Fiscal period ending 2025-11-28 versus 2024-11-29
— view filing on EDGAR →
AI-related liability, a materially expanded cybersecurity threat surface, and a wave of new regulatory obligations (EU AI Act, DSA, DORA, Data Act, U.S. DOJ data-transfer rule) collectively represent a broad step-up in operational and compliance risk. Debt load grew 8.8% to $6.15B in senior unsecured notes, adding financial leverage to an already widening risk profile. Macro language was also hardened to encompass tariffs and pandemic scenarios, leaving no major theme unchanged.
1 company-specific
· 4 common-mode
Company-specific changes
Revised
Senior unsecured notes increased $500M (8.8%) from $5.65B to $6.15B, materially increasing debt burden and financial leverage.
Our existing and future debt obligations may adversely affect our financial condition and future financial results. As of November 28, 2025, we had $6.15 billion in senior unsecured notes outstanding…
Also disclosed — common-mode (AI regulatory compliance, AI cybersecurity escalation, Data privacy regulation, Tariffs trade policy)
AI regulatory compliance
Revised
Risk escalated: added agentic AI, third-party model IP infringement liability, EU AI Act compliance obligations now in effect, and specific mention of investigations/proceedings exposure.
Issues relating to the development and use of AI in our solutions may result in reputational harm, liability and adverse business and financial results. Social, ethical and operational issues…
AI cybersecurity escalation
Revised
New disclosures of open-source software vulnerabilities, AI-enabled attack methods, supply-chain compromise risk, and detection capability gaps materially escalate cybersecurity threat profile.
Security incidents, improper access to or disclosure of our customers’ data or other cybersecurity incidents may harm our reputation and materially and adversely affect our business. Our solutions…
Data privacy regulation
Revised
New specific regulatory obligations added: EU Digital Services Act, Digital Operational Resilience Act, Data Act, and U.S. DOJ rule on sensitive data transfers. Escalated language on compliance costs and business practice changes.
Increasing regulatory focus on privacy and security issues and expanding laws and regulatory requirements could impact our business models and expose us to increased liability. We are subject to…
Tariffs trade policy
Revised
Added explicit mention of tariffs and epidemics/pandemics as geopolitical risks; escalated language from "operating" to "global adverse economic and geopolitical conditions."
We face various risks associated with operating as a multinational corporation, and global adverse economic and geopolitical conditions may harm our business and financial condition. We derive a…