XML 28 R19.htm IDEA: XBRL DOCUMENT v3.23.2
Cyber-Attack
6 Months Ended
Jun. 30, 2023
Unusual or Infrequent Items, or Both [Abstract]  
Cyber-Attack

Note 9. Cyber-Attack

In the first quarter of 2022, the Company was the subject of a targeted cyber-attack, which resulted in having to shut down most the Company's connectivity, operating and accounting systems globally for a period of approximately three weeks to manage the safety of its overall global systems environment.

For the three and six months ended June 30, 2022, the Company incurred, as a result of its inability to timely process and move shipments through ports during the downtime, approximately $20 million and $62 million in incremental demurrage charges, net of recoveries, where the Company has direct liability for this obligation. These costs are recorded in customs brokerage and other services expenses. The Company incurred investigation, recovery, and remediation expenses, including costs to recover its operational and accounting systems and to enhance cybersecurity protections. The Company also recorded estimated liabilities for potential shipment-related claims. For the three and six months ended June 30, 2022, the total amount recorded for these items was approximately $6 million and $26 million. Amounts are recorded in other operating expenses.

In the first and second quarter of 2023, incremental charges recorded related to the cyber-attack were insignificant. Since the cyber-attack, the company incurred cumulative additional expenses of $60 million, net of recoveries and adjustments to prior estimates, and experienced a loss of revenues that cannot be quantified as a result of this attack.