Company: MYND
Filing Date: 2025-03-26
Form Type: 20-F
Source: 0001628280-25-014832
Chunk: 12

Company: Mynd.ai, Inc.
Filing Date: 2025-03-26
Form: 20-F
Item: Item 3
Chunk 12
---
 protection, detection and response capabilities, as well as ensure our third-party providers have required capabilities and controls to address these risks. To date, we have not experienced any material impact to our business or operations resulting from information or cybersecurity attacks; however, because of the frequently changing attack techniques, along with the increased volume and sophistication of the attacks, there is the potential for us to be adversely impacted. This impact could result in reputational, competitive, operational or other business harm as well as financial costs and regulatory action. We maintain cybersecurity insurance in the event of an information security or cyber incident for our material legal entities; however, the coverage may not be sufficient to cover all financial losses or such losses may impact legal entities without cybersecurity insurance.

In addition, the risk of cybersecurity incidents has increased in connection with the ongoing war between Russia and Ukraine, driven by justifications such as retaliation for the sanctions imposed in conjunction with the war, or in response to certain companies’ continued operations in Russia. For example, the war has been accompanied by cyberattacks against the Ukrainian government and other countries in the region. It is possible that these attacks could have collateral effects on additional critical infrastructure and financial institutions globally, which could adversely affect our operations and could increase the frequency and severity of cyber-based attacks against our information technology systems. While we have taken actions to mitigate such potential risks, the proliferation of malware from the war into systems unrelated to the war or cyberattacks against U. S. companies in retaliation for U. S. sanctions against Russia or U. S. support of Ukraine, could also adversely affect our operations.

Tab l e of contents

Government regulation of education and student information is evolving, and unfavorable developments could have an adverse effect on our results of operations.

We are subject to regulations and laws specific to the education sector because we offer solutions and services to students, collect data from students, and offer education and training. Data privacy and security with respect to the collection of personally identifiable information from minors and in particular, students, continues to be a focus of worldwide legislation and regulation. Within the U. S., dozens of states have enacted student data privacy legislation that goes beyond any federal requirements relating to the collection and use of personally identifiable information and other data from minors. Many of these laws impose direct liability on education technology ("EdTech") operators. California, for example, passed the Student Online Personal Information Protection Act ("SOPIPA") which went into effect in 2016 and is considered to be the most comprehensive student data privacy legislation in the U. S. that