Company: LGN
Filing Date: 2025-07-15
Form Type: DRS/A
Source: 0000950123-25-006399
Chunk: 49

Company: Legence Corp.
Filing Date: 2025-07-15
Form: DRS/A
Chunk 49
---
 disruption of our business plans; ransom payments; significant remediation and cybersecurity
protection costs; loss of customer, stockholder, vendor or employee data; loss, disclosure or misappropriation of intellectual property, proprietary information or other confidential, sensitive or personal information; litigation and legal risks,
including regulatory actions; potential liability; damage to our reputation or customer relationships; or damage to the Company’s competitiveness, stock price and long-term shareholder value, or otherwise have a material adverse impact on our
business, financial condition and results of operations. An attack could also cause service disruptions to our internal systems or, in extreme circumstances, infiltration into, damage to or loss of control of our customers’ systems. While we
maintain insurance coverage for these types of cybersecurity incidents, such insurance policies may not completely provide coverage for, or completely offset, the costs associated with such incidents, including losses from reputational harm or the
costs to improve security against future similar threats. Additionally, because the techniques used to obtain unauthorized access or sabotage information technology

31

Confidential Treatment Requested by Legence Corp.

Pursuant to 17 C.F.R. Section 200.83

systems change frequently and are generally not identifiable until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative
measures. As a result, we may be required to expend significant resources to protect against the threat of system disruptions and security breaches or to alleviate problems caused by these disruptions and breaches.

In addition, new or evolving laws and regulations governing data privacy and the unauthorized disclosure of confidential or protected
information and recent legislation in certain U.S. states, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, state biometric laws and other emerging U.S. state privacy laws, pose increasingly complex
compliance challenges and could potentially elevate our compliance costs. Any failure to comply with these laws and regulations, or an exposure or exfiltration of information covered by such laws and regulations, including, without limitation, in
connection with a cybersecurity incident, could result in significant penalties and legal liability and could have a material adverse effect on our business, financial condition and results of operations.

We may use artificial intelligence (“AI”) in our business, and challenges with properly managing its use, as well as uncertainty regarding the legal and regulatory landscape surrounding the use of AI, could result in reputational harm, competitive harm and legal liability, and adversely affect our business.

We utilize AI, data analytics and related tools to collect