Business Context and Reporting Period
Company: Inspired Entertainment, Inc. (INSE)
Filing Type: Form 8-K (Current Report)
Date of Report: November 8, 2023 (Event Date)
Reporting Period: Specific event disclosure regarding a cybersecurity incident detected on November 8, 2023.
Key Financial Metrics
This filing is an event report and does not contain standard financial statements. No specific revenue, profit, cash flow, margin, debt, or liquidity figures are provided in this document.
Material Changes and Incident Details
- Ransomware Attack: On November 8, 2023, the Company detected a ransomware attack on its corporate IT systems.
- System Impact: Corporate IT systems were disrupted; however, product systems were protected by design and physical separation and were not impacted.
- Operational Status: Containment measures were deployed, and affected IT systems have been substantially restored to full operational capabilities.
- Data Exfiltration: On November 15, 2023, the Company became aware that data, including personal data, had been exfiltrated. The scope of accessed data is currently under investigation.
- Response Actions: The Company engaged cybersecurity experts, forensic vendors, and external counsel. Law enforcement and regulators have been notified.
Outlook, Risks, and Management Commentary
- Financial Impact: Based on current information, management does not believe the incident will have a material impact on financial results of operations.
- Costs and Insurance: The Company maintains cybersecurity insurance commensurate with its size. However, it has incurred and may incur future expenses and losses not covered by insurance.
- Mitigation: The Company is assessing legal obligations and may offer identity/credit monitoring to affected individuals. Enhanced security measures have been implemented.
- Risks: Forward-looking statements are subject to risks including ongoing assessment of the attack, legal and reputational risks, and potential financial impacts from additional cyberattacks.
Investor Verification Checklist
- Verify the final scope of data exfiltration and the specific types of personal data compromised.
- Monitor for updates on regulatory investigations and potential legal liabilities.
- Review future financial filings for any quantified costs related to the incident not covered by insurance.
- Assess the Company's long-term cybersecurity strategy and any changes to business continuity plans.