LENNAR CORP /NEW/ 10-K Cybersecurity GRC - 2024-01-26

Page last updated on April 11, 2024

LENNAR CORP /NEW/ reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2024-01-26 17:11:20 EST.

Filings

10-K filed on 2024-01-26

LENNAR CORP /NEW/ filed an 10-K at 2024-01-26 17:11:20 EST
Accession Number: 0001628280-24-002371

Item 1C. Cybersecurity.

Not applicable.

Item 1A. Risk Factors.

Information technology failures and data security breaches could harm our business.

We rely extensively on information technology (“IT”) systems, including Internet sites, data hosting facilities and other hardware and software platforms, some of which are hosted by third parties, to assist in conducting our businesses. Our IT systems, like those of most companies, may be vulnerable to a variety of disruptions, including, but not limited to, those caused by natural disasters, telecommunications failures, hackers, and other security issues. Moreover, our computer systems, like those of most companies, are subject to the possibility of computer viruses or other malicious codes, and to cyber or phishing-attacks. We have installed and continually upgrade an array of protections against cyber-intrusions. The risk of cyber-intrusion is one of the areas of risk as to which there are regular periodic presentations to our Board. However, cyber intrusion efforts are becoming increasingly sophisticated, and it is possible that the controls we have installed could at some time be breached in a material respect. While, to date, we have not had a cybersecurity breach or attack that had a material impact on our business or results of operations, if we were to be subject to a material successful cyber-intrusion, that could result in remediation or service restoration costs, increased cyber protection costs, lost revenues or loss of customers, litigation or regulatory actions by governmental authorities, increased insurance premiums, reputational damage and damage to our competitiveness, our stock price and our long-term stockholder value.

Item 1A. Risk Factors.

Failure to maintain the security of personally identifiable information could adversely affect us.

In connection with our business we collect and retain personally identifiable information (e.g., information regarding our customers, suppliers and employees), and our customers, suppliers and employees have an expectation that we will adequately protect that information. The U.S. regulatory environment surrounding information security and privacy is increasingly demanding. A significant theft, loss or fraudulent use of the personally identifiable information we maintain, or of our data, by cyber-criminals or otherwise could adversely impact our reputation and could result in significant costs, fines and litigation.

Company Information