Company: CALX
Filing Date: 2025-04-22
Form Type: 10-Q
Source: 0001406666-25-000016
Chunk: 187

Company: CALIX, INC
Filing Date: 2025-04-22
Form: 10-Q
Item: Part I, Item 4
Chunk 187
---
 results of operations.

Cyberattacks or other security incidents that disrupt our or our third-party providers’ operations or compromise data, may expose us to liability, harm our reputation or otherwise adversely affect our business.

We rely on our own and third-party hardware, software, technology infrastructure, data centers, digital networks and online sites and services for both internal and customer-facing operations that are critical to our business, or collectively, IT Systems. In addition, as part of our business operations, we collect, store, process, use and/or disclose information, including sensitive 

28

Table of Contents

data relating to our business, our business partners and our customers, and personal information about individuals such as our employees and our customers’ subscribers, or collectively, Confidential Information. We process Confidential Information to operate our business, including in connection with the provision of our cloud services and by relying on our and our providers’ IT Systems. We also engage third-party providers to support various internal functions, such as human resources, finance, information technology and electronic communications, as well as the development and delivery of our customer-facing products and cloud services, which includes collecting, handling, processing and/or storage of data on our behalf. These internal and external functions involve an array of software and systems, including cloud-based, that enable us to conduct, monitor and/or protect our business, operations, systems and information technology assets. Our cloud-based solutions enable us to host our customers’ subscriber data in third-party data centers.

We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of our IT Systems and Confidential Information, including from diverse threat actors such as state-sponsored organizations, opportunistic hackers and hacktivists, as well as through diverse attack vectors such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error and, as a result of malicious code embedded in open-source software, bugs, misconfigurations or exploited vulnerabilities in software or hardware that is integrated into our (or our suppliers’ or service providers’) IT Systems, products or services. Threat actors could steal Confidential Information related to our business, products, employees, customers and our customers’ subscribers; hold data ransom; and/or disrupt our systems and services or those of our supply chain partners, vendors, customers or others. We expect cybersecurity attacks and security breaches to accelerate in the future, including sophisticated supply chain attacks. As we and our third-party providers continue to increase our reliance on virtual environments and communications systems and cloud-based solutions to support our work-from-anywhere