“The Company has not recognized any insurance proceeds in the three and six months ended December 31, 2023 related to the cyberattack.”
Clorox spent $49 million on last year’s cyberattack by the end of 2023 and expects another $50 to $60 million this fiscal year. Store shelves ran short and orders stalled. Insurance has paid nothing so far. Johnson Controls just put its ransomware bill above $27 million, and every one of those boards still treats security as a cost center.