UNRESOLVED STAFF COMMENTS
+Added: 2026 Form 10-K | H&R Block, Inc.
CYBERSECURITY
5 unchanged sentences
We maintain multiple levels of protection to mitigate data security risks, and we regularly test our systems to discover and address potential vulnerabilities, including without limitation:
−Removed: 2025 Form 10-K | H&R Block, Inc.
• using a multi-layered, zero-trust principled approach to secure systems;
16 unchanged sentences
Our CISO, who reports directly to the CLAO, has extensive cybersecurity knowledge and skills gained from over 30 years of experience in consulting and technology roles, with more than 19 years of Information Security specialization.
−Removed: Our CISO is responsible for understanding, managing, and communicating cybersecurity risks internally to our management (including the Enterprise Risk Committee on which he serves), and works closely with our Legal department to oversee compliance with legal, regulatory, and contractual security requirements.
+Added: H&R Block, Inc.
+Added: | 2026 Form 10-K
+Added: responsible for understanding, managing, and communicating cybersecurity risks internally to our management (including the Enterprise Risk Committee on which he serves), and works closely with our Legal department to oversee compliance with legal, regulatory, and contractual security requirements.
Our CISO heads the Information Security team, which is responsible for implementing, monitoring, and maintaining cybersecurity and data protection practices across our business.
2 unchanged sentences
In addition to our internal capabilities, we also periodically engage external consultants, legal counsel, or other third-party advisors to assist with assessing, identifying, and managing cybersecurity risks.
−Removed: H&R Block, Inc.
−Removed: | 2025 Form 10-K
Material Cybersecurity Risks, Threats, and Incidents
5 unchanged sentences
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.