Quiver Quantitative

Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - LLY

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A.Risk Factors

In addition to the other information contained in this Annual Report on Form 10-K, the following risk factors should be considered carefully in evaluating our company. It is possible that our business, financial condition, liquidity, cash flows, results of operations, reputation, and prospects could be materially adversely affected by any of these risks. Additional risks and uncertainties not presently known to us or that we currently believe to be immaterial could also adversely affect our business, financial condition, liquidity, cash flows, results of operations, reputation, and prospects.

Risks Related to Our Business and Industry

Pharmaceutical research and development is very costly and highly uncertain; we may not succeed in developing, licensing, or acquiring commercially successful products sufficient in number or value to replace revenues of products that have lost or will lose intellectual property protection or are displaced by competing products or therapies.

There are many difficulties and uncertainties inherent in pharmaceutical research and development, the introduction of new products and indications, business development activities to enhance or refine our product pipeline, and commercialization of our products.

There is a high rate of failure inherent in drug discovery and development. To bring a product from the discovery phase to market takes considerable time and entails significant cost. Failure or results that misalign with expectations can occur at any point in the process, including in later stages after substantial investment, following meaningful cost for manufacturing capabilities and inventory to prepare for launch, and after we and others may have attributed significant value for these potential products. We may also fail to allocate research and development resources efficiently, fail to pursue or invest sufficiently in product candidates or indications that may have been successful, or fail to optimally balance trial design, conduct, and speed to accomplish desired outcomes.

We regularly submit new product candidates and indications to regulatory agencies for approval, including highly anticipated candidates such as orforglipron. Regulatory agencies establish high hurdles for the efficacy and safety of new products and indications. Delay, uncertainty, unpredictability, and inconsistency in drug approval processes across markets and agencies can result in delays in product launches, lost market opportunities, impairment of inventories, and other negative impacts.

We cannot state with certainty when or whether our products and indications now under development will be approved or launched; whether, if initially granted, such approval will be maintained; whether we will be able to develop, license, or otherwise acquire additional product candidates, indications, or products; or whether our products and indications, once launched, will be commercially successful.

Through internal innovation and business development we must maintain a flow of successful products and indications or line extensions sufficient both to cover our substantial research and development costs and investments and to replace revenues that are lost as profitable products become subject to pricing controls, lose intellectual property exclusivity, are displaced by competing products, or therapies, or experience a reduction in patient access. Our dependence on, or focus in, one or more key products or product classes exacerbates this risk. In addition, the growth of our business and revenue base increases the risk that products developed or acquired by us may not provide adequate value to sustain further long-term growth.

We engage in various forms of business development activities to enhance or refine our product pipeline and development capabilities, including licensing arrangements, co-development agreements, co-promotion arrangements, distribution and promotion agreements, joint ventures, acquisitions, equity investments, and divestitures. In addition, failures or difficulties in integrating or retaining new personnel or the operations of the businesses, products, or assets we acquire (including related technology, commercial operations, compliance programs, information security, manufacturing, distribution, and general business operations and procedures) may affect our ability to realize the potential benefits of business development transactions and may result in our incurrence of substantial asset impairment or restructuring charges.

We and our products face intense competition, and such competition could have a material adverse effect on our business.

In many cases, our products compete against the leading products of one or more of our competitors. To compete successfully in a highly competitive and increasingly fast-paced global environment, we must deliver innovative, cost-effective products through internal innovation or business development that meet important medical needs, provide improved outcomes and a positive consumer experience for patients, and deliver value to payers. In some cases, the introduction of our own innovative products results in these adverse impacts for our preexisting products. Technological innovation has amplified and we expect will continue to amplify competitive aspects of our business, including by enabling additional participation in and breadth of drug discovery and new healthcare delivery models. Business practices or commercial capabilities that we deploy in light of these or other market dynamics may not prove sufficient.

Regulation of generic and biosimilar products varies around the world and such regulation is complex and subject to ongoing interpretation and implementation by regulatory agencies and courts. Given the importance to us of marketed biologic products and those in our clinical-stage pipeline, such regulation could have a material adverse effect on our business. See Item 1, "Business—Competition" and "Business—Research and Development," for more details. Alternatively, actual or perceived failure of robust generic and biosimilar competition could propel governments to adopt additional policies and legislation that threaten our intellectual property, pricing of our products, or other aspects of our business.

Our success depends on a market that is observant of intellectual property rights and regulatory requirements. Developments that undermine that landscape can significantly impact our business and reputation. For example, we continue to see the production, marketing, and sale of counterfeit, misbranded, adulterated, and mass-compounded incretins in the U.S. and other markets that could materially impact us. In addition to patient safety concerns, improper commercialization and dispensation practices by these actors may inappropriately condition consumer expectations or otherwise disadvantage compliant market participants. Our actions intended to stop or prevent illegal sales of such medicines are costly and may be ineffective. See Item 1, "Business—Government Regulation of Our Operations and Products," for additional information on market risks related to counterfeit, misbranded, adulterated, and mass-compounded medicines. If inadequately regulated, e-commerce may increase the prevalence of dangerous counterfeit or mass-compounded products and scams, potentially exposing patients to significant risks.

To capitalize on the rapid development of next-generation technologies and otherwise effectively compete, we must continue to enhance skill sets and develop our workforce, both in and outside the U.S. We face intense competition for qualified individuals from numerous multinational companies, academic and other research institutions, as well as employers near our manufacturing and other facilities, which has increased and may continue to increase our labor costs.

Public and private actors continue to take aggressive steps to control expenditures for pharmaceuticals by placing restrictions on pricing and reimbursement for, and patient access to, our medicines. Governments and private actors worldwide are demanding greater commercial and clinical value from pharmaceutical companies in the form of strong product differentiation and demonstrated value. We have also observed scrutiny of pricing and access disparities across jurisdictions.

In November 2025, we announced preliminary voluntary agreements with the U.S. government in which, among other arrangements, we agreed to implement measures to lower Medicaid and certain other drug prices for U.S. patients and to launch new medicines with a more balanced pricing approach across developed nations. We face risks and uncertainty associated with these arrangements and negotiating the definitive agreements, including potential delays and the possibility of unfavorable terms related to pricing, access, and other key objectives. Among other risks, we may fail to adequately capitalize on the additional U.S. access to our obesity medicines resulting from these agreements, particularly if the revenues generated from such expanded access are insufficient to offset pricing concessions. Moreover, the outcome of these arrangements and broader U.S. policy efforts to align domestic pharmaceutical pricing with international benchmarks from countries with competing healthcare cost containment priorities is uncertain and could negatively impact our pricing strategies, product demand or access, or competitive positioning across global markets, and may result in reduced revenue in certain markets.

In general, securing and growing access for our obesity medicines is an important factor in the success of our business. Among other considerations, payers in various international markets do not currently provide coverage for obesity medicines for weight loss indications, requiring patient self-pay. In addition, patient self-pay sales through LillyDirect represented a growing portion of our business in 2025, and we have launched, and continue to explore, new partnerships and tools, including through LillyDirect, to further expand access to our medicines.

Additional policies, regulations, legislation, or enforcement, including because of the regulatory priorities of the U.S. executive branch, state attorneys general, and regulatory authorities worldwide, could adversely impact our business and consolidated results of operations. In January 2026, HHS selected Trulicity and Verzenio as additional medicines subject to government-set prices to be effective in 2028. Given our product portfolio, we expect additional products will be selected in future years, which would have the effect of accelerating revenue erosion. Within the U.S., state level transparency initiatives, importation rules, reporting requirements, and mandated programs, including the establishment of drug affordability boards with the power to set upper payment limits on certain drugs, have also increased administrative costs, in some cases, compromised confidential business practices and otherwise detrimentally impacted our business. Continued expansion of the 340B program and growth of entities claiming entitlement to 340B pricing, including in ways that may be inconsistent with the statutory scheme and through state laws that purport to mandate 340B sales to contract pharmacies, impact our revenue on an increasing percentage of sales. Changes to the calculation of rebates under the Medicaid program could also increase our Medicaid rebate obligations and decrease the prices charged to 340B covered entities, which could have a significant impact on our business. For more details, see Item 1, "Business—Regulations and Private Payer Actions Affecting Pharmaceutical Pricing, Reimbursement, and Access."

Further, restrictive or unfavorable pricing, coverage, or reimbursement determinations for our medicines or product candidates by governments, regulatory agencies, courts, or private actors, including in relation to the IRA, reference pricing, or compulsory licensing, may adversely impact our business and financial results.

In addition, government price reporting and payment regulations are complex, and require ongoing assessment of the methods by which we calculate and report pricing. In addition, changes to calculation methodologies could adversely affect our financial position or consolidated results of operations in any given period.

For more details, see Item 1, "Business—Regulations and Private Payer Actions Affecting Pharmaceutical Pricing, Reimbursement, and Access," Item 7, "Management's Discussion and Analysis—Executive Overview—Other Matters—Trends Affecting Pharmaceutical Pricing, Reimbursement, and Access and Certain Other Regulatory Developments," and Item 8, "Financial Statements and Supplementary Data—Note 16: Contingencies."

Pharmaceutical products can develop safety or efficacy concerns, which could have a material adverse effect on our revenues, income, and reputation.

Pharmaceutical products receive regulatory approval based on data obtained in controlled clinical trials of fixed duration and defined populations. After approval and launch, the products are used for longer periods of time by much larger numbers of patients, which may lead to identifying new or expanded safety or efficacy concerns. We and others (including regulatory agencies and private payers) collect extensive information on the efficacy and safety of our marketed products by continuously monitoring the use of our products in the marketplace. In addition, we or others (including our competitors, in some cases) may conduct post-marketing clinical studies on efficacy and safety of our marketed products. New safety or efficacy data may result in product label changes, or other measures that could reduce the product's market acceptance and result in declining sales. Any of these outcomes could result in material financial, legal, commercial, or reputational harm to our business.

We derive a significant percentage of our total revenue from relatively few products and sell our products through consolidated supply chain entities, which subjects us to various risks.

We derived direct product and/or collaboration and other revenues of more than $3 billion for each of Mounjaro, Zepbound, Verzenio, Trulicity, Taltz, and Jardiance (including Glyxambi, Synjardy, and Trijardy XR) that collectively accounted for 82 percent of our total revenues in 2025. In particular, Mounjaro and Zepbound accounted for 56 percent of our total revenues in 2025, and we expect cardiometabolic health products will continue to represent a significant and growing portion of our business, revenues, and prospects. Factors such as loss of patent protection, changes in prescription rates, material product liability or pricing claims or litigation, unexpected side effects or safety concerns, significant changes or fluctuations in demand, channel dynamics, regulatory proceedings and investigations, negative publicity affecting doctor or patient confidence, pressure from existing or new competitive products, pipeline developments by us or our competitors, counterfeit and illegally compounded drugs, changes in labeling, pricing, and insufficient access, or reimbursement, or actual or perceived supply shortages, imbalances, or disruptions for these products or any of our other major products could materially impact our results of operations or result in significant and sudden declines or volatility in the trading price of our common stock and market capitalization.

In addition, in the U.S., most of our products are distributed through a limited number of wholesalers. If one of these significant wholesalers encounters financial or other difficulties or otherwise is unable or unwilling to support distribution of our products, it could cause disruption to our supply chain or we might be unable to timely collect the amounts that the wholesaler owes us, which could negatively impact our results of operations. See Item 1, "Business—Marketing and Distribution," for more details. Challenges to U.S. retail pharmacies due to pharmacy benefit manager reimbursement pressures, among other things, have resulted and may result in financial difficulties for some pharmacies that impact patient experiences, lead to determinations by certain pharmacies to not carry one or more of our significant products or threaten the viability of these pharmacies, which could negatively impact our business and results of operations.

These practices in some cases create difficulty in obtaining or maintaining timely or adequate pricing or formulary placement of our products. For example, in July 2025, CVS Caremark, the pharmacy benefit management division of CVS Health, stopped covering Zepbound as a preferred obesity management medicine on some insurance plans, which has negatively impacted access for patients covered under these plans.

Pharmacy benefit manager practices have come under increased scrutiny from U.S. policymakers at the federal and state levels who have proposed and enacted legislation or administrative rules, or undertaken enforcement actions intended to address concerns regarding the impact these intermediaries have on drug pricing and patients’ out of pocket costs. For additional information on pricing and reimbursement for our pharmaceutical products, see Item 1, "Business—U.S. Private Sector Dynamics" and "Regulations and Private Payer Actions Affecting Pharmaceutical Pricing, Reimbursement, and Access—U.S."

Risks Related to Our Intellectual Property

We depend on products with intellectual property protection for most of our revenues, cash flows, and earnings; the loss of effective intellectual property protection for certain of our products has resulted, and in the future is likely to continue to result, in rapid and severe declines in revenues for those products.

For example, Trulicity will lose significant patent and remaining data protections in the next few years. Some products also lose patent protection as a result of successful third-party challenges. Patent expirations of competitive products may also shift market conditions for our products by contracting the market for branded products, impacting product access, or otherwise intensifying pricing pressures across similar treatments.

For non-biologic products, loss of exclusivity typically results in the entry of one or more generic competitors, leading to a rapid and severe decline in revenues, especially in the U.S. Generic pharmaceutical companies have in some cases introduced a generic product before resolution of any related patent litigation.e., biosimilars).

Our success depends in part on our ability to obtain and defend patent rights and other intellectual property rights that are important to the commercialization of our products and product candidates. The patent positions of pharmaceutical and biotechnology companies can be highly uncertain and often involve complex legal, scientific, and factual questions. Third parties have and may challenge, invalidate, or circumvent our patents and patent applications relating to our products, product candidates, and technologies. In addition, our patent positions might not protect us against competitors with similar products or technologies because competing products or technologies may not be deemed to infringe our patents. Moreover, patents relating to particular products, uses, formulations, or processes may not preclude other manufacturers from employing alternative processes or marketing alternative products or formulations that compete with our patented products. In addition, competitors or other third parties may assert claims that our activities infringe patents or other intellectual property rights held by them, or allege a third-party right of ownership in our existing intellectual property.

Patents relating to pharmaceutical products are often obtained early in the development process.

Our long-term success depends on intellectual property protection; if our intellectual property rights are invalidated, circumvented, or weakened, our business will be adversely affected.

Our long-term success depends on our ability to continually discover or acquire, develop, and commercialize innovative medicines. Without strong intellectual property protection, we would be unable to generate the returns necessary to support our significant investments in research and development, as well as the other expenditures required to bring new medicines and indications to the market. Intellectual property protection varies throughout the world and is subject to change over time, depending on local laws and regulations. Changes to such laws, regulations, and enforcement practices could reduce protections for our innovative products and indications. For example, an agreement-in-principle announced in December 2025 between the European Commission, Council and Parliament to revise the EU's general pharmaceutical legislation would make conditional the length of certain pharmaceutical intellectual property incentives, including by reductions in maximum data protection periods. Changes proposed by the USPTO and by certain bills in Congress to limit the number of, and differences between, patents obtained could also affect the scope of patent protection for our products in the U.S.

In recent years, U.S. government officials have proposed the exercise of "march-in-rights" and various other measures that, if enacted, could have a negative impact on our patent rights. If any such proposals are adopted, our business and results of operations could be adversely affected.

Also in the U.S., in addition to the process for challenging patents set forth in the BPCIA, which applies to biological products, the Hatch-Waxman Act provides generic companies substantial incentives to seek to invalidate our patents covering small molecule pharmaceutical products. As a result, we expect that our U.S. patents on major pharmaceutical products, including biologics, will continue to be routinely challenged in litigation and may not be upheld. The use of IPR proceedings after the institution of litigation pursuant to the BPCIA or Hatch-Waxman Act is currently a topic of debate among legislators and the future ability of our competitors to use IPR proceedings as an alternative to Hatch-Waxman Act or BPCIA litigation procedures to challenge our patents remains uncertain. The USPTO's ability to apply these

procedures is being challenged, and it is not clear how these procedures will affect the ability of our competitors to institute IPR proceedings.

We face many generic manufacturer challenges to our patents outside the U.S. as well. The entry of generic competitors typically results in rapid and severe declines in revenues. In addition, competitors or other third parties may claim that our activities infringe patents or other intellectual property rights held by them. Intellectual property threats across international markets include policies which favor domestic competitors or are otherwise disadvantageous to our products, challenges to our patents’ validity in foreign courts, and government policies that force technology transfer or undermine or nullify patent protections under the guise of health emergencies or other public interests. See Item 1, "Business—Patents, Trademarks, and Other Intellectual Property Rights," and Item 8, "Financial Statements and Supplementary Data—Note 16: Contingencies," for more details.

Risks Related to Our Operations

Failure, inadequacy, breach of, or unauthorized access to, our IT systems or those of our third-party service providers, unauthorized access to our confidential information, or violations of data protection laws, could result in material harm to our business and reputation.

Important confidential information owned by us, our business partners, or other third parties is stored in our information systems, networks, and facilities or those of third parties. We also rely, to a large extent, on the efficient and uninterrupted operation of complex information technology systems, infrastructure, cloud technologies, and hardware (together, IT systems), some of which are within our control and some of which are within the control of third parties, to accumulate, process, store, and transmit large amounts of confidential information and other data. We are subject to a variety of evolving and developing laws and regulations around the world related to privacy, data protection, and data security. Maintaining the security, confidentiality, integrity, and availability of our IT systems and confidential information is vital to our business. A cybersecurity incident could also impose business costs through lost productivity, disruption to manufacturing, and costs to remediate and recover from the incident.

IT systems are inherently vulnerable to system inadequacies, inadequate controls or procedures, operating failures, unauthorized access, service interruptions or failures, security breaches, malicious intrusions, theft, exfiltration, ransomware, or cyber-attacks from a variety of sources, which may remain undetected for significant periods of time. From time to time, we update, transition, acquire, or expand use of our and third-party IT systems, which may result in heightened vulnerability. Some third-party IT systems that are necessary for the operation of our business processes are maintained outside of our control but would impact business operations if compromised as a result of a cyber-attack. Vulnerabilities, inadequacies, or failures are in many cases more acute for IT systems associated with recently acquired businesses, and we may be unable to entirely address such vulnerabilities, inadequacies, or failures immediately after acquiring a business or ever. As a result, our newly acquired businesses are in some cases more vulnerable to failures, interruptions, breaches, intrusions, theft, exfiltration, or attacks.

Cyber-attacks are growing in their frequency, sophistication, and intensity, and are becoming increasingly difficult to detect, mitigate, or prevent. Breaches

resulting in the compromise, disruption, degradation, manipulation, loss, theft, exfiltration, destruction, or unauthorized disclosure or use of confidential information, or the unauthorized access to, disruption of, interference with, or attack of, our IT systems, products and services, can occur in a variety of ways, including negligent or wrongful conduct by employees or others with permitted access to our systems and information, or wrongful conduct by hackers, competitors, organized criminal groups, nation-states, state-sponsored or affiliated groups, current or former company personnel, and other actors. Our third-party partners, including third-party providers of data hosting or cloud services, as well as suppliers, distributors, alliances, and other third parties with whom we may share data, face similar risks, which could affect us directly or indirectly. Third-party access to our proprietary data may also enable such party's development of competing products or enhancement of services sold to competitors, thereby eroding our competitive advantage. We and others in the healthcare industry have been and continue to be targets for cyber-attacks, and the number of threats has increased over time.

Unauthorized disclosure of personally identifiable information could further expose us to significant sanctions for violations of data privacy laws and regulations around the world, subject us to litigation, or damage public trust in our company. In addition, IT system security in jurisdictions outside the U.S. is in many cases weaker and may result in additional costs, uncertainties, and risks.

We are subject to various laws and regulations globally regarding privacy and data protection, including laws and regulations relating to the collection, storage, handling, use, disclosure, transfer, and security of personal information. The legislative and regulatory environment regarding privacy and data protection is continuously evolving and the subject of significant attention by regulators and private parties globally. Regulators are imposing new data privacy and security requirements, including new and greater monetary fines or penalties for privacy violations, and jurisdictions where we operate have passed, and continue to propose, privacy and data protection legislation and/or regulations. For example, we are subject to existing laws in the EU, United Kingdom, China, and U.S., all of which provide for substantial penalties for noncompliance. Other jurisdictions where we operate have passed, or continue to propose, similar legislation and regulations. Many jurisdictions, including the U.S., the EU, and China have passed, or expect to pass, restrictions on international data transfers and local access requirements. Compliance with current and future laws and regulations requires implementing costly new controls and processes, may restrict certain core activities, including impacting our ability to carry out research and clinical studies across multiple geographies, and creates the potential for data misuse or espionage.

To date, system inadequacies, inadequate controls or procedures, operating failures, unauthorized access, service interruptions or failures, security breaches, malicious intrusions, theft, exfiltration, ransomware, cyber-attacks, and the compromise, disruption, degradation, manipulation, loss, theft, exfiltration, destruction, or unauthorized disclosure or use of confidential information, or the unauthorized access to, disruption of, interference with, or attack of, our IT systems, products and services that we have encountered have not had a material impact on our business strategy, results of operations or financial condition. We maintain cyber liability insurance; however, this insurance may not be sufficient to cover the financial, operational, legal, business, or reputational losses that may result from an interruption or breach of our IT systems. We continue to implement measures in an effort to protect, detect, respond to, remediate, and minimize or prevent these

risks and to enhance the resiliency of our IT systems; however, these measures may not be successful, and we may fail to detect or remediate system inadequacies, inadequate controls or procedures, operating failures, unauthorized access, service interruptions or failures, security breaches, malicious intrusions, theft, exfiltration, ransomware, cyber-attacks, or other compromises of our systems. Any of these events could result in material financial, operational, legal, business, or reputational harm to our business. For a discussion of our management of cybersecurity risks, see Item 1C, "Cybersecurity—Risk Management and Strategy" and "Cybersecurity—Governance."

Manufacturing, quality, or supply chain difficulties, disruptions, or shortages could lead to product supply problems or other negative outcomes.

We are continuing the significant expansion of our manufacturing capabilities and substantial investment in long-term supply agreements to fortify our supply and support our ability to meet anticipated demand for our products. Pharmaceutical manufacturing is complex and highly regulated. Supply chain difficulties, disruptions or shortages may arise from our or contracted supply chain activity as well as from external environmental factors. Variability in demand and supply for our products can also challenge supply capacity and resiliency. Supply and channel dynamics in some cases contribute to variability in financial results for our products from period to period.

Difficulties related to supply chain activities have resulted and may in the future result in delays and disruptions in the manufacturing, distribution, and sale of our products and/or product shortages, leading to lost revenue, increased costs, reduced market opportunities, and the possibility of additional market entrants. In select cases, supply constraints may also lead to pauses, discontinuations, or other product availability issues in one or more markets, which could have a material adverse effect on our consolidated results of operations, cash flows, and reputation.

Regional or single-source dependencies may in some cases accentuate risks and costs (e.g., tariffs) related to manufacturing and supply. See, Item 1A, "Risk Factors—Risks Related to Our Operations—Reliance on third-party relationships and outsourcing arrangements could adversely affect our business," and "Risk Factors—Risks Related to Doing Business Internationally—Our global operations subject us to risks, including as related to uneven economic growth or downturns, international trade, and other global disruptions, geopolitical tensions, or disputes" for more details.

External environmental factors have also caused, and in the future may cause, delays in, and/or increase costs related to, distribution of our medicines, the construction or other acquisition of additional manufacturing capacity, procurement activity, and supplier or contract manufacturer arrangements. Relevant external environmental factors include (i) tariffs, (ii) cost inflation and global transportation and logistics challenges; (iii) labor market dynamics; (iv) natural disasters (including increased instances or severity of natural disasters or other events that may be due to climate change); (v) public health outbreaks, epidemics, or pandemics; (vi) periods of uneven economic growth or downturns; and (vii) the emergence or escalation of, or responses to international tension and conflicts.

Despite our ongoing efforts to meet projected worldwide demand for our products by obtaining additional internal and contracted manufacturing capacity, there can be no assurances that such capacity increases that we expect will be needed to meet

future demand will be realized as expected or that we will meet demand in launched markets in the future. The foregoing risks and uncertainties could negatively impact our consolidated results of operations and reputation. See Item 1, "Business—Raw Materials and Product Supply," and Item 7, "Management's Discussion and Analysis—Financial Condition and Liquidity," for more details.

Reliance on third-party relationships and outsourcing arrangements could adversely affect our business.

We rely on third parties, including suppliers, distributors, alliances and collaborations with other pharmaceutical and biotechnology companies, and third-party service providers, for selected aspects of product and clinical development, manufacturing, commercialization, hosting of and support for IT systems, product distribution, and certain financial transactional processes. To support anticipated demand for our current and prospective products and further other business initiatives, we have expanded relationships with contract manufacturing organizations, entities supporting consumer directed access channels, artificial intelligence vendors, and other third parties in recent periods.

The foregoing risks may be heightened in jurisdictions outside the U.S., where we may have fewer alternative providers as well as face additional costs, uncertainties, and risks. Among other third-party providers, we, and the pharmaceutical industry generally, depend on China-based suppliers for portions of our supply chain. U.S. officials have enacted and continue to consider legislation or other actions that are intended to limit supply chain reliance on China, including the BIOSECURE Act. In addition, historically, geopolitical tensions between the U.S. and China have led to the imposition of tariffs, sanctions, and certain other business restrictions between the U.S. and China. In 2025, the U.S. government imposed new tariffs on Chinese goods and China responded with tariffs on select U.S. goods. Tariffs have been imposed or proposed on a variety of other geographies in which we have third-party suppliers. If enacted, additional measures could result in supply disruptions or delays, increase costs more significantly, or invite further retaliatory measures, any of which could negatively impact our business and results of operations. See Item 1A, "Risk Factors—Risks Related to Doing Business Internationally—Our global operations subject us to risks, including as related to uneven economic growth or downturns, international trade, and other global disruptions, geopolitical tensions, or disputes" for additional information. In some cases, product or indication approvals depend on the outcome of regulatory inspections of third parties on which we rely. Third-party inspection outcomes have and may in the future delay or prevent product launches and otherwise negatively affect our business.

Our use of artificial intelligence (AI) or other emerging technologies could adversely impact us.

We deploy AI and other emerging technologies in various facets of our operations and we continue to explore the development and use of AI technologies. We have also entered into, and may continue to enter into, partnerships and collaborations relating to the use of AI technology to aid in drug discovery and other efforts. The rapid advancement of these technologies presents opportunities for us in research, manufacturing, commercialization, and other business endeavors but also entails risks, including that AI-generated content,

analyses, or recommendations we utilize could be inadequate, or that our competitors may more quickly or effectively adopt AI capabilities. There are significant risks involved in developing and deploying AI, and there can be no assurance that our usage of AI or our significant investments in AI will enhance our products or services or be beneficial to our business, including our efficiency or profitability. Our use of AI or other emerging technologies could also exacerbate regulatory, cybersecurity, and other significant risks.

Effective development, management, and use of AI technologies is novel and complex, and there are technical challenges associated with achieving desired levels of accuracy, efficiency, and reliability. These factors may undermine our ability to effectively utilize AI or create competitive disadvantages should our competitors more skillfully make use of AI capabilities. Further, if we are unable to effectively manage the use of AI technologies by our employees, our confidential information, intellectual property, or reputation could be put at risk.

AI may enable new competitors in drug discovery and enhance the capabilities of existing competitors, thereby broadening and intensifying competitive dynamics. In addition, developing laws and regulations related to AI or other emerging technologies create uncertainty, may require significant resources to adjust business practices for compliance, and in some cases, may limit our ability to use AI-based software. Several governmental authorities have already proposed or enacted laws and other guidance governing AI, such as the EU Artificial Intelligence Act.

Risks Related to Doing Business Internationally

Our global operations subject us to risks, including as related to uneven economic growth or downturns, international trade, and other global disruptions, geopolitical tensions, or disputes.

Economic slowdowns could lead to decreased utilization of our products globally or in specific markets, affecting our sales. Additionally, some customers, including governments or other entities reliant upon government funding and cash-pay patients, may be unable to pay for our products fully or in a timely manner. Also, if our customers, suppliers, or collaboration partners experience financial difficulties, we could experience slower customer collections, greater bad debt expense, or performance defaults by suppliers or collaboration partners. Similarly, uneven economic growth or downturns could limit our ability to access capital markets.

Our global operations and complex supply chain expose us to legislation and regulatory action in or regarding foreign jurisdictions as well as geopolitical and other cross-border risks. Trade and other global disputes, interruptions, and developments, including those related to tariffs, trade protection measures, import or export licensing requirements or disagreements with authorities regarding tariff classifications, transfer pricing, or valuations, the imposition of trade sanctions or similar restrictions by the U.S. or other governments, international tension and conflicts, as well as economic stagnation, cost inflation, strains on global transportation, manufacturing, and labor markets, and public health outbreaks, epidemics, or pandemics affect our ability to do business and, in some cases, result in financial, operational, legal, business, or reputational harm. Among other risks, the use of tariffs and other trade restrictions may increase costs, impact clinical trials or sales of our products, result in supply disruptions or delays, or otherwise complicate aspects of our business. In 2025, the U.S. and other countries imposed or reached alignment on new tariffs. In some cases, imposed tariffs have been paused but may come into effect quickly and unpredictably. While pharmaceuticals are exempt from certain of these tariffs, such exemptions may be terminated or may not apply to any future tariffs.

Moreover, tensions between the U.S. and China, which have already led to a series of tariffs and sanctions, as well as other business restrictions, could further escalate based on additional trade restrictions, retaliation thereto, or otherwise, which could significantly impact our business, including by increasing scrutiny of, or restrictions on, market access, operations, and business development transactions. See Item 1A, "Risk Factors—Risks Related to Our Operations—Reliance on third-party relationships and outsourcing arrangements could adversely affect our business," for additional information. The precise impact of tariffs, trade protection measures, and other restrictions may depend on their ultimate scope, timing, and other factors. Given the nature of pharmaceutical regulation and commercialization, we may not be able to offset the burden of increased costs from tariffs and related impacts to any meaningful degree.

In most international markets, we operate in an environment of government-mandated cost-containment programs. In some markets, including the EU, Japan, and China, governments have significant power as large single payors to regulate prices and access criteria or impose other means of cost control. Geopolitical and economic factors have in various cases exacerbated financial pressures on governments with single-payer or government funded healthcare systems, leading to increases in rebates, clawbacks, and other reforms to reimbursement systems, policies and programs. These and similar events have adversely affected, and may continue to adversely affect, us, our business partners, and our customers. For more details, see Item 1, "Business—Regulations and Private Payer Actions Affecting Pharmaceutical Pricing, Reimbursement, and Access." Our arrangements with the U.S. government and broader U.S. policy efforts to align domestic pharmaceutical pricing with international benchmarks may further pressure international payers, and the outcome of competing U.S. and international pricing objectives is uncertain. See Item 1A, "Risk Factors—Risks Related to Our Business and Industry—"

In addition to developments related to our business or financial results, or those of our competitors, uneven economic growth, downturns, or other negative global developments could undermine our growth or result in significant and sudden declines in the trading price of our common stock and market capitalization.

Changes in foreign currency rates, interest rate risks, and inflation or deflation affect our results of operations.

As a global company, we face foreign currency risk exposure from fluctuating currency exchange rates, interest rate risk from our exposure to floating and variable interest rates, and existing and expected rates of inflation or deflation in the U.S. and other jurisdictions, each of which impacts our results of operations. We are a net receiver of most foreign currencies, and our results of operations are adversely impacted when the U.S. dollar is strong compared to foreign currencies. Rapid growth in our international business and changes in the global supply chain for our products have impacted and may continue to impact our foreign currency exposure. Further, in the event of an extreme devaluation of local currency in a particular market in which we operate, the price of our products could become unsustainable in the relevant market. Inflationary pressures in recent periods have negatively impacted us and may continue to negatively impact us in various ways, including cost inflation, higher labor costs, and other higher expenses. See Item 7, "Management's Discussion and Analysis—Financial Condition and Liquidity" and Item 8, "Financial Statements and Supplementary Data—Note 1: Summary of Significant Accounting Policies and Implementation of New Financial Accounting Standards," for more details.

Risks Related to Litigation and Government Regulation

We are party to litigation and investigations, which could adversely affect our business.

We are subject to a substantial number of claims, litigation, and investigations involving various current and historical products and practices. We have also filed lawsuits and taken other legal actions to protect our intellectual property and address unlawful practices. Like many companies in our industry, from time to time investigations into aspects of our business include inquiries, subpoenas, and other types of information demands from government and regulatory authorities. There continues to be a significant volume of government and regulatory investigations and litigation against companies operating in our industry, as well as robust regulatory enforcement. Additionally, government and regulatory authorities have considered and

initiated enforcement or other actions across industries to seek alignment with policy initiatives. Such matters could negatively impact our reputation, affect our results of operations, or require us to recognize substantial charges to resolve and, if involving marketed products, could adversely affect sales of the product and our consolidated results of operations in any given period. We may also be unsuccessful in protecting our intellectual property or mitigating harm to us from unlawful practices. The ability to insure against such exposures is limited, and due to a very restrictive market for liability insurance we are predominately self-insured for litigation liability losses for all our currently and previously marketed products.

We are subject to evolving and complex tax laws, which may result in additional liabilities.

We are subject to income taxes in the U.S. and numerous other jurisdictions, and in the course of our business, we make judgments about the expected tax treatment of various transactions and events. Inherent uncertainties exist in estimates of many tax positions due to the complexity of tax laws. Changes in tax laws, regulations, administrative practices, principles, disclosure obligations, and interpretations, as well as events that differ from our expectations, have affected and may adversely affect our effective tax rates, cash flows, and/or results of operations. In addition, tax authorities in the U.S. and other jurisdictions in which we do business routinely examine our tax returns and are expected to increase their scrutiny and examinations of cross-border tax issues, which could unfavorably impact our results of operations and cash flows. Given the uncertainty of positions that could be taken by taxing authorities during the examinations of our tax returns, the ultimate outcome of any tax matters may result in liabilities that are greater than amounts accrued in our estimates for uncertain tax positions and could affect our results of operations in any given period. Modifications to key elements of the U.S. or international tax framework could have a significant impact on our effective tax rate, results of operations, and cash flows. See Item 7, "Management's Discussion and Analysis—Executive Overview—Other Matters—Tax Matters" and Item 8, "Financial Statements and Supplementary Data—Note 14: Income Taxes," for more details.

Regulatory compliance problems could be damaging to the company.

The marketing, promotional, and pricing practices of pharmaceutical manufacturers, as well as the manner in which manufacturers interact with purchasers, prescribers, and patients, are subject to extensive scrutiny and regulation. Many companies, including us, are and have been subject to investigations, litigation, and claims related to these practices asserted by governmental authorities and other parties. Such investigations, litigation, and claims result in substantial expense and other significant consequences, including in some cases criminal charges and fines, criminal and civil penalties, damages, and other monetary or non-monetary remedies, including exclusion from U.S. federal and other healthcare programs. Evolving U.S. and foreign regulatory priorities may result in an increase in such investigations, litigation, and claims.

U.S. and other authorities are regularly and actively proposing, enacting, and pursuing numerous policy, regulatory, and enforcement changes that impact many aspects of our operations. Such changes may undermine our ability to achieve business objectives, may be costly to implement, may provide only limited time for compliance, may change accounting and reporting standards, may carry significant penalties for non-compliance, or may otherwise create

uncertainty. For example, U.S. government authorities have taken and may continue to take actions intended to restrict direct-to-patient advertising and promotion of prescription drugs and biologics. These or other initiatives may influence the ways in which we can market our products, which could negatively affect our business. Moreover, novel regulatory or policy programs such as the FDA Commissioner's National Priority Voucher Pilot Program may attract scrutiny and criticism from various stakeholders. Our participation in such programs, notwithstanding the review processes involved and our adherence to applicable requirements and procedures, may expose us to legal, regulatory, political, and reputational risks.

We rely on the FDA and other global regulatory bodies for appropriate oversight, administration and enforcement across our industry, anyone marketing or purporting to market medicines, and public health. Oversight, administrative, and enforcement changes, delays, inconsistencies, lapses, and failures could materially impact our business and reputation. See Item 1, "Business—Government Regulation of Our Operations and Products," for additional information on regulatory risks, including as related to counterfeit, misbranded, adulterated, and mass-compounded drugs. Regulatory oversight and compliance processes in jurisdictions outside the U.S. may be particularly unpredictable and result in additional costs, uncertainties, and risks.

In addition, we may still be subject to penalties or potential litigation if such laws and regulations are interpreted or applied in a manner inconsistent with our practices.

For example, negative perception of inclusion initiatives, whether due to a perceived over- or under-pursuit of such initiatives, may result in issues hiring or retaining employees, as well as potential investigations, enforcement actions, litigation, reputational harm, or other adverse impacts. Moreover, from time to time we voluntarily establish and publicly announce goals, initiatives, and commitments, including on climate (including greenhouse gas emission reduction goals), social, and other sustainability matters. Conversely, our pursuit or achievement of such goals, initiatives, and commitments may not be viewed favorably by certain stakeholders and could increase scrutiny of our business, negatively affect our reputation, or expose us to investigations, enforcement actions, and litigation.

Unresolved Staff Comments

None.

Item 1C.Cybersecurity

Risk Management and Strategy

We manage cybersecurity threats as part of our oversight, evaluation, and mitigation of enterprise-level risks. We have based our cybersecurity program on industry frameworks, including, among others, the U.S. National Institute of Standards and Technology Cybersecurity Framework, with the goal of building enterprise resilience against an evolving landscape of cybersecurity threats and responding to cybersecurity threats as they materialize. Our program includes monitoring, identification, assessment, and management components, as well as information sharing and escalation components designed to inform management and the board of directors of prospective risks and developments.

Our information security program encompasses functions dedicated to both proactive and reactive management of cybersecurity threats. We implement our cybersecurity program internally through established policies, standards, reference architectures, and the use of enterprise security services that focus on emerging and ongoing cybersecurity risks. Our proactive management of cybersecurity risks entails many actions, including the maintenance of system access restrictions, utilization of data security technology, employee education and training initiatives, and retention of cyber liability insurance, among other measures. We regularly engage third-party auditors and consultants and leverage our internal audit function to assess various facets of our cybersecurity program. These engagements include completion of industry-standard assessments or certifications, maturity model reviews, threat simulations, as well as internal reviews to assess the effectiveness of our cybersecurity processes. We also maintain enterprise-wide processes to oversee and identify risks from cybersecurity threats associated with our use of third-party service providers. As examples, we generally review current and prospective third-party service providers for unacceptable cybersecurity risks, negotiate contractual provisions that require the establishment of third-party cybersecurity controls, and deploy security measures to protect third-party communications. For companies we acquire, the integration process includes plans for alignment with relevant information security policies and procedures.

We assess cybersecurity contingencies within our overall business continuity risk management planning process. Our Information Security team utilizes various tools to prevent, detect, monitor, and react to cybersecurity threats. Our Incident Response Playbook outlines processes, roles, responsibilities, engagements, escalations, notifications, and other communications applicable to the assessment, mitigation, and remediation of realized cybersecurity events. The nature and assessed risk of a realized cybersecurity event dictates the pace and extent of relevant processes, escalations, and communications, including an evaluation of any necessary or required disclosure. Roles and escalation paths range from within the Information Security team up to the Executive Committee, and the board of directors and its committees, as appropriate.

We describe certain risks faced by us from identified cybersecurity threats in Item 1A, "Risk Factors—Risks Related to Our Operations—Failure, inadequacy, breach of, or unauthorized access to, our IT systems or those of our third-party service providers, unauthorized access to our confidential information, or violations of data protection laws, could result in material harm to our business and reputation", "Risk Factors—Risks Related to Our Operations—Manufacturing, quality, or supply chain difficulties, disruptions, or shortages could lead to product supply problems or other negative outcomes", "Risk Factors—Risks Related to Our Operations—Reliance on third-party relationships and outsourcing arrangements could adversely affect our business", and "Risk Factors—Risks Related to Our Operations—Our use of artificial intelligence (AI) or other emerging technologies could adversely impact us."

Governance

Management, under the supervision of our Chief Information Security Officer (CISO), is directly responsible for assessing and managing cybersecurity risks and otherwise implementing our cybersecurity program, which includes our Incident Response Playbook. The CISO reports directly to our Chief Information and Digital Officer (CIDO), who is a member of our Executive Committee and leads our information technology, cybersecurity, digital health, and advanced analytics and data science functions. Our CIDO in turn regularly updates our Executive Committee on cybersecurity matters. Our CISO and CIDO have significant experience managing global cybersecurity threats across the pharmaceutical, technology, entertainment, and defense industries. Each of the CIDO, the CISO and the EISG may call upon business and legal stakeholders across our company to manage cybersecurity threats and incidents.

Our board of directors monitors cybersecurity risks and regularly participates in presentations on cybersecurity and information technology. The audit committee of our board of directors is responsible for oversight of our programs, policies, procedures, and risk management activities related to information security, cybersecurity and data protection. The audit committee meets regularly with our CIDO, CISO, and Chief Privacy Officer to discuss threats, risks, and ongoing efforts to enhance cyber resiliency, as well as changes to the broader cybersecurity landscape. In addition, the ethics and compliance committee supports the audit committee and board in oversight of legal and regulatory compliance. In addition to regular presentations, management promptly updates our board of directors regarding significant threats and incidents as they arise.

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
ARTW	52 minutes ago
NOV	an hour ago
CW	an hour ago
LLY	an hour ago
NSIT	an hour ago
NE	an hour ago
KMB	2 hours ago
LHX	2 hours ago
CHD	2 hours ago
NEU	3 hours ago
PHIN	3 hours ago
AIG	3 hours ago
AEP	5 hours ago
AGIO	6 hours ago
CTSH	7 hours ago
HUBB	7 hours ago
ALNY	7 hours ago
TNET	7 hours ago
FMCC	7 hours ago
KHC	7 hours ago
PPC	8 hours ago
PBF	8 hours ago
VNDA	8 hours ago
IRDM	8 hours ago
TRV	8 hours ago
WELL	8 hours ago
CGNX	9 hours ago
WCN	9 hours ago
PCG	18 hours ago
ILMN	20 hours ago
NWE	20 hours ago
BRO	21 hours ago
EPRT	22 hours ago
APH	22 hours ago
VKTX	22 hours ago
RCL	22 hours ago
AUR	22 hours ago
QTWO	22 hours ago
AMCX	22 hours ago
FR	22 hours ago
GLIBA	22 hours ago
ALB	22 hours ago
RNR	22 hours ago
WPC	22 hours ago
R	22 hours ago
CFLT	23 hours ago
HUBS	23 hours ago
WHR	23 hours ago
AR	23 hours ago
EGP	23 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - LLY

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - LLY

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing