CSGS · CIK 0001005757
What CSG Systems International, Inc. told the SEC could break it.
2 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
A limited set so far, we surface every cited disclosure we’ve extracted for CSGS. More may follow as additional filings are processed.
In its own words
What could break it.
Customer concentration
- Top customers Charter (19%) + Comcast (17%) each >10% of revenue; three largest (incl. DISH Network) ~40%+ of revenuemedium
CSG's revenue is heavily concentrated in a few large U.S. communications operators. Its three largest customers are Charter, Comcast and DISH Network L.L.C., with Charter ($236M, ~19% of revenue) and Comcast ($210M, ~17%) each individually exceeding 10% in 2025 — together more than a third of total revenue, and over ~40% including DISH. This concentration creates material renewal/repricing exposure: CSG amended its Charter agreement in September 2025 and its Comcast agreement runs through December 31, 2030. Loss, non-renewal, in-sourcing, or adverse repricing by either Charter or Comcast would have an outsized impact on CSG's revenue. The defining counterparty risk for the company; individual ≥10% customers are also captured as edges.
“We have significant customer concentration, with Charter and Comcast each exceeding 10% of our revenue.”
SEC filing →As of 2026
Supplier concentration
- Reliance on a limited number of third-party vendors for software, cloud computing infrastructure and processingmedium
CSG depends on a limited number of third-party providers — for software, distributed (cloud) computing infrastructure, payment processing, and other services — to deliver its SaaS billing and customer-engagement solutions to its customers. It explicitly flags that this vendor concentration exposes it to supply-chain disruptions, cost increases, and cyberattacks. A failure, price increase, capacity constraint, or security incident at a key cloud-infrastructure or processing vendor could impair CSG's ability to meet contractual SLAs and deliver service. Vendors are unnamed, so this registers as a third-party/sole-source dependence risk.
“We Rely on A Limited Number of Third-Party Vendor Relationships to Execute Our Business Which Exposes Us to Supply Chain Disruptions, Cost Increases, and Cyberattacks.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch