Company: IPST
Filing Date: 2025-05-12
Form Type: 424B3
Source: 0001641172-25-009684
Chunk: 56

Company: Heritage Distilling Holding Company, Inc.
Filing Date: 2025-05-12
Form: 424B3
Chunk 56
---
 and the terrorist attacks by Hamas on Israel, past attacks by Iran, the resulting responses by Israel, recent bitcoin theft by hackers in North Korea, or other similar threats.

Increased IT security threats and more sophisticated cybercrimes and cyberattacks, including computer viruses and other malicious codes, ransomware, unauthorized access attempts, denial of service attacks, phishing, theft of crypto currencies, social engineering, hacking and other types of attacks pose a potential risk to the security of our IT systems, networks and services, as well as the confidentiality, availability and integrity of our data, and we have in the past, and may in the future, experience cyberattacks and other unauthorized access attempts to our IT systems. These attempts could increase as state and non-state actors look to disrupt companies in the U.S. Specifically as it relates to potential attacks from Russia, Hamas, Iran or aligned groups, we cannot choose which countries, non-state actors or private groups to defend against. Our focus is on maintaining the integrity of our systems regardless of the source of the threat.

From a physical threat perspective, we do not have, and do not plan to have, employees in Ukraine or Israel nor in regions in their vicinity. Likewise, we do not currently, nor do we plan to, source materials or inputs from, or make investments in, those regions. To the extent there may be future sourcing, hiring or investment decisions in or near those regions, our board of directors would need to evaluate the risks and approve such action given the heightened risks associated with those regions currently. Likewise, from an IT or cybersecurity threat perspective, our board will need to receive regular reports from our IT team, including an assessment of attempted attacks, new methods of attack and defense, and updates regarding the state-of-the-art techniques provided by our vendors to help fend off such attacks. In addition, we anticipate that if we are to maintain or secure insurance coverage to compensate us for losses from any such attacks, that coverage and the steps required to ensure the coverage stays in place will be overseen by at least one committee of our board in the normal course of business.

The techniques used to obtain unauthorized system access are constantly changing and often are not recognized until launched against a target. As such, we or our vendors may be unable to anticipate these techniques or implement sufficient preventative or remedial measures. If we are unable to efficiently and effectively maintain and upgrade our system safeguards, we may incur unexpected costs and certain of our systems may become more vulnerable to unauthorized access. In the event of a ransomware or other cyber-