Company: LIDRW
Filing Date: 2025-11-07
Form Type: 10-Q
Source: 0001437749-25-033677
Chunk: 290

Company: AEye, Inc.
Filing Date: 2025-11-07
Form: 10-Q
Item: Part I, Item 3
Chunk 290
---
 or the operations of our customers’, channel partners’, or suppliers’, or the economy as a whole. We also rely on information technology systems to communicate among our workforce and with third parties. Any disruption to our communications, whether caused by a natural disaster or by manufactured events, such as power disruptions, could adversely affect our business. We do not have a formal disaster recovery plan or policy in place and do not currently require that our suppliers have such plans or policies in place. To the extent that any such disruptions result in delays or cancellations of orders or impede our suppliers’ ability to timely deliver components, or the deployment of our products, our business, operating results, and financial condition would be adversely affected.

       58

We, as well as our suppliers and partners, are subject to cybersecurity risks to operational systems, security systems, infrastructure, integrated software in our lidar solutions, and the data processed by those solutions, and any material failure, weakness, interruption, cyber event, incident, or breach of security could adversely affect our business by causing a disruption of our operations, a compromise or corruption of our confidential or other business-critical information, and/or damage our business relationships, all of which could negatively impact our business financial condition, and operating results.

We are at risk for interruptions, outages, and breaches of our operational systems, including our business, financial, accounting, product development, and production processes, owned by us, our suppliers or our partners; our facility security systems, owned by us, our suppliers, or our partners; our in-product technology owned by us, our suppliers, or our partners; the integrated software in our lidar solutions; or the data that we process or our suppliers process on our behalf. In March 2025, we experienced a physical break-in at our headquarters. Although it does not appear that any property, either personal or intellectual, was taken, the break-in caused a temporary disruption to our operations. In mid-2022, our previous partner, Continental, experienced a cyberattack in which data was improperly taken from their servers. To date, Continental has not notified us that any data belonging to us was compromised. A cyber incident is considered to be any adverse event that threatens the confidentiality, integrity, or availability of our information resources. These incidents may be an intentional attack or an unintentional event and could involve gaining unauthorized access to our information systems or those of our third-party vendors for purposes of misappropriating assets, stealing confidential information, corrupting data, or causing operational