Company: AIP
Filing Date: 2025-05-13
Form Type: 10-Q
Source: 0001667011-25-000022
Chunk: 70

Company: Arteris, Inc.
Filing Date: 2025-05-13
Form: 10-Q
Item: Part I, Item 3
Chunk 70
---
 to service interruptions or to security breaches from inadvertent or intentional actions by our employees or external service providers, vendors, or from attacks by malicious third parties and state-sponsored actors. Such attacks are increasing in their frequency, levels of persistence, levels of sophistication and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives and expertise. As a result of our reliance on internet technology and the number of our employees who are working remotely, this may create additional opportunities for cybercriminals to exploit vulnerabilities. In addition to unauthorized access to or acquisition of personal data, confidential information, intellectual property or other sensitive information, such attacks could include the deployment of harmful malware and ransomware, and may use a variety of methods, including denial-of-service attacks, phishing, social engineering and other means, to attain such unauthorized access or acquisition or otherwise affect service reliability and threaten the confidentiality, integrity and availability of information. Like many other companies, we experience attempted cybersecurity actions on a frequent basis, and the frequency of such attempts could increase in the future. While we have invested in measures for the protection of data and information technology, there can be no assurance that our efforts will prevent or quickly identify service interruptions or security breaches. The techniques used by cybercriminals to obtain unauthorized access to systems or sabotage systems, or to disable or degrade services, change frequently, and may not be recognized when launched against a target and can originate from a wide variety of sources, including outside groups such as organized crime affiliates, terrorist organizations or hostile foreign governments or agencies. We cannot assure that our data protection efforts and our investment in information technology will prevent significant breakdowns, data leakages or breaches in our systems or those of our third-party services providers or partners. Any such interruption or breach of our systems could adversely affect our business operations and/or result in the loss of critical or sensitive confidential information or intellectual property, and could result in financial, legal, business and reputational harm to us. 

52

Data security breaches could also expose us to liability under various laws and regulations across jurisdictions and increase the risk of litigation and governmental or regulatory investigation. For example, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act, collectively the CCPA, includes a private right of action for security breaches that could lead to some form of remedy, as well as, regulatory scrutiny, fines, private right of action settlements, and other consequences. Where a security incident involves a breach of security leading to the accidental or unlawful destruction, loss, alternation