Lowe's (LOW) Risk Factors

We rely on cash flows from operations, as well as continued access to capital markets on both a short-term and long-term basis, as needed, to fund our operations, make strategic investments to support long-term growth, return excess cash to shareholders in the form of dividends and share repurchases, and repay debt maturities as they become due. Our access to capital markets depends on our strong credit ratings, the overall condition of such capital markets and our operating performance. If rating agencies lower or place our credit ratings on a credit watch, or if we experience a deterioration of certain financial ratios, it could adversely affect our ability to access the public debt markets and our cost of funds. Each of the credit rating agencies reviews its ratings periodically, and there is no guarantee that our current credit ratings will remain the same. Disruption in the financial markets, including as a result of rising interest rates, bank failures or other macroeconomic conditions, or an erosion of our credit strength or declines on our credit rating could impact negatively our ability to meet capital requirements or fund working capital needs.

We continue to transform and expand our supply chain network and existing omnichannel capabilities to meet changing customer needs. These investments are designed to promote greater network capacity and better flow management and optimization while leveraging a market delivery model. Failure to choose the right investments and implement them in the right manner and at the right pace could disrupt our operations. If we are unable to effectively manage the volume, timing, nature, location, and cost of these investments, projects, and changes, our business operations and financial results could be materially and adversely affected. The cost and potential problems, defects of design, and interruptions associated with the implementation of these initiatives, including those associated with implementing new technologies, restructuring support systems and processes, securing appropriate facility locations, addressing impacts on inventory levels, and managing third-party service providers, could disrupt or reduce the efficiency of our operations and impact our profitability. Our investments to enhance and expand our supply chain might not provide the anticipated benefits, or might take longer than expected to complete or realize anticipated benefits, or might fail altogether, each of which could adversely impact our competitive position and our financial condition, results of operations, or cash flows.

Cyber-attacks and tactics designed to gain access to and exploit sensitive information by breaching mission critical systems of large organizations are constantly evolving, and high profile security breaches leading to unauthorized release of sensitive customer information have occurred in recent years with increasing frequency at a number of major U.S. companies, including several large retailers, despite widespread recognition of the cyber-attack threat and improved data protection methods. As with many other retailers, we collect, process, transmit, store, and delete certain personal information about our customers, associates, and vendors, as well as confidential, sensitive, proprietary and business, personal and payment card information. Additionally, we use third-party service providers for certain services, such as authentication, content delivery, back-office support, fraud prevention, order and service fulfillment, supply chain management, customer service, workforce management, and other functions, and we provide such third-party service providers with personal and other confidential information necessary for the services concerned. In the normal course of business, we and our third-party service providers have in the past and will likely continue to experience cybersecurity threats and incidents, and certain of our third-party service providers have been subject to disruption due to ransomware and other cyber-attacks. Although, we do not believe such cybersecurity threats or incidents have had a material impact on us to date, there is no guarantee that a future cybersecurity threat or incident will be detected and remediated to not have a material adverse impact on our business strategy, reputation, results of operations, or financial condition. It can be difficult to preempt or detect ever-evolving forms of cyber-attacks, and we and our third-party service providers may not be able to adequately anticipate or prevent a future breach in our or their systems that results in the unauthorized access to, destruction, misuse, or release of personal information or other sensitive data. The increased levels of remote access to our information systems and the continued use of remote work infrastructure has further increased the possible attack surfaces, and we are exposed to increased risk to the security of our information systems or the information systems of third-party vendors and the confidentiality, integrity, and availability of our data. A ransomware attack could prevent us or our third-party service providers from accessing data or systems that support Lowe's operations. Our information security or our service providers' information security may also be compromised because of human errors or acts, including by associates, or system errors. Our systems and our service providers' systems are additionally vulnerable to a number of other causes, such as critical infrastructure outages, computer viruses, technology system failures, catastrophic events or cyber-attacks, including the use of malicious codes, worms, phishing, and ransomware. In the event that our systems are breached or damaged for any reason, we may also suffer loss or unavailability of data and interruptions to our business operations while such breach or damage is being remedied. Should these events occur, the unauthorized disclosure, loss, or unavailability of data and disruption to our business may have a material adverse effect on our reputation, drive existing and potential customers away and lead to financial losses from remedial actions, or potential liability, including possible litigation and punitive damages. A security breach resulting in the unauthorized release of data from our information systems or our third-party service providers' information systems would also materially increase the costs we already incur to protect against such risks and require dedication of substantial resources to manage the aftermath of such a breach. We maintain cybersecurity insurance coverage although such insurance may be insufficient to compensate us for losses that may occur or may not cover certain cyber incidents. Additionally, the rapid evolution of artificial intelligence and machine learning technologies and the implementation of pilot programs integrating generative artificial intelligence into our internal and customer-facing systems may intensify our cybersecurity risks and create new risks to our business, operations, and financial condition. Data privacy and cybersecurity laws are constantly changing, and the implementation of these laws has become more complex. In order to maintain our compliance with such laws as they come to fruition, we may sustain increased costs and change our business policies and processes in order to adapt to new requirements that are or become applicable to us. As the regulatory environment relating to retailers' and other companies' obligation to protect personal information becomes stricter, a material failure on our part to comply with applicable regulations could subject us to fines, other regulatory sanctions, or government investigation, and potentially to lawsuits brought by private individuals, regulators or states' attorney general. Such violation or perceived violation of privacy, including improper collection, use of sharing of personal information, or failure to sufficiently disclose privacy practice, can adversely affect the trust that customers, associates, and business partners have in us related to their personal information. See Item 1C of this Form 10-K, "Cybersecurity," for more information on our cybersecurity risk management and governance.

We operate in a highly competitive market for home improvement products and services and have numerous large and small, direct and indirect competitors. The principal competitive factors in our industry include location of stores, product assortment, product pricing, in-stock levels, customer service, and the evolution of technology and customer expectations. We face growing competition from online and omnichannel retailers who have a similar product or service offering. Customers are increasingly able to quickly comparison shop and determine real-time product availability and price using digital tools. We will be at a competitive disadvantage if, over time, our competitors are more effective than us in their utilization and integration of rapidly evolving technologies, including artificial intelligence and machine learning technologies. Further, online and omnichannel retailers continue to focus on delivery services, as customers are increasingly seeking faster, guaranteed delivery times, including same-day and next-day fulfillment, low-price or free shipping, and convenient pick-up options, and we must make investments to keep up with our customers' evolving shopping preferences. Our ability to be competitive on delivery times, delivery costs, and delivery options depends on many factors, including successful implementation and the continued maintenance of our initiatives related to supply chain transformation, including our market-based delivery model, and our relationships with third parties providing delivery services. Our failure to respond effectively to competitive pressures and changes in the markets for home improvement products and services could affect our financial performance. Moreover, changes in the promotional pricing and other practices of our competitors, including the effects of competitor liquidation activities, may impact our results.

Our public image and reputation are critical to ensuring that our customers shop at Lowe's, our vendors want to do business with Lowe's, and our associates want to work for Lowe's. We must continue to manage, preserve, and grow Lowe's public image and reputation. Lowe's actual or perceived position or lack of position on social, environmental, political, public policy, or other sensitive issues, and any perceived lack of transparency about those matters, could harm our reputation. In addition, failure to meet our stated environmental and social goals, and consumer and shareholder concerns about our environmental and social practices are potential sources of reputational risk. Vendors and others with whom we do business may affect our reputation. Any negative incident can erode trust and confidence quickly, and adverse publicity about us could damage our reputation and brand image, undermine our customers' confidence, reduce demand for our products and services, affect our relationships with current and future vendors, impact our results of operations, affect our ability to recruit, retain, and engage our associates, and attract regulatory scrutiny. The significant expansion in the use of social media over recent years has compounded the potential scope of the negative publicity that could be generated by such negative incidents. Additionally, our proprietary rights in our trademarks, trade names, service marks, domain names, copyrights, patents, trade secrets, and other intellectual property rights are valuable assets of our business. We may not be able to prevent or even discover every instance of unauthorized third-party uses of our intellectual property or dilution of our brand names, such as when a third party uses trademarks that are identical or similar to our own. If we are unable to successfully protect our intellectual property rights, our business could be adversely affected.

We are, and in the future will become, involved in lawsuits, including consumer, commercial, employment, tort and other litigation, regulatory inquiries, and governmental and other legal proceedings arising out of the ordinary course of our business. Some of these proceedings raise difficult and complicated factual and legal issues and are subject to uncertainties and complexities. The timing of the final resolutions to lawsuits, regulatory inquiries and governmental and other legal proceedings is typically uncertain. Additionally, the possible outcomes of, or resolutions to, these proceedings could include adverse judgments or settlements, either of which could require substantial payments. Furthermore, defending against these proceedings may require a diversion of management's attention and resources. None of the legal proceedings in which we are currently involved, individually or collectively, are considered material.

We may be affected by higher rates of federal, state, or local tax imposed as a result of political developments or economic conditions, which could affect our effective tax rate. Our effective tax rate and future tax liability could be adversely affected by regulatory and legal changes, the results of tax audits and examinations, disallowed tax strategies, and changes in accounting principles and interpretations relating to tax matters, all of which could negatively impact our business. Changes in tax laws and regulations that impact our customers and counterparties or the economy generally may also impact our financial condition and results of operations.