LANTRONIX INC

Previous wording

Some of our integrated circuits are only available from a single source and in some cases, are no longer being manufactured. From time to time, integrated circuits, and potentially other components used in our products, will be phased out of production by the manufacturer. When this happens, we attempt to purchase sufficient inventory to meet our needs until a substitute component can be incorporated into our products. Nonetheless, we may be unable to purchase sufficient components to meet our demands, or we may incorrectly forecast our demands, and purchase too many or too few components. In addition, our products use components that have been in the past and may in the future be subject to market shortages and substantial price fluctuations, whether due to the COVID-19 pandemic or a future pandemic or epidemic, the war between Ukraine and Russia, conflict in the Middle East, hostilities in the Red Sea, recent tensions between China and Taiwan or otherwise. From time to time, we have been unable to meet customer orders because we were unable to purchase necessary components for our products. We do not have long-term supply arrangements with most of our vendors to obtain necessary components, including semiconductor chips, or technology for our products and instead purchase components on a purchase order basis. If we are unable to purchase components from these suppliers, our product shipments could be prevented or delayed, which could result in a loss of sales. If we are unable to meet existing orders or to enter into new orders because of a shortage in components, we will likely lose net revenue, risk losing customers and risk harm to our reputation in the marketplace, which could adversely affect our business, financial condition or results of operations.

Current wording

Some of our integrated circuits are only available from a single source and in some cases, are no longer being manufactured. From time to time, integrated circuits, and potentially other components used in our products, will be phased out of production by the manufacturer. When this happens, we attempt to purchase sufficient inventory to meet our needs until a substitute component can be incorporated into our products. Nonetheless, we may be unable to purchase sufficient components to meet our demands, or we may incorrectly forecast our demands, and purchase too many or too few components. In addition, our products use components that have been in the past and may in the future be subject to market shortages and substantial price fluctuations, whether due to a pandemic or epidemic, the war between Ukraine and Russia, conflict in the Middle East, hostilities in the Red Sea, recent tensions between China and Taiwan, increased tariffs or otherwise. From time to time, we have been unable to meet customer orders because we were unable to purchase necessary components for our products. We do not have long-term supply arrangements with most of our vendors to obtain necessary components, including semiconductor chips, or technology for our products and instead purchase components on a purchase order basis. If we are unable to purchase components from these suppliers, our product shipments could be prevented or delayed, which could result in a loss of sales. If we are unable to meet existing orders or to enter into new orders because of a shortage in components, we will likely lose net revenue, risk losing customers and risk harm to our reputation in the marketplace, which could adversely affect our business, financial condition or results of operations.

Previous wording

The COVID-19 pandemic or another pandemic or similar outbreak has had, and may in the future have, an adverse impact on the economy, our business and the businesses of our suppliers, and our results of operations and financial condition. For example, the COVID-19 pandemic resulted in industry events, trade shows and business travel being suspended, cancelled and/or significantly curtailed. If these activities are suspended, cancelled and/or significantly curtailed in the future, whether due to surges of COVID-19 or other possible pandemics and similar outbreaks, our sales may be negatively impacted in the future.

Current wording

Pandemics or similar outbreaks have had, and may in the future have, an adverse impact on the economy, our business and the businesses of our suppliers, and our results of operations and financial condition. For example, the COVID-19 pandemic resulted in industry events, trade shows and business travel being suspended, cancelled and/or significantly curtailed. If these activities are suspended, cancelled and/or significantly curtailed in the future, whether due to a possible pandemic and similar outbreak, our sales may be negatively impacted in the future.

Previous wording

In addition, the impact of the COVID-19 pandemic or other possible pandemics subject us to various risks and uncertainties that could materially adversely affect our business, results of operations and financial condition, including the following:

Current wording

In addition, the impact of possible pandemics subjects us to various risks and uncertainties that could materially adversely affect our business, results of operations and financial condition, including the following:

Previous wording

The duration and extent of a future pandemics or other similar outbreak’s effect on our operations and financial condition will depend on future developments, which are highly uncertain and cannot be predicted at this time. The adverse impact of the COVID-19 pandemic or another pandemic or similar outbreak on our business, results of operations and financial condition have been, could continue to be, and may in the future be material.

Current wording

The duration and extent of a future pandemics or other similar outbreak’s effect on our operations and financial condition will depend on future developments, which are highly uncertain and cannot be predicted at this time. The adverse impact of a possible future pandemic or similar outbreak on our business, results of operations and financial condition may be material.

Previous wording

We may pursue acquisitions, strategic partnerships and joint ventures that we believe would allow us to complement our growth strategy, increase market share in our current markets and expand into adjacent markets, broaden our technology and intellectual property and strengthen our relationships with distributors, OEMs and ODMs. For instance, we acquired Maestro, Intrinsyc, the Transition Networks and Net2Edge businesses of Communication Systems, Inc., and Uplogix, Inc. in calendar years 2019, 2020, 2021 and 2022, respectively. Our previous acquisitions have required, and any future acquisition, partnership, joint venture or investment may also require, that we pay significant cash, issue equity and/or incur substantial debt. Acquisitions, partnerships or joint ventures may also result in the loss of key personnel and the dilution of existing stockholders to the extent we are required to issue equity securities. In addition, acquisitions, partnerships or joint ventures require significant managerial attention, which may be diverted from our other operations. These capital, equity and managerial commitments may impair the operation of our business. Furthermore, acquired businesses may not be effectively integrated, may be unable to maintain key pre-acquisition business relationships, may not result in expected synergies, an increase in revenues or earnings or the delivery of new products, may contribute to increased fixed costs, and may expose us to unanticipated liabilities. If any of these occur, we may fail to meet our business objectives and our business, financial condition and operating results could be materially and adversely affected.

Current wording

We may pursue acquisitions, strategic partnerships and joint ventures that we believe would allow us to complement our growth strategy, increase market share in our current markets and expand into adjacent markets, broaden our technology and intellectual property and strengthen our relationships with distributors, OEMs and original design manufactuers. For instance, we acquired Maestro, Intrinsyc, the Transition Networks and Net2Edge businesses of Communication Systems, Inc., Uplogix, Inc., and Netcomm in calendar years 2019, 2020, 2021, 2022 and 2024, respectively. Our previous acquisitions have required, and any future acquisition, partnership, joint venture or investment may also require, that we pay significant cash, issue equity and/or incur substantial debt. Acquisitions, partnerships or joint ventures may also result in the loss of key personnel and the dilution of existing stockholders to the extent we are required to issue equity securities. In addition, acquisitions, partnerships or joint ventures require significant managerial attention, which may be diverted from our other operations. These capital, equity and managerial commitments may impair the operation of our business. Furthermore, acquired businesses may not be effectively integrated, may be unable to maintain key pre-acquisition business relationships, may not result in expected synergies, an increase in revenues or earnings or the delivery of new products, may contribute to increased fixed costs, and may expose us to unanticipated liabilities. If any of these occur, we may fail to meet our business objectives and our business, financial condition and operating results could be materially and adversely affected.

Previous wording

Increased global information technology security threats and more sophisticated and targeted computer crime pose a risk to the security of our systems and networks and the confidentiality, availability and integrity of our data. There have been several recent, highly publicized cases in which organizations of various types and sizes have reported the unauthorized disclosure of customer or other confidential information, as well as cyberattacks involving the dissemination, theft and destruction of corporate information, intellectual property, cash or other valuable assets. There have also been several highly publicized cases in which hackers have requested “ransom” payments in exchange for not disclosing customer or other confidential information or for not disabling the target company’s computer or other systems. The secure processing, maintenance and transmission of the information that we collect and store on our systems is critical to our operations and implementing security measures designed to prevent, detect, mitigate or correct these or other cybersecurity threats involves significant costs. Although we have taken steps to protect the security of our information systems, we have, from time to time, experienced, and we expect to continue experiencing, threats to our data and systems, including malware, phishing and computer virus attacks, and it is possible that in the future our safety and security measures will not prevent the systems’ improper functioning or damage, or the improper access or disclosure of personally identifiable information such as in the event of cyber-attacks. In addition, due to the fast pace and unpredictability of cybersecurity threats, including from emerging technologies, such as advanced forms of machine learning, AI and quantum computing, long-term implementation plans designed to address cybersecurity risks become obsolete quickly and, in some cases, it may be difficult to anticipate or immediately detect such incidents and the damage they cause. Any unauthorized access, disclosure or other loss of information could result in legal claims or proceedings, disrupt our operations, damage our reputation, and cause a loss of confidence in our products and services, which could adversely affect our business.

Current wording

Increased global information technology security threats and more sophisticated and targeted computer crime pose a risk to the security of our systems and networks and the confidentiality, availability and integrity of our data. There have been several recent, highly publicized cases in which organizations of various types and sizes have reported the unauthorized disclosure of customer or other confidential information, as well as cyberattacks involving the dissemination, theft and destruction of corporate information, intellectual property, cash or other valuable assets. There have also been several highly publicized cases in which hackers have requested “ransom” payments in exchange for not disclosing customer or other confidential information or for not disabling the target company’s computer or other systems. The secure processing, maintenance and transmission of the information that we collect and store on our systems is critical to our operations and implementing security measures designed to prevent, detect, mitigate or correct these or other cybersecurity threats involves significant costs. Although we have taken steps to protect the security of our information systems, we have, from time to time, experienced, and we expect to continue experiencing, threats to our data and systems, including malware, phishing and computer virus attacks, and it is possible that in the future our safety and security measures will not prevent the systems’ improper functioning or damage, or the improper access or disclosure of personally identifiable information such as in the event of cyber-attacks. In addition, due to the fast pace and unpredictability of cybersecurity threats, including from emerging technologies, such as advanced forms of machine learning, AI and quantum computing, long-term implementation plans designed to address cybersecurity risks become obsolete quickly and, in some cases, it may be difficult to anticipate or immediately detect such incidents and the damage they cause. In addition, such threats could be introduced as a the result of our or our customers and business partners incorporating the output of an AI tool that includes a threat, such as introducing malicious code by incorporating AI generated source code. Any unauthorized access, disclosure or other loss of information could result in legal claims or proceedings, disrupt our operations, damage our reputation, and cause a loss of confidence in our products and services, which could adversely affect our business.

Previous wording

In connection with certain implementations of our management software platform, application, and SaaS offerings, we expect to store, convey and process data produced by devices. This data may include confidential or proprietary information, intellectual property or personally identifiable information of our customers or other third parties with whom they do business. It is important for us to maintain solutions and related infrastructure that are perceived by our customers and other parties with whom we do business to provide a reasonable level of reliability and security. Despite available security measures and other precautions, the infrastructure and transmission methods used by our products and services may be vulnerable to interception, attack or other disruptive problems.

Current wording

In connection with certain implementations of our management software platform, application, and SaaS offerings, we expect to store, convey and process data produced by devices. This data may include confidential or proprietary information, intellectual property or personally identifiable information of our customers or other third parties with whom they do business. It is important for us to maintain solutions and related infrastructure that are perceived by our customers and other parties with whom we do business to provide a reasonable level of reliability and security. Despite available security measures and other precautions, the infrastructure and transmission methods used by our products and services may be vulnerable to interception, attack or other disruptive problems. Additionally, some of our products include capabilities to support AI which [may] further increase our products susceptibility or perceived susceptibility of security risks.

Previous wording

Laws and regulations in this area are evolving and generally becoming more stringent. For example, the European General Data Protection Regulation (the “GDPR”) requires us to meet stringent requirements regarding (i) our access, use, disclosure, transfer, protection, or otherwise processing of personal information; and (ii) the ability of data subjects to exercise their related various rights such as to access, correct or delete or limit the use of their personal data. Under the GDPR and the U.K.’s version of the GDPR, information transfers from the European Union and the U.K. to the U.S. are generally prohibited unless certain measures are followed. The 2018 California Consumer Privacy Act and California Privacy Rights Act of 2020 provide individuals similar rights with respect to the processing of their personal data. In addition to California, Colorado, Virginia, Utah and Connecticut previously enacted comprehensive privacy legislation, and in 2023 and 2024, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, New Jersey, New Hampshire, Oregon, Rhode Island, Tennessee and Texas enacted such laws. There is also the possibility of federal privacy legislation and increased enforcement by the Federal Trade Commission under its power to regulate unfair and deceptive trade practices. Markets in the Asia Pacific region have also recently adopted GDPR-like legislation, including China’s new Personal Information Protection Law. Failure to meet Privacy and Data Protection Law requirements could result in significant civil penalties (including fines up to 4% of annual worldwide revenue under the GDPR) as well as criminal penalties. Privacy and data protection law requirements also confer a private right of action in some countries, including under the GDPR.

Current wording

Laws and regulations in this area are evolving and generally becoming more stringent. For example, the European General Data Protection Regulation (the “GDPR”) requires us to meet stringent requirements regarding (i) our access, use, disclosure, transfer, protection, or otherwise processing of personal information; and (ii) the ability of data subjects to exercise their related various rights such as to access, correct or delete or limit the use of their personal data. Under the GDPR and the U.K.’s version of the GDPR, information transfers from the European Union and the U.K. to the U.S. are generally prohibited unless certain measures are followed. The 2018 California Consumer Privacy Act and California Privacy Rights Act of 2020 provide individuals similar rights with respect to the processing of their personal data. California, Colorado, Virginia, Utah, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Jersey, New Hampshire, Oregon, Rhode Island, Tennessee and Texas enacted such privacy laws, and data privacy laws are scheduled to become effective in Tennessee, Minnesota and Maryland in 2025 and Indiana, Kentucky, and Rhode Island in 2026. There is also the possibility of federal privacy legislation and increased enforcement by the Federal Trade Commission under its power to regulate unfair and deceptive trade practices. Markets in the Asia Pacific region have also recently adopted GDPR-like legislation, including China’s new Personal Information Protection Law. Failure to meet Privacy and Data Protection Law requirements could result in significant civil penalties (including fines up to 4% of annual worldwide revenue under the GDPR) as well as criminal penalties. Privacy and data protection law requirements also confer a private right of action in some countries, including under the GDPR.

Previous wording

During the quarter ended September 30, 2024, no director or officer of the Company adopted orterminated a “Rule 10b5-1 trading arrangement” or “non-Rule 10b5-1 trading arrangement,” as each term is defined in Item 408(a) of Regulation S-K.

Current wording

During the quarter ended December 31, 2024, no director or officer of the Company adopted orterminated or modified a “Rule 10b5-1 trading arrangement” or “non-Rule 10b5-1 trading arrangement,” as each term is defined in Item 408(a) of Regulation S-K.