Company: PRMB
Filing Date: 2025-01-24
Form Type: S-1
Source: 0001193125-25-012325
Chunk: 37

Company: Primo Brands Corp
Filing Date: 2025-01-24
Form: S-1
Chunk 37
---
 partners’ license numbers, and Social Security numbers of delivery partners, consumer payment card information, and delivery partner bank
account information—as well as proprietary information belonging to our business such as trade secrets (collectively, “Confidential Information”).

Increased global cybersecurity vulnerabilities, threats, and sophisticated and targeted cyber-related attacks pose a risk to the security of
our and our customers’, partners’, suppliers’, and third-party service providers’ respective products, IT Systems and the confidentiality, availability, and integrity of our Confidential Information. Although we attempt to
mitigate these risks by employing a number of measures, we remain potentially vulnerable to additional known or unknown threats. For example, the recent global CrowdStrike outage resulted in interruptions to the availability and functionality of
Microsoft applications within BlueTriton and Primo Water, which we rely upon to perform a number of operations. Despite our efforts to protect our IT Systems and Confidential Information, we may be vulnerable to damage or interruption from
(i) earthquakes, fires, floods, hurricanes, and other natural disasters; (ii) power loss, computer system failure, internet and telecommunications, or data network failure; (iii) diverse threat actors, such as state-sponsored
organizations, opportunistic hackers, and hacktivists, as well as through diverse attack vectors, such as social engineering/phishing, malware (including ransomware), computer viruses, misconfigurations, software “bugs,” or glitches; or
(iv) theft, misplaced or lost data, programming errors, associate errors, and/or malfeasance.

While we have procedures and
technology in place to safeguard our Confidential Information, we may nevertheless be susceptible to electronic or physical computer break-ins, viruses, fraud, and other disruptions or

17

security compromises involving the loss or unauthorized access of personal and proprietary information because technologies used to obtain unauthorized access to or sabotage systems are
constantly evolving, change frequently, and generally are not recognized until they are launched against a target. Cyberattacks are expected to accelerate on a global basis in frequency and magnitude as threat actors are becoming increasingly
sophisticated in using techniques and tools—including artificial intelligence—that circumvent security controls, evade detection, and remove forensic evidence. As a result, we may be unable to detect, investigate, remediate, or recover
from future attacks or incidents, or to avoid a material adverse impact to our IT Systems, Confidential Information, or business.

Further, there can be no assurance that our cybersecurity risk management program and processes, including our policies, controls, or
procedures,