Company: ARRY
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001820721-25-000023
Chunk: 49

Company: Array Technologies, Inc.
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 49
---
 or inadvertent, could lead to delays in our business operations and, if significant or extreme, affect our results of operations, potentially materially.

The failure of our information technology systems and the third-party systems we rely on to perform as designed, or our failure to implement and operate them effectively, could disrupt our business or subject us to liability and thereby have a material adverse effect on our business, financial condition, results of operations and prospects.

Cybersecurity or other data incidents, including unauthorized disclosure of personal or sensitive data or theft of confidential information could harm our business.

Our or our third-party vendors’ computer systems are vulnerable to cyber incidents and attacks, including malicious intrusion, ransomware attacks, and other system disruptions caused by unauthorized third parties. Attempts by computer hackers or other unauthorized third parties to penetrate or otherwise gain access to our computer systems or the systems of third parties with which we do business through fraud or other means of deceit, have in the past, and may in the future, if successful, result in the misappropriation of personal information, data, check information or confidential business information. Hardware, software or applications we utilize may contain defects in design or manufacture or other problems that could unexpectedly compromise information security. In addition, our employees, contractors or third parties with which we do business or to which we outsource business operations may attempt to circumvent our security measures in order to misappropriate such information and data and may purposefully or inadvertently cause a breach or other compromise involving such information and data. We increasingly rely on commercially available systems, software, tools (including encryption technology) and monitoring to provide security and oversight for processing, transmission, storage and protection of confidential information and personal data, and we are not able to ensure that each of these systems is free from malicious code. Despite advances in security hardware, software, and encryption technologies, and our own information security program and safeguards, there is no guarantee that our defenses and program will be adequate to safeguard against all data security breaches, cybersecurity attacks, misappropriation of confidential information or misuses of personal data and they have been breached in the past. We may also experience security breaches and other incidents that may remain undetected for an extended period and therefore may have a greater impact on our products and the networks and systems used in our business.

We regularly defend against and respond to data security incidents. We incur significant costs in our efforts to detect and prevent security breaches and other security-related incidents, and we may face increased costs in the event of an actual or perceived security breach or other security-related incident