Item 4. Controls and Procedures

The Company’s management, with the participation of the Company’s Chief Executive Officer and Chief Financial Officer, evaluated the effectiveness of the Company’s disclosure controls and procedures as of the end of the period covered by this Report. Based on that evaluation, the Chief Executive Officer and Chief Financial Officer concluded that the Company’s disclosure controls and procedures, as of the end of the period covered by this Report, were effective such that the information required to be disclosed by the Company in reports filed under the Exchange Act is (i) recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and (ii) accumulated and communicated to management, including the Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

No change in the Company’s internal control over financial reporting occurred during the third fiscal quarter of the fiscal year ending June 30, 2024, that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.

On Monday, August 14, 2023, the Company disclosed it had identified unauthorized activity on some of its Information Technology (IT) systems; see Note 3 in the condensed consolidated financial statements in this Report. That activity began on Friday, August 11, 2023 and after becoming aware of it that evening, the Company immediately began taking steps to stop and remediate the activity. The Company also took certain systems offline and engaged third-party cybersecurity experts to support its investigation and recovery efforts. The Company implemented its business continuity plans, including manual ordering and processing procedures at a reduced rate of operations in order to continue servicing its customers. However, the incident resulted in wide-scale disruptions to the Company’s business operations throughout the remainder of the first fiscal quarter of the fiscal year ending June 30, 2024.

During the disruptions caused by the cyberattack, we deployed additional interim controls in response to taking certain systems offline during the period to maintain our internal control over financial reporting.

PART II – OTHER INFORMATION

Item 1.A. Risk Factors

For information regarding Risk Factors, please refer to Item 1.A. in the Company’s Annual Report on Form 10-K for the fiscal year ended June 30, 2023, as supplemented by Item 1.A. in the Company’s Quarterly Report on Form 10-Q for the fiscal quarter ended September 30, 2023, and the information in “Cautionary Statement” included in this Report.

Item 2. Unregistered Sales of Equity Securities and Use of Proceeds

In May 2018, the Board of Directors authorized the Company to repurchase up to $2,000 million in shares of common stock on the open market (the 2018 Open-Market Program), which has no expiration date.

In August 1999, the Board of Directors authorized a stock repurchase program to reduce or eliminate dilution upon the issuance of common stock pursuant to the Company’s stock compensation plans (the Evergreen Program). In November 2005, the Board of Directors authorized the extension of the Evergreen Program to reduce or eliminate dilution in connection with issuances of common stock pursuant to the Company’s 2005 Stock Incentive Plan. The Evergreen Program has no expiration date and has no specified limit as to dollar amount and therefore is not included in column [d] below.

The following table sets forth the purchases of the Company’s securities by the Company and any affiliated purchasers within the meaning of Rule 10b-18(a)(3) (17 CFR 240.10b-18(a)(3)) during the third quarter of fiscal year 2024.

(1)Average price paid per share in the period includes commission.