Historical disclosure revision 3
Disclosures and evidence
Revision 3 of 3 · Evidence cutoff Aug 8, 2024, 12:00 AM UTC
15 prior statements preserved · 9 statements added. Attributed source statements retain the source’s qualifications.
What the company disclosed
The Clorox Company stated: “The Clorox Company (the “Company” or “Clorox”) has identified unauthorized activity on some of its Information Technology (IT) systems. After becoming aware of the activity, the Company began taking steps to stop and remediate the activity, including taking certain systems offline. The Company is working diligently to respond to and address this issue, and is also coordinating with law enforcement. To the extent possible, and in line with its business continuity plans, Clorox has implemented workarounds for certain offline operations in order to continue servicing its customers. However, the incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.”
The Clorox Company stated: “On Monday, August 14, 2023, the Company disclosed it had identified unauthorized activity on some of its Information Technology (IT) systems; see Note 3 in the consolidated financial statements in Exhibit 99.1. That activity began on Friday, August 11, 2023 and after becoming aware of it that evening, the Company immediately began taking steps to stop and remediate the activity. The Company also took certain systems offline and engaged third-party cybersecurity experts to support its investigation and recovery efforts. The Company implemented its business continuity plans, including manual ordering and processing procedures at a reduced rate of operations in order to continue servicing its customers. However, the incident resulted in wide-scale disruptions to the Company’s business operations throughout the remainder of the first fiscal quarter of the fiscal year ended June 30, 2024.”
Operational impact
The Clorox Company stated: “The Clorox Company (the “Company” or “Clorox”) has identified unauthorized activity on some of its Information Technology (IT) systems. After becoming aware of the activity, the Company began taking steps to stop and remediate the activity, including taking certain systems offline. The Company is working diligently to respond to and address this issue, and is also coordinating with law enforcement. To the extent possible, and in line with its business continuity plans, Clorox has implemented workarounds for certain offline operations in order to continue servicing its customers. However, the incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.”
The Clorox Company stated: “Based on its current assessment of the situation, the Company expects to experience ongoing, but lessening, operational impacts in the second quarter as it makes progress in returning to normalized operations. The Company also expects to begin to benefit from the restocking of retailer inventories as it ramps up fulfillment in the second quarter.”
The Clorox Company stated: “The August 2023 cyberattack resulted in wide-scale disruptions to the Company’s business operations. Impacts of these system disruptions included order processing delays and significant product outages, resulting in a negative impact on net sales and earnings. The costs i ncurred included third-party consulting services, such as IT recovery and forensic experts, and other professional services to investigate and remediate the attack, as well as incremental operating costs from the resulting disruption to the Company’s business operations. These costs have been partially offset by recognized insurance recoveries in fiscal year 2024. See Notes to the Consolidated Financial Statements for additional details regarding the impact of the August 2023 cyberattack.”
Financial impact, scope and period
The Clorox Company stated: “| | (1) | During the three months ended Sept. 30, 2023, the Company expects to incur approximately $25 ($19 after tax) of costs related to the cybersecurity attack. These costs relate to third-party consulting services, including forensic experts, legal counsel and other IT professional services, as well as incremental operating costs incurred from the resulting disruption to parts of the Company’s business operations.” Unit declaration: “(Dollars in millions except per share data)” Table context: “| | | Three Months Ended Sept. 30, 2023 (Preliminary estimated range) |” Table context: “| | | Diluted Earnings (Losses) Per Share |”
The Clorox Company stated: “The Company incurred incremental costs, net of insurance recoveries, of approx imately $ 29 in fiscal year 2024 as a result of the cyberattack. The Company recognized insurance recoveries of $ 30 in the fourth quarter of fiscal year 2024. The following table summarizes the recognition of costs, net of insurance recoveries, as reflected in the consolidated statements of earnings and comprehensive income for the fiscal year ended June 30:” Unit declaration: “(Dollars in millions, except per share data)”
The Clorox Company stated: “The Company incurred incremental costs, net of insurance recoveries, of approx imately $ 29 in fiscal year 2024 as a result of the cyberattack. The Company recognized insurance recoveries of $ 30 in the fourth quarter of fiscal year 2024. The following table summarizes the recognition of costs, net of insurance recoveries, as reflected in the consolidated statements of earnings and comprehensive income for the fiscal year ended June 30:” Unit declaration: “(Dollars in millions, except per share data)”
Response
The Clorox Company stated: “The Clorox Company (the “Company” or “Clorox”) has identified unauthorized activity on some of its Information Technology (IT) systems. After becoming aware of the activity, the Company began taking steps to stop and remediate the activity, including taking certain systems offline. The Company is working diligently to respond to and address this issue, and is also coordinating with law enforcement. To the extent possible, and in line with its business continuity plans, Clorox has implemented workarounds for certain offline operations in order to continue servicing its customers. However, the incident has caused, and is expected to continue to cause, disruption to parts of the Company’s business operations.”
The Clorox Company stated: “Clorox has engaged leading third-party cybersecurity experts to support its investigation and recovery efforts. The investigation to assess the nature and scope of the incident remains ongoing and is in its early stages.”
The Clorox Company stated: “Beginning in the first quarter of fiscal year 2024, incremental costs were incurred by the Company as a result of the identification of unauthorized activity on some of its Information Technology (IT) systems, as more thoroughly described in the Form 8-Ks that were furnished on Aug. 14 and Sept. 18, 2023. These costs were incurred to investigate and remediate the attack as well as incremental operating costs from the resulting disruption to parts of the Company’s business operations. These costs include third-party consulting services, including forensic experts, legal counsel and other IT professional services.”
The Clorox Company stated: “During the disruptions caused by the cyberattack, we deployed additional interim controls in response to taking certain systems offline during the period to maintain our internal control over financial reporting.”
Recovery updates
The Clorox Company stated: “As previously disclosed, the Company believes the cybersecurity attack has been contained and the Company is making progress in restoring its systems and operations. On Sept. 25, Clorox began the process of transitioning back to automated order processing and the vast majority of orders are now taking place in an automated manner, which is enabling the Company to ramp up output and shipments to rebuild retailer inventories. Clorox expects the process of restocking retailer inventories will occur over time as it ships above consumption levels.”
The Clorox Company stated: “The impacts of these system disruptions included order processing delays and significant product outages, resulting in a negative impact on net sales and earnings. The Company has since transitioned back to automated order processing. The Company experienced lessening operational impacts in the second quarter and has since returned to normalized operations.”
Disclosure timeline
The Clorox Company stated: “Date of Report (Date of earliest event reported): August 14, 2023”
The Clorox Company stated: “OAKLAND, Calif., Oct. 4, 2023 — The Clorox Company (NYSE: CLX) (the “Company” or “Clorox”) today announced certain preliminary financial information for the first quarter of fiscal 2024, which ended Sept. 30, 2023, as well as an operations update following the previously announced cybersecurity attack that impacted the Company’s business.”
The Clorox Company stated: “On Monday, August 14, 2023, the Company disclosed it had identified unauthorized activity on some of its Information Technology (IT) systems; see Note 3 in the consolidated financial statements in Exhibit 99.1. That activity began on Friday, August 11, 2023 and after becoming aware of it that evening, the Company immediately began taking steps to stop and remediate the activity. The Company also took certain systems offline and engaged third-party cybersecurity experts to support its investigation and recovery efforts. The Company implemented its business continuity plans, including manual ordering and processing procedures at a reduced rate of operations in order to continue servicing its customers. However, the incident resulted in wide-scale disruptions to the Company’s business operations throughout the remainder of the first fiscal quarter of the fiscal year ended June 30, 2024.”
Disclosure evolution
The Clorox Company stated: “OAKLAND, Calif., Oct. 4, 2023 — The Clorox Company (NYSE: CLX) (the “Company” or “Clorox”) today announced certain preliminary financial information for the first quarter of fiscal 2024, which ended Sept. 30, 2023, as well as an operations update following the previously announced cybersecurity attack that impacted the Company’s business.”
The Clorox Company stated: “The Company’s business strategy, results of operations and financial condition have been materially affected by our previously disclosed August 2023 cyberattack. See “Risk Factors” in Item 1A of this Annual Report on Form 10-K for more information on risks from cybersecurity threats that are reasonably likely to materially affect the Company’s business strategy, results of operations and financial condition.”
Qualifications and uncertainty
The Clorox Company stated: “Clorox has engaged leading third-party cybersecurity experts to support its investigation and recovery efforts. The investigation to assess the nature and scope of the incident remains ongoing and is in its early stages.”
The Clorox Company stated: “Clorox is in the process of assessing the impact of the cybersecurity attack on fiscal year 2024 and beyond. The Company will provide an updated outlook during its first quarter earnings call in November.”
The Clorox Company stated: “The unaudited financial and operational information presented in this press release is preliminary and may change. Clorox’s financial closing procedures with respect to the estimated financial information provided in this press release are not yet complete, and as a result, the Company’s final results may vary materially from the preliminary results included in this press release. Clorox undertakes no obligation to update or supplement the information provided in this press release until the Company releases its financial statements for the three months ended Sept. 30, 2023. The preliminary financial information included in this press release reflects the Company’s current estimates based on information available as of the date of this press release and has been prepared by Company management. This preliminary financial and operational information should not be viewed as a substitute for full financial statements prepared in accordance with GAAP and is not necessarily indicative of the results to be achieved for any future periods. This preliminary financial and operational information could be impacted by the effects of financial closing procedures, final adjustments, and other developments.”
The Clorox Company stated: “Cybersecurity attack costs are provided exclusive of any potential insurance recoveries. The timing of recognizing insurance recoveries may differ from the timing of recognizing the associated expenses. Costs associated with ongoing cybersecurity monitoring and prevention as well as enhancement to the Company’s cybersecurity program are not included within this adjustment. The Company expects to continue to incur costs associated with the cybersecurity attack in future periods.”
The Clorox Company stated: “The costs incurred relate primarily to third-party consulting services, including IT recovery and forensic experts and other professional services incurred to investigate and remediate the attack, as well as incremental operating costs incurred from the resulting disruption to the Company’s business operations. The Company does not expect to incur significant costs related to the cyberattack in future periods. The timing of recognizing further insurance recoveries may differ from the timing of recognizing the associated expenses.”
Disclosure sources and provenance
- U.S. Securities and Exchange Commission Filed August 14, 2023Report/event date: August 14, 2023Document form: 8-K · Item 8.01 and9.01SEC HTTPS source · Retrieved Oct 7, 2026, 2:16 PM UTC · Retained Oct 7, 2026, 2:16 PM UTC
- U.S. Securities and Exchange Commission Filed October 4, 2023Report/event date: October 4, 2023Statement/document date: October 4, 2023Document form: EX-99.1 to8-K · Item 2.02 and9.01 filing relationshipSEC HTTPS source · Retrieved Oct 7, 2026, 2:18 PM UTC · Retained Oct 7, 2026, 2:18 PM UTC
- U.S. Securities and Exchange Commission Filed August 8, 2024Report/event date: June 30, 2024Document form: 10-K · Item 1A/1C/7/8/9ASEC HTTPS source · Retrieved Oct 7, 2026, 2:21 PM UTC · Retained Oct 7, 2026, 2:21 PM UTC
- U.S. Securities and Exchange Commission Filed August 8, 2024Report/event date: June 30, 2024Document form: EX-99.1 to10-KSEC HTTPS source · Retrieved Oct 7, 2026, 2:28 PM UTC · Retained Oct 7, 2026, 2:28 PM UTC
Evidence limitations
- Issuer disclosures establish what was reported, not independent incident verification.