Item 1A. RISK FACTORS

In response to the cybersecurity exposure discussed in Part I Item II - Management's Discussion and Analysis of Financial Condition and Results of Operations of this Form 10-Q, the Company has reviewed and updated the below risk factor. Other than the below risk factor, there have been no material changes in our risk factors from those disclosed in our Annual Report on Form 10-K for the year ended December 31, 2020.

We face cybersecurity and data protection risks relating to cyber-attacks and information technology failures that could cause loss of confidential information and other business disruptions.

We rely extensively on the security, stability, and availability of technology systems in our business. We also collect, process, and retain sensitive and confidential customer information, including proprietary business information, personal data and other information that may be subject to privacy and security laws, regulations and/or customer-imposed data protection controls. Our business may be adversely impacted by unintentional technology disruptions, including those resulting from programming errors, employee operational errors, software defects, and product vulnerabilities.

We also provide technological products integral to train operation. Accordingly, our business may be adversely impacted by disruptions to our own or third-party information technology infrastructure, which could result from cybersecurity incidents, including, but not limited to, unauthorized access to the Company’s information technology systems, data access or acquisition, and/or encryption of the Company’s environment. For instance, one of our vendors publicly disclosed vulnerabilities in its operating system that we use for certain Wabtec products. A successful exploitation of our own or our vendors’ information technology infrastructure could result in service interruptions, safety hazards, misappropriation of confidential information, process failures, security breaches or other operational difficulties. Such an event could result in decreased revenues and increased capital, insurance or operating costs, including the increased costs of security to protect the Company’s infrastructure, among other results. Insurance maintained by the Company to protect against loss of business and other related consequences resulting from cyber incidents may not be sufficient to cover all damages. A disruption or compromise of the Company’s technology systems, even for short periods of time, could have a material adverse effect.

Item 2. UNREGISTERED SALES OF EQUITY SECURITIES AND USE OF PROCEEDS

The following table summarizes the Company's stock repurchase activity for the three months ended September 30, 2021:

(1) On February 11, 2021, the Board of Directors increased its stock repurchase authorization such that the Company has $500 million available for stock repurchases of the Company’s outstanding shares. This new stock repurchase authorization supersedes the previous authorization of $500 million of which about $292.2 million remained. No time limit was set for the completion of the program which conforms to the requirements under the Senior Credit Facility and the Senior Notes currently outstanding. The Company may repurchase shares in the future at any time, depending upon market conditions, our capital needs and other factors. Purchases of shares may be made by open market purchases or privately negotiated purchases and may be made pursuant to Rule 10b5-1 plan or otherwise.

Item 4. MINE SAFETY DISCLOSURES

Not Applicable