HUNTINGTON INGALLS INDUSTRIES, INC.

Huntington Ingalls Industries, Inc. (HII) filed Item 1C of its 10-K disclosing its cybersecurity governance and risk management program. The filing states that as of the report date, HII is not aware of any cybersecurity threats that have materially affected or are reasonably likely to materially affect its business, results of operations, or financial condition. No specific incidents, breaches, or material impacts are reported.

An external system breach occurred at Huntington Ingalls Industries, Inc. between March and May 2022. The breach was discovered on April 22, 2022. The compromised information includes names and driver's license or non-driver identification card numbers. A total of 43,643 individuals were affected, including 65 residents of Maine. The company provided 12 months of identity protection services through Experian.

Huntington Ingalls Industries, Inc. (HII) notified affected personnel of unauthorized access to file storage systems that occurred between March and May 2022. The investigation, concluded in April 2023, found that an unauthorized external party may have accessed files containing names, SSNs, phone numbers, credit card/debit card numbers, dates of birth, driver's licenses, and potentially other financial, health, and government ID data. HII offered 12-month Experian IdentityWorks credit monitoring to affected individuals.

Huntington Ingalls Industries, Inc. notified consumers that between March and May 2022, an unauthorized party accessed file storage systems containing personal information including names, SSNs, and financial data. HII retained forensic investigators, secured systems, and offered 12 months of Experian IdentityWorks. No misuse was confirmed at the time of notice.

Huntington Ingalls Industries, Inc. reported a data incident to the New Hampshire Attorney General. An unauthorized party accessed HII storage systems between March and May 2022, using suspicious scripts for credential harvesting. The breach impacted 105 New Hampshire residents, whose personal information was accessed. HII engaged forensic investigators, reset passwords, and provided 12 months of identity monitoring via Experian to affected individuals.