Company: LGN
Filing Date: 2025-02-14
Form Type: DRS
Source: 0000950123-25-002471
Chunk: 46

Company: Legence Corp.
Filing Date: 2025-02-14
Form: DRS
Chunk 46
---
 is infallible, and further, we may not be able to timely deploy and monitor effective measures and protocols at our brands. Despite these measures and any additional measures we
may implement or adopt in the future, our facilities and systems, and those of our third-party service providers, have been and continue to be vulnerable to cyber incidents, such as security breaches, computer viruses, other malicious or destructive
software, ransomware, denial-of-service attacks, lost or misplaced data, programming errors, scams, hacking, burglary, human errors, misdirected wire transfers, damage
by individuals (which may include our and our third party providers’ employees), groups or nation states or state-sponsored threats and other adverse events, including threats to our critical operations technologies. Moreover, we may acquire
companies

30

Confidential Treatment Requested by Legence Corp.

Pursuant to 17 C.F.R. Section 200.83

with cybersecurity vulnerabilities and/or unsophisticated security measures, which exposes us to significant cybersecurity, operational and financial risks until they are fully integrated into
our information systems. Additionally, the increased use of remote working arrangements by employees, vendors and other third parties has increased the exposure to possible attacks, thereby increasing the risk of a data security compromise.
Third-party systems on which we rely could also suffer such cybersecurity incidents or operational system failures. Any of these occurrences could result in material harm to our business, including disruption of our business plans; ransom payments;
significant remediation and cybersecurity protection costs; loss of customer, stockholder, vendor or employee data; loss, disclosure or misappropriation of intellectual property, proprietary information or other confidential, sensitive or personal
information; litigation and legal risks, including regulatory actions; potential liability; damage to our reputation or customer relationships; or damage to the Company’s competitiveness, stock price and long-term shareholder value, or
otherwise have a material adverse impact on our business, financial condition and results of operations. An attack could also cause service disruptions to our internal systems or, in extreme circumstances, infiltration into, damage to or loss of
control of our customers’ systems. While we maintain insurance coverage for these types of cybersecurity incidents, such insurance policies may not completely provide coverage for, or completely offset, the costs associated with such incidents,
including losses from reputational harm or the costs to improve security against future similar threats. Additionally, because the techniques used to obtain unauthorized access or sabotage information technology systems change frequently and are
generally not identifiable until they are launched against a target, we