CNA Financial (CNA) risk factors, FY2025 10-K

CNA Financial's FY2025 10-K, filed Feb 10, 2026, lists 21 risk factors in 3 groups. Against the prior year's 23: 1 new, 3 dropped, 6 substantially reworded.

Risk factors listed
213 groups
New this year
1vs 23 last year
Dropped
3since the prior 10-K
Substantially reworded
6of those kept
Section length
7k wordsItem 1A

What the changes say

  • CNA updated its risk disclosures to emphasize growing artificial intelligence integration and evolving cyber threats across vendors and operations.

What changed since the prior 10-K

New

  • NewOperational Risks

    Further, should we experience future cyber incidents, or should industry trends drive rate increases resulting from growth in volume and significance of cyber incidents broadly, we may incur higher costs for cybersecurity insurance coverage

    Future cyber incidents or broader industry trends may increase our costs for cybersecurity insurance coverage.

Dropped

  • Dropped

    or eliminate the program, which could adversely affect our business by increasing our exposure to terrorism losses, or by lowering our business volume through efforts to avoid that exposure. For a further discussion of TRIPRA, see Part II, Item 7, MD&A - Catastrophes and Related Reinsurance

  • Dropped

    The COVID-19 pandemic, including new or emerging variants, other potential pandemics and related measures to mitigate the spread of the foregoing may continue to have adverse impacts on our business, results of operations and financial condition and could be material

  • DroppedOperational Risks

    limitations of any statistical analysis. Further, climate change may make modeled outcomes less certain or produce new, non-modeled risks

Reworded

  • 62% rewrittenOperational Risks

    Any significant breach in our data security infrastructure or our vendors’ facilities or systems could disrupt business, cause financial losses and damage our reputation, and insurance coverage may not be available for claims related to a breach

    Expanded AI risks to include vendors and third-party administrators, and added that insurance coverage for data breaches may be unavailable.

  • 51% rewrittenOperational Risks

    We use analytical models to assist our decision making in key areas such as pricing, reserving, catastrophe risks and capital modeling and may be adversely affected if actual results differ materially from the model outputs and related analyses

    Removed a sentence regarding model effectiveness degradation due to operational errors and assumptions.

  • 35% rewritten

    Morbidity and persistency experience can be volatile and may be negatively affected by many factors including policyholder behavior, judicial decisions regarding policy terms, socioeconomic factors, cost of care inflation, changes in health trends and advances in medical care

    Added the increasingly adverse impact of social inflation, particularly legal activity and judicial decisions, on the long-term care portfolio.

  • 35% rewrittenOperational Risks

    Inability to detect and prevent significant employee or third-party service provider misconduct, inadvertent errors and omissions, or exposure relating to functions performed on our behalf could result in a materially adverse effect on our business, results of operations and financial condition

    Added that new technologies like AI in third-party or internal processes may introduce control complexity and greater risk.

  • 31% rewrittenStrategic Risks

    We may be adversely affected by technological changes or disruptions in the insurance marketplace

    Clarified that competitive disadvantage arises if peer utilization of AI is more effective than our own AI usage.

  • 24% rewritten

    We are vulnerable to material losses from natural and man-made disasters

    No substantive changes detected in the provided text comparison.

All 21 risk factors

Headings as the filing states them, in filing order.

Other

  1. 01If we determine that our recorded insurance reserves are insufficient to cover our estimated ultimate unpaid liability for claim and claim adjustment expenses, we may need to increase our insurance reserves which would result in a charge to our earnings
  2. 02Our actual experience could vary from the key assumptions used to determine future policy benefit reserves for long-term care policies
  3. 03Morbidity and persistency experience can be volatile and may be negatively affected by many factors including policyholder behavior, judicial decisions regarding policy terms, socioeconomic factors, cost of care inflation, changes in health trends and advances in medical care35% rewritten
  4. 04We are vulnerable to material losses from natural and man-made disasters24% rewritten
  5. 05We have exposures related to asbestos and environmental pollution (A&EP) claims, which could result in material losses

Strategic Risks

  1. 06We face intense competition in our industry; we may be adversely affected by the cyclical nature of the property and casualty business and by the evolving landscape of our distribution network
  2. 07Our underwriting strategies currently rely on the effectiveness of reinsurance arrangements and we accordingly face risks relating to reinsurance, including obtaining reinsurance at a cost or on terms and conditions we deem acceptable, reinsurance counterparty risk and ineffective reinsurance coverage
  3. 08We may be adversely affected by technological changes or disruptions in the insurance marketplace31% rewritten
  4. 09We face considerable competition within our industry for qualified, specialized talent and any significant inability to attract and retain talent may adversely affect the execution of our business strategies
  5. 10We are controlled by a single stockholder which could result in potential conflicts of interest

Financial Risks

  1. 11We may incur significant realized and unrealized investment losses and volatility in net investment income arising from changes in the financial markets

Operational Risks

  1. 12We use analytical models to assist our decision making in key areas such as pricing, reserving, catastrophe risks and capital modeling and may be adversely affected if actual results differ materially from the model outputs and related analyses51% rewritten
  2. 13Any significant interruption in the operation of our business functions, facilities or systems or our vendors' facilities or systems could result in a materially adverse effect on our operations
  3. 14Any significant breach in our data security infrastructure or our vendors’ facilities or systems could disrupt business, cause financial losses and damage our reputation, and insurance coverage may not be available for claims related to a breach62% rewritten
  4. 15Further, should we experience future cyber incidents, or should industry trends drive rate increases resulting from growth in volume and significance of cyber incidents broadly, we may incur higher costs for cybersecurity insurance coverageNew
  5. 16Inability to detect and prevent significant employee or third-party service provider misconduct, inadvertent errors and omissions, or exposure relating to functions performed on our behalf could result in a materially adverse effect on our business, results of operations and financial condition35% rewritten
  6. 17Loss of key vendor relationships and issues relating to the transitioning of vendor relationships could compromise our ability to conduct business
  7. 18We are subject to capital adequacy requirements and, if we are unable to maintain or raise sufficient capital to meet these requirements, regulatory agencies may restrict or prohibit us from operating our business
  8. 19Our insurance subsidiaries, upon whom we depend for dividends in order to fund our corporate obligations, are limited by insurance regulators in their ability to pay dividends
  9. 20Rating agencies may downgrade their ratings of us, thereby adversely affecting our ability to write insurance at competitive rates or at all and increasing our cost of capital
  10. 21For further discussion of our ratings, see the Ratings subsection within the Liquidity and Capital Resources section of MD&A in Item 7

Other CNA Financial 10-Ks

  • FY2024 10-K risk factors
    23 risks

    CNA Financial faces primary risks from long-term care policy reserve volatility, natural and man-made catastrophes, and investment market fluctuations.

    Filed Feb 11, 2025

About this page

The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.