Company: CTLPP
Filing Date: 2025-09-08
Form Type: 10-K
Source: 0001628280-25-041775
Chunk: 63

Company: CANTALOUPE, INC.
Filing Date: 2025-09-08
Form: 10-K
Item: Item 1A
Chunk 63
---
 new risks.

In addition, our processing systems may experience errors, interruptions, delays or damage from a number of causes, including, but not limited to, power outages, hardware, software and network failures, internal design, manual or usage errors, terrorism, workplace violence or wrongdoing, catastrophic events, climate-related events such as natural disasters and severe weather conditions. The steps we take to deter and mitigate these risks, including annual validation of our compliance with the Payment Card Industry Data Security Standard, may not be successful, and any resulting compromise or loss of data or systems could adversely impact the marketplace acceptance of our products and services, and could result in significant remedial expenses to not only assess and repair any damage to our systems, but also to reimburse customers for losses that occur from service interruptions or the fraudulent use of confidential data. Additionally, we could become subject to significant fines, litigation, and loss of reputation, potentially impacting our financial results.

Furthermore, the technology systems of businesses that we have acquired, or may acquire, as well as their practices related to the collection, use, maintenance, and disclosure of data, could present issues that we were not able to identify prior to the acquisition or other issues that continue to pose risk to use, such as cybersecurity vulnerabilities or past cybersecurity or privacy incidents. Following an acquisition, we take steps to ensure our data and system security protection measures cover the acquired business as part of our integration process. As such, there may be a period of increased cybersecurity risk during the period between closing an acquisition and the completion of our data and system security integration. Furthermore, despite these efforts, especially in light of increasingly sophisticated techniques used in cybersecurity attacks, our information technology systems and those of third parties with who we do business or communicate may be damaged, disrupted, or shut down due to attacks by unauthorized access, malicious software, computer viruses, undetected intrusion, hardware failures, or other events and in these circumstances where we cannot fully anticipate, detect, repel, or implement fully effective preventative measures, our disaster recovery plans may be ineffective or inadequate.

We depend on our key personnel and, if they leave us, or if we are unable to attract highly skilled personnel, our business could be adversely affected.

While we have maintained business continuity and operational success despite recent management changes over the past several years, our success and future growth also depends, to a significant degree, on the skills and continued services of our management team. Further, due to the complexity of the work required to make needed improvements within the Company, it may be difficult for