TRIO-TECH INTERNATIONAL

Risk Management and Strategy

We recognize the critical importance of developing, implementing, and maintaining cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity and availability of our data. We have a comprehensive cybersecurity policy hosted on our intranet for all employees, established to govern, guide and mitigate in the event of a cyber-attack. As a result, cybersecurity and data protection are key components of our long-term strategy.

Risks from Cybersecurity Threats

In Fiscal2026, on* March 11, 2026**,* we identified a cybersecurity incident affectingone of our subsidiaries in Singapore (the “Subsidiary”). The incident involved a ransomware attack that resulted in the encryption of certain files within the Subsidiary’s network. On* March 18, 2026,*the incident had escalated and resulted in the unauthorized disclosure of certain Company data.

Upon discovery of the cybersecurity incident, the Subsidiary promptly activated its incident response protocols and implemented containment measures, including proactively taking its network offline, engaged third-party cybersecurity experts to assist with the investigation and remediation efforts, as well as notified relevant law enforcement authorities in Singapore. The Company has since rebuilt affected systems, enhanced monitoring and security controls across its network environment. To date, we believe that the containment actions have been effective, and since the initiation of these efforts, we havenot observed any evidence of new unauthorized activity. Relevant law enforcement authorities have completed their review of the incident and concludedno further action will be taken against the company.

The Company has maintained cybersecurity insurance coverage that could mitigate possible costs and losses associated with the incident, including those related to impacted data, litigation, regulatory actions, and related matters.

As of the date of this report, the incident hasnot resulted in any material disruption to the Company's operations, nor has it had a material impact on the Company’s financial condition or results of operations for the year ended* June 30, 2026.*

In Fiscal 2026, we have not encountered any other cybersecurity challenges that have materially impaired our operations or financial standing.

Governance

Our Board of Directors oversees our risk management, including our information technology and cybersecurity policies, procedures, and risk assessments. Management reports to our Board of Directors on information security matters as necessary, regarding any significant cybersecurity incidents, as well as any incidents with less impact potential.