Global Crossing Airlines Group Inc. 10-K Cybersecurity GRC - 2026-03-05

Page last updated on March 5, 2026

Global Crossing Airlines Group Inc. reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2026-03-05 11:48:56 EST.

Company Summary

Global Crossing Airlines is a new US121 charter airline that operates the A320 and 330.

Filings

10-K filed on 2026-03-05

Global Crossing Airlines Group Inc. filed a 10-K at 2026-03-05 11:48:56 EST
Accession Number: 0001193125-26-093148

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY GlobalX ' s Audit Committee, comprising board members and senior management from various departments including IT, operations, legal, risk management, and others, diligently engage in regular cybersecurity risk assessments. These comprehensive assessments are designed to proactively identify potential threats, vulnerabilities, and risks that could impact the integrity and security of the company 's airline systems, data infrastructure, and operational continuity. Evaluations span critical areas such as safeguarding flight systems, protecting passenger data, and mitigating operational disruptions. Moreover, the Audit Committee remains committed to providing timely updates and detailed reports, offering insights into the airline ' s cybersecurity posture, ongoing initiatives, prevalent incident trends, and active remediation efforts. These reports are meticulously crafted, incorporating key metrics, performance indicators, and actionable recommendations aimed at continual enhancement. The Board of Directors (the "Board") conducts periodic reviews of GlobalX' s cybersecurity policies, procedures, and controls. These reviews are pivotal in ensuring the ongoing effectiveness of the company 's cybersecurity framework and its alignment with emerging threats and evolving industry best practices. Regular updates are meticulously implemented in an effort to fortify the company' s cybersecurity resilience in response to emerging risks and evolving regulatory requirements. On May 5, 2025, the Company learned of unauthorized activity within its computer networks and systems supporting portions of its business applications, which the Company determined to be the result of a cybersecurity incident. Upon learning of this activity, the Company immediately (1) activated its incident response protocols and third-party cybersecurity experts to assist with containment and mitigation activities and to investigate the nature and scope of the incident and (2) took actions to contain and isolate the affected servers and prevent further intrusion. The Company also promptly notified law enforcement and fully coordinated with them. The Company conducted an investigation and concluded that none of its operations were disrupted or negatively impacted by the incident or resulted in any material effect on the Company, or its financial condition or results of the operation. In addition, the Company has complied with all federal, state and local requirements for disclosure in regards to the incident. As of December 31, 2025, and 2024, GlobalX remains proud to report that it has no t encountered any cybersecurity incidents that have materially impacted, or are reasonably likely to materially impact, the Company.

Company Information