Company: CTLPP
Filing Date: 2025-07-11
Form Type: PREM14A
Source: 0001140361-25-025663
Chunk: 242

Company: CANTALOUPE, INC.
Filing Date: 2025-07-11
Form: PREM14A
Chunk 242
---
 been no material security breaches, unauthorized access to, use or disclosure of or other material adverse events or incidents related to any Personal Data Processed by or on behalf of the Company or any of its Subsidiaries. Since July 1, 2022, the Company and its Subsidiaries have not provided or been legally required under applicable Data Protection Laws to provide any notice to any person in connection with an unauthorized disclosure of Personal Data owned or controlled by the Company or any of its Subsidiaries.

(b) Since July 1, 2022, to the knowledge of the Company, no third party has gained unauthorized access to or misused any computers, software, servers, networks or other information technology assets owned or used by the Company or any of its Subsidiaries for operation in their respective businesses (“

#### IT Assets
”), in each case in a manner that has resulted or is reasonably likely to result in either (i) liability, cost or disruption to the business of the Company and its Subsidiaries that would be, individually or in the aggregate, material to the Company and its Subsidiaries, taken as a whole, or (ii) a duty to notify any person except as would not reasonably be expected, individually or in the aggregate, to result in liability that is material to the Company and its Subsidiaries, taken as a whole. The Company and its Subsidiaries take commercially reasonable steps and

<div align='center'>A-28</div>

#### TABLE OF CONTENTS
implement commercially reasonable safeguards designed to protect the performance, confidentiality, integrity and security of the IT Assets and from unauthorized access or any disabling codes or instructions, spyware, trojan horses, worms, viruses, or other Software routines that permit or cause unauthorized access to, or disruption, impairment, disablement, or destruction of Software, data or other materials (“

#### Malicious Code
”). Except as would not reasonably be expected to have, individually or in the aggregate, a Material Adverse Effect, the IT Assets used by the Company or any of its Subsidiaries are (A) free from Malicious Code (B) have not, since July 1, 2022, experienced any material failure, outages, or malfunction, and (C) are adequate and sufficient for the operation of the businesses of the Company and its Subsidiaries as currently conducted.

(c) The Company and its Subsidiaries have implemented and currently maintain reasonable and appropriate