Company: NXNVW
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0001213900-25-023287
Chunk: 120

Company: NEXTNAV INC.
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1
Chunk 120
---
/or results of operations. Additionally, if applicable to any such events, our insurance may not be adequate to cover the costs associated. We also rely on third-party providers for certain of our infrastructure, any of which could also be subject to any such events, which could also have an adverse effect on our business.

15

Significant disruptions of our information technology systems or data security incidents, or the perceived failure to adequately protect personal information or other confidential or proprietary data, could trigger contractual and legal obligations, harm our reputation, subject us to liability, cause us to modify our business practices and otherwise adversely affect our business, financial condition and results of operations.

We are dependent on information technology systems and infrastructure to operate our business. We also rely on third parties to operate our business, whether because we have outsourced certain elements of our operations (including elements of our information technology infrastructure) to third parties, or may have incorporated third-party technology into our platform, or rely on third parties to incorporate our products and services into their offerings. As a result, a number of third parties may or could have access to our information technology systems (including our computer networks) or to our confidential information. In addition, many of those third parties in turn subcontract or outsource some of their responsibilities to third parties. As a result, our information technology systems, including the functions of third parties that are involved or have access to those systems, is large and complex. While all information technology operations are inherently vulnerable to inadvertent or intentional security breaches, incidents, attacks and exposures, the size, complexity, accessibility and distributed nature of our information technology systems, and personal or confidential information stored on those systems, make such systems potentially vulnerable to unintentional or malicious internal and external threats on our technology environment.

Vulnerabilities can be exploited from inadvertent or intentional actions or omissions of our employees, third-party vendors, business partners, or by malicious third parties. Attacks of this nature are increasing in their frequency, levels of persistence, sophistication and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives (including, but not limited to, industrial espionage) and expertise, including organized criminal groups, “hacktivists,” nation-states and others. For example, despite our efforts to secure our information technology systems and the data contained in those systems, including any efforts to educate or train our employees, we remain vulnerable to phishing attacks.

In addition to the threat of unauthorized access or acquisition of sensitive or personal information, other threats could include the deployment of harmful