Company: FWRG
Filing Date: 2025-03-11
Form Type: 10-K
Source: 0001789940-25-000010
Chunk: 42

Company: First Watch Restaurant Group, Inc.
Filing Date: 2025-03-11
Form: 10-K
Item: Item 1A
Chunk 42
---
, or transmitted by us or our franchisees, and our respective security measures, as well as those of our technology vendors, may not effectively prohibit others from obtaining improper access to this information. Advances in computer and software capabilities and encryption technology, new tools, and other developments may increase the risk of such a breach or compromise. The rapid evolution and increased adoption of artificial intelligence technologies may intensify our cybersecurity risks. Despite response procedures and measures in place in the event of an incident, a security breach could result in disruptions, shutdowns, or the theft or unauthorized disclosure of such information. The actual or alleged occurrence of any of these incidents could result in mitigation costs, reputational damage, adverse publicity, loss of consumer confidence, reduced sales and profits, complications in executing our growth initiatives and regulatory and legal risk, including criminal penalties or civil liabilities. 

As data security-related threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. We could be forced to expend significant financial and operational resources in responding to a security breach, including investigating and remediating any information security vulnerabilities, defending against and resolving legal and regulatory claims and complying with notification obligations, all of which could divert resources and the attention of our management and key personnel away from our business operations and adversely affect our business, financial condition and results of operations. In addition, our remediation efforts may not be successful and we could be unable to implement, maintain and upgrade adequate safeguards. 

We are continuing to expand, upgrade and develop our information technology capabilities. If we are unable to successfully upgrade or expand our technological capabilities, we may not be able to take advantage of market opportunities, manage our costs and transactional data effectively, satisfy customer requirements, execute our business plan or respond to competitive pressures.

21

Failure to comply with federal and state laws and regulations relating to privacy, data protection, advertising and consumer protection, or the expansion of current or the enactment of new laws or regulations relating to privacy, data protection, advertising and consumer protection, could have a material adverse effect on our business, financial condition and results of operations. 

Our business requires the collection, transmission and retention of large volumes of customer and employee data, including credit and debit card numbers and other personally identifiable information, in various information technology systems that we and our franchisees maintain, and in those maintained by our third parties with whom we contract to provide services. The integrity and protection of that customer and employee data is critical to us