Company: AIRTP
Filing Date: 2025-08-12
Form Type: 10-K/A
Source: 0000353184-25-000069
Chunk: 19

Company: AIR T INC
Filing Date: 2025-08-12
Form: 10-K/A
Chunk 19
---
 other sophisticated computer intrusions could harm our information systems, which in turn could harm our business and financial results.

We utilize information systems and computer technology throughout our businesses. We store sensitive data and proprietary information on these systems. Threats to these systems, and the laws and regulations governing security of data, including personal data, on information systems and otherwise held by companies is evolving and adding layers of complexity in the form of new requirements and increasing costs of attempting to protect information systems and data and complying with new cybersecurity regulations. Information systems are subject to numerous and evolving cybersecurity threats and sophisticated computer crimes, which pose a risk to the stability and security of our information systems, computer technology, and businesses.

Global cybersecurity threats can range from uncoordinated individual attempts to gain unauthorized access to our information systems and computer technology to sophisticated and targeted measures known as advanced persistent threats and ransomware. The techniques used in these attacks change frequently and may be difficult to detect for periods of time and we may face difficulties in anticipating and implementing adequate preventative measures. A failure or breach in security could expose our company as well as our customers and suppliers to risks of misuse of information, compromising confidential information and technology, destruction of data, production disruptions, ransom payments, and other business risks which could damage our reputation, competitive position and financial results of our operations. Further, our technology resources may be strained due to an increase in the number of remote users. In addition, defending ourselves against these threats may increase costs or slow operational efficiencies of our business. If any of the foregoing were to occur, it could have a material adverse effect on our business and results of operations.

<div align='center'>14</div>

We sustained a cybersecurity attack in May 2022 involving ransomware that caused a network disruption and impacted certain of our systems. Upon detection, we undertook steps to address the incident, including engaging a team of third-party forensic experts and notifying law enforcement. We restored network systems and resumed normal operations. We have taken actions to improve our existing systems such as adding multi-factor authentication and to improve employee training and security competency. While we do not believe this event or resultant actions had or will have a material adverse effect on our business, this or similar incidents, or any other such breach of our data security infrastructure could have a material adverse effect on our business, results of operations and financial condition.

Although we maintain cybersecurity liability insurance, our insurance may not cover potential claims or may not be adequate to indemnify us for any liability that may be incurred. Any imposition of liability or litigation costs that