A Dark Vector Cognition product

Item 1A. Risk Factors.

43K characters. Original on sec.gov · Markdown

Item 1A. Risk Factors.

Our operations and financial results are subject to various risks and uncertainties, including those described in Part I, Item 1A, "Risk Factors" in our Annual Report on Form 10-K for the fiscal period ended October 31, 2023, which could adversely affect our business, financial condition, results of operations, cash flows, and the trading price of our common stock, including certain risks, which have been modified as follows:

If we cannot successfully execute our go-to-market strategy, including offering our entire portfolio as-a-Service, our business, operating results, and financial performance may suffer.

Our long-term strategy is focused on leveraging our portfolio of hardware, software, and services as we deliver global edge-to-cloud platform as-a-service to help customers accelerate outcomes by unlocking value from all of their data, everywhere. We provide our entire portfolio through a range of subscription and consumption-based, pay-per-use, and aaS offerings. We will also continue to provide our hardware and software in a capital expenditure and license-based model, giving our customers choices in consuming HPE products and services. Furthermore, subject to our anticipated consummation of the acquisition of Juniper Networks (the “Merger”), we will seek to offer secure, unified cloud- and AI-native networking to enhance innovation across edge to cloud. To successfully execute on these strategic pillars, we must continue to improve cost structure, align sales coverage with strategic goals, improve channel execution and strengthen our capabilities in our areas of strategic focus, while continuing to pursue new product innovation that builds on our strategic capabilities in areas such as edge computing, hybrid cloud, artificial intelligence, data center networking, network security and high-performance compute. We must make sufficient long-term investments in strategic growth areas, such as developing, obtaining, and protecting appropriate intellectual property, and commit or transition significant R&D and other resources before knowing whether our projections will reasonably reflect customer demand for our solutions. Should such efforts fail to produce actionable insights, or our offerings not perform as designed or promised, our business results and financial condition may be adversely affected. Furthermore, such incremental capital requirements may negatively impact cash flows in the near term and may require us to dedicate additional resources, including sales and marketing costs.

The process of improving our HPE GreenLake edge-to-cloud platform’s aaS solutions and enhancing existing hardware, software, and cloud-based solutions is complex, costly, and uncertain, and any failure by us to anticipate customers’ changing needs and emerging technological trends accurately, to invest sufficiently in strategic growth areas, or to otherwise successfully execute this strategy could significantly harm our market share, results of operations, and financial performance.

Table of Contents

Having developed a cloud platform product in HPE GreenLake, we must be able to continue to scale quickly, while also managing costs and preserving margins, which means accurately forecasting volumes, mixes of products, and configurations that meet customer requirements, which we may not succeed at doing. Our HPE GreenLake edge-to-cloud platform faces competition from peer companies with their own cloud platform offerings, and any delay in the development, production, or marketing of a new product, service or solution, including new features of the HPE GreenLake edge-to-cloud platform, could result in our offerings being late to reach the market, which could further harm our competitive position. In addition, should we successfully consummate the Merger, the process of integrating and streamlining our two companies’ offerings or developing new solutions based on our respective technological portfolios may be complex, costly, time-consuming, and uncertain, and failure by us to successfully do so could adversely impact our future results of operations and financial performance. Furthermore, we anticipate needing to continually adapt our go-to-market structure with new sales and marketing approaches, to better align with aaS business models. Changing our go-to-market structure may affect employee compensation models and ultimately our ability to retain employees. There is no assurance that we will be able to implement these adjustments in a timely or cost-effective manner, or that we will be able to realize all or any of the expected benefits from them.

Our HPE GreenLake solutions generally are multiyear agreements, which result in recurring revenue streams over the term of the arrangement. As customer demand for our aaS offerings increases, we will experience differences in the timing of revenue recognition between our traditional offerings (for which revenue is generally recognized at the time of delivery) and our aaS offerings (for which revenue is generally recognized ratably over the term of the arrangement). As such, our financial results and growth depend, in part, on customers continuing to purchase our services and solutions over the contract life on the agreed terms. Additionally, the transition to this business model also means that our historical results, especially those from before the transition, may not be indicative of future results, which may adversely affect our ability to accurately forecast our future operating results. Further, these contracts allow customers to take actions, such as requesting rate reductions, reducing the use of our services and solutions or terminating a contract early, which may adversely affect our recurring revenue and profitability. Our aaS offerings also could subject us to increased risk of liability related to the provision of services as well as operational, technical, legal, regulatory, or other costs.

System security risks, data protection incidents, cyberattacks and systems integration issues could disrupt our internal operations or IT services provided to customers, and any such disruption could reduce our revenue, increase our expenses, damage our reputation, and adversely affect our stock price.

As a leading technology firm, we are exposed to attacks from criminals, nation state actors, malicious insiders, and activist hackers (collectively, “malicious parties”) who have at times been able to circumvent or bypass our cyber security measures. Although some of these attacks have caused disruptions or exposure of information, so far, these attacks have not resulted in material negative impacts to HPE, nor have any of HPE’s consumers, customers, or employees informed HPE that these attacks resulted in material harm to them. While we investigate and remediate incidents, there can be no assurance that we will do so comprehensively or that the threat actor will not identify alternative means of intrusion or opportunities to otherwise utilize the information it accessed to adversely affect our business or results of operations. It is also possible that incidents may embolden other malicious actors to perpetrate future attacks that may result in material misappropriation, system disruptions or shutdowns, malicious alteration, or destruction of our confidential or personal information or that of third parties. Further, there has been an increase in the frequency and sophistication of such attacks, and we expect these activities to continue to increase. Malicious parties may also be able to develop and deploy viruses, worms, ransomware, and other malicious software programs that attack our products or otherwise exploit any security vulnerabilities of our products, including within our cloud-based environments and offerings, such that we may be unable to anticipate such malicious parties’ techniques, implement adequate preventative measures, or remediate any intrusion on a timely or effective basis even if our security measures are appropriate, reasonable, and comply with applicable legal requirements. Further, cyber-attacks or incidents have in the past gone, and could in the future go, undetected in our environments for a period of time. For example, as previously disclosed in our Form 8-K filed with the Securities and Exchange Commission on January 24, 2024, we learned in December 2023 that, beginning in May 2023, a nation-state-associated threat actor gained unauthorized access to and exfiltrated data from HPE’s cloud-based email and SharePoint environments. This incident may result in harm to our reputation and customer relationships, and there can be no assurance that the threat actor will not utilize the information accessed to adversely affect our business or results of operations. Given our broad and diverse network environment, resource limitations, and operational constraints, we have in the past failed, and may in the future fail, to patch certain security vulnerabilities in time to prevent successful disruptions of our infrastructure or expose information. Furthermore, it is possible that we may, in the future, discover additional impacts of any incident we had or have experienced and may have believed to have been remediated.

Malicious parties may compromise our manufacturing supply chain and the systems or networks of other third parties on whom we rely, and as such, may embed malicious software or hardware in our products, thereby compromising our customers. Geopolitical tensions or conflicts, such as the ongoing conflicts between Russia and Ukraine or in the Middle East, may heighten the risk of such cyberattacks or exacerbate system vulnerabilities, considering our continued hybrid work

Table of Contents

environment and our globally dispersed operations, employees, contractors, suppliers, developers, partners, and other third parties. In addition, sophisticated hardware and operating system software and applications that we produce, procure from third parties, or integrate from third parties, including those of companies we have acquired, may contain defects in design or manufacture, including flaws that could unexpectedly interfere with the operation of the system. The costs associated with cybersecurity tools and infrastructure and fierce competition for scarce cybersecurity and IT talent have at times limited, and may in the future limit, our ability to efficiently identify, eliminate, or remediate cyber or other security vulnerabilities or problems or enact changes to minimize the attack surface of our network. Furthermore, our efforts to address these problems may not be successful and could result in interruptions, delays, cessation of service, and loss of existing or potential customers, any of which may impede our sales, manufacturing, distribution or other critical functions. Additional impacts from cybersecurity incidents could include remediation costs to our customers, suppliers, or distributors, such as liability for stolen assets or information, repairs of system damage, and incentives for continued business; lost revenue resulting from the unauthorized use of proprietary information or the failure to retain or attract business partners following an incident; increased insurance premiums; and damage to our competitiveness, stock price, and long-term shareholder value.

We manage and store various proprietary information, intellectual property, and sensitive or confidential data relating to our business. In addition, our business may process, store, and transmit customer data, including commercially sensitive and personal data, subject to the European General Data Protection Regulation, United Kingdom General Data Protection Regulation, and various state and foreign privacy laws, such as the California Consumer Privacy Act of 2018, California Privacy Rights Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and the Utah Consumer Privacy Act, which give new data privacy rights to their residents and impose significant obligations related to the handling of personal data. With our business increasingly providing aaS offerings, malicious parties could target such services, potentially resulting in an increased risk of compromise of customer data and regulatory exposure. Incidents involving our cyber or physical security measures or the accidental loss, inadvertent disclosure, or unapproved dissemination of proprietary information, intellectual property, or sensitive, confidential, or personal data about us, our clients, or our customers, including the potential loss or disclosure of such data as a result of fraud or other forms of deception, could expose us, our customers, or the individuals affected to a risk of loss or misuse of this information; result in regulatory fines, litigation, and potential liability for us; damage our brand and reputation; or otherwise harm our business. We also could lose existing or potential customers of services or other IT solutions or incur significant expenses in connection with our customers’ system failures or any actual or perceived security vulnerabilities in our products and services. In addition, the cost and operational consequences of managing an incident and implementing further data protection measures could be significant.

Additionally, we have at times experienced, and may experience, other security issues that are not the results of any action or attack from malicious parties, whether due to employee or insider error or malfeasance, system errors or vulnerabilities in our or other parties’ systems. Portions of our IT infrastructure also have experienced, and may experience, interruptions, delays, or cessations of service or produce errors in connection with systems integration or migration work that takes place from time to time. As our IT environment continues to evolve, we may not be successful in adopting or implementing new systems and transitioning data, which could cause business disruptions and be more expensive, time-consuming, disruptive, and resource intensive. Furthermore, our data centers depend on predictable and reliable energy and networking capabilities, the cost or availability of which could be adversely affected or disrupted by a variety of factors, including but not limited to the effects of climate change. Such disruptions could adversely impact our ability to fulfill orders and respond to customer requests and interrupt other processes. Delayed sales, lower margins, or lost customers resulting from these events could reduce our revenue, increase our expenses, and adversely affect our reputation and stock price.

While we seek to identify and remediate vulnerabilities in our products, services, IT systems, controls, and software that could be exploited by any malicious parties, we may not be aware of all such vulnerabilities, and we have at times failed, and may fail, to anticipate, detect, identify, and/or remediate such vulnerabilities before they are exploited. There is no guarantee that a series of issues may not be determined to be material in the aggregate at a future date even if they may not be material individually at the time of their occurrence.

Failure to complete the Merger with Juniper Networks may adversely affect our business and our stock price.

Consummation of the Merger is subject to the satisfaction or waiver of certain conditions, including but not limited to (i) the adoption of the Agreement and Plan of Merger (the “Merger Agreement”), by and among Juniper Networks, HPE and Jasmine Acquisition Sub, Inc., a Delaware corporation and a wholly owned subsidiary of HPE (“Merger Sub”), by Juniper Networks’ stockholders; (ii) the absence of any injunction, order or law preventing, prohibiting or making illegal the consummation of the Merger; (iii) the expiration or termination of the waiting period (or extension thereof) under the Hart-Scott-Rodino Antitrust Improvement Act of 1976, as amended, and the receipt of all other required approvals, consents or clearances under specified foreign antitrust laws and foreign investment laws without imposition of a Burdensome Condition

Table of Contents

(as defined in the Merger Agreement); and (iv) in the case of the obligations of HPE and Merger Sub to effect the Merger, the absence of a material adverse effect with respect to Juniper Networks that is continuing as of the closing. There can be no assurance that these or other closing conditions will be satisfied in a timely manner or at all. Any delay in completing the Merger could cause us not to realize some or all of the anticipated benefits when expected, if at all. If the Merger is not completed, our stock price could be impacted to the extent it reflects an assumption that we will complete the Merger, and additionally, we may suffer other consequences that could adversely affect our business, results of operations, and stock price, including incurring significant acquisition costs that we would be unable to recover, negative publicity, and a negative impression of us in the investment community. Furthermore, under certain specified circumstances, including the termination of the Merger Agreement by either us or Juniper Networks because certain required regulatory clearances are not obtained or the terms of the Merger Agreement are materially breached by us, upon termination we would be required to pay Juniper Networks a termination fee of $815 million.

Failure to realize the benefits expected from the Merger with Juniper Networks could adversely affect our business or our stock price.

There can be no assurance that we will realize any of the significant benefits that we expect to result from the Merger, or realize them within the anticipated timeframe. Achieving these benefits will depend, in part, on our ability to integrate Juniper Networks’ business successfully and efficiently. The challenges involved in this integration, which will be complex and time-consuming, include the following:

  • preserving customer and other important relationships of Juniper Networks and attracting new business and operational relationships;

  • integrating financial forecasting and controls, procedures and reporting cycles;

  • consolidating and integrating corporate, information technology, finance and administrative infrastructures;

  • coordinating sales and marketing efforts to effectively position our capabilities;

  • coordinating and integrating operations, including in countries in which we have not previously operated; and

  • integrating employees and related human capital management systems and benefits, maintaining employee morale and retaining key employees.

If we do not successfully manage these issues and the other challenges inherent in integrating an acquired business, then we may not achieve the anticipated benefits of the Merger on our anticipated timeframe or at all, and our revenue, expenses, operating results, financial condition and stock price could be materially adversely affected. The successful integration of Juniper Networks will require significant management attention both before and after the completion of the Merger with Juniper Networks, and may divert the attention of management from our business and operational issues.

In order to be successful, we must attract, retain, train, motivate, develop, and transition key employees, and failure to do so could seriously harm us.

In order to be successful, we must attract, retain, train, motivate, develop, and transition qualified executives and other key employees, including those in managerial, technical, development, sales, marketing, and IT support positions. In order to attract and retain executives and other key employees in a competitive marketplace, we must provide a competitive compensation package, including cash and equity-based compensation. These are particularly important considering our recent segment realignment, as we shift our growth strategy to capture the market opportunity presented by hybrid cloud. Certain equity-based incentive awards for certain executives contain conditions relating to our stock price performance and our long-term financial performance that make the future value of those awards uncertain. If the anticipated value of such equity-based incentive awards does not materialize, if our equity-based compensation otherwise ceases to be viewed as a valuable benefit, if our total compensation package is not viewed as being competitive, or if we do not obtain the stockholder approval needed to continue granting equity-based incentive awards in the amounts we believe are necessary, our ability to attract, retain, and motivate executives and key employees could be weakened.

Our failure to successfully hire executives and key employees or the loss of any executives and key employees could have a significant impact on our operations and our ability to execute our strategy. Further, changes in our management team may be disruptive to our business, and any failure to successfully transition and assimilate key new hires or promoted employees could adversely affect our business and results of operations. As competition for highly skilled employees in our industry has grown increasingly intense, we have experienced, and may in the future experience, higher than anticipated levels of employee attrition, which has resulted in increased costs to hire new employees with the desired skills and may do so again in the future. In addition, significant or prolonged turnover or revised hiring priorities may negatively impact our operations and culture, as well as our ability to successfully maintain our processes and procedures, including due to the loss of historical,

Table of Contents

technical, and other expertise. These risks to attracting and retaining the necessary talent may be exacerbated by recent labor constraints and inflationary pressures on employee wages and benefits. Further, integration of employees and businesses as a result of our acquisitions, including the Merger, may present challenges, which could negatively affect our ability to retain and recruit personnel who are essential to our future success.

Due to the international nature of our business, political or economic changes and the laws and regulatory regimes applying to international transactions or other factors could harm our future revenue, costs and expenses, and financial condition.

Our business and financial performance depend significantly on worldwide economic conditions and the demand for technology hardware, software, and services in, and continued access to, the markets in which we compete. Economic weakness and uncertainty and constrained spending on network and enterprise infrastructure have in the past adversely affected the demand for our products, services, and solutions. These have resulted in increased expenses due to higher allowances for doubtful accounts and potential goodwill and asset impairment charges, and made it more difficult for us to manage inventory and make accurate forecasts of revenue, gross margin, cash flows, and expenses, and may have such effects again in the future. Such factors, including how long such conditions may persist, among others, may negatively impact the evenness or volume of demand for our products and services, potentially resulting in impacts similar to those mentioned above, though the precise extent of such impacts cannot be accurately predicted.

Economic weakness and uncertainty could cause our expenses to vary materially from our expectations. Any financial turmoil affecting the banking system and financial markets, or any significant financial services institution failures could negatively impact our treasury operations, as the financial condition of such parties may deteriorate rapidly and without notice in times of market volatility and disruption. Interest and other expenses have varied, and could continue to vary, materially from expectations depending on changes in interest rates, borrowing costs, currency exchange rates, costs of hedging activities and the fair value of derivative instruments. It is difficult to predict the impact of such events on us, our third-party partners, our customers, or economic markets more broadly, which have been and will continue to be highly dependent upon the actions of governments and businesses in response to macroeconomic events, and the effectiveness of those actions. Such actions have impacted, and may further impact our ability, desire, or the timing of seeking funding for various investment opportunities. Economic downturns also may lead to restructuring actions and associated expenses. Further, reduced U.S. federal government spending may limit demand for our products, services, and solutions from organizations that receive funding from the U.S. government, and could negatively affect macroeconomic conditions in the United States, which could further reduce demand for our products, services, and solutions.

Our business and financial performance also could be adversely affected by changes in U.S. trade policy, U.S. export controls and sanctions, and U.S. regulations concerning imports, as well as international laws and regulations relating to global trade. Current U.S. government trade policy includes the imposition of tariffs on certain foreign goods, including information and communication technology products. These measures have materially increased costs for certain goods imported into the United States. As a result, our business has in the past been impacted by forced material price increases, which in turn resulted in price increases for our offerings, which subsequently limited demand or reduced margins for our offerings, all of which may impact us again from time to time in the future. Additionally, U.S. trading partners may adopt their own trade policies making it more difficult or costly for us to export our products to those countries. Similarly, changes in regulations relating to exports have led to export delays and could in the future prevent us from exporting products to certain locations or customers entirely, which have in some instances impacted, and could in the future impact, our financial performance. In addition, changes in requirements relating to making foreign direct investments could increase our cost of doing business in certain jurisdictions, prevent us from shipping products to particular countries or markets, affect our ability to obtain favorable terms for components, increase our operating costs or lead to penalties or restrictions.

Sales outside the United States constituted approximately 64% of our net revenue in fiscal 2023. As such, our future business and financial performance could suffer due to a variety of international factors in addition to those otherwise already disclosed, including:

  • ongoing uncertainties as a result of instability or changes in geopolitical conditions, including military or political conflicts, such as those caused by the ongoing conflicts between Russia and Ukraine or in the Middle East (the potential escalation or geographic expansion of which could heighten other risks identified in this report), or the relationship between China and the U.S. (which could, among other things, impact the enforceability of certain contracts or the timing and form of certain payments);

  • inflationary pressures, which have increased (though easing slightly), and may continue to increase, costs for materials, supplies, and services;

Table of Contents

  • adverse or uncertain macroeconomic conditions, including a changing interest rate environment and fears of a potential global economic downturn or recession, which have at times in the past slowed customer demand for our products and services, and may do so again in the future;

  • network security, privacy, and data sovereignty concerns, which could make foreign customers reluctant to purchase products and services from U.S.-based technology companies;

  • longer collection cycles and financial instability among customers, which could impact our ability to collect on accounts receivable and consequently recognize revenue;

  • local labor conditions and regulations, including local labor issues faced by specific suppliers and OEMs, or changes to immigration and labor law policies which may adversely impact our access to technical and professional talent;

  • managing our geographically dispersed workforce, which has necessitated, and may in the future require, incurring costs to promote seamless workforce connectivity and to comply with changing laws, regulations and workers’ rights councils across multiple jurisdictions;

  • differing technology standards or customer requirements, which have required us to incur additional development and production costs to modify or adapt our offerings, and may do so again in the future;

  • local content and manufacturing requirements, which have impacted, and could further impact, our ability to sell into those markets;

  • difficulties associated with repatriating earnings in restricted countries, and changes in tax laws, which introduces uncertainty to our results of operations and financial performance; and

  • fluctuations in freight costs, limitations on shipping and receiving capacity, and other disruptions in the transportation and shipping infrastructure at important geographic points of exit and entry for our products and shipments, which have from time to time adversely impacted, and any of which could in the future adversely impact, our results of operations and ability to meet customer demand.

Certain of the factors described above have, in the past, disrupted the operations of, and adversely impacted our product and component manufacturing and key suppliers, customers, or vendors located outside of the United States, and could do so again in the future. For example, we rely on suppliers in Asia for product assembly and manufacture, the operations of whom are subject to local labor laws and other requirements. Any loss of or limitations on their output or their inability to operate could have an adverse effect on our ability to timely deliver our products and services, which would in turn negatively impact our financial performance.

Further, the ongoing conflict between Russia and Ukraine and the trade sanctions imposed by the U.S., the European Union (the “EU”), and other countries in response have negatively impacted business and financial performance in that region. HPE is proceeding with the exit of our remaining business in Russia and Belarus as planned; however, we cannot provide any assurance that such exit will be efficient or uninterrupted, which may negatively impact our operational expenses.

We implement policies, procedures, and training designed to facilitate compliance with anti-corruption laws around the world, including the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act. But in many foreign countries, particularly in those with developing economies, people may engage in business practices prohibited by anti-corruption laws. Our employees and third parties with whom we work may take actions in violation of our policies, and those actions could have an adverse effect on our business and reputation.

Adverse developments affecting our liquidity, capital position, borrowing costs, and access to capital markets could adversely impact our business, financial condition, and results of operations.

We currently maintain investment grade credit ratings with Moody's Investors Service, Standard & Poor's Ratings Services, and Fitch Ratings Services. Despite these investment grade credit ratings at this time, we may experience downgrades in our credit ratings, including but not limited to for reasons in connection with the substantial amount of debt we expect to incur or assume in connection with the Merger. Any such downgrades could increase the cost of borrowing under any indebtedness we may incur, jeopardize our ability to incur debt on terms acceptable to us, reduce market capacity for our commercial paper, or require the posting of additional collateral under our derivative contracts. Additionally, increased borrowing costs, including those arising from a credit rating downgrade, can potentially reduce the competitiveness of our financing business. There can be no assurance that we will be able to maintain our credit ratings, and any additional actual or anticipated changes or downgrades in our credit ratings, including any announcement that our ratings are under review for a downgrade, may have a negative impact on our liquidity, capital position, and access to capital markets.

Table of Contents

In addition, volatility and disruption in the financial sector and capital markets and other events negatively affecting macroeconomic conditions or contributing to the instability or volatility thereof, such as rising interest rates, have from time to time in the past impacted, and may in the future impact, our liquidity, capital position, and access to capital markets. Our total liquidity depends in part on the availability of funds under the revolving credit facility and our other financing agreements. The failure of any lender's ability to fund future draws on our revolving credit facility or our other financing arrangements could reduce the amount of cash we have available for operations and additional capital for future needs. The future effects of such events are unknown and difficult to predict at this time, and could adversely affect us, our customers, financial institutions, transactional counterparties, or others with which we do business, which may in turn have adverse impacts on our current and/or projected business operations, financial condition, and our results of operations.

Further, our obligation to consummate the Merger is not subject to a financing condition, and as such, may be subject to events beyond our control, such as the timing of receipt of regulatory approvals. This may require us to raise debt in market conditions or on terms that are less favorable than anticipated, with less flexibility to address funding needs through an alternative mechanism.

Our debt obligations may adversely affect our business and our ability to meet our obligations and pay dividends.

In addition to our current total carrying debt, we may also incur additional indebtedness in the future, including a substantial amount in order to consummate the Merger. This collective amount of debt could have important adverse consequences to us and our investors, including requiring a substantial portion of our cash flow from operations to make principal and interest payments; making it more difficult to satisfy other obligations; increasing the risk of a future credit ratings downgrade of our debt, which could increase future debt costs and limit the future availability of debt financing; increasing our vulnerability to general adverse economic and industry conditions; reducing the cash flows available to fund capital expenditures and other corporate purposes and to grow our business; limiting our flexibility in planning for, or reacting to, changes in our business and industry; and limiting our ability to borrow additional funds as needed or take advantage of business opportunities as they arise, pay cash dividends or repurchase our common stock.

Recent quantitative tightening by the U.S. Federal Reserve, along with other central banks around the world, have affected, and may continue to affect, our short-term ability to incur debt at reasonable prices, or our desire to incur debt at all. To the extent that we incur additional indebtedness, the risks described above could increase, including requiring additional expected cash flows from operations to service our debt. In addition, our actual cash requirements to operate our business in the future may be greater than expected. Our cash flow from operations may not be sufficient to service our outstanding debt or to repay our outstanding debt as it becomes due, and we may not be able to borrow money, sell assets, or otherwise raise funds on acceptable terms, or at all, to service or refinance our debt.

Our business is subject to various federal, state, local and foreign laws and regulations that could result in costs or other sanctions that adversely affect our business and results of operations.

We are subject to various federal, state, local, and foreign laws and regulations. Laws and regulations may change in ways that will require us to modify our business model and objectives or affect our returns on investments by restricting existing activities and products, subjecting them to escalating costs or prohibiting them outright. For example, as a result of laws and regulations concerning the environment, we face increasing complexity related to product design, safety and compliance; the use of regulated, hazardous, and scarce materials; the management, movement and disposal of hazardous substances and waste; the associated energy consumption and efficiency related to operations and the use of products, services, and solutions; the discharge of pollutants into the air and water; the transportation and shipping of products and other materials; supply chain due diligence, and climate change, emissions and sustainability-related regulations and reporting requirements; the use of AI capabilities in our offerings; and the reuse, recycling and/or disposal of products and their components at end-of-use or useful life and associated operational or financial responsibility, as we adjust to new and future requirements relating to our transition to a more circular economy. A significant portion of our hardware revenues come from international sales. Any changes to current environmental legal requirements, such as the EU's Restriction of Hazardous Substances Directive, the EU's Waste Electrical and Electronic Equipment Directive, China's Administrative Measure on the Control of Pollution Caused by Electronic Information Products, the EU's Ecodesign Directive and product-specific implementing measures (including Lot 9 on servers and online data storage products), the evolving EU and US right to repair legal landscape, and India's regulation on e-waste collection and recycling, among others, may increase our cost of doing business internationally and impact our hardware revenues from the EU, U.S., China, India and/or other countries proposing or adopting similar environmental legal requirements. In addition, other ESG-related laws, regulations, treaties, and similar initiatives and programs are being proposed, adopted, and implemented throughout the world (including, but not limited to the EU Corporate Sustainability Reporting Directive, the EU Taxonomy, and the proposed EU Corporate Sustainability Due Diligence Directive). If we were to violate or

Table of Contents

become liable under environmental or certain ESG-related laws or if our products become non-compliant with such laws or market access requirements, it could result in loss of market access or limit offerings in those markets or our customers may refuse to purchase our products, and we could incur costs or face other sanctions, such as restrictions on our products entering certain jurisdictions, fines, and/or civil or criminal sanctions. Environmental regulations may also impact the availability and cost of energy or emissions related to energy consumption which may increase our cost of manufacturing and/or the cost of powering and cooling owned IT infrastructures.

In addition, our business is subject to an ever-growing number of laws addressing privacy and information security. In particular, we face an increasingly complex regulatory environment as we adjust to new and future requirements relating to the security of our offerings. The increase in aaS offerings may also be impacted by data localization and international data transfer requirements under various privacy laws, including those arising from the Schrems II ruling in Europe. If we were to violate or become liable under laws or regulations associated with privacy or security, we could incur substantial costs or be exposed to potential regulatory fines, civil or criminal sanctions, third-party claims, and reputational damage. We have received inquiries, and may be subject to demands, claims, lawsuits, regulatory investigations, and additional inquiries (including those from U.S. or foreign governmental authorities), relating to cybersecurity and data incidents that we have experienced or may in the future experience.

Jurisdictions in which we have significant operations and assets, such as the U.S., China, India, and the E.U., each have exercised and continue to exercise significant influence over many aspects of their domestic economies including, but not limited to fair competition, tax practices, anti-corruption, anti-trust, price controls and international trade, which have had and may continue to have an adverse effect on our business operations and financial condition.

Item 2. Unregistered Sales of Equity Securities and Use of Proceeds.

Recent Sales of Unregistered Securities

There were no unregistered sales of equity securities during the period covered by this report.

Issuer Purchases of Equity Securities

PeriodTotal Number of Shares Purchased and SettledAverage Price Paid per ShareTotal Number of Shares Purchased and Settled as Part of Publicly Announced Plans or ProgramsApproximate Dollar Value of Shares that May Yet Be Purchased under the Plans or Programs
In thousands, except per share amounts
Month 1 (November 2023)179$15.32179$961,779
Month 2 (December 2023)———961,779
Month 3 (January 2024)———$961,779
Total179$15.32179

As of January 31, 2024, the Company had a remaining authorization of approximately $1.0 billion for future share repurchases.

Table of Contents

Previous: Item 4. Controls and Procedures. · Next: Item 5. Other Information