Company: NXNVW
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0001213900-25-023287
Chunk: 121

Company: NEXTNAV INC.
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1
Chunk 121
---
 malware, ransomware attacks, denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. Some of these external threats may be amplified by the nature of third-party web hosting or cloud computing services or by the integration of our product into a third party’s offerings. Our systems may experience directed attacks intended to interrupt our operations; extract money from it; and/or obtain our data (including without limitation end user or employee personal information or proprietary information).

Although we have implemented certain systems, processes, and safeguards intended to protect our information technology systems and data from such threats and mitigate risks to our systems and data, we cannot be certain that threat actors will not have a material impact on our systems or services in the future. Our safeguards intended to prevent or mitigate certain threats may not be sufficient to protect our information technology systems and data due to the developing sophistication and means of attack in the threat landscape. Recent developments in the threat landscape include an increased number of cyber extortion and ransomware attacks, with increases in the amount of ransom demands and the sophistication and variety of ransomware techniques and methodology. Additionally, our third-party vendors or business partners’ information technology systems may be vulnerable to similar threats and our business could be affected by those or similar third-party relationships. The risk of harm to our business caused by security incidents may also increase as we expand our product and service offerings and as we enter into new markets. The rise in the use and sophistication of artificial intelligence systems may also increase the risk and severity of cyber incidents. Implementing, maintaining, and updating security safeguards requires substantial resources now and will likely be an increasing and substantial cost in the future.

In the event we or one of our third-party providers were to suffer a security breach involving certain personal information, we may have legal obligations (whether pursuant to law or contractual obligation) to notify certain regulatory authorities, affected individuals, customers and/or other entities.

16

Any event that leads to unauthorized access, use or disclosure of personal information could disrupt our business, harm our reputation, compel us to comply with applicable federal and/or state breach notification laws and foreign law equivalents, subject us to time-consuming, distracting and expensive litigation, regulatory investigation and oversight, mandatory corrective action, require us to verify the correctness of database contents, or otherwise subject us to liability under laws, regulations and contractual obligations, including those that protect the privacy and security of personal information. Such statutory and contractual disclosures are costly, could lead to negative publicity, may cause our customers or the public to lose