edgarwiki

Cybersecurity disclosure

214 staff comments in this corpus, to 158 registrants, across 12 of the 15 calendar quarters this corpus covers.

Coverage is partial and not continuous. This corpus holds CORRESP filings from 2023Q1–2026Q3 (83–100% of each quarter's EDGAR total). It holds nothing filed after 2026-07-17. If an issue page shows no comment from one of those periods, the reason is that edgarwiki has no data for it — not that the staff raised nothing. Counts on this site are counts within this corpus and are not SEC-wide totals. Every quotation is verbatim and links to its filing; what is incomplete is coverage, not accuracy. Per-quarter figures: Methodology.
MeasureValue
Comments raising this issue214
Share of all 92,899 comments in the corpus0.2%
Distinct registrants158
With a recorded company response214

When these comments were filed

By the quarter the CORRESP filing was filed. The third column is how much of that quarter's EDGAR CORRESP output this corpus holds — read it before comparing two rows. A quarter marked never ingested contributes no comments to this page for reasons that have nothing to do with the SEC.

QuarterComments here Corpus coverage of that quarter
2023Q12993%
2023Q22891%
2023Q32993%
2023Q42596%
2024Q11493%
2024Q22283%
2024Q32590%
2024Q42196%
2025Q11092%
2025Q2389%
2025Q3790%
2025Q4093%
2026Q1185%
2026Q20100%
2026Q30100%

The exchanges

Verbatim, most recent first. Quotations are exact spans from the filing linked beneath each one; long passages are truncated with an ellipsis and never altered.

SEC staff comment
Comment 2. Cybersecurity and Technology Risk is included under the Item 9 risks of the Fund but is not included under the Item 4 risks of the Fund. To the extent that Cybersecurity and Technology Risk is a principal risk of investing in the Fund, please consider including this risk factor in the Item 4 Principal Risks section.
The company responded
The Registrant respectfully acknowledges your comment; however, the Registrant believes that Cybersecurity and Technology Risk is not a principal risk of investing in the Fund. The Registrant believes that the placement of Cybersecurity and Technology Risk in the Item 9 Additional Information About Fund Investment Strategies and Related Risks section is currently appropriate. January 27, 2026 Page 2
MORGAN STANLEY INSTITUTIONAL LIQUIDITY FUNDS · filed 2026-01-27 · 0001104659-26-007114
SEC staff comment
14. We note that “Cybersecurity and Disaster Recovery” is a principal risk for the FIS Bright Portfolios Focused Equity ETF, but an “Other Risk” for the Christian Stock Fund. Please make conforming changes or explain supplementally why the Funds are different.
The company responded
The conforming changes requested to be made in the comment have been made. Fund Management The staff notes that the Funds will operate under a unitary fee structure. Please confirm in correspondence whether the Adviser is current on all payments to service providers. Please supplementally explain if agreements with service providers stipulate payment from the Funds.
FIS Trust · filed 2025-09-22 · 0001999371-25-013769
SEC staff comment
Comment 16. Please include cybersecurity risk in the heading beginning with "ADDITIONAL INFORMATION ABOUT…"
The company responded
The Registrant has made the requested addition.
SPEND LIFE WISELY FUNDS INVESTMENT TRUST · filed 2025-09-17 · 0001162044-25-000964
SEC staff comment
Comment 3. With respect to the Fund’s 80% investment policy, the Staff notes that the Fund “invests at least 80% of its net assets (plus borrowings for investment purposes) in Modern Warfare Companies (as defined above).” The Staff further notes that subsequent disclosure in the Fund’s Prospectus states: The Index seeks to track the performance of companies that are publicly traded on recognized global exchanges in developed markets and generate significant revenue from the modern warfare industry. The Index consists of companies that have a combined exposure of at least 30% to military drones, Artificial Intelligence (“AI”)-driven warfare and military information technology, electronic and communication warfare solutions, space warfare, military satellites and missile solutions, military cybersecurity, autonomous driven vehicles, and robots used for military purposes (collectively,…
The company responded
First, the Registrant has replaced the term “Modern Warfare Companies” in the Fund’s 80% investment policy with “Drone and Modern Warfare Companies” to better align the Fund’s 80% investment policy with the Fund’s name and strategy. Second, the Fund’s Index Methodology and Prospectus have been revised to clarify that each Index constituent must derive at least 50% of its total revenue from one or more of the following advanced capability areas within the drone and modern warfare industry: military drones; artificial intelligence (“AI”)-driven warfare and military information technology; unmanned systems; electronic and communication warfare solutions; intelligence, surveillance, reconnaissance (“ISR”); space warfare, military satellites and missile solutions; military cybersecurity; and military robotics. In addition, the Registrant has revised the first two sentences of the Index…
ETF Series Solutions · filed 2025-09-15 · 0000894189-25-006971
SEC staff comment
Comment: The Fund discloses that it generally focuses on companies that have a distinct link to artificial intelligence and/or automation as measured by the proportion of the company (e.g., sales, EBITDA, enterprise value, Capex, or other relevant metrics) that contributes to and benefits from the value chain in artificial intelligence, robotics, cybersecurity, semiconductors, and software. Given the use of the phrasing “generally focuses on,” please revise the disclosure to clarify what other companies or factors the Adviser may focus on for purposes of the Fund’s investment selection process. Additionally, please provide the minimum proportion of a company’s contributions to, and benefits from, the value chain in artificial intelligence, robotics, cybersecurity, semiconductors, and software to be considered for the Fund’s portfolio.
The company responded
The registrant has removed the term "generally" from the disclosure. As for the request to provide the minimum proportion of a company's contributions required to be considered for the Fund's portfolio, after careful consideration, the Adviser has determined to leave the disclosure as is. The Adviser believes the Fund’s holdings have a reasonable and meaningful nexus to the industry referenced in its name and therefore, is consistent with both the letter and spirit of Rule 35d-1. The Registrant acknowledges that the Staff, in the adopting release for the amendments to Rule 35d-1 1 (the “Amendment Release”), has suggested that a revenue test is one way to demonstrate an issuer’s relationship to a particular industry for purposes of determining if a meaningful nexus exists between an investment and the industry references by the fund’s name. The Staff has been consistently careful to…
2023 ETF Series Trust · filed 2025-09-10 · 0001398344-25-017994
SEC staff comment
Comment: The Fund includes “Risks Relating to Companies Focused on Artificial Intelligence, Robotics, Cybersecurity, Semiconductors and Software” as a principal risk of investing in the Fund. Please remove Artificial Intelligence from this risk factor and create a separate Artificial Intelligence and Automation risk factor.
The company responded
The Registrant has made the requested changes. 12.
2023 ETF Series Trust · filed 2025-09-10 · 0001398344-25-017994
SEC staff comment
5. We note that you do not appear to have relied upon an opinion of counsel with respect to your conclusions regarding your permissions and approvals, including to operate your business and offer securities to investors. We also note your statements that you “do not believe [you] are obligated to apply for a cybersecurity review pursuant to the revised CRM,” and that you “believe that [you] are not subject to the CSRC Filing Rules.” If true, state as much and explain why such an opinion was not obtained.
The company responded
In response to the Staff’s comments, the Company has included the referenced disclosure on pages 12, 13 and 14 of the Registration Statement indicating that the Company has relied on the advice of legal counsel in arriving at such conclusions and included the consent of China Commercial Law Firm, its PRC Counsel, as exhibit 23.4 to the Registration Statement. 2 Risk Factors Risks Related to Our Business and the Industry Our Success depends significantly on the market recognition…, page 21
Monkey Tree Investment Ltd · filed 2025-08-15 · 0001213900-25-077454
SEC staff comment
1. We note your revised disclosure in response to prior comment 21, including that your current insurance does not cover cyber threats and data breaches. Please revise your risk factor disclosure at the top of page 38 to note this information and describe the risks associated with operating an ecommerce company without insurance coverage for cybersecurity incidents.
The company responded
In response to the Staff’s comment, the Company has amended its disclosure on page 41 of Amendment No. 3. Risk Factors Since we have not consummated our initial Business Combination by December 13, 2024 ..., page 53
IWAC Holding Co Inc. · filed 2025-07-29 · 0001104659-25-071735
SEC staff comment
5. We note your risk factor disclosure on page 22 that states “Deswell and our PRC subsidiaries (i) are not required to obtain permissions from the China Securities Regulatory Commission, or the CSRC, (ii) are not required to go through cybersecurity review by the Cyberspace Administration of China, or the CAC, and (iii) have not been asked to obtain or were denied such permissions by any PRC authority.” In your future filings, please disclose here in the Key Information section more prominently whether you relied on counsel in determining you are not required to obtain permissions from or complete filings with the CAC and CSRC, and if you did, name your PRC counsel. If you did not rely on counsel, please revise to discuss how you came to that conclusion and explain why you did not need to consult with counsel in that instance. Additionally, please describe the consequences to you and…
The company responded
In response to the Staff’s comment, the Company respectfully proposes to revise the disclosure in its future filings on Form 20-F (with strikethroughs and strikethroughs and underlines showing the changes against the disclosure in the Annual Report) as follows: Part I, Item 3. Key Information, page 5 “ Permissions and Licenses Required from the PRC government for Our Operations and Overseas Securities Offerings We are required to obtain certain licenses and permits from relevant governmental authorities in China in order to operate our business, including business certificates, plants safety certificates and pollutant discharge permits. As of the date of this annual report, our subsidiaries in China have obtained business licenses from the PRC government authorities necessary for our business operations in China. We have not relied upon the opinion of PRC counsel in reaching these…
DESWELL INDUSTRIES INC · filed 2025-04-21 · 0001174947-25-000600
SEC staff comment
4. We note your disclosure on the prospectus cover page and pages 7 and 13 that the Guangdong Wesley Law Firm, your counsel with respect to PRC legal matters, has advised you that you “are currently required to obtain permissions from or complete any filing with the CSRC, or required to go through cybersecurity review by the CAC.” Please supplementally confirm whether the phrase “are currently required” contains a typographical error and should read “are not currently required.” In this regard, we note your subsequent disclosures that you may be subject to repercussions if you “inadvertently conclude that certain regulatory permissions and approvals are not required.” Please revise to clarify and/or reconcile your disclosures, as appropriate.
The company responded
We note the Staff’s comment, and in response hereto, respectfully advise the Staff that we confirm the phrase “are currently required” contains a typographical error and should read “are not currently required.” We have revised to reconcile our disclosures on the cover page, pages 7 and 13 of the Form F-3/A.
TOP Financial Group Ltd · filed 2025-04-04 · 0001213900-25-029015
SEC staff comment
3. We note you do not include Item 1.C Cybersecurity. Please revise or advise us why you do not provide the disclosure as applicable under Item 106 of Regulation S-K.
The company responded
We undertake to add the following Section 1C. Cybersecurity in future filings: ITEM 1C CYBERSECURITY. Cybersecurity risk management is an integral part of our overall enterprise risk management program. The Company manages cybersecurity and data protection through a continuously evolving program. Our cybersecurity risk management program is designed to provide a framework for assessing, identifying and managing cybersecurity threats and incidents, including threats and incidents associated with the use of services provided by third-party service providers, and to facilitate coordination across different departments of our Company. Our processes include steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat, including whether the cybersecurity threat is associated with a third-party service provider, and implementing cybersecurity…
Enlightify Inc. · filed 2025-04-01 · 0001213900-25-027030
SEC staff comment
9. We note the following disclosures in your summary of key information under Item 3 of the Form 20-F for the fiscal year ended March 31, 2024 and incorporated by reference: ● Under “Permission Required from the Hong Kong Authorities” you disclose at page 6 that “[n]either we nor any of our subsidiaries are required to obtain any permission or approval from Hong Kong authorities to offer the securities of TFGL to foreign investors.” ● Under “Recent Regulatory Development in the PRC” you disclose at page 7 that “[i]n connection with our issuance of securities to foreign investors, under current PRC laws, regulations and regulatory rules...we do not believe we are currently required to obtain permissions from or complete any filing with the CSRC, or required to go through cybersecurity review by the CAC....” Please disclose how you reached your conclusions, including whether you are…
The company responded
We note the Staff’s comment, and in response hereto, respectfully advise the Staff that we have revised to disclose that we have based our conclusion regarding permission or approval from the Hong Kong authorities under Hong Kong law on advise by our Hong Kong counsel, Stevenson, Wong & Co., and our conclusion regarding permission or approval from the PRC authorities under PRC law on advise by our PRC counsel Guangdong Wesley Law Firm on page 6 and 7 of the Form F-3/A we have revised to identify counsel and file the consent of counsel as an exhibit to the F-3/A.
TOP Financial Group Ltd · filed 2025-03-14 · 0001213900-25-024161
SEC staff comment
1. We note various references to the opinion of Shineco’s PRC legal counsel, Beijing Yingke Law Firm, throughout the registration statement. For example, we note your disclosure on page 7 that “[i]n the opinion of [y]our PRC legal counsel, Beijing Yingke Law Firm, as this offering does not constitute a subsequent offering by [you], [you] are not required to file with the CSRC in accordance with the Trial Measures in connection with this offering”, and your disclosure on page 25 that “[a]s confirmed by [y]our PRC counsel, Beijing Yingke Law Firm...[you] will not be subject to cybersecurity review by the CAC under the Cybersecurity Review Measures, nor will any such entity be subject to the Security Administration.” Please revise to file the opinion of your PRC counsel.
The company responded
In response to the Staff’s comment, we revised to file the opinion of our PRC legal counsel, Beijing Yingke Law Firm, as Exhibit 99.1 to Amendment No. 1. In responding to the Staff’s comments, the Company acknowledges that: ● the Company is responsible for the adequacy and accuracy of the disclosure in the filing; ● the Staff’s comments or changes to disclosure in response to the Staff’s comments do not foreclose the Commission from taking any action with respect to the filing; and ● the Company may not assert the Staff’s comments as a defense in any proceeding initiated by the Commission or any person under the federal securities laws of the United States. We appreciate the assistance the Staff has provided with its comments. If you have any questions, please do not hesitate to call our counsel, Ying Li, Esq., of Hunter Taubman Fischer & Li LLC, at (212) 530-2206. Very truly yours, /s/…
SHINECO, INC. · filed 2025-03-13 · 0001493152-25-010209
SEC staff comment
Comment 3 . The Staff recommends adding a Cybersecurity risk factor in the Principal Investment Risks.
The company responded
The Registrant has added the following disclosure in the Item 4 Principal Investment Risks, and notes that a Cybersecurity Risk factor already exists in the Item 9 risk disclosure. Cybersecurity Risk . The computer systems, networks and devices used by the Fund and its service providers to carry out routine business operations employ a variety of protections designed to prevent damage or interruption from computer viruses, network failures, computer and telecommunication failures, infiltration by unauthorized persons and security breaches. Despite the various protections utilized by the Fund and its service providers, systems, networks, or devices potentially can be breached. The Fund and its shareholders could be negatively impacted as a result of a cybersecurity breach. Similar adverse consequences could result from cybersecurity breaches affecting issuers of securities in which the…
NEOS ETF Trust · filed 2025-03-12 · 0001839882-25-015304
SEC staff comment
Comment : Please consider whether to add cybersecurity risk as a principal risk.
The company responded
Comment accepted. Although cybersecurity risk is listed as an additional risk, the Funds will add cybersecurity risk as a principal risk. 11.
TCW FUNDS INC · filed 2025-02-28 · 0001193125-25-040522
SEC staff comment
Comment 15. Please consider adding a cybersecurity risk factor to the Item 4 Principal Risk section.
The company responded
We respectfully acknowledge your comment; however, we do not believe that cybersecurity risk is a principal risk of investing in the Funds. We note that Cybersecurity Risk is 5 included as an Item 9 risk of the Funds, which we believe to be appropriate in light of the Funds’ investment strategies and expected investments.
E Trade Trust · filed 2025-02-25 · 0001104659-25-016842
SEC staff comment
Comment : Please consider whether to add cybersecurity risk as a principal risk.
The company responded
Comment accepted. Although cybersecurity risk is listed as an additional risk, the Fund will add cybersecurity risk as a principal risk. 13.
TCW FUNDS INC · filed 2025-02-14 · 0001193125-25-027321
SEC staff comment
Comment 1. Please revise future filings to provide the cybersecurity disclosures required by Item 1C of Form 10-K and Item 106 of Regulation S-K.
The company responded
The Company will provide the cybersecurity disclosures required by Item 1C of Form 10-K and Item 106 of Regulation S-K in its future filings Exhibits 32.1 and 32.2 Certifications, page X-32
Luvu Brands, Inc. · filed 2025-02-10 · 0001654954-25-001281
SEC staff comment
Comment: Please consider adding cybersecurity risk to each Fund’s principal investment risks.
The company responded
In response to this comment, the Registrant will add cybersecurity risk to each Fund’s principal investment risks. Portfolio Managers (both Funds) 13.
Datum One Series Trust · filed 2025-01-17 · 0001193125-25-008114
SEC staff comment
3. Key Information — Implications of Being a Company with the Holding Company Structure and the VIE Structures” in its future Form 20-F filings as follows, subject to such updates and adjustments to be made in connection with any material developments of the subject matter being disclosed. We, our PRC subsidiaries and the consolidated VIEs face various legal and operational risks and uncertainties related to being based in and having significant operations in China. The PRC government has significant authority to exert influence on the ability of a China-based company, such as us and the VIEs, to conduct its business, accept foreign investments or list on U.S. or other foreign exchanges. The PRC government has recently issued statements and regulatory actions relating to areas such as regulatory approvals of offshore offerings, oversight on cybersecurity and data privacy, the use of VIE…
The company responded
In response to the Staff’s comment, the Company undertakes to replicate (1) the diagram of the Company’s corporate structure disclosed in “Item
Ucommune International Ltd · filed 2025-01-17 · 0001213900-25-004345
SEC staff comment
8. We note various references to the opinion of your PRC counsel, Grandall Law Firm, throughout the registration statement. For example, we note your disclosure on the cover page that, “as advised by [y]our PRC counsel, Grandall Law Firm, other than those permissions or approvals required for a domestic company in China to engage in the businesses similar to [y]ours, [you] are not subject to cybersecurity review with the Cyberspace Administration of China, or the ‘CAC,’ under the Cybersecurity Review Measures that became effective on February 15, 2022.” Please revise to file the opinion and consent of Grandall Law Firm.
The company responded
In response to the Staff’s comment, the Company has filed the exhibit 5.2 as the opinion and consent of Grandall Law Firm. General
Northann Corp. · filed 2025-01-14 · 0001575872-25-000060
SEC staff comment
2) Gaming & Entertainment. This was done to create a leadership position (i.e., President) for a promising executive who could bring even greater focus to the Gaming & Entertainment brands. The table below sets forth how the previous nine operating segments listed in the table above under ‘2023 Responsibilities’ align to the current divisions. These nine operating segments are included in the table below under ‘2024 Responsibilities’. Each divisional president reports directly to the CODM. 2024 Divisional Presidents 2024 Responsibilities President, Technology & Shopping Technology, Shopping President, Gaming & Entertainment Gaming & Entertainment President, Connectivity Connectivity President, Health & Wellness Health & Wellness Consumer, Health & Wellness Professional, Health & Wellness Pregnancy & Parenting President, Cybersecurity & Martech Cybersecurity, Martech ZD-02 FOIA…
The company responded
The Company respectfully acknowledges the Staff’s comment. The Company advises the Staff that in future Form 10-Q and Form 10-K filings, the Company will separately disclose within its Critical Accounting Policies of its Management’s Discussion and Analysis, information on the amount by which the fair value exceeded the carrying value as of the most recent evaluation. The following is an example of our intended disclosure enhancements based on an illustrative revision of our disclosure in the Form 10-Q for the quarter ended September 30, 2024 (with deletions marked as stricken and additions marked as underlined): “Following the impairments at two reporting units during the three and nine months ended September 30, 2024, there was no excess of fair value over the carrying value at those reporting units. So any further decrease in estimated fair value of these two reporting units will…
ZIFF DAVIS, INC. · filed 2024-12-30 · 0001193125-24-286974
SEC staff comment
Comment : Under “Cybersecurity” please describe the risks associated with the Ethereum blockchain, in addition to the risks associated with Bitcoin Network.
The company responded
The Trust will update the "Cybersecurity" disclosure to outline the risks associated with the Ethereum Blockchain and eliminate references to the Bitcoin Network. As a digital asset, crypto ether is subject to the risk that malicious actors will exploit flaws in its code or structure, or that of digital asset trading venues, that will allow them to, among other things, steal crypto ether held by others, control the blockchain, steal personally identifying information, or issue significant amounts of crypto ether in contravention of the relevant Ethereum protocol. The occurrence of any of these events is likely to have a significant adverse impact on the price and liquidity of crypto and crypto Ether and Ether futures contracts. Additionally, the Bitcoin Ether Network’s functionality relies on the Internet. A significant disruption of Internet connectivity affecting large numbers of…
ProFunds · filed 2024-12-20 · 0001683863-24-009460
SEC staff comment
Comment : In response to Item 9, under the heading “Cybersecurity”, please include relevant references to the Ethereum blockchain in the following paragraph: “Additionally, the Bitcoin Network’s functionality relies on the Internet. A significant disruption of Internet connectivity…”
The company responded
The Trust will revise the disclosure as noted in response to Comment 28. General 31.
ProFunds · filed 2024-12-20 · 0001683863-24-009460
SEC staff comment
5. Consider including “management risk” and “cybersecurity risk” as principal risks.
The company responded
After considering these risks, the Fund does not believe that either is a principal risk. It further believes that the existing principal risks properly address the principal risks of the Fund. December 12, 2024 Page 10 ******* Please call the undersigned at (414) 297‑5596 should you have any questions regarding this filing and the information provided above. Sincerely, /s/ Peter D. Fetzer Peter D. Fetzer
FMI FUNDS INC · filed 2024-12-12 · 0000897069-24-002288
SEC staff comment
Comment 14 . Please consider reordering the principal risk factors, with the most significant risks first. Additionally, please consider adding cybersecurity risk.
The company responded
The Registrant has reordered the principal risk factors in the Item 4 disclosures and has added “Cybersecurity Risk” in both the Item 4 and Item 9 risk disclosures.
NEOS ETF Trust · filed 2024-12-12 · 0001999371-24-015362
SEC staff comment
1. We note your Chief Information Security Officer (CISO) is responsible for developing and implementing your information security program. We also note the Information Security Oversight Committee (ISO) “oversees [your] cybersecurity program from a management perspective.” We also note that you describe the relevant expertise of your CISO but not of the other members of the ISO. Please revise future filings to discuss the relevant expertise of such members of senior management as required by Item 106(c)(2)(i) of Regulation S-K.
The company responded
We acknowledge the comment and plan to add the additional information in future filings. If you have any questions concerning the foregoing, please do not hesitate to contact me at (714) 250-3000. Sincerely, /s/ Lisa W. Cornehl Lisa W. Cornehl 1 First American Way, Santa Ana, CA 92707 TEL 714.250.3000 LCornehl@firstam.com ▼ www.firstam.com
First American Financial Corp · filed 2024-12-09 · 0000950170-24-134629
SEC staff comment
Comment 11. We note there is no reference to cybersecurity risk or temporary defensive investments. Please revise to address these omissions.
The company responded
The Registrant has added “Cybersecurity Risk” in the Items 4 and 9 risk disclosures and added “Temporary Defensive Positions” to the Item 9 strategy disclosure.
Elevation Series Trust · filed 2024-11-27 · 0001839882-24-042043
SEC staff comment
8. We note that you rely on insurance carriers to insure customer losses resulting from a breach of your physical security, cyber security, or by employee or third party theft. Please expand to describe these insurance policies and the degree to which such policies provide coverage for customer losses.
The company responded
The Company has revised the Amended Registration Statement in response to the Staff’s comment. Please see page 52 of the Amended Registration Statement. November 26, 2024 Page 5 Our and our customers’ Bitcoin could be subject to risk, page 49
FTAC Emerald Acquisition Corp. · filed 2024-11-26 · 0001213900-24-102989
SEC staff comment
1. We note the reference to the previous Form 8-K, which disclosed under Item 8.01 that you became aware of the cybersecurity incident on August 21, 2024. Please advise us why you filed under Item 1.05 and tell us whether or not this incident is a material cybersecurity incident. The Item 1.05 Form 8-K states your belief that the incident has not had, and is not reasonably likely to have, a material impact on your financial condition or results of operations. You then state that you remain subject to various risks due to the incident, including “the adequacy of processes during the period of disruption, diversion of management’s attention, potential litigation, changes in customer behavior, and regulatory scrutiny.” Please advise us to what extent you considered qualitative factors in your materiality analysis and not just potential impact on financial condition and results of…
The company responded
The Company filed under Item 1.05 because it concluded that the cybersecurity incident had become material due to the discovery of additional facts after the Company initially disclosed preliminary details of the incident on Form 8-K under Item 8.01 on August 23, 2024. As the Staff is aware, significant cybersecurity incidents are dynamic, and new facts are revealed as the forensic investigation progresses. In making its determination that a material cybersecurity incident had occurred, the Company was guided by the body of case law on the topic of materiality, as well as the Commission’s pronouncements on the subject. The Company weighed a number of quantitative and qualitative factors, none of which was necessarily material on a stand-alone basis. Instead, the Company’s materiality determination was based on an assessment of the totality of the facts and circumstances that, in the…
HALLIBURTON CO · filed 2024-11-15 · 0000045012-24-000067
SEC staff comment
3. Please address the following as it relates to qualitative factors considered in your determination to aggregate two of your operating segments into the Cybersecurity and Martech reportable segment: • Describe in further detail the similarities and differences in the nature of the services offered by each of Cybersecurity and Martech. In this regard, Cybersecurity appears to offer endpoint and email security, security awareness training, secure backup and file sharing, and virtual private network solutions, whereas Martech appears to offer marketing, search engine optimization, and voice and text communication services.
The company responded
The Company respectfully acknowledges the Staff’s comment. In accordance with ASC 280, the Company factored into its aggregation analysis, the nature of the services offered by the Cybersecurity and Martech operating segments. The Company determined that these segments are similar as they each provide internet delivered software-as-a-service (“SaaS”) cloud-based offerings and that a reasonable investor would consider these offerings similar based on the range of activities at Ziff Davis. Specifically some of these similarities include, 1) the applications are hosted by a service provider, 2) they are made available over the internet, and 3) the software vendor manages the infrastructure, application software and data. We note that based on SEC commentary described below, in evaluating the similarity of the nature of products and services, the evaluation should be based on the range of…
ZIFF DAVIS, INC. · filed 2024-11-14 · 0001193125-24-258952
SEC staff comment
1. We note that you revised your “Risk Factors Summary,” and in part removed a risk factor from “Risks Related to Doing Business in the PRC” found on page 37 entitled “[w]e may become subject to a variety of laws and regulations in the PRC regarding privacy, data security, cybersecurity, and data protection...” In light of recent events indicating greater oversight by the Cyberspace Administration of China (CAC) over data security, particularly for companies seeking to list on a foreign exchange, please include this risk factor in your risk factor summary. See Item 105(b) of Regulation S- K.
The company responded
We note the Staff’s comment, and in response hereto, respectfully advise the Staff that we have updated our risk factors summary to include the risk factor that “[w]e may become subject to a variety of laws and regulations in the PRC regarding privacy, data security, cybersecurity, and data protection. We may be liable for improper use or appropriation of personal information provided by our customers” on page 10 of the Amended Form F-1. Risk Factors Risks Related to Our Business and Industry, page 19
Decent Holding Inc. · filed 2024-11-12 · 0001213900-24-096874
SEC staff comment
1. We note your response to our comment that you determined to disclose the cybersecurity incident under Item 1.05 of Form 8-K because you determined that the incident was material based on qualitative considerations. We refer you to the statements in the Form 8-K that you did not “anticipate this incident will have a material impact” on your financial condition and results of operations, and that while you believed you had contained the incident, you “continue[d] to investigate” the matter. Please advise us of your intention to file an amended Form 8-K pursuant to Instruction 2 to Item 1.05. OraSure Technologies, Inc. 220 East First Street Bethlehem, PA 18015
The company responded
The Company respectfully acknowledges the Staff’s comment. Upon review of Instruction 2 to Item 1.05 of Form 8-K, the Company does not intend to file an amended Form 8-K at this time. Pursuant to Instruction 2 to Item 1.05 of Form 8-K, the Company is required to amend the 8-K if “information called for in Item 1.05(a) is not determined or is unavailable at the time of the required filing . . . . ” The Company advises the Staff that it has substantially completed its investigation of the cybersecurity incident described in the Form 8-K (the “Incident”), but is continuing to monitor the situation and since the filing of the Form 8-K on April 12, 2024, no new information has arisen from such investigation relating to “the material aspects of the nature, scope, and timing of the incident, and the material impact or reasonably likely material impact on the registrant . . . .” As a result,…
ORASURE TECHNOLOGIES INC · filed 2024-10-31 · 0001193125-24-248650
SEC staff comment
Comment : Item 106(c)(2)(i) of Regulation S-K requires that the Company disclose the relevant expertise of the members of Company management or persons who are members of any committees that are responsible for assessing and managing the Company’s material risks from cybersecurity threats in such detail as necessary to fully describe the nature of the expertise. Please revise the Company’s cybersecurity disclosure to satisfy this requirement.
The company responded
The Company acknowledges the Staff’s comment and undertakes to update the applicable disclosure in its future Annual Reports on Form 10-K accordingly. Management’s Discussion and Analysis of Financial Condition and Results of Operations “MD&A”) – Discussion and Analysis of Results of Operations, Page 56 2.
Main Street Capital CORP · filed 2024-10-24 · 0001396440-24-000225
SEC staff comment
1. We note the disclosure of your data leak incident that occurred on August 25, 2023, the subsequent investigation by the Cyberspace Affairs Office of Nanchang, and the fine of RMB 200,000 imposed on you. Please provide a more detailed explanation of the cybersecurity incident, including what types of data was exposed, (e.g. customer personal information). Further, clarify whether you believe this cybersecurity incident had a material effect on your operations or financial condition and results of operations.
The company responded
The Company regularly transmits online student learning data (stored on Alibaba Cloud servers) to servers hosted inside of Jiangxi Ruanyun’s ElasticSearch database for machine learning training on performance predictions, after anonymization. On August 25, 2023, due to the need to open the local data center’s external network environment for a system demonstration, and because the ElasticSearch database used a default password, certain data from 2021 to 2022 was downloaded by hackers. The specific contents downloaded included: District/County / School / Grade / Student Unique ID / Question ID / Question Content / Knowledge Point ID / Difficulty / Score /
Ruanyun Edai Technology Inc. · filed 2024-10-21 · 0001731122-24-001633
SEC staff comment
2. Given that the data leak occurred on August 25, 2023 after you received notification by the CAC that your proposed foreign listing is not subject to a cybersecurity review in July 2023, please clarify how the subsequent data leak may impact your Cybersecurity Review Measure review, if at all. If there is a risk that the prior determination that you are not subject to a cybersecurity review by the CAC may change, please clarify.
The company responded
Per the advice of the Company’s PRC legal counsel, Jingtian & Gongcheng, the notification received from the CAC in July 2023, stating that the Company’s proposed overseas listing, i.e., this proposed offering, is not subject to cybersecurity review by the CAC, remains unaffected by the data leak incident that occurred on August 25, 2023, and the subsequent administrative penalty imposed by the Nanchang branch of the CAC on November 16, 2023. The reason for this is as follows, per the advice of the Company’s PRC legal counsel: Timing of Events: The CAC’s determination was based on the information and circumstances presented at the time of the notification. The data leak incident occurred after this determination and does not retroactively alter the assessment made by the CAC. Independence of the Administrative Penalty: The administrative penalty was imposed under the data security law…
Ruanyun Edai Technology Inc. · filed 2024-10-21 · 0001731122-24-001633
SEC staff comment
3. Key Information—D. Risk Factors—Risks Related to Doing Business in China—The filing procedure with the CSRC shall be fulfilled and the approval of other PRC government authorities may be required in connection with our future offshore offering under PRC law, and, we cannot predict whether or for how long we will be able to complete the filing procedure with the CSRC and obtain such approval or complete such filing, if required.” In addition, if future regulatory updates mandate clearance of cybersecurity review or other specific actions to be completed by China-based companies listed on foreign stock exchanges or traded in foreign over the counter trading markets, such as us, we face uncertainties as to whether such clearance can be timely obtained, or at all. See “Item 3. Key Information—D. Risk Factors—Risks Related to Doing Business in China—Failure to comply with governmental…
The company responded
In response to the Staff’s comment, the Company undertakes to revise the relevant disclosure in its future Form 20-F filings as follows (with deletions shown in strikethrough and additions in underline showing the changes against the disclosure in the 2023 Form 20-F), subject to such updates and adjustments to be made in connection with any material developments of the subject matter being disclosed. ● “China” or “PRC” refers to the People’s Republic of China, and only in the context of describing the PRC laws, rules, regulations, regulatory authorities, and any PRC entities or citizens under such rules, laws and regulations and other legal or tax matters in this annual report, excludes excluding, for the purpose of this annual report only, Hong Kong, Macau and Taiwan . The operational risks associated with being based in and having operations in mainland China also apply to operations…
AIRNET TECHNOLOGY INC. · filed 2024-10-18 · 0001213900-24-088749
SEC staff comment
1. We note your Chief Information Security Officer (CISO) is responsible for assessing and managing risks from cybersecurity threats, and we note the Information Security Committee (ISC) assists executive management and the Board of Directors in their oversight of responsibilities related to information security. You also state that the ISC reviews and recommends security-related policies and standards, among other activities related to cyber risks. We also note that you describe the relevant expertise of your CISO but not of the other members of the ISC. Please revise future filings to discuss the relevant expertise of such members of senior management as required by Item 106(c)(2)(i) of Regulation S-K.
The company responded
In response to the Staff’s comment, the Company will provide the appropriate disclosures to comply with Item 106(c)(2)(i) of Regulation S-K in all future filings. Please do not hesitate to contact me by telephone at (765) 213-3475 with any questions or comments regarding this correspondence. Sincerely, /s/ Michele Kawiecki Chief Financial Officer
FIRST MERCHANTS CORP · filed 2024-10-18 · 0000712534-24-000330
SEC staff comment
Comment 7 . Please consider adding cybersecurity risk as a risk factor under principal investment risks.
The company responded
The Registrant notes the prospectus presently includes a cybersecurity risk disclosure, but believes to include that under principal investment risks might tend to give undue prominence to such a risk.
NEIMAN FUNDS · filed 2024-10-18 · 0001413042-24-000820
SEC staff comment
1. We note your disclosure that “The Company’s Chief Information Officer (“CIO”) and CISO work closely with other management positions, including the Chief Financial Officer, Chief Legal Officer, Head of Internal Audit, and Internal Communications, to evaluation cybersecurity risks and alignment with our business objective and operational needs.” Please confirm that in future filings you will provide the relevant expertise of all persons in management positions or members of committees who are responsible for assessing and managing such risks, as opposed to limiting such disclosure to the expertise of the CISO.
The company responded
We confirm that future filings will include relevant expertise of all persons in management positions or members of committees who are responsible for assessing and managing cybersecurity risks and aligning to business objective and operational needs. Please contact me if you should need additional information or should have questions. Sincerely, AMERICOLD REALTY TRUST, INC. By:___ /s/ Nathan H. Harwell Name: Nathan H. Harwell Title: Executive Vice President & Chief Legal Officer 10 Glenlake Parkway, South Tower, Suite 600, Atlanta, GA 30328
AMERICOLD REALTY TRUST · filed 2024-10-16 · 0001628280-24-042898
SEC staff comment
3. We note that your Information Security Officer is primarily responsible for the cybersecurity component of your risk management program, which coordinates with the Incident
The company responded
Plan and key members of management. Please revise to provide the relevant expertise of the ISO and such other persons or members you identify who are responsible for assessing and managing such risks, in such detail as necessary to fully describe the nature of the expertise. Refer to Item 106(c)(2)(i) of Regulation S-K . Our Information Security Officer has over twenty years of information technology and security experience backed by an undergraduate degree in information technology and various information technology and network certifications. Aside from the Information Security Officer, cybersecurity support is provided by our Director of Information Technology who has over twenty-five years of related experience and undergraduate and post graduate degrees in business engineering and information technology, along with various information technology and network certifications; and our…
NEW PEOPLES BANKSHARES INC · filed 2024-10-11 · 0001903596-24-000615
SEC staff comment
1. Please revise future filings to disclose whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect you, including your business strategy, results of operations, or financial condition and if so, how. Refer to Item 106(b)(2) of Regulation S-K.
The company responded
In future filings, the Company will include the disclosures required by Item 106(b)(2) of Regulation S-K. In connection with responding to the Staff’s comment, the Company hereby acknowledges that: • the Company is responsible for the adequacy and accuracy of the disclosure in the filings; • Staff comments or changes to disclosure in response to Staff comments do not foreclose the Commission from taking any action with respect to the filings; and • the Company may not assert Staff comments as a defense in any proceeding initiated by the Commission or any person under the federal securities law of the United States. If you have any questions or require additional information, please feel free to contact me directly at 412-352-7778 (mobile). Sincerely, /s/ John J. Cronin, Jr. John J. Cronin, Jr. Chief Financial Officer
Mastech Digital, Inc. · filed 2024-10-02 · 0001193125-24-231286
SEC staff comment
6. We note your disclosure that you have not “received any request from the Cyberspace Administration of China, or the CAC, to undergo a cybersecurity review pursuant to the Cybersecurity Laws.” Please revise to explicitly state whether you believe that you, your mainland China subsidiaries, and the VIE or its subsidiaries are covered by permissions requirements from the CAC. If you did not consult counsel, then explain why, as well as the basis for your conclusions regarding whether approval is required.
The company responded
In response to the Staff’s comment, the Company respectfully proposes to revise the referenced disclosure under “Item 3. Key Information—Our Operations in China Are Subject to PRC Laws and Regulations” in its future Form 20-F filings, as shown in the blackline below (with deletions shown in strikethrough and additions in underline), subject to such updates and adjustments to be made in connection with any material developments of the subject matter being disclosed: Division of Corporation Finance Office of Trade & Services Securities and Exchange Commission September 30, 2024 Page 16 “ Our Operations in China Are Subject to PRC Laws and Regulations […] The PRC governmental authorities have also promulgated laws and regulations relating to cybersecurity review. The Data Security Law, the Regulations on the Protection of Critical Information Infrastructure, and the Cybersecurity Review…
PDD Holdings Inc. · filed 2024-09-30 · 0001104659-24-103853
SEC staff comment
3 – Summary Section - Principal Investment Strategies . Please consider adding as a principal investment risk the types of risks posed by cybersecurity threats.
The company responded
The Trust acknowledges the Staff’s comment – however - it does not believe that cybersecurity risk is a principal risk for the Fund at the present time. The Trust believes that the disclosure as set forth in the Fund’s SAI under the section captioned “Cyber Security Risk” adequately discloses any associated cybersecurity risks that may be applicable to the Fund’s operations. Accordingly, the Trust respectfully declines to make any changes in response to this particular comment. 9. Comment : Prospectus Page
Brown Advisory Funds · filed 2024-09-27 · 0000894189-24-005891
SEC staff comment
Comment: Please consider including a cybersecurity risk.
The company responded
The Trust responds by noting that Item 9 of the prospectus contains a cybersecurity risk applicable to both Funds. Jensen Global Quality Growth Fund - Prospectus - Principal Investment Strategies 6. Staff Comment: Please elaborate on what is meant by “other similar criteria” either in Item 4 or Item
TRUST FOR PROFESSIONAL MANAGERS · filed 2024-09-18 · 0000894189-24-005647
SEC staff comment
Comment: Please consider including a cybersecurity risk.
The company responded
The Trust responds by noting that Item 9 of the prospectus contains a cybersecurity risk applicable to both Funds. Jensen Global Quality Growth Fund - Prospectus - Principal Investment Strategies 6. Staff Comment: Please elaborate on what is meant by “other similar criteria” either in Item 4 or Item
TRUST FOR PROFESSIONAL MANAGERS · filed 2024-09-18 · 0000894189-24-005652
SEC staff comment
7. We note your response to prior comment 5 and reissue in part. In future filings, disclose in Item 1 how regulatory actions related to data security or anti-monopoly concerns in Hong Kong have or may impact the company’s ability to conduct its business and accept foreign investment. Include risk factor disclosure in Item 1A explaining whether there are laws or regulations in Hong Kong that result in oversight over data security, how this oversight impacts the company’s business, and to what extent the company believes that it is compliant with the regulations or policies that have been issued. In this regard, we note that your proposed disclosure focuses only on PRC-specific data security and cybersecurity regulations, such as the Cybersecurity Review Measures, without also addressing Hong Kong-specific ones.
The company responded
In response to this comment, the Company has provided additional proposed disclosure appended hereto as Exhibit A .
Hapi Metaverse Inc. · filed 2024-09-09 · 0001493152-24-035487
SEC staff comment
1. We note the statement on page 16 that your internal audit executes a “comprehensive and layered auditing approach” to evaluate the effectiveness of existing controls and “ensure that cybersecurity risk has been adequately mitigated within [y]our institution.” Please revise future filings to disclose whether your processes for assessing, identifying, and managing material risks from cybersecurity threats have been integrated into your overall risk management system or processes. See Item 106(b)(1)(i) of Regulation S-K.
The company responded
The Company acknowledges the comment and confirms that it will revise its cybersecurity disclosures in future filings as requested, including providing disclosures of whether the Company’s processes for assessing, identifying, and managing material risks from cybersecurity threats have been integrated into the Company’s overall risk management system or processes. * * * * * We acknowledge that the Company and its management are responsible for the accuracy and adequacy of their disclosures, notwithstanding any review, comments, action, or absence of action by the Staff. Please do not hesitate to contact me by telephone at 606-432-1414 with any questions or comments regarding this correspondence. Sincerely, /s/ Kevin Stumbo Kevin Stumbo Chief Financial Officer CORRESP 2 filename2.pdf
COMMUNITY TRUST BANCORP INC /KY/ · filed 2024-09-06 · 0000350852-24-000142
SEC staff comment
1. We note the statement on page 31 that cybersecurity risk management has been and remains a key aspect of your “overall business strategy, financial planning and capital allocation and a point of ongoing emphasis at all levels.” Please revise future filings to disclose whether and how your processes for assessing, identifying, and managing material risks from cybersecurity threats have been integrated into your overall risk management system or processes. See Item 106(b)(1)(i) of Regulation S-K. Company
The company responded
The Company’s processes for assessing, identifying, and managing material risks from cybersecurity threats are, in fact, well integrated into the Company’s overall risk management system or processes in connection with our emphasis on cybersecurity at all levels of the Company, including as a key consideration in our overall business strategy, financial planning and capital allocation decisions, as noted on page 31 of the Company’s Form 10-K. The Company agrees to provide additional disclosure in future filings to include more detail and explanation regarding whether and how such Sensitivity: Confidential 65 Fairchild Street, Charleston, SC 29492 T 1.800.443.9441 F 1.843.216.6100 blackbaud.com Securities and Exchange Commission Attention: Aliya Ishmukhamedova and James Lopez September 3, 2024 Page 2 processes have been integrated into our overall risk management system or processes, in…
BLACKBAUD INC · filed 2024-09-03 · 0001280058-24-000060
SEC staff comment
2. The identity and ownership interest of each owner is ascertainable from the bank’s deposit account records or records maintained by the third party (or another person or entity that has agreed to maintain records on its behalf). 3. The underlying owners, rather than the third party that maintains the account at the insured bank, actually own the funds. We work with Evolve to help ensure that these three requirements are met and that the FDIC pass- through insurance is in effect when Evolve receives and posts the Dave Member deposits. • whether you work with processors other than Galileo and whether the funds are insured when held by processors; We advise the Staff that we do not work with processors other than Galileo, and as noted above, Galileo does not hold any customer funds. • whether your agreements with third parties, including with Evolve and Galileo, are material agreements…
The company responded
In response to the Staff’s comment, the Company proposes to replace the last paragraph in the section entitled “Regulation of our bank partnership model” on page 16 in its entirety with alternative language similar to the following: Many laws and regulations that apply directly to Evolve indirectly impact us (and our products) as Evolve’s service provider. As such, we are subject to the supervision and enforcement authority as well as to potential direct or indirect examination as a service provider to Evolve, by its regulators, including the Federal Reserve, Evolve’s primary regulator, the FDIC and the Arkansas State Bank Department. Such examinations would be in respect to the marketing, account opening, customer screening (including Bank Secrecy Act, AML and Know Your Customer processes), transaction monitoring and servicing activities undertaken by the Company on Evolve’s behalf…
Dave Inc./DE · filed 2024-08-28 · 0001193125-24-208844
SEC staff comment
4. Information on the Company—4.A. History and Development of the Company—Contractual Arrangements with respect to Target Equity Interests” in this annual report. · Loan Agreement. Under the loan agreements among Mr. Zhou Qiuming, Dr. Zhou Pengwu and Shenzhen Pengai Investment, Shenzhen Pengai Investment agrees to extend a loan to Mr. Zhou Qiuming and Dr. Zhou Pengwu in an equivalent amount to the purchase price to be paid by Mr. Zhou Qiuming and Dr. Zhou Pengwu for acquiring the Target Equity Interests. Pursuant to each of these loan agreements, Mr. Zhou Qiuming and Dr. Zhou Pengwu shall repay the loan by transferring the current and future economic interest of the Target Equity Interests to Shenzhen Pengai Investment. · Economic Interest Transfer Agreement. Under the economic interest transfer agreements among Mr. Zhou Qiuming, Dr. Zhou Pengwu, Shenzhen Pengai Investment and each of…
The company responded
In response to the Staff’s comment, the Company respectfully proposes to add the following paragraphs to “Item 3. Key Information” (page reference is made to the FY2023 Form 20-F to illustrate the approximate location of the disclosure) in its future Form 20-F filings (with additions shown as underlined): Page 3: Cash and Asset Flows Through Our Organization AIH is a Cayman Islands holding company with no operations of its own. We conduct our operations in China primarily through our PRC subsidiaries and the Relevant Subsidiaries. As a result, our ability to pay dividends to the shareholders and to service any debt it may incur may depend upon dividends paid by our PRC subsidiaries. If any of our subsidiaries incurs debt on its own behalf in the future, the instruments governing such debt may restrict its ability to pay dividends to AIH. Under PRC laws and regulations, our PRC…
Aesthetic Medical International Holdings Group Ltd · filed 2024-08-27 · 0001104659-24-093514
SEC staff comment
Comment : The Staff notes that “Cybersecurity” is listed as an “Additional Investment Risk.” Please consider including Cybersecurity as a non-principal risk. Otherwise, please explain the difference between an additional or non-principal risk.
The company responded
The Registrant has revised the Fund’s disclosures as requested and moved Cybersecurity to the non-principal risk section. Statement of Additional Information 18.
Strategy Shares · filed 2024-08-21 · 0001580642-24-004722
SEC staff comment
1. We note you do not include Item 1C. Cybersecurity. Please revise or advise us why you do not provide disclosures as applicable under Item 106 of Regulation S-K.
The company responded
We acknowledge the Staff’s comment and have revised the Annual Report to include Item 1C. Cybersecurity. Thank you for your assistance and review. Sincerely, Quarta-Rad, Inc. /s/ Victor Shvetsky Victor Shvetsky Chief Executive Officer
Quarta-Rad, Inc. · filed 2024-08-16 · 0001493152-24-032748
SEC staff comment
2. We note your disclosure that you “cannot guarantee” that a cybersecurity incident “may not occur again.” Please disclose whether you have experienced any material cybersecurity attacks or incidents.
The company responded
The disclosure has been revised to disclose that the Company has not experienced any cybersecurity attacks or incidents. See page 12 Management’s Discussion and Analysis of Financial Condition and Results of Operations Results of Operations, page 40
BeLive Holdings · filed 2024-08-15 · 0001493152-24-032604
SEC staff comment
8. We note your disclosure that as of the date of the prospectus you are not in possession of more than one million users’ personal information. Please expand this risk factor to discuss potential regulatory challenges associated with the growth of your business including, but not limited to, becoming subject to a cybersecurity review by the CAC. Also, clarify whether any third parties store this information on your behalf and, if so, disclose any risks associated with this arrangement.
The company responded
In response to the Staff’s comment, the Company has revised the disclosure on pages 42 and 43 of the Revised Registration Statement. The Company respectfully advises the Staff that, on December 28, 2021, the Cyberspace Administration of China, or the CAC, together with certain other PRC governmental authorities, jointly released the Revised Cybersecurity Review Measures, which took effect on February 15, 2022. Pursuant to the Revised Cybersecurity Review Measures, operators of network platforms that are in possession of more than one million users’ personal information must apply for a cybersecurity review when seeking to list their securities in other countries. The Company respectfully advises the Staff that the aforementioned requirement of applying for a cybersecurity review only applies in situations where a company is seeking to list its securities in other countries. After this…
WeRide Inc. · filed 2024-08-15 · 0001193125-24-201037
SEC staff comment
3. You indicate that revenues in your Digital Media segment were effected by an organic decline in certain businesses, offset in part by incremental revenue from businesses acquired and organic growth in other businesses. You also indicate that the decline in Cybersecurity and Martech net sales was due to an organic decline in certain businesses. Please revise to quantify each material factor, including any offsetting factors, that impacted your segment revenue. To the extent revenue was impacted by specific businesses, revise to indicate as such and the reasons for such change. For example, we note references in the fourth quarter earnings call transcripts to items such as the health business being a steady contributor of growth with Lose It achieving record bookings while Offers.com faced continued pressure and the shopping business tipped into negative territory. As another example,…
The company responded
The Company respectfully acknowledges the Staff’s comment. The Company advises the Staff that in future Form 10-Q and Form 10-K filings, the Company will quantify each material factor, including offsetting factors, that contributed to the overall change in segment revenue between periods, and, to the extent revenue was materially impacted by specific businesses, the Company will indicate as such and the reasons for such change. 3 ZD - 03 FOIA Confidential Treatment Request by Ziff Davis, Inc. Pursuant to Rule 83 (17 C.F.R. 200.83) ***—Information omitted and provided under separate cover to the Staff pursuant to Rule 83 The following is an example of our intended disclosure enhancements based on an illustrative revision of our disclosure in the 2023 Form 10-K (with deletions marked as stricken and additions marked as underlined): “Digital Media’s net sales of $1.1 billion in 2023…
ZIFF DAVIS, INC. · filed 2024-08-14 · 0001193125-24-200779
SEC staff comment
6. You state that the company aggregates its operating segments into two reportable segments: Digital Media and Cybersecurity and Martech. Please identify for us each of the operating segments included in each of your reportable segments. Explain to us, in sufficient detail, how you determined your operating segments meets the aggregation criteria with a detailed analysis of each of the criteria described in ASC 280-10-50-11, including how you determined such operating segments have similar economic characteristics.
The company responded
The Company respectfully acknowledges the Staff’s comment. The Company’s Digital Media segment consists of seven operating segments: Technology, Shopping, Gaming & Entertainment, Connectivity, Health & Wellness Consumers (“Consumer”), Healthcare Professionals (“Professional”), and Pregnancy & Parenting. The second reportable segment, Cybersecurity and Marketing Technology (“Martech”) consists of two operating segments: Cybersecurity and Martech. The following is a summary of each of the operating segments. Digital Media Technology— Our Technology operating segment includes online publishers, as well as tools and services tailored to consumers, professionals, and organizations looking for technological expertise, authoritativeness, and trustworthiness. We expect our brands to deliver deeply researched, current, and authentic content related to technology, culture, and the internet.…
ZIFF DAVIS, INC. · filed 2024-08-14 · 0001193125-24-200779
SEC staff comment
11. We note your disclosure that the Item 16K Cybersecurity is not applicable. Please revise to provide the cybersecurity disclosure required by Item 16K of Form 20-F.
The company responded
In ressponse to the Staff’s comment, the Company has added relevant disclosure under Item 16K. Cybersecurity on page 104 of the 20-F/A. Notes to Consolidated Financial Statements, page F-9
Blue Hat Interactive Entertainment Technology · filed 2024-08-08 · 0001731122-24-001215
SEC staff comment
15. Please disclose whether and how your business segments, products, lines of service, projects, or operations are materially impacted by supply chain disruptions especially in light of the effectiveness of the Uyghur Forced Labor Prevention Act (UFLPA). For example, discuss whether you have or expect to: ● Suspend the production, purchase, sale or maintenance of certain items due to a lack of raw materials, parts, or equipment; inventory shortages; closed factories or stores; reduced headcount; or delayed projects; ● Experience labor shortages that impact your business; ● Experience cybersecurity attacks in your supply chain; ● Experience higher costs due to constrained capacity or increased commodity prices or challenges sourcing materials; ● Experience surges or declines in consumer demand for which you are unable to adequately adjust your supply; ● Be unable to supply products at…
The company responded
The Company respectfully pointed out to the Staff that the Company, its subsidiaries, and the pre-existing VIEs have no connection with the Xinjiang Uygur Autonomous Region (the “Xinjiang UAR”) in their operation or manufacture, nor do the Company, its subsidiaries and the pre-existing VIEs have any plans to expand their business to the Xinjiang UAR. Therefore, the effectiveness of the UFLPA bears no relevance to the Company and its business. 4
Blue Hat Interactive Entertainment Technology · filed 2024-08-08 · 0001731122-24-001215
SEC staff comment
1. Please tell us whether or not this incident is a material cybersecurity incident under Item 1.05(a) of Form 8-K. If you determined the cybersecurity incident to be material, please describe all material impacts or reasonably likely material impacts on the company as required by Item 1.05(a), not just the impacts on “AT&T’s operations” and “financial condition or results of operations.” As the Commission noted in the adopting release, the rule’s inclusion of “financial condition and results of operations” is not exclusive; companies should consider qualitative factors alongside quantitative factors in assessing the material impact of an incident. For example, consider impacts on customer relationships, competitiveness, and potential reputational harm related to the cybersecurity incident. If you did not determine the cybersecurity incident to be material, please provide an analysis…
The company responded
The Company acknowledges the Staff’s comment and confirms that the Company determined this incident to be a material cybersecurity incident under Item 1.05(a) of Form 8-K. Importantly, the question of whether an incident is “material” for purposes of 1.05(a) of Form 8-K is distinct from the question of whether an incident is likely to have a “material impact” on the registrant. As described below, the Company carefully considered both quantitative and qualitative factors when it evaluated the materiality of the incident and determined that the incident was a material cybersecurity incident under Item 1.05(a). I. As a threshold matter, we note that Item 1.05(a) does not require a registrant to affirmatively state in the Form 8-K that the incident is “material.” In this regard, Item 1.05(a) is similar to other Form 8-K items, such as Item 1.01, Entry into a Material Definitive Agreement.…
AT&T INC. · filed 2024-07-31 · 0001193125-24-190323

Showing the 60 most recent of 214.