Item 1A. Risk Factors

We have described under the heading “Risk Factors” in Part I, Item 1A of our Annual Report on Form 10-K for the year ended July 1, 2022 a number of risks and uncertainties that could cause our actual results of operations and financial condition to vary materially from past, or from anticipated future, results of operations and financial condition. Except as discussed below, there have been no material changes from these risk factors previously described in our Annual Report on Form 10-K for the year ended July 1, 2022. These risks and uncertainties are not the only risks facing us. Additional risks and uncertainties not presently known to us or that we currently deem immaterial may also adversely affect our business, financial condition, results of operations or the market price of our common stock.

The compromise, damage or interruption of our technology infrastructure, systems or products by cyber incidents, data security breaches, other security problems, design defects or system failures could have a material negative impact on our business.

We experience cyber incidents of varying degrees on our technology infrastructure and systems and, as a result, unauthorized parties have obtained in the past, and may obtain in the future, access to our computer systems and networks, including cloud-based platforms. As disclosed in Part I, Item 2, Management’s Discussion and Analysis of Financial Condition and Results of Operations, an unauthorized third party gained access to a number of our systems in March 2023, which caused disruption to parts of our business operations and resulted in various investigation, recovery, and remediation expenses. In addition, the technology infrastructure and systems of some of our suppliers, vendors, service providers, cloud solution providers and partners have in the past experienced, and may in the future experience, such incidents. Cyber incidents can be caused by ransomware, computer denial-of-service attacks, worms, and other malicious software programs or other attacks, including the covert introduction of malware to computers and networks, and the use of techniques or processes that change frequently, may be disguised or difficult to detect, or are designed to remain dormant until a triggering event, and may continue undetected for an extended period of time. Cyber incidents have in the past resulted from, and may in the future result from, social engineering or impersonation of authorized users, and may also result from efforts to discover and exploit any design flaws, bugs, security vulnerabilities or security weaknesses, intentional or unintentional acts by employees or other insiders with access privileges, intentional acts of vandalism or fraud by third parties and sabotage. In some instances, efforts to correct vulnerabilities or prevent incidents have in the past and may in the future reduce the functionality or performance of our computer systems and networks, which could negatively impact our business. We believe malicious cyber acts are increasing in number and that cyber threat actors are increasingly organized and well-financed or supported by state actors, and are developing increasingly sophisticated systems and means to not only infiltrate systems, but also to evade detection or to obscure their activities. Geopolitical tensions or conflicts may create heightened risk of cyber incidents.

Our products are also targets for malicious cyber acts, including those products utilized in cloud-based environments as well as our cloud service offerings. Our cloud services have in the past and may in the future be taken offline as a result of or in order to prevent or mitigate cyber incidents. While some of our products contain encryption or security algorithms to protect third-party content or user-generated data stored on our products, these products could still be hacked or the encryption schemes could be compromised, breached, or circumvented by motivated and sophisticated attackers. Further, our products contain sophisticated hardware and operating system software and applications that may contain security problems, security vulnerabilities, or defects in design or manufacture, including “bugs” and other problems that could interfere with the intended operation of our products. To the extent our products include design defects, suffer system failure or are hacked, or if the encryption schemes are compromised or breached, this could harm our business by requiring us to employ additional resources to fix the errors or defects, exposing us to litigation and indemnification claims and hurting our reputation.

As discussed in Part I, Item 2, Management’s Discussion and Analysis of Financial Condition and Results of Operations with respect to the March 2023 cyber incident, if efforts to breach our infrastructure, systems or products are successful or we are unable to protect against these risks, we could suffer interruptions, delays, or cessation of operations of our systems, and loss or misuse of proprietary or confidential information, IP, or sensitive or personal information. Compromises of our infrastructure, systems or products could also cause our customers and other affected third parties to suffer loss or misuse of proprietary or confidential information, IP, or sensitive or personal information, and could harm our relationships with customers and other third parties and subject us to liability. As a result of actual or perceived breaches, we have in the past experienced and may in the future experience additional costs, notification requirements, civil and administrative fines and penalties, indemnification claims, litigation, or damage to our brand and reputation. All of these consequences could harm our reputation and our business and materially and negatively impact our operating results and financial condition.