Company: THRM
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0000950170-25-023344
Chunk: 84

Company: Gentherm Inc
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1A
Chunk 84
---
 customers, suppliers, employees and other sensitive matters. We rely upon the capacity, reliability and security of our IT and data security infrastructure, as well as our ability to expand and continually update this infrastructure in response to the changing needs of our business. If we experience a problem with the functioning of an important IT system or a security breach of our IT systems, due to failure to timely upgrade systems or during system upgrades and/or new system implementations, or resulting from failures of our third-party service providers, the resulting disruptions could have an adverse effect on our business.

As with most companies, we have experienced cybersecurity incidents, attempts to breach our systems and other similar incidents, none of which were material in 2024. With a number of our employees working part-time remotely and in periods of significant acquisition integration activity, there may be increased opportunities for unauthorized access and cybersecurity incidents. 

Any future cybersecurity incidents could, however: materially disrupt operational systems; result in loss of trade secrets or other proprietary or competitively sensitive information; compromise personally identifiable information regarding customers or employees; delay our ability to deliver products to customers; and jeopardize the security of our facilities. A cybersecurity incident could be caused by malicious outsiders (including state-sponsored espionage or cyberwarfare, which has become commonplace) or insiders using sophisticated methods to circumvent firewalls, encryption and other security defenses. Because techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. Information technology security threats, including security breaches, computer malware, “ransomware” and other cybersecurity incidents, are increasing in frequency, uniqueness and sophistication to evade detection and remove forensic evidence of the incident, including due to emerging technologies such as artificial intelligence and machine learning, which may cause cybersecurity incidents to be more difficult to detect for periods of time or at all. Many victims of ransomware are forced to pay significant ransoms to regain access to their critical business data, and we may not be permitted under various regulations and laws to make such payments. 

We continuously seek to maintain a robust program of information security and controls that we believe is designed to detect, reduce, and mitigate the risk of cybersecurity incidents; however, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks, including potential production disruption or the loss or disclosure of sensitive information. The impact of