Quiver Quantitative

Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - WMT

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. Risk Factors" under the sub-caption "Legal, Tax, Regulatory, Compliance, Reputational and Other Risks."

Our Shared Value Priorities

We seek to operate our business in a way that creates shared value: We believe we maximize long-term value and create competitive advantage for the Company by delivering for our stakeholders, including our customers, associates, shareholders, suppliers, business partners and communities.

We prioritize issues that offer the greatest potential for Walmart to create long-term shared value: Issues that rank high in relevance to our business, importance to building and maintaining stakeholder trust and in which Walmart has the ability to be an effective actor.

•Opportunity. We believe that promoting economic opportunity helps Walmart attract and retain the talent we need to run our business, respond to customer needs, and promote economic resilience in the places where we operate. Our approach includes creating opportunities for Walmart associates (as further described in the Human Capital Management section below), our suppliers, workers in supply chains and the communities we serve. We offer good entry-level jobs in addition to multiple career pathways; endeavor to cultivate a culture of belonging—rooted in respect for the individual—where associates and customers feel seen, supported and connected; and provide tens of thousands of local, national and global suppliers the opportunity to grow with us.

•Sustainability. Walmart's sustainability efforts endeavor to create and preserve long-term business value through increasing the efficiency and resilience of our operations, promoting surety of supply, sourcing responsibly and enhancing our product assortment. With respect to people, we aim to respect the dignity of people throughout our supply chain, create economic opportunity for people working in supply chains, and sell safer, healthier products. With respect to the environment, our efforts aim to enhance the sustainability of product supply chains; preserve, protect, and restore nature; reduce waste; procure renewable sources of energy; and reduce greenhouse gas emissions.

•Community. We believe that Walmart thrives in strong, resilient communities, and we endeavor to help communities thrive. We aim to strengthen communities by providing convenient access to affordable, quality goods and services through our omni-channel retail model and everyday low prices; contributing to the economic vitality of communities by providing quality jobs, training and career paths; investing in local suppliers; and supporting organizations and causes that matter to our customers and associates.

•Ethics and Integrity. We believe that people want to work for and do business with a company they can trust, and Walmart works to create a culture that inspires trust with our stakeholders. We seek to achieve this, by focusing on promoting ethics and compliance, governance and oversight, responsibly engaging in public policy activities, using data and technology responsibly and respecting human rights.

We periodically publish information on our shared value priorities, strategies, progress, and challenges on the environmental, social and governance ("ESG") reporting section of our corporate website and may update those disclosures from time to time. Nothing on our website, including our ESG reporting, documents or sections thereof, shall be deemed incorporated by reference into this Annual Report on Form 10-K or incorporated by reference into any of our other filings with the SEC.

Human Capital Management

Our associates – powered by technology – play a critical role in delivering on our purpose to help people save money and live better. Our business is focused on serving people and this is delivered by our approximately 2.1 million associates around the world with approximately 1.6 million associates in the U.S. and approximately 0.5 million associates internationally. In the U.S., approximately 92% of our associates are hourly and approximately 68% of our associates are full-time.

We believe our people make the difference, and we are focused on investing in the growth and well-being of our associates, investing in digital experiences to improve their quality of work and creating a culture of belonging. An important part of our focus is to provide opportunities for associates to grow and learn. For some, we are a foundational entry point to develop critical skills that are relevant for a variety of careers. We are focused on developing, rewarding and retaining associates in an ever-changing environment. Our people ultimately make Walmart a better place to work and a better place to shop.

Belonging - Focus on creating a workplace where all associates feel seen, supported and connected through a culture of belonging. We publish our workforce representation and hold ourselves accountable to providing recurring belonging updates to senior leadership – including our President and CEO – and members of the Board of Directors. In the U.S., 51% of the approximately 1.6 million associates are people of color.

Our Belonging focus aims to create opportunities for everyone, so that every eligible and qualified individual can thrive and perform. We regularly review our processes around fair-pay practices and are committed to creating a performance culture where associates are rewarded based on meaningful factors such as qualifications, experience, performance and the work they do.

To build a company where associates feel seen, supported and connected, we gather and respond to associate feedback in a variety of ways, including in-person dialogue; leadership visits and listening sessions; surveys like our associate engagement survey and monthly pulse surveys; and always-on confidential channels, including our Open Door processes and ethics channels.

Well-being - Prioritize the emotional, physical and financial well-being of associates. We invest in our associates by offering competitive wages, as well as a broad range of benefits to meet the diverse needs of our global associate population and their eligible dependents. In the U.S., this includes company-paid benefits such as 401(k) match, family building benefits, maternity leave, fertility benefits, a paid parental leave program to all full-time associates, paid time off, Associate Stock Purchase Plan match, life insurance, medical coverage (including supporting associates with a U.S. Medical Plan with free virtual visits for medical doctor urgent care), behavioral and mental health services (including virtual care with psychiatrists and psychologists), a Walmart discount card or Sam's Club membership and predictable scheduling that helps associates plan for life outside of work and know what to expect in their paychecks.

Additional information about how we invest in our associates' well-being, including wage structure and pay, can be found in the Our People brief in our most recent ESG reporting, which is available on our corporate website. Nothing on our website, including our ESG reporting documents, or sections thereof, shall be deemed incorporated by reference into this Annual Report on Form 10-K or incorporated by reference into any of our other filings with the SEC. Certain information relating to retirement-related benefits we provide to our associates is included in Note 11 to our Consolidated Financial Statements.

Growth - Provide ongoing growth, development and learning opportunities for associates and continue to attract talent with new skills.

Approximately 75% of our U.S. salaried store, club and supply chain management started their careers in hourly positions. In the U.S., we seek to enable these pathways through programs like Walmart Academy, Live Better U ("LBU"), and other various associate training programs. Additionally, our LBU program provides access to educational opportunities for our eligible part-time and full-time associates in the U.S. and Puerto Rico, allowing associates the opportunity to learn critical skills in order to promote into in-demand jobs within the company through high school diplomas, short-form certificates and credentials or college degrees.

Digital - Drive a digital transformation that improves the associate experience and powers the business. To deliver a seamless customer and associate experience, we continue to invest in consumer-grade digital tools designed to improve associate productivity, efficiency, engagement, and performance — and these capabilities have been expanded to some international markets. This allows associates to share real-time feedback and spend more time generating new ideas, developing strategy, and building relationships.

Our Website and Availability of SEC Reports and Other Information

Our corporate website is located at www.stock.walmart.com.sec.gov.stock.walmart.com.

A description of any substantive amendment or waiver of Walmart's Reporting Protocols for Senior Financial Officers or our Code of Conduct for our chief executive officer, our chief financial officer and our controller, who is our principal accounting officer, will be disclosed on our website at www.stock.walmart.com under the Corporate Governance section.

Information About Our Executive Officers

The following chart names the executive officers of the Company as of the date of the filing of this Annual Report on Form 10-K with the SEC, each of whom is elected by, and serves at the pleasure of, the Board of Directors.


ITEM 1A.			RISK FACTORS

The risks described below could, in ways we may or may not be able to accurately predict, materially and adversely affect our business, results of operations, financial position and liquidity. Our business operations could also be affected by additional factors that apply to all companies operating in the U.S. and globally. The following risk factors do not identify all risks that we may face.

Strategic Risks

Failure to successfully execute our omni-channel strategy and the cost of our investments in eCommerce and technology may materially adversely affect our market position, net sales and financial performance.

The retail business continues to rapidly evolve with consumers embracing the digital shopping experience and expecting a robust online marketplace of goods available for purchase and delivery.

The success of this strategy is further subject to the related risks discussed in this Item 1A.

It is difficult to predict consistently and successfully the products and services our customers will demand and changes in their shopping patterns, tastes and preferences. Our business is dependent on our ability to make critical decisions and predictions with respect to merchandise categories that quickly respond to changing consumer spending patterns, tastes and preferences, and any incorrect calculations by us may result in lower sales, spoilage and inventory markdowns, which could adversely impact our results of operations. Our ability to predict and adapt to changing tastes and preferences depends on many factors, including obtaining accurate and relevant data on customer preferences, emphasizing relevant merchandise categories, effectively managing our inventory levels, and implementing competitive and effective pricing and promotion strategies. We must continue to preserve our reputation, which is impacted by public perceptions and customer experiences. It may be difficult to address negative publicity across media channels, regardless of whether it is accurate. Negative incidents, including the loss of merchandise as a result of shrink or theft, misuse of AI technologies or a data breach as a result of a cyberattack could quickly erode trust and confidence in our business and could result in consumer boycotts, workforce unrest and government investigations. These incidents may involve us, our vendors that handle our data or personal information, our workforce or others with whom we do business, including third-party service providers and independent contractors. Societal expectations, preferences, trends and political expression are ever-changing and we try to adapt, evolve and maintain a balance that meets the acceptance of our customers, members, associates, shareholders, suppliers and other stakeholders, but we may not always move as quickly or in the direction that various competing interests desire or demand, which could impact our reputation. For instance, strong opinions continue to be publicly expressed both for

and against diversity, equity and inclusion and ESG initiatives and positions taken by many corporations, including Walmart, are tracked, monitored and subject to heightened scrutiny from consumers, investors, advocacy groups and public figures, potentially leading to consumer boycotts, negative publicity campaigns, litigation and reputational harm. Negative reputational incidents or negative perceptions of us could adversely impact our business and results of operations, including through lower sales, the termination of business relationships and negative impacts to associate retention and recruiting efforts. Moreover, failure to adequately predict customer demand and consumer spending patterns or otherwise optimize and operate our distribution and fulfillment centers could result in excess or insufficient inventory, service interruptions and increased costs, any of which could significantly harm our business. As we continue to add new fulfillment centers, our fulfillment and technology networks become increasingly complex and operating them in a way that effectively meets consumer demands continues to be challenging. There can be no assurance that we will be able to operate our networks effectively.

We face strong competition from other retailers, wholesale club operators, omni-channel retailers and other businesses which could materially adversely affect our financial performance.

Each of our segments competes for customers, employees, digital prominence, products and services and in other important aspects of its business with many other local, regional, national and global physical, eCommerce and omni-channel retailers, social commerce platforms, wholesale club operators and retail intermediaries, as well as companies that offer services in digital advertising, data analytics/insights, fulfillment and delivery services, health and wellness and financial services. In addition, for eCommerce and other internet-based businesses, newer or smaller businesses may be better able to innovate and compete with us.

A failure to respond effectively to competitive pressures and changes in the retail and other markets in which we operate, omni-channel innovations and omni-channel ecosystems developed by our competitors or delays or failure in execution of our strategy could materially adversely affect our financial performance. See "Item 1. Business" above for additional discussion of the competitive situation of each of our reportable segments.

Certain segments of the retail industry are undergoing consolidation or substantially reducing operations, whether due to bankruptcy, economics or other factors.

General or macro-economic factors, both domestically and internationally, may materially adversely affect our financial performance.

General economic conditions and other economic factors, globally or in one or more of the markets we serve, may adversely affect our financial performance. Higher interest rates, higher prices of petroleum products, including crude oil, natural gas, gasoline and diesel fuel, increased costs for electricity and other energy, weakness in the housing market, inflation, deflation, increased costs of essential services, such as medical care and utilities, higher levels of unemployment, decreases in GDP and consumer disposable income, unavailability of consumer credit, higher consumer debt levels, changes in consumer spending and shopping patterns, fluctuations in currency exchange rates, higher tax rates, imposition of new taxes or other changes in tax laws, changes in healthcare laws, other regulatory changes, the imposition of export and import restrictions, tariffs, trade barriers or other measures that create barriers to or increase the costs associated with international trade, overall economic slowdown or recession and other economic factors in the U.S., or in any of the other markets in which we operate, could adversely affect consumer demand for the products and services we sell in the U.S. or such other markets, change the mix of products we sell to any one or more markets with a lower average gross margin, cause a slowdown in discretionary purchases of goods, adversely affect our net sales, growth rates, operating income and result in slower inventory turnover and greater markdowns of inventory, or otherwise materially adversely affect our operations and operating results and could result in impairment charges to intangible assets, goodwill or other long-lived assets.

In addition, the economic factors listed above, any other economic factors or circumstances resulting in higher transportation, labor, insurance or healthcare costs or commodity prices, including energy prices, and other economic factors in the U.S. and other countries in which we operate can increase our cost of sales and operating, selling, general and administrative expenses and otherwise materially adversely affect our operations and operating results.

The economic factors that affect our operations may also adversely affect the operations of our suppliers, which can result in an increase in the cost to us of the goods we sell to our customers or, in more extreme cases, in certain suppliers not producing

goods in the volume typically available to us for sale, or adversely impact product margins due to higher labor and material costs of our suppliers that we are unable, or choose not, to pass on to our customers.

The performance of strategic alliances and other business relationships to support the expansion of our business could materially adversely affect our financial performance.

We may enter into strategic alliances and other business relationships in the countries in which we have existing operations or in other markets to expand our business.

Operational Risks

Global or regional health pandemics or epidemics could negatively impact our business, financial position and results of operations.

These may include extreme weather-related events such as hurricanes, tropical storms, typhoons, floods, wildfires, cyclones, tornadoes, winter storms, droughts, and extreme temperatures, any of which may be exacerbated by a changing climate, as well as other natural disasters such as earthquakes and tsunamis. Moreover, geopolitical tensions or events; and catastrophic and other events, such as war, civil unrest (including theft, looting or vandalism), terrorist attacks or other acts of violence, including active shooter situations (such as those that have occurred in our U.S. stores), or the loss of merchandise as a result of shrink or theft in countries in which we operate, in which our suppliers are located or regions goods are transported from or through, or in other areas of the world (such as in Ukraine and Israel, armed hostilities in the Red Sea and surrounding areas through which ocean carrier vessels travel to the Suez Canal and delays that have occurred traversing the Panama Canal resulting from drought) could adversely affect our operations and financial performance. Protecting the safety of our associates, including our senior leaders, is critical to preventing business disruption and executing on our business strategies and objectives.

Any of the events described above could result in physical damage to, or the complete loss of, one or more of our properties, the closure of one or more stores, clubs and distribution or fulfillment centers, limitations on store or club operating hours, the lack of an adequate work force in a market, the inability of customers and associates to reach or have transportation to our stores and clubs affected by such events, the evacuation of the populace from areas in which our stores, clubs and distribution and fulfillment centers are located, the unavailability of our digital platforms to our customers, changes in the purchasing patterns of consumers (including the frequency of visits by consumers to physical retail locations, whether as a result of limitations on large gatherings, travel and movement limitations or otherwise), temporary or long-term disruption in the supply of products from some suppliers or disruption or delay in the delivery of goods to our distribution and fulfillment centers or stores within a country in which we are operating and could negatively impact our operations and financial performance. In fiscal 2025, Hurricanes Helene and Milton impacted our stores, operations and supply chains in the Southeastern U.S., although such events did not materially impact our consolidated financial performance. Moreover, these disasters and events can negatively impact consumers' disposable income, the temporary or long-term disruption in the supply of products from some suppliers, the disruption in the transport of goods from overseas, the disruption or delay in the delivery of goods to our distribution and fulfillment centers or stores within a country in which we are operating, the reduction in the availability of products in our

stores, increases in the costs of procuring products as a result of either reduced availability or economic sanctions, increased transportation costs (whether due to fuel prices, fuel supply or otherwise), the disruption (whether directly or indirectly) of critical infrastructure systems, banking systems, utility services or energy availability to our stores, clubs and our facilities and the disruption in our communications with our stores, clubs and our other facilities.

Certain impacts of physical risk may include: temperature changes that increase the heating and cooling costs at stores, clubs and distribution or fulfillment centers; extreme weather patterns that affect the production or sourcing of certain commodities; flooding and extreme storms that damage or destroy our buildings and inventory; disruption of electrical grids or utilities required to operate our stores, clubs and information systems; and heat and extreme weather events that cause long-term disruption or threats to the habitability of the communities in which we operate. Relative to transition risk, certain impacts may include: changes in energy and commodity prices driven by climate-related weather events; prolonged climate-related events affecting macroeconomic conditions with related effects on consumer spending and confidence; stakeholder perception of our engagement in climate-related policies; and new regulatory requirements resulting in higher compliance risk and operational costs.

We bear the risk of losses incurred as a result of physical damage to, or destruction of, any stores, clubs and distribution or fulfillment centers; theft, loss or spoilage of inventory; and business interruption caused by such events. These events and their impacts could otherwise disrupt and adversely affect our operations and could materially adversely affect our financial performance. Moreover, our operations in the U.S. comprise a significant portion of our financial and operational performance. Therefore, any of the above matters that uniquely impact or are specifically concentrated in the U.S. could materially adversely affect our financial and operational performance.

Risks associated with our suppliers could materially adversely affect our financial performance.

The products we sell are sourced from a wide variety of domestic and international suppliers. Our ability to find qualified suppliers who uphold our standards and to access products in a timely and efficient manner and in the large volumes we may demand, are significant challenges, especially with respect to suppliers located and goods sourced outside the U.S.

Political and economic instability, as well as other impactful events and circumstances (such as we previously experienced (and could experience again) with the pandemic recovery related challenges, including supply chain disruption and production, labor shortages and increases in labor costs) in the countries in which our suppliers and their manufacturers are located or regions goods are transported from or through, the financial instability of suppliers, suppliers not having the financial ability or capacity to fulfill their indemnification obligations to us if called upon, thereby exposing us to the full cost of risks and claims, suppliers' failure to meet our terms and conditions or our supplier standards (including our responsible sourcing standards), labor problems experienced by our suppliers and their manufacturers, the availability of raw materials to suppliers, extreme weather events impacting the growing, manufacturing, mining and harvesting of commodities and products, merchandise safety and quality issues, disruption or delay in the transportation of merchandise from the suppliers and manufacturers to our stores, clubs and other facilities, including as a result of extreme weather or labor slowdowns and/or strikes at any port at which a material amount of merchandise we purchase enters into the markets in which we operate, currency exchange rates, transport availability and cost, transport security, inflation and other factors relating to the suppliers and the countries in which they are located are beyond our control.

In addition, U.S. and international trade policies, tariffs, trade barriers and other restrictions on the exportation and importation of goods, trade sanctions imposed between certain countries and entities, the limitation on the exportation or importation of certain types of goods or of goods containing certain materials from other countries and other factors relating to foreign trade are beyond our control. These and other factors affecting our suppliers, our access to products and our access to service providers (such as transportation and logistics providers) could adversely affect our operations and financial performance.

Occasionally, the quality of products that we source from our suppliers fails to meet customer expectations. In many cases, these products are subject to regulatory action or recall. For general merchandise, this could be because the product fails to meet safety standards. For food products, it could be because the product is a source of foodborne illness. For health and wellness products, it could be because the product does not produce the expected result for the customer or harms the customer. Any of these factors could cause customers to avoid purchasing certain products from us or to choose to buy products from a different retailer, even if the quality issue is outside of our control. Any lost confidence on the part of our customers would be difficult and costly to reestablish. When a

product we sell does not meet quality or safety standards, there is an increased risk of liability for harm the product may cause our customers. While we rely on our suppliers to meet our safety and quality expectations, and to indemnify us if their products do not, certain suppliers may not have the financial capacity or ability to fulfill their indemnification obligations. In that case, we may be exposed to the full cost of liability claims.

If the quality or safety of products offered for sale on our third-party marketplace fails to meet our customers' expectations or regulatory standards, we could be held directly liable, lose customers, become subject to regulatory enforcement or otherwise experience reputational harm.

Some of the products customers buy from our website are sold by third parties, which we refer to as marketplace transactions. While that transaction ultimately occurs between the third-party seller and the customer, some regulators and courts have taken a view that the retailer is responsible for marketplace transactions that occur on a retailer's digital platform. Unsettled law on whether a retailer is responsible for intellectual property or product liability claims related to marketplace transactions creates additional risk. Any unfavorable changes or legal interpretations could further expose us to liability.

In addition, poor quality or safety of third-party products offered for sale on our platforms could erode customer trust, leading to loss of sales, reduction in transactions and deterioration of our competitive position. We may not be able to collect sufficient damages for these types of breaches from third-party sellers. Furthermore, even if we are successful in negotiating a contractual shift in risk of loss to third parties, a regulator may view us as having responsibility for regulatory compliance of the third-party products offered for sale on our platform. Although we have marketplace compliance controls in place and impose contractual terms on sellers to prohibit sales of non-compliant products, we may not be able prevent sellers from offering prohibited items for sale, enforce such terms or fully protect against regulatory risk. Any of these events could have a material adverse impact on our business and results of operations and impede the execution of our eCommerce growth and enterprise strategy.

We rely extensively on information and financial systems to process transactions, summarize results and manage our business.

Given the number of individual transactions we have each year, it is crucial that we maintain uninterrupted operation of our business-critical information systems. The availability of our information systems and the integrity of data are essential to our business operations, including the processing of transactions, management of our associates, facilities, logistics, inventories, physical stores and clubs and our online operations. Any interruption to the availability of our information systems or corruption of our data may have a material adverse effect on our business or results of operations. In addition, the cost of securing our systems against failure or attack is considerable, and increases in these costs, particularly in the wake of a breach or failure, could be significant.

If the technology-based systems that give our customers the ability to shop with us online and enable us to deliver products and services do not function effectively, our operating results, as well as our ability to grow our omni-channel business globally, could be materially adversely affected.

Increasingly, customers are using computers, tablets and smart phones to shop with us and with our competitors and to do comparison shopping. Omni-channel

retailing is a rapidly evolving part of the retail industry and of our operations around the world, and we continue to make investments in supply chain automation and enhancements to support our omni-channel strategy. We must anticipate and meet our customers' changing expectations while adjusting for technology investments and developments in our competitors' operations through focusing on the building and delivery of a seamless shopping experience across all channels by each operating segment. We continue to invest in AI and generative AI technologies to enhance our customers’ shopping experience and our associate work experience and to improve efficiencies of our supply chain, operations, management functions and talent recruitment and development; however, these are evolving technologies and there are inherent operational and legal complexities associated with implementation of these technologies within our business. When integrating and introducing AI and generative AI technologies into our platforms, processes and systems, we may be exposed to new or expanded liabilities and risks due to elevated governmental scrutiny and monitoring, litigation, data privacy risks and compliance issues in a disparate and at times conflicting regulatory environment, all of which could negatively affect our financial performance and business reputation.

Any disruption or failure on our part to provide attractive, user-friendly and secure digital platforms that offer a wide assortment of merchandise and services at competitive prices and with low cost and rapid delivery options and that continually meet the changing expectations of online shoppers and developments in online and digital platform merchandising and related technology in a cost-efficient manner could place us at a competitive disadvantage, result in the loss of eCommerce and other sales, harm our reputation with customers, have a material adverse impact on the growth of our eCommerce business globally and have a material adverse impact on our business and results of operations.

Any failure to maintain the privacy or security of the information relating to our company, customers, members, associates, business partners and vendors, whether as a result of cyberattacks on our information systems or otherwise, could damage our reputation, result in litigation or other legal actions against us, result in fines, penalties, and liability, cause us to incur substantial additional costs and materially adversely affect our business and operating results.

In addition, our health and wellness business operations and third-party service providers who handle information on our behalf store and maintain protected health information. Further, we recently acquired VIZIO Holding Corp. and its subsidiaries, which collects certain consumer data, including certain television viewing data.

Cyber threats are rapidly evolving and those threats and the means for disrupting or obtaining access to information systems or information stored in digital and other storage media are becoming increasingly sophisticated and frequent, and in some cases, they may lead to successful attacks. Unauthorized activities directed against information systems and devices, whether our own or those of our third-party service providers and vendors, have resulted in cybersecurity incidents, including malware, ransomware, denial of service attacks or phishing incidents. We expect that our information systems and those of our third-party service providers, vendors and suppliers will continue to experience such attacks in the future, which could include disruptions to our supply chain system. Cyberattacks and threat actors can be sponsored by particular nation-states, or be the work of sophisticated criminal organizations, insiders (including our associates or contractors) or third parties, each with a wide-range of motives and expertise. We and the businesses with which we interact have experienced and continue to experience incidents and threats to data and information systems. These incidents and threats have included and are likely to continue to include both random and targeted cyberattacks, computer viruses, phishing incidents, worms, bot attacks, ransomware or other destructive or disruptive software and attempts to misappropriate customer information, including credit card and payment information, and cause system failures and disruptions. Our logging capabilities, or the logging capabilities of third parties, are also not always complete or sufficiently detailed, affecting our ability to fully investigate and understand the scope of security events. As noted above, some of our information systems and those of our third-party service providers have experienced cybersecurity incidents or breaches, including during fiscal 2025, and, although to date they have not had a material adverse effect on our operating results or business, there can be no assurance of a similar result in the future.

Our digital platforms, which are increasingly important to our business and continue to grow in complexity and scope, and the systems on which they run, including those applications and systems used in legacy operations and acquired eCommerce, technology or other businesses, are regularly subject to cyberattacks. Those attacks involve attempts to impede the operations of

our system or gain unauthorized access to our eCommerce websites (including marketplace platforms) or mobile commerce applications to obtain and misuse customers' or members' information including personal information and/or payment information, and related risks discussed in this Item 1A.

Any compromise of our information systems or of those of businesses with which we interact, which results in regulated data or confidential information being accessed, obtained, damaged, disclosed, destroyed, modified, lost or used by unauthorized persons could harm our reputation and expose us to regulatory actions (including, with respect to health information, liability under the Health Insurance Portability and Accountability Act of 1996, as amended by the American Recovery and Reinvestment Act of 2009, collectively known as "HIPAA" and with respect to personal information, liability under international and state data breach notification laws), customer attrition, remediation expenses and claims from customers, members, associates, vendors, financial institutions, payment card networks and other persons, any of which could materially and adversely affect our business operations, reputation, financial position and results of operations.

Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems or data change frequently and may not immediately produce signs of a compromise, we may be unable to anticipate these techniques or implement adequate preventative measures, or detect the activities of a threat actor. Moreover, the increasing sophistication of AI technologies poses a greater risk of identity fraud, as malicious actors may exploit AI to create convincing false identities or manipulate verification processes. Even if we detect a fraudulent or cybersecurity incident, the nature and extent of that incident may not be immediately clear. Based on the sophistication of the threat actors and the size and complexity of our information systems and networked environment, among other factors, an investigation into a cybersecurity incident could take a significant amount of time to complete. We may not understand or appreciate that what is detected and treated as multiple individual cybersecurity incidents or events may be associated with the coordinated actions of a single threat actor or group. In addition, while our investigation of a cybersecurity incident is ongoing, we may not know the full extent of the harm caused by a threat actor, and such harm may spread both internally and to certain customers, vendors or other third parties. These factors may inhibit our ability to provide rapid, complete and reliable information about the cybersecurity incident to customers, counterparties and regulators, as well as the public. It may also not be clear how best to contain and remediate any harm caused by the cybersecurity incident, and certain errors or actions could be repeated or compounded before they are discovered and remediated. Any or all of these factors could further increase the costs and consequences of a cybersecurity incident on our business operations, financial position and results of operations.

Our compliance programs, information technology and enterprise risk management efforts cannot eliminate all systemic risk.

Our reputation with our customers and members is important to the success of our enterprise strategy, which combines traditional retail, membership models, marketplaces, financial services, health and wellness and other customer and business

services into a series of interconnected assets to make it seamless for customers to interact with us. Security-related events could be widely publicized and could materially adversely affect our reputation with our customers, members, associates, vendors and shareholders, could harm our competitive position particularly with respect to our eCommerce operations, and could result in a material reduction in our net sales in our eCommerce operations, as well as in our stores, thereby materially adversely affecting our operations, net sales, growth rates, operating income, results of operations, financial position, cash flows and liquidity.

We accept payments using a variety of methods, including cash, checks, credit and debit cards, electronic benefits transfer (EBT) cards, mobile payments and our private label credit cards and gift cards, and we may offer new payment options over time, which may have information security risk implications.

Among other obligations, breaches may trigger obligations under U.S. federal and state laws and laws in certain other countries to notify affected individuals, government agencies and the media. Consequently, cybersecurity incidents that result in a data breach or our failure to comply with such laws could subject us to fines, sanctions and other legal liability and harm our reputation.

We have retail pharmacy operations in our Walmart U.S. and Sam's Club U.S. segments across the U.S. and in various of our international markets such as Canada and Mexico.

Our retail pharmacy operations are subject to numerous risks, including: reductions in the third-party reimbursement rates for drugs; changes in our payer mix (i.e., shifts in the relative distribution of our pharmacy customers across drug insurance plans and programs toward plans and programs with less favorable reimbursement terms); changes in third-party payer drug formularies (i.e., the schedule of prescription drugs approved for reimbursement or which otherwise receive preferential coverage treatment); growth in, and our participation in or exclusion from, pharmacy payer network arrangements, including exclusive and preferred pharmacy network arrangements operated by PBMs and/or any insurance plan or program; increases in the prices we pay for brand name and generic prescription drugs we sell; increases in the administrative burdens associated with seeking third-party reimbursement; changes in the frequency with which new brand name pharmaceuticals become available to consumers; introduction of lower cost generic drugs as substitutes for existing brand name drugs for which there was no prior generic drug competition; changes in drug mix (i.e., the relative distribution of drugs customers purchase at our pharmacies between brands and generics); changes in the health insurance market generally; changes in the scope of or the elimination of Medicare Part D or Medicaid drug programs; increased competition from other retail pharmacy operations including competitors offering online retail pharmacy options and/or home delivery options; further consolidation and strategic alliances among third-party payers, PBMs or purchasers of drugs; overall economic conditions and the ability of our pharmacy customers to pay for drugs prescribed for them to the extent the costs are not reimbursed by a third-party; failure to meet any performance or incentive thresholds to which our level of third-party reimbursement may be subject; changes in laws or regulations or the practices of third-party payers and PBMs related to the use of third-party financial assistance to assist our pharmacy customers with paying for drugs prescribed for them; and any additional changes in the state or federal regulatory environment for the retail pharmacy industry and the pharmaceutical industry, including as a result of health reform efforts and other changes to or novel interpretations of existing state or federal laws, rules and regulations that affect our retail pharmacy business.

If the supply of certain pharmaceuticals provided by one or more of our vendors were to be disrupted for any reason, our pharmacy operations could be severely affected until at least such time as we could obtain a new supplier for such

pharmaceuticals.

One or a combination of the factors above may adversely affect the volumes of brand name and generic pharmaceuticals we sell, our cost of sales associated with our retail pharmacy operations, the net sales and gross margin of those operations or result in the loss of cross-store or cross-club selling opportunities. Any of these developments could, in turn, adversely affect our overall net sales, other results of operations, cash flows and liquidity.

Our failure to attract and retain qualified associates, increases in wage and benefit costs, changes in laws and other labor issues could materially adversely affect our financial performance.

Our ability to continue to conduct and expand our operations depends on our ability to attract and retain a large and growing number of qualified associates globally. We compete for talent with other retail and non-retail businesses, including, for example, technology, health and wellness and fintech businesses, and invest significant resources in training and motivating our associates. Increased competition among potential employers at all levels, including senior management and executive levels, could result in increased associate costs or make it more difficult to recruit and retain associates.

Illegal or inappropriate activity of our independent contractors or third-party service providers could expose us to liability and adversely affect our business, reputation and financial performance.

We are subject to risks related to our engagement of independent contractors or other third-party service providers. The qualification processes and background checks we utilize when engaging independent contractors may not reveal all potentially relevant information, including accurate worker authorization information and criminal history. If these independent contractors engage in misconduct, consumers may not consider our goods and services safe, and we may receive negative press coverage. Further, we have in the past incurred, and may in the future incur, losses from various types of fraud with respect to unauthorized uses of another person's identity and use of fraudulent identification documents. Any physical injury, loss of life, fraud, property and/or financial damage caused by our independent contractors or third-party service providers could adversely affect our business reputation, which could negatively affect demand for our goods and services, lead to increased regulatory or litigation exposure and adversely affect our financial performance.

Financial Risks

Failure to meet market expectations for our financial performance could adversely affect the market price and volatility of our stock.

We believe that the price of our stock generally reflects high market expectations for our future operating results. Any failure to meet or delay in meeting these expectations, including our consolidated net sales, consolidated operating income, growth rates, eCommerce growth rates, advertising and other higher-margin initiatives (which are expected to help drive our operating income growth at a rate faster than net sales over the long term), capital expenditures, comparable store and club sales growth rates or earnings and adjusted earnings per share could cause the market price of our stock to decline, as could changes in our dividend or stock repurchase programs or policies, changes in our effective tax rates, changes in our financial estimates and recommendations by securities analysts or, failure of our performance to compare favorably to that of other retailers may have a negative effect on the price of our stock.

Our operations in countries other than the U.S. are conducted primarily in the local currencies of those countries. Our Consolidated Financial Statements are denominated in U.S. dollars, and to prepare those financial statements we must translate the amounts of the assets, liabilities, net sales, other revenues and expenses of our operations outside of the U.S. from local currencies into U.S. dollars using exchange rates for the current period.

As a result of such translations, fluctuations in currency exchange rates from period-to-period that are unfavorable to us may also result in our Consolidated Financial Statements reflecting significant adverse period-over-period changes in our financial performance or reflecting a period-over-period improvement in our financial performance that is not as robust as it would be without such fluctuations in the currency exchange rates.

Legal, Tax, Regulatory, Compliance, Reputational and Other Risks

Our international operations subject us to legislative, judicial, accounting, legal, regulatory, tax, political and economic risks and conditions specific to the countries or regions in which we operate, which could materially adversely affect our business or financial performance.

In addition to our U.S. operations, we operate retail and eCommerce businesses in Africa, Canada, Central America, Chile, China, India and Mexico.

During fiscal 2025, our Walmart International operations generated approximately 18% of our consolidated net sales.

Changing our operations in accordance with new or changed restrictions on international trade or newly imposed sanctions can be expensive, time-consuming and disruptive to our operations. Such restrictions can be announced with little or no advance notice and we may not be able to effectively mitigate all adverse impacts from such measures. In addition, tensions between nation-state governments and conflicts of laws may lead to challenges for our operations. If disputes and conflicts further escalate in the future, actions by governments in response, or consumer boycotts in certain regions, could be significantly more severe and restrictive and could adversely affect our business or financial performance and our reputation. Political uncertainty surrounding trade and other international disputes could also have a negative effect on consumer confidence and spending, which could also adversely affect our business or financial performance and our reputation. Other factors which may impact our international operations include foreign trade, monetary and fiscal policies of the U.S. and other countries, laws, regulations and other activities of foreign governments, agencies and similar organizations, and risks associated with having numerous facilities located in countries that have historically been less stable than the U.S. Additional risks inherent in our international operations generally include, among others, the costs and difficulties of managing international operations, adverse tax consequences and greater difficulty in enforcing intellectual property rights in countries other than the U.S. The various risks inherent in doing business in the U.S. generally also exist when doing business outside of the U.S., and may be exaggerated by the difficulty of doing business in numerous sovereign jurisdictions due to differences in culture, geopolitical tensions or events, laws and regulations.

In foreign countries in which we have operations, a risk exists that our associates, contractors or agents could, in contravention of our policies, engage in business practices prohibited by U.S. laws and regulations applicable to us, such as the Foreign Corrupt Practices Act or U.S. sanctions laws and regulations or the laws and regulations of other countries. Our global policies designed to regulate such business practices and our global compliance programs designed to ensure compliance with these laws and regulations may not be adequate to prevent the risk that one or more of our associates, contractors or agents, including those based in or from countries where practices that violate such U.S. laws and regulations or the laws and regulations of other countries may be customary, will engage in business practices that are appropriately regulated by our policies, circumvent our compliance programs and, by doing so, violate such laws and regulations. Any such violations, even if prohibited by our internal policies, could subject us to fines and penalties and adversely affect our business or financial performance and our reputation.

Changes in tax and trade laws, regulations and interpretations could materially adversely affect our financial performance.

In fiscal 2025, our Walmart U.S. and Sam's Club U.S. operating segments generated approximately 82% of our consolidated net sales. Significant changes in tax and trade policies, including tariffs, trade barriers, other restrictions on the exportation and importation of goods and government regulations affecting trade between the U.S. and other countries where we source many of the products we sell in our stores and clubs could have an adverse effect on our business and financial performance. A significant portion of the general merchandise we sell in our U.S. stores and clubs is manufactured in other countries. Any such actions, including the imposition of further tariffs on imports could increase the cost to us of such merchandise (whether imported directly or indirectly) and cause increases in the prices at which we sell such merchandise to our customers, which could materially adversely affect the financial performance of our U.S. and international operations as well as our business.

We are subject to income taxes, other taxes and tax collection and reporting obligations in both the U.S. and the foreign jurisdictions in which we currently operate or have historically operated. In addition, we also may not have sufficient notice to enable us to build systems and adopt processes to properly comply with new reporting or collection obligations by the effective date of those obligations.

The effect of such changes in tax law, changes in administrative interpretations of existing tax laws or changes in transfer pricing arrangements could also have a material effect on our business, financial position and results of operations. In the U.S., the Tax Cuts and Jobs Act of 2017 (the "Tax Act") significantly changed federal income tax laws that affect U.S. corporations. As further guidance is issued by the U.S. Treasury Department, the Internal Revenue Service and other standard-setting bodies, any resulting changes in our estimates will be treated in accordance with the relevant accounting guidance.

In addition, legislatures and taxing authorities in many jurisdictions in which we operate may enact changes to or seek to enforce novel interpretations of their tax rules. These changes could include modifications that have temporary effect and more permanent changes.

Furthermore, we are subject to regular review and audit by both domestic and foreign tax authorities as well as subject to the prospective and retrospective effects of changing tax regulations, legislation and interpretations.

Changes in and/or failure to comply with other laws, regulations and interpretations of such laws and regulations specific to the businesses and jurisdictions in which we operate could materially adversely affect our reputation, market position or our business and financial performance.

We operate in complex regulated environments in the U.S. and other countries in which we operate and could be materially adversely affected by changes to existing legal requirements, including the related interpretations and enforcement practices, new legal requirements and/or any failure to comply with applicable regulations. If we fail to prevent independent contractors or third-party service providers from violating our policies or applicable laws or committing any fraudulent acts against us or our customers, it could harm our business or damage our reputation, and we could face liability for unlawful activities by such third parties.

Our health and wellness operations in the U.S. are subject to numerous federal, state and local laws and regulations including, but not limited to, those related to: licensing; reimbursement arrangements and other requirements and restrictions; registration and regulation of pharmacies; dispensing and sale of controlled substances and products containing pseudoephedrine; governmental (including Medicare and Medicaid) and commercial reimbursement; data privacy and security and the sharing

and interoperability of data, including obligations and restrictions related to health information (such as those imposed under HIPAA); protection of consumer health data; billing and coding for healthcare services and properly handling overpayments; debt collection; necessity and adequacy of healthcare services; relationships with referral sources and referral recipients and other fraud and abuse issues, such as those addressed by anti-kickback and false claims laws and patient inducement regulations; qualification of healthcare practitioners; quality and standards of medical services and equipment; and the practice of the professions of pharmacy and optometry.

For example, in the U.S., the Drug Enforcement Administration ("DEA") and various other regulatory authorities regulate the purchase, distribution, maintenance and dispensing of pharmaceuticals and controlled substances. The DEA, the U.S. Food and Drug Administration and state regulatory authorities have broad enforcement powers, including the ability to seize or recall products and impose significant criminal, civil and administrative sanctions for violations of these laws and regulations. Other health reform efforts at the federal and state levels may also impact our business or require us to modify certain aspects of our operations. States may enact conflicting laws, mandating changes in operations that negatively impact our ability to execute uniformly and achieve economies of scale across states. We may not be able to predict the nature or success of reform initiatives, and the resulting uncertainties may have an adverse effect on our business.

These products and services require us to comply with legal and regulatory requirements, including those intended to help detect and prevent fraud and other illicit activity, privacy, information security, anti-money laundering and sanctions regimes and consumer protection under U.S. state and federal laws and regulations, as well as those of certain other countries. Failure to comply with these laws and regulations could result in fines, sanctions, penalties and harm to our reputation. Increased U.S. regulation of non-bank financial institutions may also result in additional requirements and scrutiny of certain financial services we offer.

Failure to meet these requirements could affect the profitability of our business activities; limit our ability to pursue business opportunities or conduct business in certain jurisdictions; require changes to business practices or governance or alter our relationships with our customers, partners and other third parties, including our ability to continue certain relationships in Mexico, India or other international jurisdictions; result in increased costs related to regulatory oversight and compliance, litigation-related settlements, judgments or expenses, restitution to customers or the imposition of fines or monetary penalties.

Data privacy and protection laws or customer expectations relating to the collection, use, retention, disclosure, transfer and processing of personal information continue to undergo a rapid transformation in the U.S. and non-U.S. jurisdictions. Recently enacted state laws, such as the California Consumer Privacy Act ("CCPA"), in a number of states that have become effective, or will soon be effective, have created a substantially more complex regulatory regime associated with data-handling practices. Moreover, other laws and regulations related to data-handling and privacy that apply to our business, such as the Illinois Biometric Information Privacy Act, the European Union's General Data Protection Regulation ("GDPR"), the United Kingdom's General Data Protection Regulation (which implements the GDPR into U.K. law), China's Personal Information Protection Act ("PIPL"), and similar legislation in Quebec, Canada further increase the compliance obligations of our business. Certain of these laws have required us to modify our data processing practices and policies and to incur substantial costs and

expenses to comply, which we anticipate will continue in the future. For example, in the case of noncompliance with a material provision of the GDPR (such as non-adherence to the core principles of processing personal data), regulators have the authority to levy a fine in an amount that is up to the greater of €20 million or 4% of global annual turnover (i.e., revenue) in the prior year. These administrative fines are discretionary and based, in each case, on a multi-factored approach. Further, PIPL took effect in China in November 2021. PIPL raises the requirements for processing personal information and requires our China business to undergo a cybersecurity assessment and obtain approval from the Cyberspace Administration of China ("CAC") as well as consent from the personal information owner before personal information collected in China may be transferred to, or accessed from, outside of China. Walmart obtained CAC approval in September 2023. Fines for PIPL violations range from approximately RMB 50 million to up to 5% of the infringing company's previous year's revenues generated from within China. We have made changes, and we may in the future make additional adjustments to our business practices, to comply with the personal information protection laws and regulations in China as they evolve.

The impact of new laws, regulations and policies and the related interpretations, as well as changes in enforcement practices or regulatory scrutiny as to existing laws and regulations (including, but not limited to, in the U.S., shifting enforcement priorities for existing antitrust, competition and pricing laws, use and disposal of plastics, recycled plastics or other packaging materials, ESG, consumer protection and AI technology, as well as proposed new rules and regulations) generally cannot be predicted, and changes in applicable laws, regulations and policies and the related interpretations and enforcement practices of existing laws and regulations may require extensive system and operational changes, be difficult to implement, increase our operating costs, require significant capital expenditures, adversely impact the cost or attractiveness of the products or services we offer, or result in adverse publicity and harm our reputation. If we fail to predict or respond adequately to changes, including by implementing strategic and operational initiatives, or do not respond as effectively as our competitors, our business, operations and financial performance may be adversely affected.

We acquired VIZIO Holding Corp. and its subsidiaries (collectively "VIZIO") in December 2024. As part of its business, VIZIO collects certain consumer data, including viewing data from its opted-in internet-connected televisions. In 2017, VIZIO stipulated to the entry of a judgment in federal district court with the Federal Trade Commission and the New Jersey Attorney General to settle alleged violations related to certain of its business practices (the "VIZIO Order"). The VIZIO Order remains in effect until 2037 and requires VIZIO to comply with specified obligations related to its collection and use of certain information collected from a VIZIO internet-connected device. These requirements apply to certain VIZIO entities and all other persons in active concert or participation with them.

In addition, we may face audits or investigations by one or more government agencies relating to our compliance with applicable laws and regulations. To the extent a regulator or court disagrees with our interpretation of these laws and determines that our practices are not in compliance with applicable laws and regulations, we could be subject to civil and criminal penalties that could adversely affect the continued operation of our businesses, including: suspension of payments from government programs; loss of required licenses and certifications; loss of authorizations to participate in or exclusion from government programs, including the Medicare and Medicaid programs in the U.S.; termination from contractual relationships, including those with our drug suppliers and third-party payers; and significant fines or monetary damages. Failure to comply with applicable legal or regulatory requirements in the U.S. or in any of the countries in which we operate could result in significant legal and financial exposure, damage to our reputation and have a material adverse effect on our business operations, financial position and results of operations.

We are subject to risks related to litigation and other legal proceedings that may materially adversely affect our results of operations, financial position and liquidity.

We operate in a highly regulated and litigious environment. We are or may be involved in legal proceedings, including litigation, arbitration and other claims, investigations, inspections, audits, claims, inquiries and similar actions by pharmacy, healthcare, tax, consumer protection, employment, environmental and other governmental authorities as well as private individuals. We may also be involved in legal proceedings brought by regulatory authorities, organizations and individuals relating to product packaging, including that such packaging is made of plastic, is not appropriately disposed, contains PFAS, or contains misrepresentations about its recyclability, compostability, biodegradability or reusability. We may also have indemnification obligations for legal commitments of certain business customers we contract with and businesses we have

divested. Some of these suits may purport or may be determined to be class actions and/or involve parties seeking large and/or indeterminate amounts, including punitive or exemplary damages, and may remain unresolved for several years.

We have been responding to subpoenas, information requests and investigations from governmental entities related to nationwide controlled substance dispensing and distribution practices involving opioids. We are a defendant in numerous litigation proceedings related to opioids, including the multidistrict litigation entitled In re National Prescription Opiate Litigation (MDL No. 2804) currently pending in the U.S. District Court for the Northern District of Ohio, cases pending in various state and federal courts, and a lawsuit filed against us by the U.S. Department of Justice in the District of Delaware in 2020. We cannot predict the ultimate number of opioids-related claims that may be filed or their outcomes and cannot reasonably estimate any loss or range of loss that may arise from opioids-related matters.

In addition, we have been responding to subpoenas, information requests and investigations from governmental entities regarding the independent contractor classification of drivers and payment and operational practices with respect to our driver platform, as well as defending putative class and representative action civil litigation relating to driver classification and defending other civil litigation and arbitration claims in connection with the driver platform. On December 23, 2024, the Consumer Financial Protection Bureau ("CFPB") filed a lawsuit against the Company and Branch Messenger, Inc. in the District of Minnesota alleging the Company violated the Consumer Financial Protection Act by allegedly requiring independent contractor drivers on the Spark platform to receive payments through a financial product offered by Branch. The CFPB seeks an injunction and unspecified restitution, damages and civil penalties. On February 20, 2025, the Court entered an order that indefinitely stays the case and vacates all deadlines. We cannot predict the outcome of the investigations by the governmental entities or the civil litigation and arbitration matters. We cannot provide any assurance as to the scope and outcome of these matters and no assurance that our business, financial position, results of operations or cash flows will not be materially adversely affected.

In July 2021, the Directorate of Enforcement in India issued a show cause notice to Flipkart Private Limited and one of its subsidiaries ("Flipkart"), and to unrelated companies and individuals, including certain current and former shareholders and directors of Flipkart. The notice requests the recipients to show cause as to why further proceedings under India's Foreign Direct Investment rules and regulations (the "Rules") should not be initiated against them based on alleged violations during the period from 2009 to 2015, prior to our acquisition of a majority stake in Flipkart in 2018 (the "Notice"), in addition to more recent requests for information from the Directorate of Enforcement to Flipkart for periods prior and subsequent to April 2016 regarding the Rules, including the most recent request in February 2025 (the "Requests"). The Notice is an initial stage of proceedings under the Rules which could, depending upon the conclusions at the end of the initial stage, lead to a hearing to consider the merits of the allegations described in the Notice. If a hearing is initiated, whether with respect to the Notice or from further proceedings related to the Requests, and if it is determined that violations of the Rules occurred, then the regulatory authority has the authority to impose monetary and/or non-monetary relief, such as share ownership restrictions. We are unable to predict whether the Notice will lead to a hearing on the merits or, if it does, the final outcome of the resulting proceedings, as well as whether any further proceedings will arise with respect to the Requests.

On January 13, 2020, the Competition Commission of India ("CCI") ordered its Director General (the "DG") to investigate certain matters alleging competition law violations by certain subsidiaries of Flipkart in India and other parties. On September 13, 2024, those subsidiaries received a non-confidential version of the DG's Investigation Report (the "Report"), alleging certain competition law violations. CCI is not bound by the Report, and will conduct its independent analysis of the allegations, including hearing objections from the subsidiaries and other parties before issuing its final order in the matter, which could include monetary and non-monetary relief. CCI's final order would also be subject to appropriate appellate proceedings. We can provide no assurance as to the scope and outcome of this matter, cannot reasonably estimate any loss or range of loss that may arise, and can provide no assurance that its business, financial position, results of operations or cash flows will not be materially adversely affected.

Also, in October 2023, the main Mexican operating subsidiary of Wal-Mart de México, S.A.B. de C.V. ("Walmex") was notified of the initiation of a quasi-judicial administrative process against it for alleged relative monopolistic practices in connection with the supply and wholesale distribution of certain consumer goods and retail marketing practices of such consumer goods and related services. On December 12, 2024, the Comisión Federal de Competencia Económica of México ("COFECE") issued a split decision that Walmex's subsidiary had engaged in a single relative monopolistic practice in relation to the negotiation of two types of contributions with its suppliers. The resolution imposed a monetary penalty on Walmex's subsidiary and certain non-structural conduct measures. Walmex and its business operations may continue to be closely

monitored and subject to heightened scrutiny from regulatory authorities on these matters leading to possible negative publicity, additional litigation proceedings and reputational harm, all of which could have a material adverse effect on our business operations, financial position and results of operations.

We are also a defendant in litigation with the Federal Trade Commission regarding our money transfer agent services and are also cooperating with and responding to subpoenas issued by the U.S. Attorney's Office for the Middle District of Pennsylvania on behalf of the U.S. Department of Justice regarding our consumer fraud prevention program and anti-money laundering compliance related to our money transfer services, where we are an agent.

We discuss in more detail these cases and other litigation to which we are party below under the caption "Item 3. Legal Proceedings" and in Note 10 in the "Notes to our Consolidated Financial Statements," which are part of this Annual Report on Form 10-K.

Our amended and restated bylaws designate the Court of Chancery of the State of Delaware as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our shareholders, which could increase the costs for our shareholders to bring claims, discourage our shareholders from bringing claims, or limit our shareholders' ability to obtain a favorable judicial forum for disputes with us or our directors, officers, associates or shareholders in such capacity.

Our amended and restated bylaws designate the Delaware Court of Chancery as the exclusive forum for certain shareholder claims, including derivative claims alleging a violation of duty by a current or former director, officer, associate or shareholder, unless we agree otherwise in writing. This exclusive forum provision may increase the cost for shareholders to bring claims or limit their ability to choose a favorable forum, potentially discouraging lawsuits. Alternatively, if a court finds this provision unenforceable, we may face higher costs resolving such matters in other jurisdictions, which could negatively impact our business and financial results. However, this provision does not affect the exclusive or concurrent jurisdiction of federal courts over actions brought under the federal securities laws, including the Exchange Act, as amended, the Securities Act of 1933, as amended, and the rules and regulations promulgated thereunder.

Not satisfying stakeholder expectations with respect to our ESG efforts could adversely affect our reputation or subject us to regulatory or litigation risk.

We have established, and may continue to establish, various goals and initiatives on certain matters, including with respect to climate change, waste, packaging, plastic usage and other topics. We periodically publish information about our shared value priorities, strategies, progress and challenges through our online ESG reporting, which is not incorporated by reference into and does not form any part of this Annual Report on Form 10-K. Achievement of these aspirations and goals is subject to risks and uncertainties, many of which are outside of our control, and we cannot guarantee that we will achieve our goals or that our initiatives will achieve their desired results. Consequently, it is possible that we may fail, or be perceived to have failed, in the achievement of our ESG goals and certain customers, associates, shareholders, investors, suppliers, business partners, government agencies and non-governmental organizations might not be satisfied with our progress. Furthermore, federal, state and local regulatory authorities, private organizations and individuals may challenge our approach to ESG issues, including allegations that we failed in our efforts, should not have undertaken such efforts or that we improperly engaged with other entities in our approach to ESG issues. These challenges could involve administrative proceedings or litigation, including as class or mass actions.


ITEM 1B.			UNRESOLVED STAFF COMMENTS

None.


ITEM 1C.ITEM 1A.			CYBERSECURITY

Walmart seeks to build and maintain the trust of customers, associates, shareholders and other stakeholders with respect to our use of technology and data. Our digital trust commitments, in line with our Company's values of service, excellence, integrity and respect for the individual, provide a foundation for our approach to cybersecurity.

The Board of Directors, committees of the Board of Directors and management coordinate risk oversight and management responsibilities, and cybersecurity represents an important component of our overall approach to enterprise risk management. In general, we seek to address cybersecurity risks through a cross-functional approach focused on protecting business operations and preserving the confidentiality, integrity and availability of information by identifying, preventing and mitigating cybersecurity threats and effectively responding to cybersecurity incidents when they occur.

Board of Directors' oversight of risks from cybersecurity threats

Our Board of Directors, which has primary responsibility for overseeing risk management, has delegated risk management oversight responsibility for information systems, information security, data privacy and cybersecurity to the Audit Committee. Several of our Board members, including certain members of our Audit Committee, have backgrounds or professional experience in risk management, digital platforms, information technology or cybersecurity.

The Audit Committee receives periodic updates from our Chief Information Security Officer ("CISO"), Chief Technology Officer ("CTO") and other members of management on risks related to information systems, information security, data privacy and cybersecurity. Specific topics may include updates to our company's approach to cybersecurity risk management; recent developments; key initiatives; the threat landscape; trends; and the results of certain assessments and testing. The Board of Directors receives regular reports from the Audit Committee chair on these and other risk-related matters as deemed necessary. Our CISO or other members of management provide information to the Audit Committee pursuant to risk-based escalation protocols for cybersecurity incidents that exceed established reporting thresholds.

Management's role in assessing and managing material risks from cybersecurity threats

Our CISO leads Walmart's Information Security organization and has responsibility for overseeing our Company's cybersecurity program. To operationalize our program, we deploy multidisciplinary teams, including cybersecurity personnel and professionals, to address cybersecurity threats and respond to cybersecurity incidents, including for those recently acquired and non-wholly owned subsidiaries whose systems have not been fully integrated into Walmart's networks. Through ongoing engagement with these teams and certain third-party service providers, our CISO monitors the prevention, detection, mitigation and remediation of cybersecurity threats and incidents and reports cybersecurity incidents that reach established thresholds to senior management and the Audit Committee, which are also analyzed for external reporting requirements.

Our CISO has been a Walmart associate for over 30 years, has served in various roles in information technology and information security at Walmart for more than 20 years, and has received industry-recognized information security certifications. Our CTO, to whom the CISO reports, has served as Walmart's CTO since 2019 and prior to that had experience managing technology and other risks at several other large public companies.

Risk Management and Strategy

Our cybersecurity program is informed by various industry frameworks including the National Institute of Standards and Technology Cybersecurity Framework (NIST-CSF), which are reflected in our related policies, standards, processes and practices. We may implement changes to our cybersecurity program when deemed appropriate based on updates to laws or industry standards among other things. We have multiple layers of security designed to detect and prevent cybersecurity events, as well as dedicated teams of cybersecurity personnel and professionals, which assist our CISO in helping to assess, identify, monitor, detect and manage cybersecurity risks, threats, vulnerabilities and incidents. We collaborate with public and private entities and industry groups and engage third-party service providers to expand the capabilities and capacity of our cybersecurity program when deemed appropriate. Certain key components of our cybersecurity program include the following:

Protecting our technology and information systems: When we implement significant changes to our technologies or information systems, we conduct risk-based security and privacy impact assessments and deploy technical safeguards that are designed to reasonably protect our technology and information systems from cybersecurity threats. We actively monitor and proactively research potential cybersecurity threats to our technologies and information systems. We use what we learn to evolve our security controls over time to mitigate risks posed by such threats.

Incident response and recovery planning: We maintain incident response and recovery plans that address our response to cybersecurity incidents, including incidents that we become aware of at third parties that support our operations. These plans guide how we evaluate and assign incident severity levels and reporting thresholds; escalate and engage incident response teams; and manage and mitigate the related risks.

Third-party risk management: We maintain a risk-based approach to identifying and managing cybersecurity threats presented to Walmart by third-party systems that support our operations, as well as third-party users of our data and systems, including vendors, service providers and subcontractors.

Training and awareness: We provide recurring information security training (which includes cybersecurity training) to our associates and certain third parties based on access, risk, roles, policies, standards and behaviors.

Assessments and testing: We engage in periodic assessment and testing of our policies, standards, processes and practices that are designed to address cybersecurity threats. These efforts include tabletop exercises, threat modeling, vulnerability testing and other exercises focused on evaluating the effectiveness of our cybersecurity measures and planning. We regularly engage assessors, consultants, auditors or other third parties to assist with our assessments and testing. Where appropriate we adjust our cybersecurity policies, standards, processes and practices accordingly based on internal and external assessment and testing results.

Certain of Walmart's systems and those of our third-party service providers have experienced cybersecurity incidents and threats. Based on the information available as of the date of this Annual Report on Form 10-K, we are not aware of any risks from cybersecurity threats, including as a result of any cybersecurity incidents, which have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. Despite our security measures, however, there can be no assurance that we, or the third parties with which we interact, will not experience a cybersecurity incident in the future that will materially affect us. Additional information about cybersecurity risks we face is discussed in "Item 1A. Risk Factors," which should be read in conjunction with the information above.

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
HWBK	20 hours ago
TRSO	20 hours ago
SAIC	20 hours ago
BHRB	21 hours ago
NUVR	21 hours ago
TETEF	21 hours ago
NRC	22 hours ago
PACK	23 hours ago
CVGI	1 day ago
NEWT	1 day ago
PACB	1 day ago
CTGO	1 day ago
SNDA	1 day ago
CRVO	1 day ago
MBX	1 day ago
PLX	1 day, 1 hour ago
TSQ	1 day, 3 hours ago
FMCB	3 days, 13 hours ago
ANIK	3 days, 14 hours ago
ACR	3 days, 14 hours ago
BGSF	3 days, 15 hours ago
NXU	3 days, 15 hours ago
SSBK	3 days, 15 hours ago
BPRN	3 days, 15 hours ago
HNVR	3 days, 15 hours ago
MUX	3 days, 15 hours ago
HYAC	3 days, 16 hours ago
LPSN	3 days, 16 hours ago
NEN	3 days, 16 hours ago
HSON	3 days, 16 hours ago
BMRC	3 days, 16 hours ago
UHG	3 days, 16 hours ago
AMTX	3 days, 16 hours ago
GRI	3 days, 16 hours ago
GAN	3 days, 16 hours ago
USCB	3 days, 16 hours ago
LSBK	3 days, 16 hours ago
SKYT	3 days, 16 hours ago
XPOF	3 days, 16 hours ago
MYPS	3 days, 16 hours ago
FRAF	3 days, 16 hours ago
HBIA	3 days, 16 hours ago
AROW	3 days, 16 hours ago
WMT	3 days, 16 hours ago
MCHX	3 days, 16 hours ago
BZFD	3 days, 16 hours ago
MX	3 days, 16 hours ago
MNTK	3 days, 16 hours ago
KBSR	3 days, 16 hours ago
NRXP	3 days, 16 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - WMT

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - WMT

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing