What Unum Group told the SEC could break it.

Unum faces cyberattack and data-breach risk; although it carries some cyber insurance, losses and litigation could exceed policy limits, be subject to deductibles, or be uncovered, and a failure of business-recovery processes after a catastrophe/cyberattack could harm operations.

“Although we have insurance against some cyber risks and attacks, we may be subject to litigation and financial losses that exceed our policy limits, are subject to deductibles or are not covered under any of our current insurance policies.”

Unum processes personal data subject to comprehensive privacy rules such as the EU GDPR (plus AML/Patriot Act, OFAC, FCPA and UK Bribery Act obligations) and is subject to insurance regulation including extraordinary-dividend/capital approvals.

“The GDPR is a comprehensive set of data protection rules that gives individuals certain rights to their personal data and places obligations on organizations that process personal data.”

Unum's UK operations expose it to GBP/USD translation risk — a 10% decline in the average pound-to-dollar rate would have reduced reported net income by ~$9M (2025) and ~$10M (2024).

“Assuming the pound to dollar average exchange rate decreased 10 percent from the actual average exchange rates for 2025 and 2024, net income, as reported in U.S. dollars, would have decreased approximately $9 million and $10 million, respectively.”