XML 34 R20.htm IDEA: XBRL DOCUMENT
v3.22.4

Cyber-Attack | 12 Months Ended
--- | ---
Dec. 31, 2022
Unusual or Infrequent Items, or Both [Abstract] |
Cyber-Attack | NOTE 11. CYBER-ATTACK On February 20, 2022, management determined that the Company was the subject of a targeted cyber-attack. Upon discovering the incident, the Company shut down most of its connectivity, operating and accounting systems globally to manage the safety of its overall global systems environment and initiated its cybersecurity incident response plan. The Company's security teams, supplemented by commercial cybersecurity experts and in collaboration with law enforcement, worked to remediate this cyber-attack. The Company undertook extensive efforts to identify, contain, eradicate and methodically recover from this attack as rapidly as possible. The Company had limited ability to conduct operations for a period of approximately three weeks including but not limited to arranging for shipments of freight or managing customs and distribution activities for its customers’ shipments and performing accounting functions. The Company’s teams worked to maintain its business operations and minimize the impact on its employees, customers and operating partners, including regulatory agencies. The Company continues to incorporate learnings from the cyber-atta ck. In 2022 the Company has incurred, as a result of its inability to timely process and move shipments through ports during the downtime, approximately $47 million in incremental demurrage charges, net of recoveries, where the Company has direct liability for this obligation. These costs are recorded in customs brokerage and other services expenses. Additionally, principally in the first quarter, the Company incurred investigation, recovery, and remediation expenses, including costs to recover its operational and accounting systems and to enhance cybersecurity protections. These costs are primarily comprised of various consulting services including cybersecurity experts, outside legal advisors, and other IT professional expenses. The Company also recorded estimated liabilities for potential shipment-related claims. In 2022, the total amount recorded for these items was approximately $18 million and is recorded in other operating expenses. The Company did not incur significant capital expenditures as a result of the cyber-attack. The Company may incur additional expenses which could include third-party expenses, increased information services costs, or indemnities to customers. When the Company’s operating systems were down, many customers worked with other providers to meet their logistics needs, resulting in lower shipment volumes in the first quarter and to a lesser extent in the second quarter for which the financial impact on revenues and operating income cannot be quantified. Such costs and the ongoing impacts from the downtime caused by the cyber-attack are not expected to have further material adverse impact on the Company’s business. The Company is unable to estimate the ultimate direct and indirect financial impacts of this cyber-attack.

X
- References No definition available. + Details
Name: | us-gaap_ExtraordinaryAndUnusualItemsAbstract
Namespace Prefix: | us-gaap_
Data Type: | xbrli:stringItemType
Balance Type: | na
Period Type: | duration

X
- Definition The entire disclosure for an event or transaction that is unusual in nature or infrequent in occurrence, or both. + References Reference 1: http://fasb.org/us-gaap/role/ref/legacyRef -Publisher FASB -Name Accounting Standards Codification -Topic 220 -SubTopic 20 -URI https://asc.fasb.org/subtopic&trid=114868817 + Details
Name: | us-gaap_UnusualOrInfrequentItemsDisclosureTextBlock
Namespace Prefix: | us-gaap_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration