Item 1A. RISK FACTORS

You should carefully consider the factors discussed in Part I, “Item 1A. Risk Factors” in our Annual Report on Form 10-K for the fiscal year ended December 31, 2020, which could materially affect our business, financial position, or future results of operations. The risks described in our Annual Report on Form 10-K for the fiscal year ended December 31, 2020, are not the only risks we face. Additional risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially adversely affect our business, financial position, or future results of operations. The risk factors set forth below update, and should be read together with, the risk factors described in our Annual Report on Form 10-K for the fiscal year ended December 31, 2020.

RISKS RELATING TO OUR BUSINESS

OUR RELIANCE ON SOLE AND SINGLE SOURCE SUPPLIERS AND OUR ABILITY TO PURCHASE AT ACCEPTABLE PRICES A SUFFICIENT AMOUNT OF MATERIALS, PARTS, AND COMPONENTS COULD HARM OUR ABILITY TO MEET DEMAND FOR OUR PRODUCTS IN A TIMELY MANNER OR WITHIN BUDGET.

Some of the components necessary for the assembly of our products are currently provided to us by sole-sourced suppliers or single-sourced suppliers. We generally purchase components through purchase orders rather than long-term supply agreements and generally do not maintain large volumes of inventory. While alternative suppliers exist and could be identified for single-sourced components, the disruption or termination of the supply of components, or inflationary pressure in our supply chain, could cause a significant increase in the costs of these components, which could affect our operating results. A disruption or termination in the supply of components could also result in our inability to meet demand for our products, which could harm our ability to generate revenues, lead to customer dissatisfaction, and damage our reputation and our brand. Furthermore, if we are required to change the manufacturer of a key component of our products, we may be required to verify that the new manufacturer maintains facilities and procedures that comply with quality standards and with all applicable regulations and guidelines. The time and processes associated with the verification of a new manufacturer could delay our ability to manufacture our products on schedule or within budget, which may have a material adverse impact on our business, financial condition, results of operations, or cash flows.

In addition, our ability to meet customers’ demands depends, in part, on our ability to timely obtain an adequate delivery of quality materials, parts, and components from our suppliers. An information technology systems interruption, including cybersecurity attacks, could adversely affect the ordering, distribution, and manufacturing processes of our suppliers. Difficulties in obtaining a sufficient amount of semiconductor and other component materials continue to increase, and we expect such difficulties to persist in the foreseeable future. Prices of such materials have also increased, and global supply has become significantly constrained due to the increased demand for materials, including semiconductors, to support expansion of server and cloud networks as a greater proportion of the global population worked remotely, the introduction of 5G, and the continued electrification of vehicles. We engage in activities to seek to mitigate such supply disruptions by, for example, increasing our communications with our suppliers and modifying our purchase order coverage and inventory levels. However, notwithstanding these activities, the global semiconductor and materials supply shortage is likely to remain a challenge for the foreseeable future. Such global shortages in important components have resulted in, and will continue to cause, inflationary pressure in our supply chain, which would impact our profits and profit margin. If shortages and price increases in important supply-chain materials in the semiconductor or other markets continue, we could also fail to meet product demand, which would adversely impact our business, financial condition, results of operations, or cash flows.

DISRUPTION OF CRITICAL INFORMATION SYSTEMS OR MATERIAL BREACHES IN THE SECURITY OF OUR SYSTEMS COULD HARM OUR BUSINESS, CUSTOMER RELATIONS, AND FINANCIAL CONDITION.

Information technology helps us serve and interface with customers, maintain our supply chain and manufacturing operations, operate effectively and efficiently, maintain financial accuracy and efficiency, and accurately produce our financial statements. If we do not allocate and effectively manage the resources necessary to build and sustain the proper technology infrastructure, we could be subject to transaction errors, processing inefficiencies, the loss of customers, business disruptions or the unauthorized access to, loss of, or damage to intellectual property, confidential information, or personally identifiable information (“PII”). If our data management systems do not effectively collect, store, process, and report relevant data for the operation of our business, whether due to equipment malfunction or constraints, software deficiencies, security incidents, or human error, our ability to effectively plan, forecast, and execute our business plan and comply with applicable laws and

regulations would be impaired, perhaps materially. Any such impairment could materially and adversely affect our financial condition, results of operations, cash flows, and the timeliness with which we report our internal and external operating results.

Our business requires us to use and store customer, employee, and business partner PII. This may include names, addresses, phone numbers, email addresses, contact preferences, tax identification numbers, and payment account information. We require user names and passwords in order to access our information technology systems. We also use encryption and authentication technologies to secure the transmission and storage of data. These security measures may be compromised as a result of security breaches by unauthorized persons, employee error, malfeasance, faulty password management, or other irregularity and result in persons obtaining unauthorized access to our data or accounts. Third parties may attempt to fraudulently induce employees or customers into disclosing user names, passwords, or other sensitive information, which may in turn be used to access our information technology systems. For example, our employees have received “phishing” emails and phone calls attempting to induce them to divulge passwords and other sensitive information.

In addition, unauthorized persons may attempt to hack into our products or systems to obtain personal data relating to patients or employees, our confidential or proprietary information, or confidential information we hold on behalf of third parties. If the unauthorized persons successfully hack into or interfere with our connected products or services, they may create issues with product functionality that could pose a risk of loss of data, a risk to patient safety, and a risk of product recall or field activity, which could adversely impact our business and reputation. We have programs in place to detect, contain, and respond to data security incidents, and we make ongoing improvements to our information-sharing products in order to minimize vulnerabilities, in accordance with industry and regulatory standards. However, because the techniques used to obtain unauthorized access to or steal PII or intellectual property, or sabotage systems containing PII or intellectual property, change frequently and may be difficult to detect, we may not be able to anticipate and prevent these intrusions or mitigate them when and if they occur.

We also rely on external vendors to supply and/or support certain aspects of our information technology systems. The systems of these external vendors may contain defects in design or manufacture or other problems that could unexpectedly compromise information security of our own systems, and we are dependent on these third parties to deploy appropriate security programs to protect their systems. In addition to potential exposure to data breaches, security incidents, or other actions that may compromise the security of or interfere with the function of our systems, defects or vulnerabilities in the software or systems of our external vendors may expose failures in our internal controls and risk management processes, which may adversely impact our business, financial condition, results of operations, or cash flows and may also harm our reputation, brand, and customer relationships.

While we devote significant resources to network security, data encryption, and other security measures to protect our systems and data, these security measures cannot provide absolute security. We may experience a breach of our systems and may be unable to protect PII, confidential, or sensitive data. It is possible for such vulnerabilities to remain undetected for an extended period, including several years or longer. The costs to us to eliminate or alleviate network security problems, bugs, viruses, worms, ransomware and other malicious software programs, and security vulnerabilities could be significant. Our efforts to address these problems may not be successful and could result in unexpected interruptions, delays, cessation of service, and harm to our business operations. Moreover, if a computer security breach affects our systems or results in the unauthorized release of PII, our reputation and brand could be materially damaged, and use of our products and services could decrease. We would also be exposed to a risk of loss, litigation and potential liability, and regulatory scrutiny, which could have a material adverse impact on our business, financial condition, results of operations, or cash flows.

ITEM 2. UNREGISTERED SALES OF EQUITY SECURITIES AND USE OF PROCEEDS

There were no unregistered sales of equity securities during the period covered by this report.

(c) Issuer Purchases of Equity Securities

The table below summarizes our stock repurchase activity for the quarter ended September 30, 2021.

(1) Since March 2009, we have had a stock repurchase program in place. As of September 30, 2021, our Board of Directors (the “Board”) had authorized an aggregate amount of up to $7.5 billion for stock repurchases, of which the most recent authorization occurred in January 2019, when the Board increased the authorized amount available under our share repurchase program to $2.0 billion. The remaining $1.6 billion represents the amount available to repurchase shares under the authorized repurchase program as of September 30, 2021. The authorized stock repurchase program does not have an expiration date.

ITEM 3. DEFAULTS UPON SENIOR SECURITIES

None.

ITEM 4. MINE SAFETY DISCLOSURES

Not applicable.