ADI

아날로그디바이스
ANALOG DEVICES INC · CIK 6281
ADI 리스크 변화 알림 받기
이번 보고서
2026.08 분기보고서
10-Q · 기간 말 2026. 8. 1. · 제출 2026. 8. 19.
비교 기준
2025 연차보고서 이후 누적
10-K · 기간 말 2025. 11. 1.
SEC 원문 ↗

분기보고서는 연차보고서 이후 바뀐 리스크만 적는 경우가 많습니다. 직전 연차보고서와 그 뒤 분기보고서에 이미 나온 내용은 빼고, 이번에 처음 들어간 것만 보여드립니다.

0
새 리스크 항목
0
신규 문단
4
수정 문단
AI 한국어 요약

한 줄 요약

ADI는 2026년 6월 실제로 사이버 공격을 당해 일부 파일이 외부로 유출됐다고 처음 밝혔습니다. 현재로서는 중대한 영향이 없다고 보지만 조사가 아직 진행 중이며, 사이버 리스크 문구 전반을 "가능성"에서 "현실"로 바꿨습니다.

주목할 변화

  • 신규2026년 6월 사이버 사고와 데이터 유출회사가 실제 공격을 받았고 일부 시스템에서 파일이 빠져나갔다고 처음 공개했습니다. "the June 2026 incident and other cybersecurity events, some of which resulted in the exfiltration of files"라고 적었으며, 6월 사고 외의 다른 보안 사건도 있었다는 점을 함께 언급했습니다.
  • 신규영향 평가는 잠정적이고 조사는 진행 중운영 중단은 없었고 현재 정보로는 중대한 영향이 예상되지 않는다고 했습니다. 다만 유출 정보의 성격과 범위에 대한 조사는 계속되고 있으며, "no assurance that our assessment will not change as additional facts emerge, that exfiltrated data will not be misused"라며 판단이 바뀔 수 있다고 명시했습니다.
  • 신규대응 비용 발생과 소송·규제·고객 이탈 위험사고 대응과 복구에 이미 비용이 들었고 앞으로도 들 것이라고 밝혔습니다("have incurred and expect to continue to incur costs… may be significant"). 소송과 규제 조치, 고객 이탈, 평판 훼손 가능성도 6월 사고와 직접 연결해 서술했습니다.
  • 강화SEC 중대성 판단과 통지 의무에 대한 부담SEC의 '4영업일 내 공시' 규정을 새로 언급했습니다. 조사가 끝나기 전에 중대성을 판단해야 하는 어려움("must be made while investigations may still be ongoing")과, 피해자·규제당국 통지가 늦거나 부족하다는 지적을 받을 위험("timeliness or adequacy of such notifications")을 추가했습니다.
  • 강화추가 공격은 '예상되는 일'로 표현자사와 협력사의 보안 조치가 모든 침해를 막지 못한다는 점이 이번 사고로 확인됐다고 적었습니다. 이어 "We expect that we… will continue to experience cybersecurity attacks"라며 향후 공격을 기정사실처럼 서술했습니다. 공격 기법도 "may be unable to anticipate"에서 "unable to anticipate all such techniques"로 표현이 단정적으로 바뀌었습니다.
  • 강화AI를 활용한 공격이 가정에서 현실로이전에는 "may be used for certain cybersecurity attacks"였던 문장을 "are also used"로 바꿔, AI가 이미 공격에 쓰이고 있다고 인정했습니다.
  • 강화사이버 규제 대응 비용은 확정된 부담"may be required to invest significant additional resources"가 "requires us to invest"로 바뀌어, 규제 준수 비용을 확정된 부담으로 표현했습니다.

읽는 법

이번 분기 리스크 요인 변경은 모두 사이버보안 항목에 집중되어 있습니다. 핵심은 2026년 6월에 실제 데이터 유출이 있었다는 사실과, 회사의 '중대하지 않다'는 판단이 아직 확정되지 않았다는 점입니다. 앞으로 나올 공시에서 유출 정보의 범위, 대응 비용 규모, 관련 소송이나 규제 조치가 구체화되는지 확인할 필요가 있습니다.

원문 비교
  1. 수정Our computer systems and networks are subject to security breaches and other cyber incidents and a significant disruption in, or breach in security of, our information technology systems or certain products could materially and adversely affect our business or reputation.
    We rely on information technology systems throughout our company to keep financial records and customer data, process orders, manage inventory, coordinate shipments to customers, maintain confidential and proprietary information, assist in semiconductor engineering and other technical activities and operate other critical functions such as internet connectivity, network communications and email. In addition, we provide our confidential and proprietary information to our strategic partners in certain cases, who may maintain such information on their information technology systems. We have experienced cybersecurity attacks and incidents, such as the June 2026 incident and other cybersecurity events, some of which resulted in the exfiltration of files from certain affected systems. While our operations were not interrupted as a result of the June 2026 incident, and based on information currently known, we do not believe this incident is reasonably likely to materially impact our business, operations, or financial condition, our investigation into the nature and scope of the exfiltrated information remains ongoing. There is no assurance that our assessment will not change as additional facts emerge, that exfiltrated data will not be misused, or that we will not experience additional incidents in the future that may have a material impact on our business. As demonstrated by the June 2026 incident and other cybersecurity events, our security measures and those of our third-party service providers and strategic partners may not detect or prevent all security breaches, cyberattacks, defects, bugs or errors, and threat actors can be successful in gaining unauthorized access to our systems. We expect that we and our third-party service providers and strategic partners will continue to experience cybersecurity attacks and incidents in the future.
  2. 수정Our computer systems and networks are subject to security breaches and other cyber incidents and a significant disruption in, or breach in security of, our information technology systems or certain products could materially and adversely affect our business or reputation.
    Further, geopolitical Geopolitical tensions and conflicts have escalated the volume and sophistication of cyberattacks. Because the tactics and techniques used by threat actors to obtain unauthorized access to or sabotage systems change frequently and, in some cases, are not recognized until they are launched or even later, we may be are unable to anticipate these all such techniques or and may not be able to implement adequate preventative measures in advance, and such that security breaches may could remain undetected for an extended period periods of time. Our use of AI may artificial intelligence (AI) can also increase vulnerability to cybersecurity risks, including through unauthorized use or misuse of AI tools and bad inputs or logic or the introduction of malicious code incorporated into AI generated code. AI and machine learning are also may be used for in certain cybersecurity attacks, improving or expanding the existing capabilities of threat actors in manners we cannot predict at this time, resulting ways that can result in greater risks of security incidents and breaches.
  3. 수정Our computer systems and networks are subject to security breaches and other cyber incidents and a significant disruption in, or breach in security of, our information technology systems or certain products could materially and adversely affect our business or reputation.
    We and our third-party service providers or and strategic partners are susceptible subject to security breaches of information technology systems or and certain products and other incidents such as unauthorized access, supply-chain attacks, exfiltration or destruction of data, disruption of service, viruses or other malicious code, illegal break-ins or hacking, sabotage, phishing attempts and other forms of social engineering, malware, ransomware and other forms of cyber extortion and similar events. These threats may come from cybercriminals, cyberterrorists and hacktivists, nation-state and nation-state-supported actors (including advanced persistent threat intrusions) and computer hackers. They also may can result from the malicious or accidental acts of our employees, contractors or third-party providers. Unauthorized access to, or a security breach of, our systems or those of our third-party service providers or strategic partners could disrupt our operations. As occurred in the June 2026 incident, such events can result in the exfiltration of data from our systems and could expose our proprietary information or that of our employees, contractors, partners, customers, suppliers or other third parties to misappropriation or misuse. In the event of a cybersecurity attack or incident such as the June 2026 incident, we may become subject to litigation and regulatory action, lose existing or potential customers, suffer reputational damage and incur other financial losses. We have incurred and expect to continue to incur costs in connection with our response to and remediation of cybersecurity incidents, and such costs and operational consequences may be significant. Furthermore, the The continuing and evolving threat of cyberattacks has resulted in increased regulatory focus and we may be required which requires us to invest significant additional resources to comply with evolving cybersecurity regulations. In addition, in 2023, the SEC adopted rules requiring an issuer to disclose whether a cybersecurity incident was determined to be "material," within four business days of such determination. Making such determinations is complex, requires a number of assumptions based on several factors, and must be made while investigations may still be ongoing and the full scope of an incident may not yet be known. It is possible that the The SEC may not agree with our determinations, determinations regarding the materiality of cybersecurity incidents, which could result in fines, civil litigation or damage to our reputation. In addition, certain incidents may require us to notify affected parties and applicable regulators in accordance with applicable law, and we may face regulatory scrutiny regarding the timeliness or adequacy of such notifications.
  4. 수정Our computer systems and networks are subject to security breaches and other cyber incidents and a significant disruption in, or breach in security of, our information technology systems or certain products could materially and adversely affect our business or reputation.
    Our information technology systems and those of our third-party service providers and strategic partners may are also be susceptible to damage, disruptions or shutdowns due to power outages, hardware failures, telecommunication failures, user errors, catastrophes or other unforeseen events. A prolonged disruption in the information technology systems that involve our internal communications or our interactions with customers or suppliers could result in the loss of sales and customers and significant incremental costs, which could may adversely affect our business.