Company: NXNVW
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0001213900-25-023287
Chunk: 265

Company: NEXTNAV INC.
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1A
Chunk 265
---
 and exposures, the size, complexity, accessibility and distributed nature of our information technology systems, and personal or confidential information stored on those systems, make such systems potentially vulnerable to unintentional or malicious internal and external threats on our technology environment.

Vulnerabilities can be exploited from inadvertent or intentional actions or omissions of our employees, third-party vendors, business partners, or by malicious third parties. Attacks of this nature are increasing in their frequency, levels of persistence, sophistication and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives (including, but not limited to, industrial espionage) and expertise, including organized criminal groups, “hacktivists,” nation-states and others. For example, despite our efforts to secure our information technology systems and the data contained in those systems, including any efforts to educate or train our employees, we remain vulnerable to phishing attacks.

In addition to the threat of unauthorized access or acquisition of sensitive or personal information, other threats could include the deployment of harmful malware, ransomware attacks, denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. Some of these external threats may be amplified by the nature of third-party web hosting or cloud computing services or by the integration of our product into a third party’s offerings. Our systems may experience directed attacks intended to interrupt our operations; extract money from it; and/or obtain our data (including without limitation end user or employee personal information or proprietary information).

Although we have implemented certain systems, processes, and safeguards intended to protect our information technology systems and data from such threats and mitigate risks to our systems and data, we cannot be certain that threat actors will not have a material impact on our systems or services in the future. Our safeguards intended to prevent or mitigate certain threats may not be sufficient to protect our information technology systems and data due to the developing sophistication and means of attack in the threat landscape. Recent developments in the threat landscape include an increased number of cyber extortion and ransomware attacks, with increases in the amount of ransom demands and the sophistication and variety of ransomware techniques and methodology. Additionally, our third-party vendors or business partners’ information technology systems may be vulnerable to similar threats and our business could be affected by those or similar third-party relationships. The risk of harm to our business caused by security incidents may also increase as we expand our product and service offerings and as we enter into new markets. The rise in the use and sophistication of artificial intelligence systems may also increase the risk