Company: QTIWW
Filing Date: 2025-02-05
Form Type: 424B3
Source: 0001628280-25-004061
Chunk: 51

Company: QT IMAGING HOLDINGS, INC.
Filing Date: 2025-02-05
Form: 424B3
Chunk 51
---
 to increase the probability of early disease detection. While employee contracts generally contain standard confidentiality provisions, our employees, customers or collaborators may not properly handle or process sensitive or confidential data. The improper handling of sensitive or confidential data, or even the perception of such mishandling (whether or not valid), or other security lapses by us, our customers or collaborators, could reduce demand for such products or otherwise expose us to financial or reputational harm or legal liability.

In addition, any security breach, including personal data breaches, or incident, including cybersecurity incidents, that we experience could result in unauthorized access to, misuse of, or unauthorized acquisition of the sensitive or confidential information and data (including medical information), the loss, corruption, or alteration of this data, interruptions in our operations, or damage to our systems. Any such incidents could expose us to claims, litigation, regulatory or other governmental investigations, administrative fines and potential liability. An increasing number of digital platforms have disclosed breaches of their security, some of which have involved sophisticated and highly targeted attacks on portions of their services. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and often are not foreseeable or recognized until launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. If an actual or perceived breach of our security occurs, public perception of the effectiveness of our security measures and brand could be harmed and our results of operations could be negatively affected. Data security breaches and other incidents may also result from non-technical means (e.g., actions by employees or contractors). Any compromise of our security could result in a violation of applicable security, privacy or data protection, consumer and other laws, regulatory or other governmental investigations, enforcement actions, and legal and financial exposure, including potential contractual liability. Any such compromise could also result in damage

<div align='center'>31</div>

#### Table of Contents
to our reputation and a loss of confidence in our security and privacy or data protection measures. Any of these effects could materially and adversely affect our business, financial condition and results of operations.

Our business and operations would suffer in the event of computer system failures, cyber-attacks or deficiencies in our cyber-security.

Our ability to execute our business strategy depends, in part, on the continued and uninterrupted performance of our IT systems, which support our operations. Despite the implementation of security measures, our internal computer systems, and those of third parties on which we rely, are vulnerable to damage from, among others, computer viruses, malware,