LUMEN TECHNOLOGIES, INC.

Lumen Technologies' Item 1C cybersecurity disclosure describes its risk management program, governance structure (Risk and Security Committee, CSO, CIRT/CSWAT teams), and third-party vendor risk management. The filing notes some prior cyber attacks have resulted in security incidents but states none have had or are reasonably likely to have a material adverse effect. No specific incident, count, threat actor, or data-type detail is disclosed.

Lumen Technologies' Item 1C cybersecurity disclosure in its annual report describes its cybersecurity risk management program, governance (Board Risk and Security Committee, CSO, CIRT/CSWAT teams), third-party vendor risk management, and incident response playbook. The filing acknowledges that some prior attacks have resulted in security incidents but states none has had or is reasonably likely to have a material adverse effect. No specific incident, threat actor, affected count, or data types are disclosed.

CenturyLink Communications, LLC d/b/a Lumen Technologies reported a data breach to the Montana Attorney General. The breach was reported on 2025-03-06. The breach occurred from 11/15/2024 to 12/04/2024. 1 Montana residents were affected.

CenturyLink Communications identified a breach of their external systems that took place between August 20, 2020, and August 31, 2020. The breach was discovered on or around August 20, 2020. The incident resulted in unauthorized access to customer account information, including names, contact details, credentials, and billing and payment information. Approximately 1,942 individuals were affected in total, with one resident of Maine among them. Affected individuals were notified in writing starting on September 21, 2020.