Company: QXO-PB
Filing Date: 2025-11-06
Form Type: 10-Q
Source: 0001628280-25-050298
Chunk: 183

Company: QXO, Inc.
Filing Date: 2025-11-06
Form: 10-Q
Item: Part I, Item 8
Chunk 183
---
 continuity plans, our systems and those of third parties upon whom we depend may be vulnerable to: natural disasters; power outages; telecommunication or utility failures; terrorist acts; breaches due to employee error or malfeasance or other insider threats; disruptions during the process of upgrading or replacing computer software or hardware; terminations of business relationships by us or third-party service providers; and disinformation campaigns, damage or intrusion from a variety of deliberate cyber-attacks carried out by insiders or third parties, which are becoming more sophisticated and include computer viruses, worms, gaining unauthorized access to systems for purposes of misappropriating assets or sensitive information either directly or through our vendors and customers, denial of service attacks, ransomware, supply chain attacks, data corruption, malicious distribution of inaccurate information or other malicious software programs that may impact such systems and cause operational disruption. For these IT systems and related business processes to operate effectively, we or our service providers must continually maintain and update them. Delays in the maintenance, updates, upgrading, or patching of these systems and related business processes could impair their effectiveness or expose us to security risks. In addition, if IT systems are damaged, restoration or recovery of those systems may not be achievable in a timely manner.

Even with our policies, procedures, and programs designed to ensure the integrity of our IT systems and the security of Data, we may not be effective in identifying and mitigating every risk to which we are exposed. In some instances, we may have no current capability to detect certain vulnerabilities, which may allow them to persist in the environment over long periods of time.

Additionally, existing and future artificial intelligence (“AI”) capabilities present a growing threat by aiding experienced and inexperienced threat actors in identifying vulnerabilities and crafting increasingly sophisticated and targeted cybersecurity attacks. Vulnerabilities may also be introduced from the use of AI by us, our customers or suppliers. Use of AI by us or such third parties, whether authorized or unauthorized, increases the risk that our proprietary information or intellectual property will be unintentionally disclosed, and may introduce new risks such as inaccurate output.

Despite the precautions we take to mitigate the risks of such events, any attack on our IT systems or breach of our Data, or the IT systems and Data of third parties upon whom we depend, could result in, but are not limited to, the following: business disruption, misstated or misappropriated financial data, product shortages and/or an increase in accounts receivable aging, an adverse impact on our ability to attract and serve customers, delays in the execution of our business plan