Company: CELH
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001341766-25-000024
Chunk: 40

Company: Celsius Holdings, Inc.
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 40
---
 not appropriately allocate and effectively manage the resources necessary to build and sustain the proper technology infrastructure, we could be subject to transaction errors, processing inefficiencies, the exposure of private data, the loss of customers, business disruptions, or the loss of or damage to our intellectual property or brand image through security breaches, including internal and external cyber-security threats. Cyber-security attacks by hackers, criminal groups or nation-state organizations are evolving and include, but are not limited to, malicious software (malware, ransomware and viruses), phishing and social engineering, cyber extortion, attempts to gain unauthorized access to networks, computer systems and data, malicious or negligent actions of employees (including misuse of information they are entitled to access) and other forms of electronic security breaches that could lead to disruptions in business systems, an inability to process customer orders or lost customer orders, unauthorized access, destruction, loss, alteration, falsification, unavailability or release of material confidential or otherwise protected information and corruption of data. Additionally, threat actors’ use of artificial intelligence could further enhance the frequency and effectiveness of such attacks. Such cyberattacks could result in violations of data protection laws and regulations, damage to the reputation and credibility of the Company, loss of opportunities to acquire or divest of businesses, and loss of ability to commercialize products developed through research and development efforts, any of which could require us to spend significant financial or other resources to remedy, and, therefore, could have a material adverse effect on our business, financial condition, results of operations, and cash flows.

We also rely on relationships with third parties, including suppliers, distributors, co-packers, contractors, cloud data storage and other information technology service providers and other external business partners, for certain functions or for services in support of our operations. These third-party service providers, and partners, with whom we may share data including without limitation, for data hosting, back-office support, and other functions, are subject to similar risks as we are, relating to cyber-security, privacy violations, business interruption, and systems, as well as employee failures. While we have procedures in place for selecting and managing our relationships with third-party service providers and other business partners, we do not have control over their business operations or governance and compliance systems, practices and procedures, which increases our financial, legal, reputational and operational risk. These third parties may experience cyber-security incidents that may involve data we share with them or rely on them to provide to us, and the need to coordinate with such third-parties, including with respect to timely notification and access