The Cyber Risk Admission
Across 1 sector, 5 of 6 filers are discussing disclosed risk. Accelerated into 2025Q4, since cooling. Direction flipped — 2025Q2 was 75% falling; 2025Q4 now 52% rising. Reached 3 sectors at its 2025Q4 peak, now concentrated in 1 sector. Almost entirely a risk story (100%). Stated as material across filings (avg intensity 3.6/5). Forward-leaning — companies are guiding to this, not just explaining the past. One disclosure notes "secure operation of these information technology networks is critical to our business operations and strategy."
Large infrastructure and software companies are explicitly acknowledging that cybersecurity threats cannot be fully prevented or mitigated, and pose ongoing risks to revenue, customer trust, and operational continuity.
DISTINCT NEW FILERS PER QUARTER
✦ WHAT THE DIFF CAUGHT
Language shifts from abstract mitigation claims toward concrete admission that threats are persistent, partially unmitigated, and potentially damaging to business outcomes.
REPRESENTATIVE SIGNAL FROM FILINGS
“secure operation of these information technology networks is critical to our business operations and strategy”
Secure operation of information technology networks and data processing is critical to the company's business operations and strategy.
“we cannot anticipate and detect all cybersecurity threats and incidents”
Despite protective efforts, the company cannot anticipate, detect, or effectively prevent all cybersecurity threats and incidents.
DRIVERS