Company: QTIWW
Filing Date: 2025-12-29
Form Type: S-1/A
Source: 0001628280-25-058960
Chunk: 53

Company: QT IMAGING HOLDINGS, INC.
Filing Date: 2025-12-29
Form: S-1/A
Chunk 53
---
 theft or misuse of personal and financial information, counterfeiting, “phishing” or social engineering incidents, account

<div align='center'>32</div>

takeover attacks, denial or degradation of service attacks, malware, fraudulent payment and identity theft. Because the techniques used by hackers change frequently and are increasingly complex and sophisticated, and new technologies may not be identified until they are launched against a target, we and our third-party service providers may be unable to anticipate these techniques or detect an incident, assess its severity or impact, react or appropriately respond in a timely manner or implement adequate preventative measures. Our systems are also subject to compromise from internal threats, such as theft, misuse, unauthorized access or other improper actions by employees, service provides and other third parties with otherwise legitimate access to our systems or databases. The latency of a compromise is often measured in months, but could be years, and we may not be able to detect a compromise in a timely manner.

Due to applicable laws and regulations or contractual obligations, we may also be held responsible for any failure or cybersecurity breaches attributed to our third-party service providers as they relate to the information that we share with them. Although we generally have agreements relating to data privacy and security in place with our third-party service providers, they are limited in nature and we cannot guarantee that such agreements will prevent the accidental or unauthorized access to or disclosure, loss, destruction, disablement, corruption or encryption of, use or misuse of or modification of confidential, proprietary or sensitive information, including personal information, or enable us to obtain reimbursement from third-party service providers in the event we should suffer incidents resulting in accidental or unauthorized access to or disclosure, loss, destruction, disablement or encryption of, use or misuse of or modification of confidential, proprietary or sensitive information, including personal information. In addition, because we do not control our third-party service providers and our ability to monitor their data security is limited, we cannot ensure the security measures they take will be sufficient to protect confidential, proprietary or sensitive information (including personal information).

Regardless of whether a security incident or act of fraud involving our solutions is attributable to us or our third-party service providers, such an incident could, among other things, result in improper disclosure of information, harm our reputation and brand, reduce the demand for our products and services, lead to loss of customer business or confidence in the effectiveness of our security measures, disrupt normal business operations or result in our systems or products and services being unavailable. In addition, such incidents may require us to spend material resources to