Public companies are required to disclose risks that can affect the business and impact the stock. These disclosures are known as “Risk Factors”. Companies disclose these risks in their yearly (Form 10-K), quarterly earnings (Form 10-Q), or “foreign private issuer” reports (Form 20-F). Risk factors show the challenges a company faces. Investors can consider the worst-case scenarios before making an investment. TipRanks’ Risk Analysis categorizes risks based on proprietary classification algorithms and machine learning.
CNA Financial disclosed 21 risk factors in its most recent earnings report. CNA Financial reported the most risks in the “Production” category.
Risk Overview Q3, 2024
Risk Distribution
29% Production
19% Finance & Corporate
19% Legal & Regulatory
14% Macro & Political
10% Tech & Innovation
10% Ability to Sell
Finance & Corporate - Financial and accounting risks. Risks related to the execution of corporate activity and strategy
This chart displays the stock's most recent risk distribution according to category. TipRanks has identified 6 major categories: Finance & corporate, legal & regulatory, macro & political, production, tech & innovation, and ability to sell.
Risk Change Over Time
2020
Q4
S&P500 Average
Sector Average
Risks removed
Risks added
Risks changed
CNA Financial Risk Factors
New Risk (0)
Risk Changed (0)
Risk Removed (0)
No changes from previous report
The chart shows the number of risks a company has disclosed. You can compare this to the sector average or S&P 500 average.
The quarters shown in the chart are according to the calendar year (January to December). Businesses set their own financial calendar, known as a fiscal year. For example, Walmart ends their financial year at the end of January to accommodate the holiday season.
Risk Highlights Q3, 2024
Main Risk Category
Production
With 6 Risks
Production
With 6 Risks
Number of Disclosed Risks
21
No changes from last report
S&P 500 Average: 31
21
No changes from last report
S&P 500 Average: 31
Recent Changes
0Risks added
0Risks removed
0Risks changed
Since Sep 2024
0Risks added
0Risks removed
0Risks changed
Since Sep 2024
Number of Risk Changed
0
No changes from last report
S&P 500 Average: 3
0
No changes from last report
S&P 500 Average: 3
See the risk highlights of CNA Financial in the last period.
Risk Word Cloud
The most common phrases about risk factors from the most recent report. Larger texts indicate more widely used phrases.
Risk Factors Full Breakdown - Total Risks 21
Production
Total Risks: 6/21 (29%)Above Sector Average
Manufacturing1 | 4.8%
Manufacturing - Risk 1
Any significant interruption in the operation of our business functions, facilities and systems or our vendors' facilities and systems could result in a materially adverse effect on our operations.
Our business is highly dependent upon our ability to perform, in an efficient and uninterrupted manner, through our employees or vendor relationships and using our and their facilities and systems, necessary business functions, such as internet support and 24-hour call centers, processing new and renewal business, providing customer service, processing and paying claims and other obligations and issuing financial statements.
Our, or our vendors', facilities and systems could become unavailable, inoperable, or otherwise impaired from a variety of causes, including natural events, such as hurricanes, tornadoes, windstorms, earthquakes, severe winter weather and fires, or other events, such as explosions, terrorist attacks, computer security breaches or cyber-attacks, riots, hazardous material releases, medical epidemics or pandemics, utility outages, interruptions of data processing and storage systems or unavailability of communications facilities. An interruption in our system availability occurred in March 2021 as a result of a cybersecurity attack we sustained. Please refer to the immediately following risk factor for further information regarding this incident. Likewise, we could experience a significant failure, interruption or corruption of one or more of our or our vendors' information technology, telecommunications, or other systems for various reasons, including significant failures or interruptions that might occur as existing systems are replaced or upgraded. The shut-down or unavailability of one or more of our or our vendors' systems or facilities for these or any other reasons could significantly impair our ability to perform critical business functions in a timely basis.
In addition, because our and our vendors' information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such service exceeds capacity or a third-party system fails or experiences an interruption. If sustained or repeated, such events could result in a deterioration of our ability to perform necessary business functions.
The foregoing risks could expose us to monetary and reputational damages. Potential additional exposures relating to significant interruptions to our operations may include substantially increased compliance costs, as well as increased costs relating to investments in computer system and security-related upgrades, and such costs may not be recoverable under our relevant insurance coverage. We have made, and continue to make, investments to improve our security and infrastructure. Some of these investments are a direct result of the March 2021 cybersecurity attack, described in the immediately following risk factor, which are not recoverable under existing insurance coverage.
If our business continuity plans or system security do not sufficiently address these risks, they could have a material adverse effect on our business, results of operations and financial condition.
Employment / Personnel1 | 4.8%
Employment / Personnel - Risk 1
Inability to detect and prevent significant employee or third-party service provider misconduct, inadvertent errors and omissions, or exposure relating to functions performed on our behalf could result in a materially adverse effect on our business, results of operations and financial condition.
We may incur losses which arise from employees or third-party service providers engaging in intentional, negligent or inadvertent misconduct, fraud, errors and omissions, failure to comply with internal guidelines, including with respect to underwriting authority, or failure to comply with regulatory requirements. Our or our third-party service providers' controls may not be able to detect all possible circumstances of such noncompliant activity and the internal structures in place to prevent this activity may not be effective in all cases. Any losses relating to such non-compliant activity could adversely affect our business, results of operations and financial condition.
Portions of our insurance business is underwritten and serviced by third parties. With respect to underwriting, our contractual arrangements with third parties will typically grant them limited rights to write new and renewal policies, subject to contractual restrictions and obligations, including requiring them to underwrite within the terms of our licenses. Should these third parties issue policies that exceed these contractual restrictions, we could be deemed liable for such policies and subject to regulatory fines and penalties for any breach of licensing requirements. It is possible that in such circumstance we might not be fully indemnified for such third parties' contractual breaches.
Additionally, we rely on certain third-party claims administrators, including the administrator of our long-term care claims, to handle policyholder services and perform significant claim administration and claim adjudication functions. Any failure by such administrator to properly perform service functions may result in losses as a result of over-payment of claims, legal claims against us and adverse regulatory enforcement exposure.
We have also licensed certain systems from third parties. We cannot be certain that we will have access to these systems or that our information technology or application systems will continue to operate as intended.
These risks could adversely impact our reputation and client relationships and have a material adverse effect on our business, results of operations and financial condition.
Supply Chain1 | 4.8%
Supply Chain - Risk 1
Loss of key vendor relationships and issues relating to the transitioning of vendor relationships could compromise our ability to conduct business.
In the event that one or more of our vendors suffers a bankruptcy, is sold to another entity, sustains a significant business interruption or otherwise becomes unable to continue to provide products or services at the requisite level, we may be adversely affected. We may suffer operational impairments and financial losses associated with transferring business to a new vendor, assisting a vendor with rectifying operational difficulties, failure by vendors to properly perform service functions or assuming previously outsourced operations ourselves. Our inability to provide for appropriate servicing if a vendor becomes unable to fulfill its contractual obligations to us, either through transitioning to another service provider temporarily or permanently or assuming servicing internally, may have a materially adverse effect on our business, results of operations and financial condition.
Costs3 | 14.3%
Costs - Risk 1
Our insurance subsidiaries, upon whom we depend for dividends in order to fund our corporate obligations, are limited by insurance regulators in their ability to pay dividends.
We are a holding company and are dependent upon dividends, loans and other sources of cash from our subsidiaries in order to meet our obligations. Ordinary dividend payments, or dividends that do not require prior approval by the insurance subsidiaries' domiciliary insurance regulator, are generally limited to amounts determined by formulas that vary by jurisdiction. If we are restricted from paying or receiving intercompany dividends, by regulatory rule or otherwise, we may not be able to fund our corporate obligations and debt service requirements or pay our stockholders dividends from available cash. As a result, we would need to pursue other sources of capital which may be more expensive or may not be available at all.
Costs - Risk 2
Our underwriting strategies currently rely on the effectiveness of reinsurance arrangements and we accordingly face risks relating to reinsurance, including obtaining reinsurance at a cost or on terms and conditions we deem acceptable, reinsurance counterparty risk and ineffective reinsurance coverage.
A primary reason we purchase reinsurance is to manage our exposure to risk, thereby facilitating our underwriting strategies in certain key areas. Under our ceded reinsurance arrangements, a reinsurer assumes a specified portion of our exposure in exchange for a specified portion of policy premiums. The availability and cost of the reinsurance protection we purchase, which affects the volatility and profitability of our business, as well as the level and types of risk we retain, is determined by many factors, including general economic conditions and conditions in the reinsurance market, such as the occurrence of significant reinsured events or unexpected adverse trends, including those associated with climate change. If we are unable to obtain sufficient reinsurance at a cost or on terms and conditions we deem acceptable, our risk exposure will not be mitigated to the degree desired or we may forego such increased risk, thereby adversely impacting our underwriting strategies. In addition, use of reinsurance exposes us to credit risk of the reinsurers, as the reinsurance arrangements do not relieve us of the liability to the customer. If a reinsurer is unable to meet its financial obligations under a reinsurance arrangement, we will remain obligated under the original policies issued to our customers. Furthermore, while we use various risk management methods, including the use of reinsurance, to effectively manage risk, there is the possibility that one or more natural catastrophes and/or terrorism or other events could result in claims substantially exceeding expectations, thereby making the reinsurance strategy significantly less effective. Such reinsurance-related risks could have a material adverse effect on our business, results of operations and financial condition and adversely affect our underwriting strategies in certain lines of business.
Costs - Risk 3
If we determine that our recorded insurance reserves are insufficient to cover our estimated ultimate unpaid liability for claim and claim adjustment expenses, we may need to increase our insurance reserves which would result in a charge to our earnings.
We maintain insurance reserves to cover our estimated ultimate unpaid liability for claim and claim adjustment expenses, including the estimated cost of the claims adjudication process, for reported and unreported claims. Insurance reserves are not an exact calculation of liability but instead are complex management estimates developed utilizing a variety of actuarial reserve estimation techniques as of a given reporting date. The reserve estimation process involves a high degree of judgment and variability and is subject to a number of factors which are highly uncertain. These factors can be affected by both changes in internal processes and external events. Key variables include frequency of claims, claim severity, mortality, morbidity, discount rates, economic, social and medical inflation, claim handling policies and procedures, case reserving approach, underwriting and pricing policies, changes in the legal and regulatory environment and the lag time between the occurrence of an insured event and the time of its ultimate settlement. Mortality is the relative incidence of death. Morbidity is the frequency and severity of injury, illness, sickness and diseases contracted.
There is generally a higher degree of variability in estimating required reserves for long-tail coverages, such as long-term care, workers' compensation, general liability and professional liability, as they require a relatively longer period of time for claims to be reported and settled. The impact of changes in economic and social inflation, and medical costs are also more pronounced for long-tail coverages due to the longer settlement period. Certain risks and uncertainties associated with our insurance reserves are outlined in the Critical Accounting Estimates and the Reserves - Estimates and Uncertainties sections of MD&A in Item 7.
We are subject to the uncertain effects of emerging and potential claims and coverage issues that arise as industry practices and legal, judicial, social, economic and other environmental conditions change. Further, the impact of social inflation continues to be significant and the trajectory of its future impact remains uncertain. In addition, passage of reviver statutes that extend, or eliminate, the statute of limitations for the reporting of claims, including statutes passed in certain states with respect to sexual molestation and sexual abuse, increase the uncertainty of the frequency of claims. These issues, have had, and may continue to have, a negative effect on our business, results of operations and financial condition by either extending coverage beyond the original underwriting intent or by increasing the number or size of claims, resulting in further increases in our reserves. The effects of unforeseen emerging or potential claim and coverage issues are extremely difficult to predict and may be material.
In light of the many uncertainties associated with establishing the estimates and making the judgments necessary to establish reserve levels, we continually review and change our reserve estimates in a regular and ongoing process as experience develops from the actual reporting and settlement of claims and as the legal, regulatory and economic environment evolves. When our recorded reserves are insufficient for any reason, the required increase in reserves is recorded as a charge against our earnings in the period in which reserves are determined to be insufficient. These charges have been and in the future could be substantial.
Finance & Corporate
Total Risks: 4/21 (19%)Below Sector Average
Share Price & Shareholder Rights1 | 4.8%
Share Price & Shareholder Rights - Risk 1
We are controlled by a single stockholder which could result in potential conflicts of interest.
Loews beneficially owned approximately 92% of our outstanding shares of common stock as of December 31, 2023, and is in a position to control actions that require the consent of stockholders, including the election of directors, amendment of our Restated Certificate of Incorporation and any merger or sale of substantially all of our assets. In addition, four officers of Loews, along with the Co-Chairman of the Board of Loews, serve on our Board of Directors. We have also entered into services agreements and a registration rights agreement with Loews, and we may in the future enter into other agreements with Loews. It is possible that potential conflicts of interest could arise in the future for our directors who are also officers and/or directors of Loews with respect to a number of areas relating to the past and ongoing relationships of Loews and us, including tax and insurance matters, financial commitments and sales of common stock pursuant to registration rights or otherwise.
Accounting & Financial Operations2 | 9.5%
Accounting & Financial Operations - Risk 1
We use analytical models to assist our decision making in key areas such as pricing, reserving, catastrophe risks and capital modeling and may be adversely affected if actual results differ materially from the model outputs and related analyses.
We use various modeling techniques and data analytics (e.g. scenarios, predictive, stochastic and forecasting) to analyze and estimate exposures, loss trends and other risks associated with our assets and liabilities. This includes both proprietary and third-party modeled outputs and related analyses to assist us in decision-making related to underwriting, pricing, capital allocation, reserving, investing, reinsurance and catastrophe risk, among other things. We incorporate numerous assumptions and forecasts about the future level and variability of policyholder behavior, loss frequency and severity, interest rates, equity markets, inflation, capital requirements, and currency exchange rates, among others. The modeled outputs and related analyses from both proprietary models and third parties are subject to various assumptions, uncertainties, model design errors and the inherent limitations of any statistical analysis. Further, climate change may make modeled outcomes less certain or produce new, non-modeled risks.
In addition, the effectiveness of any model can be degraded by operational risks, including the improper use of the model, input errors, data errors and human error. As a result, actual results may differ materially from our modeled results. Our profitability and financial condition substantially depends on the extent to which our actual experience is consistent with assumptions we use in our models and ultimate model outputs. If, based upon these models or other factors, we misprice our products or fail to appropriately estimate the risks we are exposed to, our business, results of operations and financial condition may be materially adversely affected.
Accounting & Financial Operations - Risk 2
Our actual experience could vary from the key assumptions used to determine future policy benefit reserves for long-term care policies.
Our future policy benefit reserves for long-term care policies are based on our best estimate actuarial assumptions, which are assessed quarterly and updated at least annually. Key actuarial assumptions include morbidity, persistency (inclusive of mortality), anticipated future premium rate increases and expenses. The adequacy of the reserves is contingent upon actual experience and our future expectations related to these key assumptions. If actual or expected future experience differs from these assumptions, the reserves may not be adequate, requiring us to increase reserves. The required increase in reserves is recorded as a charge against our earnings in the period in which reserves are determined to be insufficient. These charges have been and in the future could be substantial. The reserves are discounted using upper-medium grade fixed income instrument yields as of each reporting date. Discount rates are subject to interest rate and market volatility. See the Life & Group Policyholder Reserves portion of Reserves - Estimates and Uncertainties section of MD&A in Item 7 for more information.
Morbidity and persistency experience, inclusive of mortality, can be volatile and may be negatively affected by many factors including, but not limited to, policyholder behavior, judicial decisions regarding policy terms, socioeconomic factors, cost of care inflation, changes in health trends and advances in medical care.
A prolonged period during which investment returns remain at low levels could result in shortfalls in investment income on assets supporting our obligations under long-term care policies. This risk is more significant for our long-term care products because the long potential duration of the policy obligations exceeds the duration of the supporting investment assets. In addition, we may not receive regulatory approval for the level of premium rate increases we request. Any adverse deviation between the level of future premium rate increases approved and the level included in our reserving assumptions may require an increase to our reserves.
Debt & Financing1 | 4.8%
Debt & Financing - Risk 1
Rating agencies may downgrade their ratings of us, thereby adversely affecting our ability to write insurance at competitive rates or at all and increasing our cost of capital.
Ratings are an important factor in establishing the competitive position of insurance companies. Our insurance company subsidiaries, as well as our public debt, are rated by rating agencies, including, A.M. Best Company (A.M. Best), Moody's Investors Service, Inc. (Moody's), Standard & Poor's (S&P) and Fitch Ratings, Inc. (Fitch). Ratings reflect the rating agency's opinions of an insurance company's or insurance holding company's financial strength, capital adequacy, enterprise risk management practices, operating performance, strategic position and ability to meet its obligations to policyholders and debt holders, and may also reflect opinions on other areas such as information security and climate risk, as well as ESG matters more broadly.
The rating agencies may take action to lower our ratings in the future as a result of any significant financial loss or changes in the methodology or criteria applied by the rating agencies. The severity of the impact on our business is dependent on the level of downgrade and, for certain products, which rating agency takes the rating action. Among the adverse effects in the event of such downgrades would be the inability to obtain a material volume of business from certain major insurance brokers, the inability to sell a material volume of our insurance products to certain markets and the required collateralization of certain future payment obligations or reserves. Further, if one or more of our corporate debt ratings were downgraded, we may find it more difficult to access the capital markets and we may incur higher borrowing costs.
In addition, it is possible that a significant lowering of the corporate debt ratings of Loews by certain of the rating agencies could result in an adverse effect on our ratings, independent of any change in our circumstances.
For further discussion of our ratings, see the Ratings subsection within the Liquidity and Capital Resources section of MD&A in Item 7.
Legal & Regulatory
Total Risks: 4/21 (19%)Above Sector Average
Regulation2 | 9.5%
Regulation - Risk 1
We are subject to extensive existing state, local, federal and foreign governmental regulations that restrict our ability to do business and generate revenues; additional regulation or significant modification to existing regulations or failure to comply with regulatory requirements may have a materially adverse effect on our business, results of operations and financial condition.
The insurance industry is subject to comprehensive and detailed regulation and supervision. Most insurance regulations are designed to protect the interests of our policyholders and third-party claimants, rather than our investors. Each jurisdiction in which we do business has established supervisory agencies that regulate the manner in which we do business. Any changes in regulation could impose significant burdens on us. In addition, the Lloyd's marketplace sets rules under which its members, including our Hardy syndicate, operate.
These rules and regulations relate to, among other things, the standards of solvency (including risk-based capital measures), government-supported backstops for certain catastrophic events (including terrorism), investment restrictions, accounting and reporting methodology, establishment of reserves and potential assessments of funds to settle covered claims against impaired, insolvent or failed private or quasi-governmental insurers. In addition, rules and regulations have recently been introduced, or are being considered, in the areas of information security and ESG, which may also affect our business. We also are subject to numerous regulations governing the protection of personal and confidential information of our clients and employees, including medical records, credit card data and financial information. These laws and regulations, including regulations related to cybersecurity protocols (which continue to evolve in breadth, sophistication and maturity in response to an ever-evolving threat landscape), are increasing in complexity and number, change frequently, sometimes conflict, and could expose us to significant monetary damages, regulatory enforcement actions, fines and/or criminal prosecution in one or more jurisdictions. In response to climate change, regulators at the federal, state and international level also could impose new regulations requiring disclosure of underwriting or investment in certain industry sectors.
Regulatory powers also extend to premium rate regulations which require that rates not be excessive, inadequate or unfairly discriminatory. State jurisdictions ensure compliance with such regulations through market conduct exams, which may result in losses to the extent non-compliance is ascertained, either as a result of failure to document transactions properly or failure to comply with internal guidelines, or otherwise. The jurisdictions in which we do business may also require us to provide coverage to persons whom we would not otherwise consider eligible or restrict us from withdrawing from unprofitable lines of business or unprofitable market areas. Each jurisdiction dictates the types of insurance and the level of coverage that must be provided to such involuntary risks. Our share of these involuntary risks is mandatory and generally a function of our respective share of the voluntary market by line of insurance in each jurisdiction.
Regulation - Risk 2
We are subject to capital adequacy requirements and, if we are unable to maintain or raise sufficient capital to meet these requirements, regulatory agencies may restrict or prohibit us from operating our business.
Insurance companies such as ours are subject to capital adequacy standards set by regulators to help identify companies that merit further regulatory attention. In the U.S., these standards apply specified risk factors to various asset, premium and reserve components of our legal entity statutory basis of accounting financial statements. Current rules, including those promulgated by insurance regulators and specialized markets, such as Lloyd's, require companies to maintain statutory capital and surplus at a specified minimum level determined using the applicable jurisdiction's regulatory capital adequacy formula. If we do not meet these minimum requirements, we may be restricted or prohibited from operating our business in the applicable jurisdictions and specialized markets. If we are required to record a material charge against earnings in connection with a change in estimated insurance reserves, or the occurrence of a catastrophic event or otherwise, or if we incur significant losses related to our investment portfolio, which severely deteriorates our capital position, we may violate these minimum capital adequacy requirements unless we are able to raise sufficient additional capital. We may be limited in our ability to raise significant amounts of capital on favorable terms or at all.
The IAIS has adopted a ComFrame for the supervision of IAIGs and has developed a global capital standard that, if adopted in the U.S., would be applicable to U.S.-based IAIGs. The NAIC also developed the GCC and AM approach to assessing group capital as an alternative to the ICS developed by the IAIS. The development and adoption of these capital standards could increase our prescribed capital requirement, the level at which regulatory scrutiny intensifies, as well as significantly increase our cost of regulatory compliance.
Litigation & Legal Liabilities1 | 4.8%
Litigation & Legal Liabilities - Risk 1
We are exposed to, and may face adverse developments related to, mass tort claims that could arise from, among other things, our insureds' sale or use of potentially harmful products or substances, changes to the social and legal environment, such as those related to abuse reviver statutes, issues related to altered interpretation of coverage and other new and emerging claim theories.
We face potential exposure to various types of existing, new and emerging mass tort claims, including those related to exposure to potentially harmful products or substances, such as glyphosate, lead paint, per- and polyfluoroalkyl substances (PFAS) and opioids; claims arising from changes that expand the right to sue, remove limitations on recovery, extend the statutes of limitations or otherwise repeal or weaken tort reforms, such as those related to abuse reviver statutes, including New York reviver statutes; and claims related to new and emerging theories of liability, such as those related to global warming and climate change. Evolving judicial interpretations and new legislation regarding the application of various tort theories and defenses, including application of various theories of joint and several liability, as well as the application of insurance coverage to these claims, give rise to new and potentially more severe claim activity. For example, we have recorded, and may continue to record, increases in our mass tort reserves, driven substantially by abuse reviver statutes that have resulted in increased claims. Similar and continuing mass tort claim activity, including activity based on changing judicial interpretations and recent and proposed legislation, could have a material adverse effect on our business, results of operations and financial condition.
Environmental / Social1 | 4.8%
Environmental / Social - Risk 1
We have exposures related to asbestos and environmental pollution (A&EP) claims, which could result in material losses.
Our property and casualty insurance subsidiaries have exposures related to A&EP claims. Our experience has been that establishing claim and claim adjustment expense reserves for casualty coverages relating to A&EP claims is subject to uncertainties that are greater than those presented by more traditional property and casualty claims. Additionally, traditional actuarial methods and techniques employed to estimate the ultimate cost of claims for more traditional property and casualty exposures are less precise in estimating claim and claim adjustment expense reserves for A&EP. As a result, estimating the ultimate cost of both reported and unreported A&EP claims is subject to a higher degree of variability. On August 31, 2010, we completed a retroactive reinsurance transaction under which substantially all of our legacy A&EP liabilities were ceded to National Indemnity Company (NICO), a subsidiary of Berkshire Hathaway Inc., subject to an aggregate limit of $4 billion (Loss Portfolio Transfer). The cumulative amount ceded under the Loss Portfolio Transfer as of December 31, 2023 was $3.6 billion. If the other parties to the Loss Portfolio Transfer do not fully perform their obligations, net losses incurred on A&EP claims covered by the Loss Portfolio Transfer exceed the aggregate limit of $4 billion, or we determine we have exposures to A&EP claims not covered by the Loss Portfolio Transfer, we may need to increase our recorded net reserves which would result in a charge against our earnings. These charges could be substantial. Additionally, if the A&EP claims exceed the limit of the Loss Portfolio Transfer, we will need to assess whether to purchase additional limit or to reassume claim handling responsibility for A&EP claims from an affiliate of NICO. Any additional reinsurance premium or future claim handling costs would also reduce our earnings.
Macro & Political
Total Risks: 3/21 (14%)Above Sector Average
Natural and Human Disruptions2 | 9.5%
Natural and Human Disruptions - Risk 1
The COVID-19 pandemic, including new or emerging variants, other potential pandemics and related measures to mitigate the spread of the foregoing may continue to have adverse impacts on our business, results of operations and financial condition and could be material.
We have experienced, and may continue to experience, increased claim submissions and litigation related to denial of claims based on policy coverage or the facts of the claim, in certain lines of business that are implicated by the COVID-19 pandemic and mitigating actions taken by our customers and governmental authorities in response to its spread. These lines include primarily healthcare professional liability, workers' compensation, commercial property related business interruption coverage, management liability (directors and officers, employment practices and professional liability lines) and trade credit. We recorded significant losses during 2020, a significant portion of which remain classified as incurred but not reported (IBNR) reserves, in these areas and may experience continued losses, which could be material.
Increased frequency or severity in any or all of the foregoing lines, or others where the exposure has yet to emerge, relating to long-term effects of COVID-19, new or emerging variants, or other potential pandemics, and related measures to mitigate the spread of the foregoing, may have a material impact on our business, results of operations and financial condition.
We have incurred and may continue to incur substantial expenses related to litigation activity in connection with COVID-related legal claims. These actions primarily relate to denial of claims submitted as a result of the pandemic and the mitigating actions taken, including lockdowns and closing of certain businesses. The significance of such litigation or any other litigation relating to new or emerging variants of COVID-19 or other potential pandemics and related measures to mitigate the spread of the foregoing, both in substance and volume, and the resultant Company-initiated activities, including external counsel engagement, and the costs related thereto, may have a material impact on our business, results of operations and financial condition.
Natural and Human Disruptions - Risk 2
We are vulnerable to material losses from natural and man-made disasters.
Catastrophe losses are an inevitable part of our business. Various events can cause catastrophe losses. These events can be natural or man-made, and may include hurricanes, tornadoes, windstorms, earthquakes, hail, severe winter weather, fires, floods, riots, strikes, civil unrest, cyber-attacks, pandemics and acts of terrorism. The frequency and severity of these catastrophe events are inherently unpredictable. Exposure to cyber risk is increasing systematically due to greater digital dependence, which increases the potential for, and the potential losses due to, a catastrophic cyber event. Catastrophic cyber-attack scenarios are not bound by time or geographic limitations and cyber-related catastrophic perils don't have well-established definitions or fundamental physical properties. In addition, longer-term natural catastrophe trends may be changing and new types of catastrophe losses may be developing due to climate change, its associated extreme weather events linked to rising temperatures and its effects on global weather patterns, greenhouse gases, sea, land and air temperatures, sea levels, rain, hail and snow. Climate studies by government agencies, academic institutions, catastrophe modeling organizations and other groups indicate that climate change may be altering the frequency and/or severity of catastrophic weather events, such as hurricanes, tornadoes, windstorms, floods and other natural disasters.
The extent of our losses from catastrophes is a function of the total amount of our insured exposures in the affected areas, the frequency and severity of the events themselves, the level of our reinsurance coverage, reinsurance reinstatement premiums and state residual market assessments, if any. It can take a long time for the ultimate cost of any catastrophe losses to us to be finally determined, as a multitude of factors contribute to such costs, including evaluation of general liability and pollution exposures, infrastructure disruption, business interruption and reinsurance collectibility. Further, significant catastrophic events or a series of catastrophic events have the potential to impose financial stress on the reinsurance industry, which could impact our ability to collect amounts owed to us by reinsurers, thereby resulting in higher net incurred losses.
Reinsurance coverage for "unconventional" terrorism events (such as nuclear, biological, chemical or radiological attacks) is provided only in limited circumstances. Our principal reinsurance protection against these large-scale terrorist attacks is the coverage currently provided through the Terrorism Risk Insurance Program Reauthorization Act of 2019 (TRIPRA) through December 31, 2027. However, such coverage is subject to a mandatory deductible and other limitations. It is also possible that future legislation could change or eliminate the program, which could adversely affect our business by increasing our exposure to terrorism losses, or by lowering our business volume through efforts to avoid that exposure. For a further discussion of TRIPRA, see Part II, Item 7, MD&A - Catastrophes and Related Reinsurance.
As a result of the items discussed above, catastrophe losses are particularly difficult to estimate, could cause us to exhaust our available reinsurance limits, could lead to large losses and could adversely affect the cost and availability of reinsurance. Accordingly, catastrophic events could have a material adverse effect on our business, results of operations, financial condition and liquidity.
Capital Markets1 | 4.8%
Capital Markets - Risk 1
We may incur significant realized and unrealized investment losses and volatility in net investment income arising from changes in the financial markets.
Our investment portfolio is exposed to various risks, such as interest rate, credit spread, issuer default, equity prices and foreign currency, which are unpredictable. Financial markets are highly sensitive to changes in economic conditions, monetary policies, tax policies, interest rates, domestic and international geopolitical issues and many other factors. Changes in financial markets, including fluctuations in interest rates, credit, equity prices and foreign currency prices, and many other factors beyond our control can adversely affect the value of our investments, the realization of investment income and the rate at which we discount certain liabilities. Our investment portfolio is also subject to increased valuation uncertainties when investment markets are illiquid. The valuation of investments is more subjective when markets are illiquid, thereby increasing the risk that the estimated fair value (i.e., the carrying amount) of the portion of our investment portfolio that is carried at fair value in our financial statements is not reflective of the prices at which actual transactions could occur.
We have significant holdings in fixed maturity investments that are sensitive to changes in interest rates. A decline in interest rates may reduce the returns earned on new fixed maturity investments, thereby reducing our net investment income, while an increase in interest rates may reduce the value of our existing fixed maturity investments, which could increase our net unrealized losses or reduce our net unrealized gains included in Accumulated other comprehensive income (AOCI). The value of our fixed maturity investments is also subject to risk that certain investments may default or become impaired due to deterioration in the financial condition of issuers of the investments we hold or in the underlying collateral of the security.
In addition, we invest a portion of our assets in limited partnerships and common stock which are subject to greater market volatility than our fixed maturity investments. Limited partnership investments generally provide a lower level of liquidity than fixed maturity or equity investments, which may also limit our ability to withdraw funds from these investments. The timing and amount of income or losses on such investments is inherently variable and can contribute to volatility in reported earnings.
Further, we hold a portfolio of commercial mortgage loans. We are subject to risk related to the recoverability of loan balances, which is influenced by declines in the estimated cash flows from underlying property leases, fair value of collateral, refinancing risk and the creditworthiness of tenants of credit tenant loan properties, where lease payments directly service the loan. Any changes in actual or expected collections would result in a charge to earnings.
As a result of these factors, we may not earn an adequate return on our investments, may be required to write down the value of our investments and may incur losses on the disposition of our investments all of which could materially adversely affect our business, results of operations and financial condition.
Tech & Innovation
Total Risks: 2/21 (10%)Above Sector Average
Cyber Security1 | 4.8%
Cyber Security - Risk 1
Any significant breach in our data security infrastructure or our vendors' facilities and systems could disrupt business, cause financial losses and damage our reputation, and insurance coverage may not be available for claims related to a breach.
A significant breach of our data security infrastructure may result from actions by our employees, vendors, third-party administrators, or unknown third parties or through cyber-attacks. The risk of a breach can exist whether software services are in our or third party administered data centers or are cloud-based software services. Breaches have occurred, and may occur again, in our systems and in the systems of our vendors and third-party administrators.
Such a breach could affect our data framework or cause a failure to protect the personal information of our customers, claimants or employees, or sensitive and confidential information regarding our business or policyholders and may result in operational impairments and financial losses, significant harm to our reputation and the loss of business with existing or potential customers. The breach of confidential information also could give rise to legal liability and regulatory action under data protection and privacy laws, as well as evolving regulation in this regard. During the second quarter of 2023, we were notified of a breach in the file transfer software, MOVEit Transfer, used by a vendor of one of our third-party administrators. This incident resulted in required breach notifications to the Company's long-term care policyholders, with such notifications made by the subject vendor. While we do not believe such notifications and resultant actions will have a material adverse effect on our business, this or similar incidents, or any other such breach of our or our vendors' data security infrastructure could have a material adverse effect on our business, results of operations and financial condition.
As previously disclosed, we sustained a sophisticated cybersecurity attack in March 2021 involving ransomware that caused a network disruption and impacted certain of our systems. Our investigation into the incident revealed that an unauthorized third party copied some personal information relating to certain current and former employees, contract workers and their dependents and certain other persons, including some policyholders. Although we currently have no indication that the impacted data has been misused, or that CNA or its policyholder data was specifically targeted by the unauthorized third party, we may be subject to subsequent investigations, claims or actions in addition to other costs, fines, penalties, or other obligations related to impacted data, whether or not such data is misused. In addition, the misuse, or perceived misuse, of sensitive or confidential information regarding our business or policyholders could cause harm to our reputation and result in the loss of business with existing or potential customers, which could adversely impact our business, results of operations and financial condition.
Although we maintain cybersecurity insurance coverage insuring against costs resulting from cyber-attacks (including the March 2021 attack), we do not expect the amount available under our coverage policy to cover all losses from cyber-attacks. In addition, potential disputes with our insurers about the availability of insurance coverage could occur. Further, should we experience future cyber incidents, or should industry trends drive rate increases resulting from growth in volume and significance of cyber incidents broadly, we may incur higher costs for cybersecurity insurance coverage.
The risks relating to future breaches in our, or our vendors', data security infrastructure, including in connection with cyber incidents, could have a material adverse effect on our business, results of operations or financial condition or may result in operational impairments and financial losses, as well as significant harm to our reputation.
Technology1 | 4.8%
Technology - Risk 1
We may be adversely affected by technological changes or disruptions in the insurance marketplace.
Technological changes in the way insurance transactions are completed in the marketplace, and our ability to react effectively to such change, may present significant competitive risks. For example, more insurers are utilizing "big data" analytics to make underwriting and other decisions that impact product design and pricing. If such utilization is more effective than how we use our data and information, we will be at a competitive disadvantage. There can be no assurance that we will continue to compete effectively with our industry peers due to technological changes; accordingly, this may have a material adverse effect on our business, results of operations and financial condition.
In addition, agents and brokers, technology companies, or other third parties may create alternate distribution channels for commercial business that may adversely impact product differentiation and pricing. For example, they may create a digitally enabled distribution channel that may adversely impact our competitive position. Our efforts or the efforts of agents and brokers with respect to new products or alternate distribution channels, as well as changes in the way agents and brokers utilize greater levels of data and technology, could adversely impact our business relationship with independent agents and brokers who currently market our products, resulting in a lower volume and/or profitability of business generated from these sources.
Ability to Sell
Total Risks: 2/21 (10%)Above Sector Average
Competition2 | 9.5%
Competition - Risk 1
We face intense competition in our industry; we may be adversely affected by the cyclical nature of the property and casualty business and the evolving landscape of our distribution network.
All aspects of the insurance industry are highly competitive and we must continuously allocate resources to refine and improve our insurance products and services to remain competitive. We compete with a large number of stock and mutual insurance companies and other entities, some of which may be larger or have greater financial or other resources than we do, for both distributors and customers. This includes agents, brokers and managing general underwriters who may increasingly compete with us to the extent that markets continue to provide them with direct access to providers of capital seeking exposure to insurance risk. Insurers compete on the basis of many factors, including products, price, services, ratings and financial strength. The competitor landscape has evolved substantially in recent years, with significant consolidation and new market entrants, such as insurtech firms, resulting in increased pressures on our ability to remain competitive, particularly in obtaining pricing that is both attractive to our customer base and risk-appropriate to us.
In addition, the property and casualty market is cyclical and has experienced periods characterized by relatively high levels of price competition, resulting in less restrictive underwriting standards and relatively low premium rates, followed by periods of relatively lower levels of competition, more selective underwriting standards and relatively high premium rates. We may lose business to competitors offering competitive insurance products at lower prices. As a result, our premium levels and expense ratio could be materially adversely impacted.
We market our insurance products worldwide primarily through independent insurance agents, insurance brokers, and managing general underwriters who also promote and distribute the products of our competitors. Any change in our relationships with our distribution network agents, brokers or managing general underwriters, including as a result of consolidation or their increased promotion and distribution of our competitors' products, could adversely affect our ability to sell our products. As a result, our business volume and results of operations could be materially adversely impacted.
Competition - Risk 2
We face considerable competition within our industry for qualified, specialized talent and any significant inability to attract and retain talent may adversely affect the execution of our business strategies.
The successful execution of our business strategies depends on our ability to attract and retain qualified talent. Due to the intense competition in our industry and from businesses outside the industry for qualified employees, especially those in key positions and those possessing highly specialized knowledge and industry experience in areas such as underwriting, data and analytics and technology, we may encounter obstacles to our ability to attract and retain such employees, which could materially adversely affect our business, results of operations and financial condition.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.
FAQ
What are “Risk Factors”?
Risk factors are any situations or occurrences that could make investing in a company risky.
The Securities and Exchange Commission (SEC) requires that publicly traded companies disclose their most significant risk factors. This is so that potential investors can consider any risks before they make an investment.
They also offer companies protection, as a company can use risk factors as liability protection. This could happen if a company underperforms and investors take legal action as a result.
It is worth noting that smaller companies, that is those with a public float of under $75 million on the last business day, do not have to include risk factors in their 10-K and 10-Q forms, although some may choose to do so.
How do companies disclose their risk factors?
Publicly traded companies initially disclose their risk factors to the SEC through their S-1 filings as part of the IPO process.
Additionally, companies must provide a complete list of risk factors in their Annual Reports (Form 10-K) or (Form 20-F) for “foreign private issuers”.
Quarterly Reports also include a section on risk factors (Form 10-Q) where companies are only required to update any changes since the previous report.
According to the SEC, risk factors should be reported concisely, logically and in “plain English” so investors can understand them.
How can I use TipRanks risk factors in my stock research?
Use the Risk Factors tab to get data about the risk factors of any company in which you are considering investing.
You can easily see the most significant risks a company is facing. Additionally, you can find out which risk factors a company has added, removed or adjusted since its previous disclosure. You can also see how a company’s risk factors compare to others in its sector.
Without reading company reports or participating in conference calls, you would most likely not have access to this sort of information, which is usually not included in press releases or other public announcements.
A simplified analysis of risk factors is unique to TipRanks.
What are all the risk factor categories?
TipRanks has identified 6 major categories of risk factors and a number of subcategories for each. You can see how these categories are broken down in the list below.
1. Financial & Corporate
Accounting & Financial Operations - risks related to accounting loss, value of intangible assets, financial statements, value of intangible assets, financial reporting, estimates, guidance, company profitability, dividends, fluctuating results.
Share Price & Shareholder Rights – risks related to things that impact share prices and the rights of shareholders, including analyst ratings, major shareholder activity, trade volatility, liquidity of shares, anti-takeover provisions, international listing, dual listing.
Debt & Financing – risks related to debt, funding, financing and interest rates, financial investments.
Corporate Activity and Growth – risks related to restructuring, M&As, joint ventures, execution of corporate strategy, strategic alliances.
2. Legal & Regulatory
Litigation and Legal Liabilities – risks related to litigation/ lawsuits against the company.
Regulation – risks related to compliance, GDPR, and new legislation.
Environmental / Social – risks related to environmental regulation and to data privacy.
Taxation & Government Incentives – risks related to taxation and changes in government incentives.
3. Production
Costs – risks related to costs of production including commodity prices, future contracts, inventory.
Supply Chain – risks related to the company’s suppliers.
Manufacturing – risks related to the company’s manufacturing process including product quality and product recalls.
Human Capital – risks related to recruitment, training and retention of key employees, employee relationships & unions labor disputes, pension, and post retirement benefits, medical, health and welfare benefits, employee misconduct, employee litigation.
4. Technology & Innovation
Innovation / R&D – risks related to innovation and new product development.
Technology – risks related to the company’s reliance on technology.
Cyber Security – risks related to securing the company’s digital assets and from cyber attacks.
Trade Secrets & Patents – risks related to the company’s ability to protect its intellectual property and to infringement claims against the company as well as piracy and unlicensed copying.
5. Ability to Sell
Demand – risks related to the demand of the company’s goods and services including seasonality, reliance on key customers.
Competition – risks related to the company’s competition including substitutes.
Sales & Marketing – risks related to sales, marketing, and distribution channels, pricing, and market penetration.
Brand & Reputation – risks related to the company’s brand and reputation.
6. Macro & Political
Economy & Political Environment – risks related to changes in economic and political conditions.
Natural and Human Disruptions – risks related to catastrophes, floods, storms, terror, earthquakes, coronavirus pandemic/COVID-19.
International Operations – risks related to the global nature of the company.
Capital Markets – risks related to exchange rates and trade, cryptocurrency.