Company: NC
Filing Date: 2025-03-05
Form Type: 10-K
Source: 0000789933-25-000006
Chunk: 88

Company: NACCO INDUSTRIES INC
Filing Date: 2025-03-05
Form: 10-K
Item: Item 1A
Chunk 88
---
 occurs. Any compromise of data security could result in a violation of applicable privacy and other laws or standards, the loss of valuable business data, or a disruption of our business. A security breach involving the misappropriation, loss or other unauthorized disclosure of sensitive or confidential information could give rise to unwanted media attention, materially damage customer relationships and our reputation, and result in fines, fees, or liabilities, which may not be covered by insurance policies. 

We rely on information technology systems to operate our business and to record and process transactions; respond to customer inquiries; purchase supplies; provide services; deliver inventory on a timely basis; and maintain cost-efficient operations. Despite our efforts, our information technology systems may be vulnerable, from time to time, to damage or interruption from user error, computer viruses, power outages, third-party intrusions and other technical malfunctions. 

Through our business operations, we collect and store confidential information from our customers and vendors and personal information and other confidential information from our employees. Although we have taken steps designed to safeguard such information, there can be no assurance that such information will be protected against unauthorized access, use or disclosure. Unauthorized parties may penetrate our or our vendors’ network security and, if successful, misappropriate such information. Additionally, methods to obtain unauthorized access to confidential information change frequently and may be difficult to detect, which can impact our ability to respond appropriately.  

We could be subject to liability for failure to comply with privacy and information security laws, for failing to protect personal information or for failing to respond appropriately. Loss, unauthorized access to, or misuse of confidential or personal information could disrupt our operations, damage our reputation, and expose us to claims from customers, financial institutions, regulators, employees and other persons, any of which could have an adverse effect on our business, financial condition and results of operations.

Security breaches, cyber incidents or cyber attacks could include, among other things, computer viruses, malicious or destructive code, ransomware, social engineering attacks (including phishing and impersonation), hacking, denial of service attacks and other attacks. Cybersecurity threats to, and incidents involving, vendors and other third-parties who support our activities could impact the business. We are continuously installing new and upgrading existing information technology systems. We use employee awareness training around phishing, malware, and other cyber risks. We believe these incidents are likely to continue and are unable to predict the direct or indirect impact of future attacks or breaches to business operations.

Our operations could be disrupted by natural or human causes beyond our control.

Our operations are subject