Rolling in the Dough? Not After a Cyber Attack ????

Yesterday, the United States' beloved donut company Krispy Kreme disclosed to the SEC that they experienced a cyber attack on November 29, 2024, which had subsequently exacted a material impact on its business operations and financial conditions.?

(Note: Krispy Kreme is one of the few companies to have correctly utilized line Item 1.05 to disclose a determined material event.)

Since the incident, the corporation's stock prices have steadily declined, with a sharp drop following yesterday's disclosure.?

In total, the stock has fallen nearly 9% since the incident and is likely to continue this downward trend in the following days.???

Plainly, regardless of the services an organization provides, cyber risk management is crucial to mitigating the financial impact of a cyber event.?

While Krispy Kreme's annual 10-K highlights that they have extensive processes in place for "assessing, identifying, and managing material risk," they clearly forgot the glaze on this one.?

This is not to say it's necessarily anyone's fault.

As we know, suffering from a cyber incident nowadays is nearly inevitable, even for a donut company.?

But when robust mechanisms are indeed established, the monetary materiality of the impact should theoretically be mitigated well beforehand.?

It pays off, in the long run, to continuously assess one's exposure and proactively develop cybersecurity strategies accordingly.?

Thankfully, Krispy Kreme shops remain open, and deliveries have gone uninterrupted.?

After the disclosure, there will be plenty of executives who are going to need to start today with a cup of coffee and a freshly glazed donut. ???

Let’s keep an eye out to see how stock prices are affected in the long term.

#cyberriskmanagement #materialevent #materiality #SEC #cyberrisk #CRQ #riskmanagement #cybersecurity