Company: LIDRW
Filing Date: 2025-08-08
Form Type: 10-Q
Source: 0001437749-25-025747
Chunk: 164

Company: AEye, Inc.
Filing Date: 2025-08-08
Form: 10-Q
Item: Part I, Item 1
Chunk 164
---
, we experienced a physical break-in at our headquarters. Although it does not appear any property, personal or intellectual, was taken, the break-in did cause a temporary disruption to our operations. In mid-2022, our previous partner, Continental, experienced a cyberattack in which data was improperly taken from their servers. To date, Continental has not notified us that any data belonging to us was compromised. A cyber incident is considered to be any adverse event that threatens the confidentiality, integrity, or availability of our information resources. These incidents may be an intentional attack or an unintentional event and could involve gaining unauthorized access to our information systems or those of our third-party vendors for purposes of misappropriating assets, stealing confidential information, corrupting data, or causing operational disruption. Such cyber incidents could materially disrupt operational systems; result in loss of intellectual property, trade secrets or other proprietary or competitively sensitive information; compromise certain information of employees, suppliers, or others; jeopardize the security of our facilities; or affect the performance of in-product technology and the integrated software in our lidar solutions. A cyber incident could be caused by disasters, insiders (through inadvertence or with malicious intent), or malicious third parties (including nation-states or nation-state supported actors) using sophisticated, targeted methods to circumvent firewalls, encryption, and other security defenses, including hacking, fraud, trickery, phishing, or other forms of deception. The risks of a cybersecurity breach against companies based in the U.S., like us, may be enhanced as a byproduct of the on-going war in Ukraine, or by state-sponsored actors, primarily located in, or sponsored by, China, Russia, or North Korea. Despite careful security and controls design, our information technology systems and the systems used by our third-party vendors, may be subject to security breaches and cyberattacks the result of which could include disrupted operations, misstated or unreliable financial data, liability for stolen assets or information, increased cybersecurity protection and insurance costs, litigation, and damage to business relationships.

The techniques used by cyber attackers change frequently and may be difficult to detect for long periods of time. Continental, for example, failed to provide notice of the mid-2022 breach to us for about one month. Although we maintain information technology measures designed to protect us against intellectual property theft, data breaches, and other cyber incidents, such measures will require continual updates and improvements, and we cannot guarantee that such measures will be adequate to detect, prevent, or mitigate cyber incidents. The implementation, maintenance, segregation