Disclosures and evidence

Revision 1 of 3 · Evidence cutoff Aug 14, 2023, 12:00 AM UTC

0 prior statements preserved · 6 statements added. Attributed source statements retain the source’s qualifications.

What the company disclosed

  1. The Clorox Company stated: “The Clorox Company (the “Company” or “Clorox”) has identified unauthorized activity on some of its Information Technology (IT) systems. After becoming aware of the activity, the Company began taking steps to stop and remediate the activity, including taking certain systems offline. The Company is working diligently to respond to and address this issue, and is also coordinating with law enforcement. To the extent possible, and in line with its business continuity plans, Clorox has implemented workarounds for certain offline operations in order to continue servicing its customers. However, the incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.”

Operational impact

  1. The Clorox Company stated: “The Clorox Company (the “Company” or “Clorox”) has identified unauthorized activity on some of its Information Technology (IT) systems. After becoming aware of the activity, the Company began taking steps to stop and remediate the activity, including taking certain systems offline. The Company is working diligently to respond to and address this issue, and is also coordinating with law enforcement. To the extent possible, and in line with its business continuity plans, Clorox has implemented workarounds for certain offline operations in order to continue servicing its customers. However, the incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.”

Response

  1. The Clorox Company stated: “The Clorox Company (the “Company” or “Clorox”) has identified unauthorized activity on some of its Information Technology (IT) systems. After becoming aware of the activity, the Company began taking steps to stop and remediate the activity, including taking certain systems offline. The Company is working diligently to respond to and address this issue, and is also coordinating with law enforcement. To the extent possible, and in line with its business continuity plans, Clorox has implemented workarounds for certain offline operations in order to continue servicing its customers. However, the incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.”

  2. The Clorox Company stated: “Clorox has engaged leading third-party cybersecurity experts to support its investigation and recovery efforts. The investigation to assess the nature and scope of the incident remains ongoing and is in its early stages.”

Disclosure timeline

  1. The Clorox Company stated: “Date of Report (Date of earliest event reported): August 14, 2023”

Qualifications and uncertainty

  1. The Clorox Company stated: “Clorox has engaged leading third-party cybersecurity experts to support its investigation and recovery efforts. The investigation to assess the nature and scope of the incident remains ongoing and is in its early stages.”

Disclosure sources and provenance

  • U.S. Securities and Exchange Commission Filed August 14, 2023Report/event date: August 14, 2023Document form: 8-K · Item 8.01 and9.01SEC HTTPS source · Retrieved Oct 7, 2026, 2:16 PM UTC · Retained Oct 7, 2026, 2:16 PM UTC

Evidence limitations

  • Issuer disclosures establish what was reported, not independent incident verification.