Wingstop Inc.

Previous wording

As we continue to grow, our existing systems and processes and personnel may not be adequate to support our continued growth. We may need to upgrade and expand our infrastructure and information systems, automate more processes and hire, train and retain restaurant employees and corporate support staff, all of which may result in increased costs and inefficiencies.

Current wording

As we continue to grow, our existing systems and processes and personnel may not be adequate to support our continued growth. Although we have made significant investments to date, we may have a continued need to upgrade and expand our infrastructure and information systems, automate more processes and hire, train and retain restaurant employees and corporate support staff, all of which may result in increased costs and inefficiencies.

Previous wording

The failure of our franchisees to comply with applicable laws could negatively impact our reputation or results of operations. For example, our franchisees are solely responsible for making their own hiring, firing and disciplinary decisions, scheduling hours and establishing compensation. Any failure by our franchisees to comply with applicable employment laws could negatively impact our reputation and our ability to hire and/or retain employees. Furthermore, if one of our key franchisees were to become insolvent or otherwise were unable or unwilling to pay us royalties, Ad Fund contributions, or other amounts owed, our business, financial condition, and results of operations could be adversely affected. In a franchisee bankruptcy, the bankruptcy trustee may reject its franchise agreements under the applicable bankruptcy code, in which case there would be no further royalty payments from such franchisee. The amount of the proceeds, if any, that may ultimately be recovered in a bankruptcy proceeding of such franchisee may not be sufficient to satisfy a damage claim resulting from such rejection.

Current wording

The failure of our franchisees to comply with applicable laws could negatively impact our reputation or results of operations. For example, our franchisees are solely responsible for making their own hiring, firing and disciplinary decisions, scheduling hours and funding compensation. Any failure by our franchisees to comply with applicable employment laws could negatively impact our reputation and our ability to hire and/or retain employees. Furthermore, if one of our key franchisees were to become insolvent or otherwise were unable or unwilling to pay us royalties, Ad Fund contributions, or other amounts owed, our business, financial condition, and results of operations could be adversely affected. In a franchisee bankruptcy, the bankruptcy trustee may reject its franchise agreements under the applicable bankruptcy code, in which case there would be no further royalty payments from such franchisee. The amount of the proceeds, if any, that may ultimately be recovered in a bankruptcy proceeding of such franchisee may not be sufficient to satisfy a damage claim resulting from such rejection.

Previous wording

In addition, our reliance on third-party food suppliers and distributors increases the risk that food-borne illness incidents could be caused by factors outside of our control and that multiple restaurants could be affected rather than a single restaurant. We cannot ensure that all food items are properly maintained during transport throughout the supply chain or that our employees and our franchisees and their employees will identify all products that may be spoiled and should not be used. Our industry has also long been subject to the threat of food tampering by suppliers, employees, third-party delivery service providers, and others such as the addition of foreign objects in the food that we sell. Reports, whether or not true, of injuries caused by food tampering have in the past severely injured the reputations and brands of restaurant chains in the quick service restaurant market and could affect us in the future as well. If our customers become ill from food-borne illnesses or injured from food tampering, we could also be forced to temporarily close some restaurants. Moreover, any instances of food contamination, whether or not at our restaurants, could subject our restaurants or our suppliers to a food recall pursuant to the Food and Drug Administration Food Safety Modernization Act.

Current wording

In addition, our reliance on third-party food suppliers and distributors increases the risks that food-borne illness incidents could be caused by factors outside of our control and that multiple restaurants could be affected rather than a single restaurant. We cannot ensure that all food items are properly maintained during transport throughout the supply chain or that our employees and our franchisees and their employees will identify all products that may be spoiled and should not be used. Our industry has also long been subject to the threat of food tampering by suppliers, employees, third-party delivery service providers, and others such as the addition of foreign objects in the food that we sell. Reports, whether or not true, of injuries caused by food tampering have in the past severely injured the reputations and brands of restaurant chains in the quick service restaurant market and could affect us in the future as well. If our customers become ill from food-borne illnesses or injured from food tampering, we could also be forced to temporarily close some restaurants. Moreover, any instances of food contamination, whether or not at our restaurants, could subject our restaurants or our suppliers to a food recall pursuant to the Food and Drug Administration Food Safety Modernization Act or the Federal Food, Drug, and Cosmetic Act.

Previous wording

In order to maintain quality-control standards and consistency among restaurants, our franchise agreements obligate our franchisees to obtain food and other supplies from preferred suppliers approved by us in advance. Currently, all food items and packaging goods for Wingstop restaurants are currently sourced through one distributor with 21 geographically diverse distribution centers. In this regard, we and our franchisees depend on a group of suppliers and our distributor for food ingredients, beverages, paper goods, and distribution. We and our franchisees bear risks associated with the timeliness, solvency, reputation, labor relations, freight costs, price of raw materials, and compliance with health and safety standards of each supplier and our distributor. We have little control over such suppliers or the distributor. Disruptions in these relationships may reduce company-owned restaurant and franchisee sales and, in the case of reduced franchisee sales, our royalty income. Overall difficulty of suppliers meeting restaurant product demand, interruptions in the supply chain, obstacles or delays in the process of renegotiating or renewing agreements with preferred suppliers or the distributor, financial difficulties experienced by suppliers or the distributor, or the deficiency, lack, or poor quality of alternative suppliers or distributors could adversely impact company-owned restaurant and franchisee sales, which could materially adversely affect our business, financial condition, and operating results and, in the case of reduced franchisee sales, would reduce our royalty income and revenue. In addition, our focus on a limited menu could make these consequences more severe.

Current wording

In order to maintain quality-control standards and consistency among restaurants, our franchise agreements obligate our franchisees to obtain food and other supplies from preferred suppliers approved by us in advance. Currently, all food items and packaging goods for Wingstop restaurants are currently sourced through one distributor with 23 geographically diverse distribution centers. In this regard, we and our franchisees depend on a group of suppliers and our distributor for food ingredients, beverages, paper goods, and distribution. We and our franchisees bear risks associated with the timeliness, solvency, reputation, labor relations, freight costs, price of raw materials, and compliance with health and safety standards of each supplier and our distributor. We have little control over such suppliers or the distributor. Disruptions in these relationships may reduce company-owned restaurant and franchisee sales and, in the case of reduced franchisee sales, our royalty income. Overall difficulty of suppliers meeting restaurant product demand, interruptions in the supply chain, obstacles or delays in the process of renegotiating or renewing agreements with preferred suppliers or the distributor, financial difficulties experienced by suppliers or the distributor, or the deficiency, lack, or poor quality of alternative suppliers or distributors could adversely impact company-owned restaurant and franchisee sales, which could materially adversely affect our business, financial condition, and operating results and, in the case of reduced franchisee sales, would reduce our royalty income and revenue. In addition, our focus on a limited menu could make these consequences more severe.

Previous wording

Our franchisees, contractors, and third parties with whom we do business have experienced cyber incidents and security breaches or intrusions in which confidential or personal information could have been stolen and we, our franchisees, contractors, and third parties with whom we do business may experience cyber incidents and security breaches or intrusions in which confidential or personal information is stolen in the future. Third parties may have the technology or know-how to breach the security of confidential or personal information collected, stored or transmitted by us or our franchisees, and our and their security measures and those of third parties with whom we do business, including technology vendors, solution providers, software manufacturers and supply chain vendors, may not effectively prohibit others from obtaining improper access to this information. Third parties have been and will likely be able to continue to develop and deploy viruses, worms and other malicious software programs, such as ransomware, that attack our systems and the systems of our franchisees’ and third parties with whom we do business or otherwise exploit any security vulnerabilities. The techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and are often difficult to detect for long periods of time, which may cause a breach to go undetected for an extensive period of time. Advances in computer and software capabilities, technology, new tools or social engineering tactics, and other developments may increase the risk of such a breach. If a person is able to circumvent the security measures of our business, our franchisees’ businesses or those of other third parties, he or she could destroy or steal valuable information or disrupt the operations of our business. In addition, our franchisees, contractors or third parties with whom we do business or to whom we outsource business operations may attempt to circumvent our security measures in order to misappropriate confidential information and may purposefully or inadvertently cause a breach involving such information. The costs to us to eliminate any of the foregoing cybersecurity vulnerabilities or to address a cyber incident could be significant and have a material adverse impact on our business, financial condition, and results of operations. The rapid evolution and increased adoption of artificial intelligence technologies may intensify our cybersecurity risks by making cyber incidents more difficult to detect, contain, and mitigate for us, our franchisees, contractors, and third parties with whom we do business.

Current wording

Our franchisees, contractors, and third parties with whom we do business have experienced cyber incidents and security breaches or intrusions in which confidential or personal information could have been stolen and we, our franchisees, contractors, and third parties with whom we do business may experience cyber incidents and security breaches or intrusions in which confidential or personal information is stolen in the future. Third parties may have the technology or know-how to breach the security of confidential or personal information collected, stored or transmitted by us or our franchisees, and our and their security measures and those of third parties with whom we do business, including technology vendors, solution providers, software manufacturers and supply chain vendors, may not effectively prohibit others from obtaining improper access to this information. Third parties have been and will likely be able to continue to develop and deploy viruses, worms and other malicious software programs, such as ransomware, that attack our systems and the systems of our franchisees’ and third parties with whom we do business or otherwise exploit any security vulnerabilities. The techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and are often difficult to detect for long periods of time, which may cause a breach to go undetected for an extensive period of time. Advances in computer and software capabilities, technology, new tools or social engineering tactics, and other developments may increase the risk of such a breach. If a person is able to circumvent the security measures of our business, our franchisees’ businesses or those of other third parties, he or she could destroy or steal valuable or personal information or disrupt the operations of our business. In addition, our franchisees, contractors or third parties with whom we do business or to whom we outsource business operations may attempt to circumvent our security measures in order to misappropriate confidential information and may purposefully or inadvertently cause a breach involving such information. The costs to us to eliminate any of the foregoing cybersecurity vulnerabilities or to address a cyber incident could be significant and have a material adverse impact on our business, financial condition, and results of operations. The rapid evolution and increased adoption of artificial intelligence technologies may intensify our cybersecurity risks by making cyber incidents more difficult to detect, contain, and mitigate for us, our franchisees, contractors, and third parties with whom we do business.

Previous wording

If we, our employees, franchisees, or vendors fail to comply with applicable laws, regulations, or contract terms, and covered information is obtained by unauthorized persons, used inappropriately, or destroyed, it could adversely affect our reputation, disrupt our operations and result in costly litigation, judgments, or penalties resulting from violation of laws and payment card industry regulations. Any such claim or proceeding could cause us to incur significant unplanned expenses and significantly harm our reputation, which could have a material adverse impact on our business, financial condition, and results of operations. A cyber incident could also require us to provide notifications, result in adverse publicity, loss of sales and profits, increase fees payable to third parties, and result in penalties or remediation and other costs that could materially adversely affect the operation of our business, financial condition, and results of operations. In addition, our cyber liability coverage may be inadequate or may not be available in the future on acceptable terms, or at all, and defending a suit, regardless of its merit, could be costly and divert management’s attention. See “Item 1C. Cybersecurity” for more information about the Company’s cybersecurity risk management and governance.

Current wording

If we, our employees, franchisees, or vendors fail to comply with applicable laws, regulations, or contract terms, and confidential or sensitive information is obtained by unauthorized persons, used inappropriately, or destroyed, it could adversely affect our reputation, disrupt our operations and result in costly litigation, judgments, or penalties resulting from violation of laws and payment card industry regulations. Any such claim or proceeding could cause us to incur significant unplanned expenses and significantly harm our reputation, which could have a material adverse impact on our business, financial condition, and results of operations. A cyber incident could also require us to provide notifications, result in adverse publicity, loss of sales and profits, increase fees payable to third parties, and result in penalties or remediation and other costs that could materially adversely affect the operation of our business, financial condition, and results of operations. In addition, our cyber liability insurance coverage may be inadequate or may not be available in the future on acceptable terms, or at all, and defending a suit, regardless of its merit, could be costly and divert management’s attention. See “Item 1C. Cybersecurity” for more information about the Company’s cybersecurity risk management and governance.

Previous wording

The United States, the European Union, and other countries in which we operate are increasingly adopting or revising privacy, information security, and data protection laws and regulations that could have a significant impact on our current and planned privacy, data protection, and information security-related practices, our collection, use, sharing, retention, and safeguarding of consumer and/or employee information, and some of our current or planned business activities. In the United States, these include rules and regulations promulgated under the authority of the FTC, the Health Insurance Portability and Accountability Act of 1996, federal and state labor and employment laws, state data breach notification laws, and state privacy laws such as the California Consumer Privacy Act of 2018 (the “CCPA”) and the California Privacy Rights Act (the “CPRA”). The CPRA expanded the CCPA’s requirements, restricted the use of certain categories of personal information that we handle, and established a new regulatory agency to implement and enforce the law. A number of other states have enacted similar data privacy laws, and other states and countries are considering passing or expanding privacy laws in the near term. Many of these laws and regulations provide consumers and employees with a private right of action if a covered company suffers a data breach related to a failure to implement reasonable data security measures. For example, the CCPA and CPRA provide a private right of action for certain data breaches coupled with statutory damages under certain circumstances. Compliance with the CCPA, CPRA, and other laws relating to the protection of personal information involve significant costs and could result in significant liability in the event we allow an unauthorized disclosure of personal information. In the European Union, this includes the General Data Protection Regulation (the “GDPR”). We may need to take measures to comply with requirements contained in the GDPR (or similar legislation implemented in the United Kingdom), such as implementing appropriate mechanisms for the cross-border transfer of personal data, follow mandatory data breach notification requirements, and provide robust rights for data subjects. Additionally, several states and localities have also enacted statutes banning or restricting the collection of biometric information. These data privacy and biometric information laws will require us to incur additional costs and expenses in our efforts to comply. An actual or perceived failure to comply with these domestic or international laws and others that may be passed could subject our business to regulatory scrutiny, significant administrative and monetary sanctions, damages under some laws to individuals, and reputational damage. In addition, the FTC and other state and federal agencies have been increasing their scrutiny of the ways in which companies use personally identifiable information for marketing and analytics, as well …

Excerpt shortened here; the source contains the full paragraph.

Current wording

The United States, the European Union, and other countries in which we operate are increasingly adopting or revising privacy, information security, and data protection laws and regulations that could have a significant impact on our current and planned privacy, data protection, and information security-related practices, our collection, use, sharing, retention, and safeguarding of consumer and/or employee information, and some of our current or planned business activities. In the United States, these include rules and regulations promulgated under the authority of the FTC, the Health Insurance Portability and Accountability Act of 1996, federal and state labor and employment laws, state data breach notification laws, and state privacy laws such as the California Consumer Privacy Act of 2018 (the “CCPA”) and the California Privacy Rights Act (the “CPRA”). The CPRA expanded the CCPA’s requirements, restricted the use of certain categories of personal information that we handle, and established a new regulatory agency to implement and enforce the law. A number of other states have enacted similar data privacy laws, and other states and countries are considering passing or expanding privacy laws in the near term. Many of these laws and regulations provide consumers and employees with a private right of action if a covered company suffers a data breach related to a failure to implement reasonable data security measures. For example, the CCPA and CPRA provide a private right of action for certain data breaches coupled with statutory damages under certain circumstances. Compliance with the CCPA, CPRA, and other laws relating to the protection of personal information involve significant costs and could result in significant liability in the event we allow an unauthorized disclosure of personal information. In the European Union, the General Data Protection Regulation (the “GDPR”) generally governs the use of certain categories of personal information. We may need to take measures to comply with requirements contained in the GDPR (or similar legislation implemented in the United Kingdom), such as implementing appropriate mechanisms for the cross-border transfer of personal data, follow mandatory data breach notification requirements, and provide robust rights for data subjects. Additionally, several states and localities have also enacted statutes banning or restricting the collection of biometric information. These data privacy and biometric information laws will require us to incur additional costs and expenses in our efforts to comply. An actual or perceived failure to comply with these domestic or international laws and others that may be passed could subject our business to regulatory scrutiny, significant administrative and monetary sanctions, damages under some laws to individuals, and reputational damage. In addition, the FTC and other state and federal agencies have been increasing their scrutiny of the ways in which companies use personally iden…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

The legal framework around privacy issues is rapidly evolving, as various federal and state government bodies are considering adopting new privacy laws and regulations. These emerging laws and regulations have resulted and will likely continue to result in significant limitations on or changes to the ways in which we can collect, use, host, store, or transmit personal information and other data. Compliance with privacy, data protection, and information security laws to which we are subject could continue to result in additional costs, and our failure to comply with such laws could result in potentially significant regulatory investigations or government actions, penalties or remediation, and other costs, as well as adverse publicity, loss of sales and profits, and an increase in fees payable to third parties. Additionally, the rapid evolution and increased adoption of artificial intelligence technologies and our obligations to comply with emerging laws and regulations may increase scrutiny from or actions by regulators, consumer groups or other third parties, increase the scope of regulation or government restrictions applicable to our business, or subject our business to increased risks of litigation. Each of these implications could materially adversely affect our business, financial condition, and results of operations.

Current wording

The legal framework around privacy issues is rapidly evolving, as various federal, state, and international government bodies are considering adopting new privacy laws and regulations. These emerging laws and regulations have resulted and will likely continue to result in significant limitations on or changes to the ways in which we can collect, use, host, store, or transmit personal information and other data. Compliance with privacy, data protection, and information security laws to which we are subject could continue to result in additional costs, and our failure to comply with such laws could result in potentially significant regulatory investigations or government actions, penalties or remediation, and other costs, as well as adverse publicity, loss of sales and profits, and an increase in fees payable to third parties. Additionally, the rapid evolution and increased adoption of artificial intelligence technologies and our obligations to comply with emerging laws and regulations may increase scrutiny from or actions by regulators, consumer groups or other third parties, increase the scope of regulation or government restrictions applicable to our business, or subject our business to increased risks of litigation. Each of these implications could materially adversely affect our business, financial condition, and results of operations.

Previous wording

Customers are increasingly using e-commerce websites and apps, both domestically and internationally, like www.wingstop.com, our mobile ordering application, and third-party delivery apps, to order and pay for our products and select optional delivery and curbside services. In the fourth quarter of 2024, digital sales accounted for 70.3% of our domestic sales.

Current wording

Customers are increasingly using e-commerce websites and apps, both domestically and internationally, like www.wingstop.com, our mobile ordering application, and third-party delivery apps, to order and pay for our products and select optional delivery and curbside services. In the fourth quarter of 2025, digital sales accounted for 73.2% of system-wide sales.

Previous wording

Labor is a primary component of our operating costs. Increased labor costs due to factors such as competition for workers, labor shortages, labor market pressures, increased minimum wage requirements, paid sick leave or vacation accrual mandates, or other legal or regulatory changes, such as predictive scheduling, may adversely impact operating costs for us and our franchisees. Additional taxes or requirements to incur additional employee benefit costs, including the requirements of the Patient Protection and Affordable Care Act or any new or replacement healthcare requirements, could also adversely impact our operating costs. From time to time, legislation increases the minimum wage at the federal, state and local level, or creates a council that could, among other things, increase minimum wages and impose additional minimum working or operating standards. The establishment of such laws in one state may have a ripple effect in other states, substantially increase labor costs and negatively impact our operating costs.

Current wording

Labor is a primary component of our operating costs. Increased labor costs due to factors such as competition for workers, labor shortages, labor market pressures, increased minimum wage requirements, paid sick leave or vacation accrual mandates, or other legal or regulatory changes, such as predictive scheduling, may adversely impact operating costs for us and our franchisees. Additional taxes or requirements to incur additional employee benefit costs, including the requirements of the Patient Protection and Affordable Care Act or any new or replacement healthcare requirements, could also adversely impact our and our franchisees’ operating costs. From time to time, legislation increases the minimum wage at the federal, state and local level, or creates a council that could, among other things, increase minimum wages and impose additional minimum working or operating standards. The establishment of such laws in one state may have a ripple effect in other states, substantially increase labor costs and negatively impact our operating costs.

Previous wording

•costs associated with litigation;

Current wording

•costs associated with litigation or arbitration;

Previous wording

One of the legal foundations fundamental to the franchise business model has been that, absent special circumstances, a franchisor is generally not responsible for the acts, omissions, or liabilities of its franchisees, whether with respect to the franchisees’ employees or otherwise. In the last several years, this principle has been the subject of differing and inconsistent interpretations at the National Labor Relations Board (“NLRB”) and in the courts, and the question of whether a franchisor can be held liable for the actions or liabilities of a franchisee under a vicarious liability theory, sometimes called “joint employer,” has become highly fact dependent and generally uncertain. In March 2024, a federal court blocked the enforcement of the NLRB’s amended 2023 regulation on joint employment, leaving the NLRB’s previous 2020 regulation on joint employment in effect. However, it is possible that the NLRB or another government agency will attempt to restore the proposed 2023 standard through new rulemaking or alternative methods and legislation has been proposed from time to time to require franchisors to be responsible for ensuring franchisee compliance with certain laws. A regulatory, judicial or legislative determination that we are a “joint employer” with our franchisees or that our franchisees are part of one unified system subject to joint and several liability could subject us and/or our franchisees to liability for employment-related, health and safety related and other liabilities of our franchisees and could cause us to incur other costs that have a material adverse effect on our profitability, which would adversely impact our business, financial condition, and results of operations.

Current wording

One of the legal foundations fundamental to the franchise business model has been that, absent special circumstances, a franchisor is generally not responsible for the acts, omissions, or liabilities of its franchisees, whether with respect to the franchisees’ employees or otherwise. In the last several years, this principle has been the subject of differing and inconsistent interpretations at the National Labor Relations Board (“NLRB”) and in the courts, and the question of whether a franchisor can be held liable for the actions or liabilities of a franchisee under a vicarious liability theory, sometimes called “joint employer,” has become highly fact dependent and generally uncertain. In March 2024, a federal court blocked the enforcement of the NLRB’s amended 2023 regulation on joint employment, leaving the NLRB’s previous 2020 regulation on joint employment in effect. It is possible that the NLRB or another government agency may attempt to restore the proposed 2023 standard through new rulemaking or alternative methods although federal legislation has been proposed to set a clear standard; legislation has been proposed from time to time to require franchisors to be responsible for ensuring franchisee compliance with certain laws. A regulatory, judicial or legislative determination that we are a “joint employer” with our franchisees or that our franchisees are part of one unified system subject to joint and several liability could subject us and/or our franchisees to liability for employment-related, health and safety related and other liabilities of our franchisees and could cause us to incur other costs that have a material adverse effect on our profitability, which would adversely impact our business, financial condition, and results of operations.

Previous wording

As of December 28, 2024, 52% of our 2,204 domestic restaurants were spread across Texas (21%), California (19%), Florida (6%), and Illinois (6%). Given our geographic concentrations, economic conditions and other unforeseen events, including but not limited to negative publicity, local strikes, terrorist attacks, increases in energy prices, natural or man-made disasters, adverse weather conditions, or the enactment of more stringent state and local laws and regulations in these geographic areas, could have a disproportionate adverse effect on our business, financial condition, and results of operations.

Current wording

As of December 27, 2025, 48% of our 2,586 domestic restaurants were spread across Texas (18%), California (18%), Florida (7%), and Illinois (5%). Given our geographic concentrations, economic conditions and other unforeseen events, including but not limited to negative publicity, local strikes, terrorist attacks, increases in energy prices, natural or man-made disasters, adverse weather conditions, or the enactment of more stringent state and local laws and regulations in these geographic areas, could have a disproportionate adverse effect on our business, financial condition, and results of operations.

Previous wording

Although we require all workers in our company-owned restaurants and in our corporate support office to provide us with government-specified documentation evidencing their employment eligibility, some of our employees may, without our knowledge, be unauthorized workers. We currently participate in the “E-Verify” program, an Internet-based, free program run by the U.S. government to verify employment eligibility, in all of our company-owned restaurants and in our corporate support office. However, use of the “E-Verify” program does not guarantee that we will successfully identify all applicants who are ineligible for employment. Unauthorized workers may subject us to fines or penalties, and if any of our workers are found to be unauthorized, we could experience adverse publicity that negatively impacts our brand and it may be more difficult to hire and keep qualified employees. We could also become subject to fines, penalties and other costs related to claims that we did not fully comply with all recordkeeping obligations of federal and state employment eligibility or immigration compliance laws. Failure by our franchisees to comply with employment eligibility or immigration laws may also result in adverse publicity and reputational harm to our brand and could subject them to fines, penalties and other costs. These factors could materially adversely affect our business, financial condition, and results of operations.

Current wording

Although we require all workers in our company-owned restaurants and in our corporate support office to provide us with government-specified documentation evidencing their employment eligibility, some of our employees may, without our knowledge, be unauthorized workers. We currently participate in the “E-Verify” program, an Internet-based, free program run by the U.S. government to verify employment eligibility, in all of our company-owned restaurants and in our corporate support office. However, use of the “E-Verify” program does not guarantee that we will successfully identify all applicants who are ineligible for employment. Unauthorized workers may subject us to fines or penalties, and if any of our workers are found to be unauthorized, we could experience adverse publicity that negatively impacts our brand and it may be more difficult to hire and keep qualified employees. We could also become subject to fines, penalties and other costs related to claims that we did not fully comply with all recordkeeping obligations of federal, state, and international employment eligibility or immigration compliance laws. Failure by our franchisees to comply with employment eligibility or immigration laws may also result in adverse publicity and reputational harm to our brand and could subject them to fines, penalties and other costs. These factors could materially adversely affect our business, financial condition, and results of operations.

Previous wording

As of December 28, 2024, we have franchised restaurants in eleven international countries and U.S. territories and plan to accelerate our growth internationally. Expansion in international markets may be affected by local economic, market, and cultural conditions. Our business, financial condition and results of operations may be adversely affected if the global markets in which our franchised restaurants compete are affected by changes in political, economic, or other factors. These factors, over which neither our franchisees nor we have control, may include:

Current wording

As of December 27, 2025, we have franchised restaurants in 18 international countries and U.S. territories and plan to accelerate our growth internationally. Expansion in international markets may be affected by local economic, market, and cultural conditions. Our business, financial condition and results of operations may be adversely affected if the global markets in which our franchised restaurants compete are affected by changes in political, economic, or other factors. These factors, over which neither our franchisees nor we have control, may include:

Previous wording

Our international expansion efforts may require considerable management time as well as start-up expenses for market development before any significant revenues and earnings are generated. Negotiated incentives or discounts provided in connection with the opening of new markets may result in lower cash flows and profits than existing international markets. Operations in new foreign markets may achieve low margins or may be unprofitable, and expansion in existing markets may be affected by local economic and market conditions. Therefore, as we continue to expand internationally, we or our franchisees may not experience the operating margins we expect, we may experience a delay in or loss of royalty income, our results of operations and growth may be negatively impacted, and our common stock price may decline.

Current wording

Operations in new foreign markets may achieve low margins or may be unprofitable, and expansion in existing markets may be affected by local economic and market conditions. Therefore, as we continue to expand internationally, we or our franchisees may not experience the operating margins we expect, we may experience a delay in or loss of royalty income, our results of operations and growth may be negatively impacted, and our common stock price may decline.

Previous wording

There is increasing focus, public interest, and legislative pressure related to public companies’ ESG practices. Legislative, regulatory or other efforts, including those of the SEC and multiple states and countries, to combat ESG concerns could result in new or more stringent forms of oversight and expand mandatory and voluntary reporting, diligence and disclosure, which could increase costs and require resources dedicated toward the collection and disclosure of data (such as information regarding potential risks of climate change or greenhouse gas emissions), and bring additional focus on and further impact our business, results of operations, and financial condition. Further, if our ESG practices fail to meet investor, customer, consumer or employees’ evolving expectations and standards for responsible corporate citizenship in areas including environmental stewardship (including climate change, greenhouse gas emissions, packaging and waste), animal welfare, diversity, human capital management, and corporate governance and transparency, our reputation, brand, appeal to current and potential customers and investors, and employee retention may be negatively impacted, which could have a material adverse effect on our business, financial condition, and results of operations. Furthermore, if our competitors’ ESG practices are perceived to be better than our own, certain investors or customers may elect to invest in or be a patron of our competitors instead, which would have an adverse impact on our business, financial condition, and results of operations.

Current wording

There is continued focus, public interest, and legislative pressure related to public companies’ ESG practices. Legislative, regulatory or other efforts, including those of the SEC and multiple states and countries, to address ESG concerns could result in new or more stringent forms of oversight and expand mandatory and voluntary reporting, diligence and disclosure, which could increase costs and require resources dedicated toward the collection and disclosure of data (such as information regarding potential risks of climate change or greenhouse gas emissions), and bring additional focus on and further impact our business, results of operations, and financial condition. Further, if our ESG practices fail to meet investor, customer, consumer or employees’ evolving expectations and standards for responsible corporate citizenship in areas including environmental stewardship (including climate change, greenhouse gas emissions, packaging and waste), animal welfare, diversity, human capital management, and corporate governance and transparency, our reputation, brand, appeal to current and potential customers and investors, and employee retention may be negatively impacted, which could have a material adverse effect on our business, financial condition, and results of operations. Furthermore, if our competitors’ ESG practices are perceived to be better than our own, certain investors or customers may elect to invest in or be a patron of our competitors instead, which would have an adverse impact on our business, financial condition, and results of operations.