CSGS · CIK 0001005757
What CSG Systems International, Inc. told the SEC could break it.
2 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.
A limited set so far — we surface every cited disclosure we’ve extracted for CSGS. More may follow as additional filings are processed.
In its own words
What could break it.
Customer concentration
- Top customers Charter (19%) + Comcast (17%) each >10% of revenue; three largest (incl. DISH Network) ~40%+ of revenuemedium
CSG's revenue is heavily concentrated in a few large U.S. communications operators. Its three largest customers are Charter, Comcast and DISH Network L.L.C., with Charter ($236M, ~19% of revenue) and Comcast ($210M, ~17%) each individually exceeding 10% in 2025 — together more than a third of total revenue, and over ~40% including DISH. This concentration creates material renewal/repricing exposure: CSG amended its Charter agreement in September 2025 and its Comcast agreement runs through December 31, 2030. Loss, non-renewal, in-sourcing, or adverse repricing by either Charter or Comcast would have an outsized impact on CSG's revenue. The defining counterparty risk for the company; individual ≥10% customers are also captured as edges.
“We have significant customer concentration, with Charter and Comcast each exceeding 10% of our revenue.”
SEC filing →As of 2026
Supplier concentration
- Reliance on a limited number of third-party vendors for software, cloud computing infrastructure and processingmedium
CSG depends on a limited number of third-party providers — for software, distributed (cloud) computing infrastructure, payment processing, and other services — to deliver its SaaS billing and customer-engagement solutions to its customers. It explicitly flags that this vendor concentration exposes it to supply-chain disruptions, cost increases, and cyberattacks. A failure, price increase, capacity constraint, or security incident at a key cloud-infrastructure or processing vendor could impair CSG's ability to meet contractual SLAs and deliver service. Vendors are unnamed, so this registers as a third-party/sole-source dependence risk.
“We Rely on A Limited Number of Third-Party Vendor Relationships to Execute Our Business Which Exposes Us to Supply Chain Disruptions, Cost Increases, and Cyberattacks.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings — including ones disclosed by the other side, which is how the non-obvious ones come to light.
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch