AKAM · CIK 1086222
What Akamai Technologies, Inc. told the SEC could break it.
Akamai's disclosures cluster on geopolitics and regulation hitting a company that is itself internet security infrastructure. Nation-state and hacktivist attacks against it and its customers have intensified during periods of heightened tension and armed conflict — the wars in Ukraine and the Middle East — and could again. That regional exposure is concrete: about 6% of its global employees are in Israel, where hostilities and military-reserve call-ups have impaired their ability to work. As a global CDN and security provider, it is also subject to fast-evolving data-privacy and data-localization laws (GDPR, CCPA), technology-sovereignty frameworks, and sanctions and export controls that shape how it can use network data and deliver content across countries.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Cybersecurity
- nation-state and hacktivist attacks intensifying during geopolitical tensionmedium
Akamai faces nation-state and hacktivist attacks against itself and its customers that have intensified, and may again intensify, during periods of heightened geopolitical tension or armed conflict (Ukraine war, Israel-Hamas war, Israel-Iran escalation) — a heightened threat for a company whose platform is itself security infrastructure.
“Furthermore, nation state and hacktivist attacks against us or our customers have in the past and may in the future intensify during periods of heightened geopolitical tensions or armed conflict, such as the ongoing war in Ukraine, the Israel-Hamas war and the escalation of military conflict between Israel and Iran, as well as broader military confrontations involving the United States.”
SEC filing →As of 2026
Geographic concentration
- ~6% of global employees in Israel (Tel Aviv); war/military-duty exposuremedium
Approximately 6% of Akamai's global employees are located in Israel (one of its largest offices, Tel Aviv); the Israel-Hamas war, escalations with Iran/Hezbollah and reserve military-duty call-ups have impacted and may continue to impair those employees' ability to work and complete initiatives.
“For example, approximately six percent of our global employees are located in Israel and have been and may continue to be impacted by hostilities in the region, including being required to report for military duty, which could impact our ability to operate and successfully complete ongoing initiatives.”
Regulatory & policy
- data privacy/localization, technology sovereignty, content & export regulations (GDPR, CCPA)medium
As a global CDN/security company, Akamai is subject to fast-evolving data-privacy and data-localization laws (GDPR, CCPA), technology-sovereignty frameworks, content-delivery liability, AI rules, sanctions and export controls — which can restrict how it uses network data and delivers content in various countries.
“As a global technology company, Akamai is subject to complex foreign and U.S. laws and regulations in areas, both existing as well as new and rapidly evolving, such as data privacy and localization, cybersecurity, AI, technology sovereignty, liability for content delivered over our network, various internet regulations, bribery, sanctions, export controls, competition, tax and foreign exchange controls.”
SEC filing →As of 2026
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch