may only mitigate and not fully eliminate risks and events, when detected by security tools or third parties, may not always be immediately understood or acted upon. Cyberattacks that disrupt or result in unauthorized access to third party IT Systems can materially impact our operations and financial results.  If there is an actual or perceived adverse impact to the availability, integrity, or confidentiality of our IT Systems or Confidential Information, we may incur significant response and remediation costs in protecting against or remediating cyber-attacks and we may face regulatory or civil liability, lose Confidential Information, personal information, or suffer disruptions to our business operations, information processes and internal controls. In addition, the