Statement Regarding Cybersecurity Incident

August 24, 2026

Globus Medical recently identified a cybersecurity incident involving unauthorized access to a limited subset of employee corporate email accounts, files and data. Upon identification of the unauthorized access, the Company immediately activated its cybersecurity incident response protocols, initiated containment measures, and launched an investigation to examine the nature and scope of the activity and to contain the threat.

Preliminary findings from the ongoing investigation indicate that no sensitive customer, consumer, or patient information was exfiltrated, and the unauthorized access has been terminated. The Company has no indication of ransomware or malware and believes the incident is contained.

There has been no impact on our manufacturing, distribution or supply chain activities, and our ability to fulfill our responsibilities to our customers and patients, including selling activities, continues without impact. There is no evidence that this activity compromised our products or technology utilized in providing patient care. Additionally, the Company has pre-emptively put business continuity measures in place to ensure the ability to support our customers and patients remains uninterrupted. Our business continues to operate normally.

We are continuing to assess the nature and scope of the information that may have been accessed or acquired. We will provide updates, as appropriate, as additional information is confirmed.

At this time, we do not expect a material impact on financials or results of operations as a result of this incident.