Company: CXDO
Filing Date: 2025-03-04
Form Type: 10-K
Source: 0001654954-25-002287
Chunk: 22

Company: Crexendo, Inc.
Filing Date: 2025-03-04
Form: 10-K
Item: Item 1
Chunk 22
---
 with cyber-attacks, including protection of our systems and networks, may be insufficient to repel or mitigate the effects of a cyber-attack in the future. The UCaaS infrastructure is particularly vulnerable to specific types of cyberattacks, such as SIP-based attacks, fraud, and eavesdropping. A breach in this infrastructure could disrupt customer communications and lead to financial losses.

The inability to operate or use our networks and systems or those of our suppliers, vendors and other service providers as a result of cyber-attacks, even for a limited period of time, may result in significant expenses to the Company and/or a loss of market share to our competitors. The costs associated with a cyber-attack on the Company could include expensive incentives offered to existing customers and business partners to retain their business, increased expenditures on cybersecurity measures and the use of alternate resources, lost revenues from business interruption and litigation. Further, certain of Crexendo’s businesses, such as those offering software solutions and infrastructure and cloud services to business customers, could be negatively affected if our ability to protect our own networks and systems is called into question as a result of a cyber-attack. In addition, a compromise of security or a theft or other compromise of valuable information, such as financial data and sensitive or private personal information, could result in lawsuits and government claims, investigations or proceedings. Any of these occurrences could damage our reputation, adversely impact customer and investor confidence and result in a material adverse effect on the Company’s results of operation or financial condition.

Natural disasters, extreme weather conditions, acts of war, terrorist or other hostile acts could cause damage to our infrastructure and result in significant disruptions to our operations.

Our business operations are subject to interruption by power outages, acts of war, terrorist or other hostile acts, natural disasters or the potential impacts of climate change, including the increasing prevalence and intensity of hurricanes, wildfires, flooding, hail and storms. Such events could cause significant damage to our infrastructure upon which our business operations rely, resulting in degradation or disruption of service to our customers, as well as significant recovery time and expenditures to resume operations. Our system redundancy may be ineffective or inadequate to sustain our operations through all such events. We are implementing, and will continue to implement, measures to protect our infrastructure and operations from the impacts of these events in the future, but these measures and our overall disaster recovery planning may not be sufficient for all eventualities. These events could also damage the infrastructure of the suppliers that provide us with the equipment and services that we need to operate our business