Company: DOMO
Filing Date: 2025-04-04
Form Type: 10-K
Source: 0001505952-25-000045
Chunk: 80

Company: DOMO, INC.
Filing Date: 2025-04-04
Form: 10-K
Item: Item 1A
Chunk 80
---
 network, application, or computer systems are breached or unauthorized access to customer data or other sensitive data is otherwise obtained or if we experience any other type of security incident, our platform may be perceived as insecure and we may lose existing customers or fail to attract new customers, operations may be disrupted if systems or data become unavailable, our reputation may be damaged and we may incur significant remediation costs or liabilities, including regulatory fines for violation of compliance requirements.

As a provider of cloud services, our operations involve the storage and transmission of our customers’ sensitive and proprietary information, and we also collect, store, transmit, and otherwise process large amounts of sensitive corporate, personal, and other information relating to our business and operations, including intellectual property, proprietary business information, and other confidential information. Cyber-attacks and other malicious internet-based activity continue to increase generally in both frequency and sophistication (including the use of emerging artificial intelligence technologies), and cloud-based platform providers of software and services have been targeted. Many of our employees work remotely at least part of the time, which may pose additional cybersecurity risks. Within cloud service delivery organizations, there is an increased threat from both targeted and non-targeted activities. These activities may originate from threat actor groups with various motivations, including cyber espionage, financial or ideological motivations. We may also face numerous types of attacks, including financial attacks in the form of ransomware/cyber extortion, artificial intelligence-assisted deepfake attacks and disinformation campaigns, fraud, misappropriation of resources (such as, for instance, cryptocurrency mining operations using Domo resources), and malicious attacks such as distributed denial of service with the intention to cause extended period of service downtime, as well as other types of security incidents which could prevent customers from accessing our products and services. Attackers may, in addition to other motivations, seek to render unavailable, destroy, modify, or access without authorization the various types of data we store or otherwise process, including our own data, our customers’ data generally, or data of specific customers. Our employees and contractors who have access to company data as well as customer personal information and/or customer data could be a victim of social engineering tactics such as phishing and business email compromise, which could further lead to malware and/or ransomware being installed on our company assets and which could cause a potential compromise of systems and information. In addition, as we host our platform on third party cloud hosting services offered by the leading cloud hosting providers, any misconfiguration in the cloud due to our own unintentional error or lack of understanding, or any exploitation of