ThredUp, Inc. (ticker: THRD) filed its 10-K Item 1C disclosing its cybersecurity risk management program. The filing states that while no material cybersecurity incidents have occurred to date, the company has experienced threats and exploit attempts against its and its third-party vendors' data and systems. The company maintains a risk-based approach using NIST CSF, third-party consultants, and an incident response plan. No specific breach details, dates, or affected data types were disclosed.