Company: BKR
Filing Date: 2025-02-04
Form Type: 10-K
Source: 0001701605-25-000035
Chunk: 113

Company: Baker Hughes Co
Filing Date: 2025-02-04
Form: 10-K
Item: Item 1A
Chunk 113
---
 designed to prevent or limit the effects of cyber incidents or attacks will be sufficient to prevent or detect material consequences arising from such incidents or attacks, or to avoid a material adverse impact on our systems after such incidents or attacks occur. In the normal conduct of our business, we and our service providers have been and may in the future be vulnerable to security breaches, ransomware attacks, theft, misplaced or lost data, programming errors, phishing attacks, denial of service attacks, acts of vandalism, computer viruses, malware, employee errors and/or malfeasance or similar events, including those perpetrated by criminals or nation-state actors, that could potentially lead to the compromise, unauthorized access, use, disclosure, modification or destruction of data or information, improper use of our systems, defective products, loss of access to our data, production downtimes and operational disruptions; and, given the nature of such attacks, some incidents may remain undetected for a period of time despite efforts to detect and respond to them in a timely manner. In addition, a cyber-attack or any other significant compromise or breach of our data security, media reports about such an incident, whether accurate or not, or, under certain circumstances, our failure to make adequate or timely disclosures to the public, law enforcement agencies or affected individuals following any such event, whether due to delayed discovery or a failure to follow existing protocols, could adversely impact our operating results and result in other negative consequences, including damage to our reputation or competitiveness, harm to our relationships with customers, partners, suppliers and other third parties, distraction to our management, remediation or increased protection costs, significant litigation or regulatory action, fines and penalties. Cyberattacks are expected to accelerate on a global basis in both frequency and magnitude as threat actors become increasingly sophisticated in techniques and tools (including artificial intelligence) that circumvent controls, evade detection and even remove forensic evidence of the infiltration. Given the increased prevalence of customer-imposed connectivity, cybersecurity controls and other related contractual obligations towards customers or other third parties, there are an increased number of attack vectors and a cyber-attack or other security incident also could result in breach of contract or indemnity claims against us by customers or other counterparties.

While we currently maintain cybersecurity insurance, such insurance may not be sufficient in type or amount to cover us against claims related to cybersecurity breaches or attacks, failures or other data security-related incidents, and we cannot be certain that cyber insurance will continue to be available to us on economically reasonable terms, or at all, or that an insurer will not deny coverage as to