Company: QTIWW
Filing Date: 2025-12-31
Form Type: 424B3
Source: 0001628280-25-059235
Chunk: 53

Company: QT IMAGING HOLDINGS, INC.
Filing Date: 2025-12-31
Form: 424B3
Chunk 53
---
 contractual obligations. The accidental or unauthorized access to or disclosure, loss, destruction, disablement, corruption or encryption of, use or misuse of or modification of our, our customers’ or other third parties’ confidential, proprietary or sensitive information, including personal information, by us or our third-party service providers could result in significant fines, penalties, orders, sanctions and proceedings or actions against us by governmental bodies and other regulatory authorities, customers or third parties, which could materially and adversely affect our business, financial condition and results of operations. Any such proceeding or action, and any related indemnification obligations, could damage our reputation, force us to incur significant expenses in defense of such proceeding or action, distract our management, increase our costs of doing business or result in the imposition of financial liability.

Despite our efforts to ensure the integrity, confidentiality, availability, and authenticity of our proprietary systems and information, it is possible that we may not be able to anticipate or to implement effective preventive measures against all cyber threats. No security solution, strategy, or measures can address all possible security threats or block all methods of penetrating a network or otherwise perpetrating a security incident. The risk of unauthorized circumvention of our security measures or those of our third-party providers, customers and partners has been heightened by advances in computer and software capabilities and the increasing sophistication of hackers, including those operating on behalf of nation-state actors, who employ complex techniques involving the theft or misuse of personal and financial information, counterfeiting, “phishing” or social engineering incidents, account

<div align='center'>32</div>

takeover attacks, denial or degradation of service attacks, malware, fraudulent payment and identity theft. Because the techniques used by hackers change frequently and are increasingly complex and sophisticated, and new technologies may not be identified until they are launched against a target, we and our third-party service providers may be unable to anticipate these techniques or detect an incident, assess its severity or impact, react or appropriately respond in a timely manner or implement adequate preventative measures. Our systems are also subject to compromise from internal threats, such as theft, misuse, unauthorized access or other improper actions by employees, service provides and other third parties with otherwise legitimate access to our systems or databases. The latency of a compromise is often measured in months, but could be years, and we may not be able to detect a compromise in a timely manner.

Due to applicable laws and regulations or contractual obligations, we may also be held responsible for any failure or cybersecurity breaches attributed to our third-party service providers as they relate to the