Fiscal period ending 2026-01-31 versus 2025-02-01
— view filing on EDGAR →
Ulta Beauty's risk profile expanded sharply and broadly this year, with new material disclosures spanning at least seven distinct themes — supply chain, macro/geopolitical, technology/cybersecurity, debt structure, labor, competitive, and strategic/international — signaling a substantive and pervasive escalation. The addition of a $1B secured credit facility with covenant risk, combined with newly surfaced supplier concentration (top 10 brands = 51% of net sales), overseas private-label sourcing exposure, and international expansion via acquisition and joint venture, collectively represent a step-change in the company's risk footprint. No meaningful easing offsets this picture.
10 company-specific
· 8 common-mode
Company-specific changes
New
New disclosure of supplier concentration risk: top 10 brand partners represent 51% of net sales. Absence of long-term agreements and vendor consolidation create material vulnerability to loss of key relationships or exclusive product access.
We rely on our good relationships with brand partners to purchase prestige, mass, and salon beauty products on reasonable terms, and to offer certain brands or products that are permanently or…
New
New disclosure of material supply-chain vulnerability: majority of Ulta Beauty Collection sourced overseas with no long-term contracts, exposed to tariffs, trade wars, geopolitical disruption, and infectious disease risks.
Increased costs or interruption in our third-party vendors’ overseas sourcing operations could disrupt production, shipment, or receipt of some of our merchandise, which could result in lost sales…
New
New disclosure of $1B secured credit facility with restrictive covenants, asset pledges, and covenant breach consequences. Material debt structure risk newly surfaced.
Our secured revolving credit facility contains certain restrictive covenants that could limit our operational flexibility, including our ability to open stores. We have a $1.0 billion secured…
New
New disclosure of material e-commerce cannibalization risk: online growth may shift existing store customers rather than attract new ones, reducing store profitability and competitive position.
Our e-commerce platform exposes us to certain additional risks which could adversely affect our results of operations. We offer most of our beauty products for sale through our Ulta.com website and…
New
New disclosure of distribution infrastructure capacity risk tied to growth plans. Identifies specific operational constraints and capital requirements that could impair profitability and cash flows.
The capacity of our distribution and order fulfillment infrastructure and the performance of our distribution centers, fast fulfillment center, and market fulfillment centers may not be adequate to…
New
New disclosure of material international expansion via acquisition (Space NK), joint venture (Mexico), and franchise (Middle East). Introduces substantive operational, competitive, regulatory, and geopolitical risks.
Expanding into international markets exposes us to additional risks. In 2025, we expanded internationally through our acquisition of Space NK and the establishment of a joint venture in Mexico and a…
New
New disclosure of elevated inventory shrink above historical levels, explicitly stating adverse impact on results and financial condition. Acknowledges operational/strategic countermeasures with reputational risk.
If we are unable to protect against inventory shrink, our results of operations and financial condition could be adversely affected. Our business depends on our ability to effectively manage our…
New
New disclosure of private label brand business introduces material operational, regulatory, IP, and supply-chain risks including product recalls, manufacturing compliance, and third-party IP disputes.
Our private label brand merchandise exposes us to various risks generally encountered by companies that source, manufacture, market, and retail exclusive private label brand merchandise. In…
New
New disclosure of third-party manufacturing dependency for proprietary Ulta Beauty products with specific regulatory compliance and supply chain risks, including potential seizures and brand damage.
If our manufacturers are unable to produce products manufactured uniquely for Ulta Beauty, including Ulta Beauty Collection and Ulta Beauty branded gifts with purchase and other promotional products…
New
New disclosure of product liability and salon service negligence risks specific to Ulta Beauty branded products, with potential for lawsuits, discontinuance, and reputational harm.
Our Ulta Beauty branded products and salon services may cause unexpected and undesirable side effects that could result in their discontinuance or expose us to lawsuits, either of which could result…
Also disclosed — common-mode (AI cybersecurity escalation ×2, Semiconductor supply chain constraints, Geopolitical macro uncertainty, Tariffs trade policy, Generative AI competition disruption, Immigration talent workforce, Data privacy regulation)
Semiconductor supply chain constraints
New
New disclosure of material supply chain vulnerability. Company explicitly states distribution disruptions could have material adverse effect on business, profitability, and cash flows.
Any significant interruption in the operations of our distribution, fast fulfillment, and market fulfillment centers could disrupt our ability to deliver merchandise to our stores and guests in a…
Geopolitical macro uncertainty
New
New disclosure of material macroeconomic and geopolitical risks: inflation, elevated rates, tariffs, supply chain disruption, and international geopolitical exposure (Ukraine, Middle East, Mexico). Substantive risk escalation warranting investor attention.
Economic, Market, and Other External Risks Macroeconomic conditions could have a material adverse impact on our business, financial condition, profitability, and cash flows. Macroeconomic…
Tariffs trade policy
New
New disclosure of material macroeconomic risk to discretionary beauty/salon sales. Addresses inflation, recession, tariffs, and supply chain vulnerability—substantive risks for a consumer discretionary retailer.
The health of the economy may affect consumer purchases of discretionary items such as beauty products and salon services, which could have a material adverse effect on our business, financial…
Generative AI competition disruption
New
New disclosure of AI adoption and competitive risk. Addresses material operational, reputational, and regulatory uncertainties that could affect business efficiency and competitive position.
The development and use or misuse of AI or the failure to use AI present risks and challenges that may negatively affect our business. Failure to adapt to a rapidly changing technological environment…
Immigration talent workforce
New
New disclosure of labor cost inflation, wage pressure, and unionization risk. Addresses material operational and cost headwinds affecting profitability.
If we fail to retain our existing senior management team or attract qualified new personnel at all levels, such failure could have a material adverse effect on our business, financial condition…
AI cybersecurity escalation
New
New disclosure of IT/cybersecurity risks including ERP replacement, e-commerce dependency, and system disruption threats to operations and revenue.</explanation>
</invoke>
Information Security, Cybersecurity, Data Privacy, Regulatory, and Legal Risks We are subject to risks relating to our information technology systems, and any failure to adequately protect our…
AI cybersecurity escalation
New
New disclosure of cybersecurity risk covering data breaches, remote work vulnerabilities, and operational/reputational/legal exposure. Material addition to risk profile.
Cybersecurity or information security breaches and other disruptions could compromise our information, result in the unauthorized disclosure of confidential guest, employee, Company, and/or business…
Data privacy regulation
New
New disclosure of privacy/data protection compliance risk. Cites CCPA, GDPR, enforcement actions, fines, and reputational harm as material threats to business and cash flows.
Failure to maintain satisfactory compliance with applicable privacy and data protection laws and regulations may subject us to negative financial consequences, including civil or criminal penalties…