XML 40 R25.htm IDEA: XBRL DOCUMENT v3.22.4
Ransomware Incident
12 Months Ended
Dec. 31, 2022
Disclosure Text Block Supplement [Abstract]  
Ransomware Incident

Note 18—Ransomware Incident

During the fourth quarter ended December 31, 2019, some of the Company’s systems were affected by a ransomware incident that encrypted information on its systems and disrupted customer and employee access to its applications and services. The Company immediately took steps to isolate the impact and implemented measures to prevent additional systems from being affected, including taking its network offline as a precaution. In connection with this incident, third party consultants and forensic experts were engaged to assist with the restoration and remediation of the Company’s systems and, with the assistance of law enforcement, to investigate the incident. The Company has found no evidence that customer or employee data was exfiltrated from its network.

The Company restored connectivity and resumed operations quickly following the ransomware incident. However, fourth quarter 2019 operations were adversely affected by the inefficiencies caused by taking the network offline for a period of time. As a result, the Company’s fourth quarter 2019 revenue was also adversely affected as the Company was unable to fulfill a portion of customer demand during the quarter.

We have insurance coverage, including cyber insurance, and worked diligently with our insurance carriers on claims to recover costs incurred, as discussed further below.

 

In 2019, ransomware incident related costs incurred totaled $12.7 million or $7.7 million, net of estimated insurance recoveries of $5.0 million. These costs were primarily comprised of certain employee related expenses and various third-party consulting services, including forensic experts, legal counsel and other IT professional expenses. During the year ended December 31, 2020, the Company collected $6.6 million of insurance recoveries, which included $5.0 million of estimated insurance recoveries recorded in 2019 and an additional $1.6 million recorded in 2020. During the year ended December 31, 2021, the Company collected an additional $3.9 million of insurance recoveries. As of December 31, 2021, the Company has collected insurance recoveries totaling $10.5 million. No further insurance recoveries are expected.