Company: NC
Filing Date: 2025-04-07
Form Type: ARS
Source: 0000789933-25-000013
Chunk: 67

Company: NACCO INDUSTRIES INC
Filing Date: 2025-04-07
Form: ARS
Chunk 67
---
 access to information in digital and other storage media are becoming increasingly sophisticated. Cyber threats and cyber attackers can be sponsored by nation states or sophisticated criminal organizations or be the work of independent hackers. As cyber threats evolve and become more difficult to detect and successfully defend against, one or more cyber attacks might defeat our, or a third-party service provider's, security measures in the future. Employee error or other irregularities may also result in a failure of security measures and a breach of information systems. Moreover, hardware, software or applications we may use have inherent defects of design, manufacture or operations or could be inadvertently or intentionally implemented or used in a manner that could compromise information security. A security breach and loss of information may not be discovered for a significant period of time after it occurs. Any compromise of data security could result in a violation of applicable privacy and other laws or standards, the loss of valuable business data, or a disruption of our business. A security breach involving the misappropriation, loss or other unauthorized disclosure of sensitive or confidential information could give rise to unwanted media attention, materially damage customer relationships and our reputation, and result in fines, fees, or liabilities, which may not be covered by insurance policies. We rely on information technology systems to operate our business and to record and process transactions; respond to customer inquiries; purchase supplies; provide services; deliver inventory on a timely basis; and maintain cost-efficient operations. Despite our efforts, our information technology systems may be vulnerable, from time to time, to damage or interruption from user error, computer viruses, power outages, third-party intrusions and other technical malfunctions. Through our business operations, we collect and store confidential information from our customers and vendors and personal information and other confidential information from our employees. Although we have taken steps designed to safeguard such information, there can be no assurance that such information will be protected against unauthorized access, use or disclosure. Unauthorized parties may penetrate our or our vendors’ network security and, if successful, misappropriate such information. Additionally, methods to obtain unauthorized access to confidential information change frequently and may be difficult to detect, which can impact our ability to respond appropriately. We could be subject to liability for failure to comply with privacy and information security laws, for failing to protect personal information or for failing to respond appropriately. Loss, unauthorized access to, or misuse of confidential or personal information could disrupt our operations, damage our reputation, and expose us to claims from customers, financial institutions, regulators, employees and other persons, any of which could have an adverse effect on our business