Business Context and Reporting Period
Company: American Water Works Company, Inc.
Filing Type: Form 8-K (Current Report)
Date of Report: October 3, 2024
Event: Discovery of and response to a cybersecurity incident involving unauthorized activity within the Company's computer networks and systems.
Key Financial Metrics
This filing does not contain specific financial data such as revenue, profit, cash flow, margins, debt, or liquidity figures. The document focuses exclusively on the disclosure of a cybersecurity event.
Material Changes and Operational Impact
- Operational Status: The Company currently believes that none of its water or wastewater facilities or operations have been negatively impacted by the incident.
- Response Actions: The Company activated incident response protocols, engaged third-party cybersecurity experts, notified law enforcement, and disconnected or deactivated certain systems to protect data.
- Financial Impact Assessment: While the full impact cannot be predicted, the Company does not expect the incident to have a material effect on its financial condition or results of operations at this time.
Guidance, Outlook, and Risks
Management Commentary: Management states that the incident is under investigation and that steps are being taken to contain and mitigate the issue. Forward-looking statements regarding the lack of material financial impact are based on current expectations and are not guarantees.
Identified Risks and Contingencies:
- Uncertainty regarding the extent of the incident and the scope of unauthorized access to sensitive, proprietary, or personal data.
- Potential for incremental expenses, damages, or losses related to containment, mitigation, and investigation.
- Risk of fines, penalties, loss of reputation, or litigation arising from the incident.
- Uncertainty regarding the availability and amount of insurance coverage.
- Potential for future disruption to business operations.
Investor Verification Checklist
- Verify the scope of data accessed or compromised during the incident.
- Monitor for updates on the investigation results and any regulatory actions or litigation filed.
- Review future filings for any disclosed costs related to the incident response or remediation.
- Confirm the status of insurance coverage claims related to this cybersecurity event.
- Watch for any subsequent announcements regarding operational disruptions to water or wastewater facilities.