Company: FTCI
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0000950170-25-047224
Chunk: 401

Company: FTC Solar, Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 401
---
 or subject us to liability and, if significant or extreme, require public disclosure, which could negatively affect our results of operations. In addition, any interruption in the operation of our website or information technology systems could cause us to suffer reputational harm, lose sales, and expose us to litigation or government action, including penalties, fines or judgments. 

Unauthorized disclosure of personal or sensitive data or confidential information, whether through a breach of our computer or information technology systems or otherwise, could severely hurt our business.

Some aspects of our business involve the collection, receipt, use, storage, processing and transmission of personal information, including that of our customers’ and end-users of our customers’ solar energy systems, website visitors, employees, contract manufacturers and other third parties. We may collect personal information, including names, addresses, e-mail addresses, credit information, and energy production statistics and consumer preferences, some of which is entrusted to third-party service providers. We increasingly rely on commercially available systems, software, tools (including encryption technology) and monitoring technologies to provide security and oversight for processing, transmission, storage and protection of confidential information and personal data. Despite the security measures we have in place, our facilities and systems, and those of third parties with which we do business, may be vulnerable to security breaches, acts of vandalism and theft (including misappropriation of our financial resources), computer viruses, misplaced or lost data, programming and/or human errors, or other similar events, and an inadvertent or unauthorized use or disclosure could occur or third parties could gain unauthorized access to this type of confidential information and personal data.

Electronic security attacks designed to gain access to personal, sensitive or confidential data by breaching mission critical systems of large organizations are constantly evolving, and high-profile electronic security breaches leading to unauthorized disclosure of confidential information or personal data have occurred recently at a number of major U.S. companies.

Despite our precautions, an electronic security breach in our systems (or in the systems of third parties with which we do business) that results in the unauthorized release of personally identifiable information regarding customers, employees or other individuals or other sensitive data could nonetheless lead to a serious disruption of our operations, financial losses from remedial actions, loss of business or potential liability, including possible punitive damages which may not be covered by or may be in excess of the coverage in our existing insurance policies. As a result of such a breach, we could also be subject to demands, claims and litigation by private parties, and investigations, related actions and penalties by regulatory authorities. Moreover, we could incur significant