IRON MOUNTAIN INC

Previous wording

As part of our strategic growth plan, including Project Matterhorn, we expect to invest in our existing businesses, including records and information management storage and services businesses in our higher-growth markets, data centers, digital solutions, ALM business and other complementary businesses, and in new businesses, business strategies, products, services, technologies and geographies. These initiatives may involve significant risks and uncertainties, including:

Current wording

As part of our strategic growth plan, we expect to invest in our existing businesses, including records and information management storage and services businesses in our higher-growth markets, data centers, digital solutions, ALM business and other complementary businesses, and in new businesses, business strategies, products, services, technologies and geographies. These initiatives may involve significant risks and uncertainties, including:

Previous wording

If stored records and tapes become less active, our service revenue growth and profits from related services may decline.

Current wording

As stored records and tapes become less active, our service revenue growth and profits from related services may decline.

Previous wording

We and our customers are subject to laws and governmental regulations relating to data privacy and cybersecurity, and our customers’ demands in this area are increasing. This may cause us to incur significant expenses and non-compliance with such regulations and demands could harm our business.

Current wording

We and our customers are subject to laws and governmental regulations, including laws relating to data privacy and cybersecurity, and our customers’ demands in this area are increasing. This may cause us to incur significant expenses and non-compliance with such regulations and demands could harm our business.

Previous wording

Expansion into Global Digital Solutions and ALM services means that our privacy and security risk profile is increasing. In particular, we are hosting increasing volumes of customer digital data, including sensitive and confidential data, and disposing of customer data-bearing devices. This may result in increased regulatory exposure, contractual liability and security expectations from customers. Finally, emerging AI regulations, increasing use of AI and generative AI tools and their integration into our businesses may require additional resources and create additional compliance and cybersecurity risks.

Current wording

Expansion into Global Digital Solutions and ALM services means that our data privacy and security risk profile is increasing. In particular, we are hosting increasing volumes of customer digital data, including sensitive and confidential data, and disposing of customer data-bearing devices. This may result in increased regulatory exposure, contractual liability and security expectations from customers. Finally, emerging AI technology, such as AI and generative AI systems, have become subject to regulation under new laws and new applications of prior existing laws which require additional resources and increase compliance risks as we integrate AI into our services.

Previous wording

Our reputation for providing secure information storage to customers is critical to the success of our business. Our reputation or brand, and specifically, the trust our customers place in us, could be negatively impacted in the event of perceived or actual failures by us to store information securely. Although we seek to prevent and detect attempts by unauthorized users to gain access to our IT systems, and incur significant costs to do so, our IT and network infrastructure has in the past been and may in the future be vulnerable to attacks by hackers, including state-sponsored organizations with significant financial and technological resources, breaches due to employee error, fraud or malice or other disruptions (including, but not limited to, computer viruses and other malware, denial of service and ransomware), which may involve a breach requiring us to notify regulators, clients or employees and enlist identity theft protection. Moreover, until we have migrated businesses we acquire onto our IT systems or ensured compliance with our information technology security standards, we have in the past and may in the future face additional risks because of the continued use of predecessor IT systems. We utilize remote work arrangements and outsource certain support services, including cloud storage systems and cloud computing services, to third parties, which has in the past and may in the future subject our IT and other sensitive information to additional risk. A successful breach of the security of our IT systems could lead to theft or misuse of our customers’ proprietary or confidential information or our employees’ personal information and result in third party claims against us, regulatory penalties and reputational harm. Although we maintain insurance coverage for various cybersecurity risks, there is no guarantee that all costs or losses incurred will be fully insured. Damage to our reputation could make us less competitive, which could negatively impact our business, financial condition and results of operations.

Current wording

Our reputation for providing secure information storage to customers is critical to the success of our business. Our reputation or brand, and specifically, the trust our customers place in us, could be negatively impacted in the event of perceived or actual failures by us to store information securely. Although we seek to prevent and detect attempts by unauthorized users to gain access to our IT systems, and incur significant costs to do so, our IT and network infrastructure has in the past been and may in the future be vulnerable to cyberattacks and security incidents, including by state-sponsored organizations with significant financial and technological resources, breaches due to employee or contractor error, fraud or malice or other disruptions (including, but not limited to, computer viruses and other malware, denial of service and ransomware), which may involve a breach requiring us to notify regulators, clients or employees and enlist identity theft protection. Recent developments in the cybersecurity threat landscape include the use of AI and machine learning, as well as an increased number of cyber extortion and ransomware attacks. As techniques used to breach security change frequently and are generally not recognized until launched against a target, we may not be able to promptly detect that a cyber breach has occurred, or implement security measures in a timely manner or, if and when implemented, we may not be able to determine the extent to which these measures could be circumvented. Moreover, until we have migrated businesses we acquire onto our IT systems or ensured compliance with our information technology security standards, we have in the past and may in the future face additional risks because of the continued use of predecessor IT systems. We utilize remote work arrangements and outsource certain support services, including cloud storage systems and cloud computing services, to third parties, which has in the past and may in the future subject our IT and other sensitive information to additional risk. A successful breach of the security of our IT systems could lead to theft or misuse of our customers’ proprietary or confidential information or our employees’ personal information and result in third party claims against us, regulatory penalties and reputational harm. Although we maintain insurance coverage for various cybersecurity risks, there is no guarantee that all costs or losses incurred will be fully insured. Damage to our reputation could make us less competitive, which could negatively impact our business, financial condition and results of operations.

Previous wording

Our customer contracts may not always limit our liability and may sometimes contain terms that could subject us to significant liability or lead to disputes in contract interpretation.

Current wording

Our customer contracts do not always limit our liability and sometimes contain terms that could subject us to significant liability or lead to disputes in contract interpretation.

Previous wording

As of December 31, 2024, we operated in 61 countries. The global nature of our business and our growth strategy, which includes continued acquisitions and investments in countries where we do not currently operate, is subject to numerous risks, including:

Current wording

As of December 31, 2025, we operated in 61 countries. The global nature of our business and our growth strategy, which includes continued acquisitions and investments in countries where we do not currently operate or have limited operations, is subject to numerous risks, including:

Previous wording

•political uncertainties and changes in the global political climate or other global events, such as war or other military conflict, trade wars or global pandemics, which may create additional risk in relation to our global operations, which may become more pronounced as we consolidate operations across countries and need to move data across borders;

Current wording

•political uncertainties and changes in the global political climate or other global events, such as war or other military conflict, tariffs or trade restrictions, trade wars, global pandemics or supply chain challenges, which may create additional risk in relation to our global operations, which may become more pronounced as we consolidate operations across countries and need to move data across borders;

Previous wording

If we fail to meet our commitment to transition to more renewable and sustainable sources of energy, it may negatively impact our ability to attract and retain customers, employees and investors who focus on this commitment. Furthermore, changes to environmental laws and standards may increase the cost to operate some of our businesses. This could impact our results of operations, our competitiveness and the trading value of our stock.

Current wording

If we fail to transition to more sustainable sources of energy, it may negatively impact our ability to attract and retain certain of our customers, employees and investors. Furthermore, changes to environmental laws and standards may increase the cost to operate some of our businesses. This could impact our results of operations, our competitiveness and the trading value of our stock.

Previous wording

We have made a commitment to prioritize sustainable energy practices, reduce our carbon footprint and transition to more renewable and sustainable sources of energy, particularly in our Global Data Center Business. We have made progress towards reducing our carbon footprint, but if we are not successful in continuing this reduction or if our customers, employees and investors are not satisfied with our sustainability efforts, it may negatively impact our ability to attract and retain customers, employees and investors who focus on this commitment. This could negatively impact our results of operations and the trading of our stock.

Current wording

We have made progress towards reducing our carbon footprint, but if we are not successful in continuing this reduction or if our customers, employees and investors are not satisfied with our sustainability efforts, it may negatively impact our ability to attract and retain customers, employees and investors who focus on this commitment. This could negatively impact our results of operations and the trading of our stock.

Previous wording

We are currently experiencing rising construction costs which reflect the increase in cost of labor and raw materials, as well as supply chain and logistical challenges. Unexpected disruptions to our supply chain, continued inflationary pressures or high interest rates, tariffs, delays in construction, limited financing availability, constrained supplies of new power, or changes in customer requirements could significantly affect the cost or timing of our planned expansion projects, have consequences under our project financing and partnership agreements, and interfere with our ability to meet commitments to customers who have contracted for space in new data centers under construction.

Current wording

We continue to experience rising construction costs which reflect the increase in cost of labor and raw materials, as well as supply chain and logistical challenges. Unexpected disruptions to our supply chain, continued inflationary pressures or high interest rates, tariffs, delays in construction, limited financing availability, constrained supplies of new power, or changes in customer requirements could significantly affect the cost or timing of our planned expansion projects, have consequences under our project financing and partnership agreements, and interfere with our ability to meet commitments to customers who have contracted for space in new data centers under construction.

Previous wording

A significant portion of the revenue from our ALM business is derived from a limited number of clients and tied to cyclical projects involving the decommissioning and destruction of IT assets and the disposition of components of such assets to purchasers in concentrated geographies. Though we generally enter into long-term contracts with such clients, the volume of work we perform for specific clients may vary over the life of each contract due to various factors including changes in client behavior or macroeconomic conditions impacting the availability of new IT assets in the marketplace. There can be no assurance that we will be able to retain our current volumes, existing clients or that, if we were to lose one or more of our significant clients, we would be able to replace such clients with clients that generate a comparable amount of revenue. Further, many of the purchasers of the decommissioned IT asset components are geographically concentrated, particularly within mainland China. If governments enact trade policies or environmental regulations that restrict or increase the cost of exporting IT assets into China or other markets in which we sell decommissioned IT asset components or recyclable materials, or increase the enforcement of such policies, then the revenue from the sale of these assets may be negatively impacted. Additionally, uncertain macroeconomic conditions, particularly within mainland China, may reduce our purchasers’ demand for the IT asset components that we sell, thereby reducing our revenues and earnings.

Current wording

A significant portion of the revenue from our ALM business is derived from a limited number of clients and tied to cyclical projects involving the decommissioning and destruction of IT assets and the disposition of components of such assets to purchasers in concentrated geographies. Though we generally enter into long-term contracts with such clients, the volume of work we perform for specific clients may vary over the life of each contract due to various factors including changes in client behavior or macroeconomic conditions impacting the availability of new IT assets in the marketplace. There can be no assurance that we will be able to retain our current volumes, existing clients or that, if we were to lose one or more of our significant clients, we would be able to replace such clients with clients that generate a comparable amount of revenue. Further, many of the purchasers of the decommissioned IT asset components are geographically concentrated, particularly in China. If governments enact trade policies or environmental regulations that restrict or increase the cost of exporting IT assets into China or the other markets in which we sell decommissioned IT asset components or recyclable materials, or increase the enforcement of such policies, then the revenue from the sale of these assets may be negatively impacted. Additionally, uncertain macroeconomic conditions, particularly within China, may reduce our purchasers’ demand for the IT asset components that we sell, thereby reducing our revenues and earnings.

Previous wording

Failure to comply with certain regulatory and contractual requirements under our United States Government contracts could adversely affect our revenues, operating results and financial position and reputation.

Current wording

Failure to comply with certain regulatory and contractual requirements under our government contracts could adversely affect our revenues, operating results and financial position and reputation.

Previous wording

Having the United States Government as a customer subjects us to certain regulatory and contractual requirements. Failure to comply with these requirements could subject us to investigations, price reductions, up to treble damages, and civil penalties. Noncompliance with certain regulatory and contractual requirements could also result in us being suspended or debarred from future United States Government contracting. We may also face private derivative securities claims because of adverse government actions. Any of these outcomes could have a material adverse effect on our revenues, operating results, financial position and reputation.

Current wording

Having the government entities as customers subjects us to certain regulatory and contractual requirements. Failure to comply with these requirements could subject us to investigations, price reductions, up to treble damages, and civil penalties. Noncompliance with certain regulatory and contractual requirements could also result in us being suspended or debarred from future contracting with such government entities. We may also face private derivative securities claims because of adverse government actions. Any of these outcomes could have a material adverse effect on our revenues, operating results, financial position and reputation.

Previous wording

As of December 31, 2024, we operated approximately 1,350 facilities worldwide, including approximately 550 in the United States, and face special risks attributable to the real estate we own or lease, which could have a material adverse effect on our revenues, operating results and financial position. Such risks include:

Current wording

As of December 31, 2025, we operated approximately 1,340 facilities worldwide, including approximately 530 in the United States, and face special risks attributable to the real estate we own or lease, which could have a material adverse effect on our revenues, operating results and financial position. Such risks include:

Previous wording

•uninsured losses or damage to our facilities due to an inability to obtain full coverage on a cost-effective basis for some casualties, such as fires, hurricanes and earthquakes, or any coverage for certain losses, such as losses from riots or terrorist activities;

Current wording

•uninsured losses or damage to our facilities due to an inability to obtain full coverage on a cost-effective basis for some casualties, such as fires, severe weather events, earthquakes and other natural disasters, or any coverage for certain losses, such as losses from riots or terrorist activities;

Previous wording

Unexpected events, including fires or explosions at our facilities, war or other military conflict, terrorist activities, natural disasters such as earthquakes and wildfires, unplanned power outages, supply disruptions, failure of equipment or systems, and severe weather events, such as droughts, heat waves, hurricanes, and flooding, could adversely affect our reputation and results of operations through physical damage to our facilities, equipment and customers' inventory and through physical damage to, or disruption of, local infrastructure. During the past several years, we have seen an increase in the frequency and intensity of severe weather events and we expect this trend to continue due to climate change. Some of our key facilities worldwide are vulnerable to severe weather events, and global weather pattern changes may also pose long-term risks of physical impacts to our business. Our customers rely on us to securely store and timely retrieve their critical information, and, while we maintain disaster recovery and business continuity plans that would be implemented in these situations, these unexpected events could result in customer service disruption, physical damage to one or more key operating facilities and the information stored in those facilities, the closure of one or more key operating facilities or the disruption of information systems, each of which could negatively impact our reputation and results of operations. In addition, these unexpected events could negatively impact our reputation if such events result in adverse publicity, governmental investigations or litigation or if customers do not otherwise perceive our response to be adequate.

Current wording

Unexpected events, including fires or explosions at our facilities, war or other military conflict, terrorist activities, natural disasters such as earthquakes and wildfires, unplanned power outages, supply disruptions, failure of equipment or systems, and severe weather events, such as droughts, heat waves, wind events, hurricanes, and flooding, could adversely affect our reputation and results of operations through physical damage to our facilities, equipment and customers' inventory and through physical damage to, or disruption of, local infrastructure. During the past several years, we have seen an increase in the frequency and intensity of severe weather events and we expect this trend to continue due to climate change. Some of our key facilities worldwide are vulnerable to severe weather events, and global weather pattern changes may also pose long-term risks of physical impacts to our business. Our customers rely on us to securely store and timely retrieve their critical information, and, while we maintain disaster recovery and business continuity plans that would be implemented in these situations, these unexpected events could result in customer service disruption, physical damage to one or more key operating facilities and the information stored in those facilities, the closure of one or more key operating facilities or the disruption of information systems, each of which could negatively impact our reputation and results of operations. In addition, these unexpected events could negatively impact our reputation if such events result in adverse publicity, governmental investigations or litigation or if customers do not otherwise perceive our response to be adequate.

Previous wording

As of December 31, 2024, our total long-term debt was approximately $13,836.4 million, stockholders' deficit was approximately $503.1 million and we had cash and cash equivalents of approximately $155.7 million. Our indebtedness could have important consequences to our current and potential investors. These risks include:

Current wording

As of December 31, 2025, our total long-term debt was approximately $16,544.5 million, stockholders' deficit was approximately $981.0 million and we had cash and cash equivalents of approximately $158.5 million. Our indebtedness could have important consequences to our current and potential investors. These risks include:

Previous wording

We conduct a significant portion of our business activities, including our information management services businesses and several of our international operations, through domestic and foreign TRSs. Under the Code, no more than 20% of the value of the assets of a REIT may be represented by securities of one or more TRSs. Similar rules apply to other nonqualifying assets. These limitations may affect our ability to make additional investments in non-REIT qualifying operations or assets or in international operations through TRSs.

Current wording

We conduct a significant portion of our business activities, including our information management services businesses and several of our international operations, through domestic and foreign TRSs. Under the Code, no more than 25% of the value of the assets of a REIT may be represented by securities of one or more TRSs. Similar rules apply to other nonqualifying assets. These limitations may affect our ability to make additional investments in non-REIT qualifying operations or assets or in international operations through TRSs.

Previous wording

Our operations include an extensive use of TRSs. The net income of our TRSs is not required to be distributed to us, and income that is not distributed to us generally is not subject to the REIT income distribution requirement. However, there may be limitations on our ability to accumulate earnings in our TRSs and the accumulation or reinvestment of significant earnings in our TRSs could result in adverse tax treatment. In particular, if the accumulation of cash in our TRSs causes (i) the fair market value of our securities in our TRSs to exceed 20% of the fair market value of our assets or (ii) the fair market value of our securities in our TRSs and other nonqualifying assets to exceed 25% of the fair market value of our assets, then we will fail to remain qualified for taxation as a REIT. Further, a substantial portion of our operations are conducted overseas, and a material change in foreign currency rates could also affect the value of our foreign holdings in our TRSs, negatively impacting our ability to remain qualified for taxation as a REIT.

Current wording

Our operations include an extensive use of TRSs. The net income of our TRSs is not required to be distributed to us, and income that is not distributed to us generally is not subject to the REIT income distribution requirement. However, there may be limitations on our ability to accumulate earnings in our TRSs and the accumulation or reinvestment of significant earnings in our TRSs could result in adverse tax treatment. In particular, if the accumulation of cash in our TRSs causes (i) the fair market value of our securities in our TRSs to exceed 25% of the fair market value of our assets or (ii) the fair market value of our securities in our TRSs and other nonqualifying assets to exceed 25% of the fair market value of our assets, then we will fail to remain qualified for taxation as a REIT. Further, a substantial portion of our operations are conducted overseas, and a material change in foreign currency rates could also affect the value of our foreign holdings in our TRSs, negatively impacting our ability to remain qualified for taxation as a REIT.

Previous wording

Dividends payable by United States corporations to noncorporate stockholders, such as individuals, trusts and estates, are generally eligible for reduced United States federal income tax rates applicable to "qualified dividends". Distributions paid by REITs generally are not treated as "qualified dividends" under the Code, and the reduced rates applicable to such dividends do not generally apply. However, for tax years beginning before 2026, REIT dividends paid to noncorporate stockholders that meet specified holding period requirements are generally taxed at an effective tax rate lower than applicable ordinary income tax rates due to the availability of a deduction under the Code for specified forms of income from passthrough entities. More favorable rates will nevertheless continue to apply to regular corporate "qualified" dividends, which may cause some investors to perceive that an investment in a REIT is less attractive than an investment in a non-REIT entity that pays dividends, thereby reducing the demand and market price of our common stock.

Current wording

Dividends payable by United States corporations to noncorporate stockholders, such as individuals, trusts and estates, are generally eligible for reduced United States federal income tax rates applicable to "qualified dividends". Distributions paid by REITs generally are not treated as "qualified dividends" under the Code, and the reduced rates applicable to such dividends do not generally apply. However, REIT dividends paid to noncorporate stockholders that meet specified holding period requirements are generally taxed at an effective tax rate lower than applicable ordinary income tax rates due to the availability of a deduction under the Code for specified forms of income from passthrough entities. More favorable rates will nevertheless continue to apply to regular corporate "qualified" dividends, which may cause some investors to perceive that an investment in a REIT is less attractive than an investment in a non-REIT entity that pays dividends, thereby reducing the demand and market price of our common stock.