Company: NGVC
Filing Date: 2025-12-11
Form Type: 10-K
Source: 0001437749-25-037556
Chunk: 830

Company: Natural Grocers by Vitamin Cottage, Inc.
Filing Date: 2025-12-11
Form: 10-K
Item: Item 1
Chunk 830
---
 our growing store base, including for point-of-sale processing in our stores, supply chain, financial reporting, human resources and various other processes and transactions. Our information systems are subject to damage or interruption from power outages, computer and telecommunications failures, computer viruses, security breaches, cybersecurity incidents, catastrophic events and usage errors by our Crew members. In addition, our information technology systems may also fail to perform as anticipated, and we may encounter difficulties in implementing new systems, adapting these systems to changing technologies or expanding them to meet the future needs and growth of our business. If our information systems are breached, disrupted, damaged, encrypted by ransomware, or fail to perform as designed, we may have to make significant investments to repair or replace them; suffer interruptions in our operations; experience data loss; incur liability to our customers, Crew members and others; face costly litigation, enforcement actions and penalties; and suffer harm to our reputation with our customers. Furthermore, changes in technology could cause our information systems to become obsolete, as a result of which it may be necessary to incur additional costs to upgrade such systems. If our information systems prove inadequate to handle our growth, we could lose customers, which could have a material adverse effect on our business, financial condition and results of operations. We are also vulnerable to certain risks and uncertainties associated with our website and mobile app, including changes in required technology interfaces, downtime and other technical failures and consumer privacy concerns.

Various third parties, such as our suppliers and payment processors, also rely heavily on information technology systems, and any failure of these third-party systems could also cause loss of sales, transactional or other data and significant interruptions to our business. Any material interruption in the information technology systems we rely on could have a material adverse effect on our business, operating results and financial condition.

27

Failure to protect our information systems against cyber-attacks or information security breaches, including failure to protect the integrity and security of individually identifiable data of our customers and Crew members, could expose us to litigation, damage our reputation and have a material adverse effect on our business. 

We rely on computer systems and information technology to conduct our business, including to securely transmit data associated with cashless payments. These systems and technology are increasingly complex and vital to our operations, which has resulted in an expansion of our technological presence and corresponding risk exposure. In addition, these systems are inherently vulnerable to disruption or failure, as well as internal and external security breaches, denial of service attacks and other disruptive problems caused by hackers. If we were to experience difficulties maintaining