Maui Land & Pineapple Company (MLP) Risk Factors

Natural disasters, including wildfires, tsunamis, hurricanes, earthquakes and others, could damage our resort and real estate holdings, resulting in substantial repair or replacement costs to the extent not covered by insurance, a reduction in property values, or a loss of revenue, each of which could have a material adverse impact on our business, financial condition and results of operations. Our competitors may be affected differently by such changes in weather conditions or natural disasters depending on the location of their assets or operations. The wildfires in August 2023 devasted the town of Lahaina, Maui and negatively impacted tourism to the area and the local economy. We expect the aftermath of the wildfires to continue to impact commercial activity throughout the island of Maui, and there is uncertainty as to how long it will take Maui to rebuild, return tourism to historic levels, and recover economically. Until such time as commercial activity and tourism return to normal levels, the impact of the wildfires may continue to negatively impact operations.

We have a defined benefit pension plan which was frozen with respect to benefits and the addition of participants in 2011. The funded status and our ability to satisfy the future obligations of the plan is affected by, among other things, changes in interest rates, returns from plan asset investments, and actuarial assumptions including the life expectancies of the plan's participants. If we are unable to adequately fund or meet our future obligations with respect to the plan, our business, financial condition and results of operations may be adversely affected.

We have several trademarks that we have been registered in the United States and in several foreign countries. To the extent that our exclusive use of these trademarks is challenged, we intend to vigorously defend our rights. If we are not successful in defending our rights, our businesses could be adversely impacted.

Information technology, communication networks, and related systems are essential to the operation of our business. We use these systems to manage our tenant, vendor and customer relationships, internal communications, accounting and record-keeping systems, and many other key aspects of our business. Our operations rely on the secure processing, storage, and transmission of confidential and other information in our computer systems and networks, which also depend on the strength of our procedures and the effectiveness of our internal controls. A security incident may occur through physical break-ins, breaches of our secure network by an unauthorized party, software vulnerabilities, malware, computer viruses, attachments to emails, employee theft or misuse, social engineering, or inadequate use of security controls. Outside parties may attempt to fraudulently induce our employees to disclose sensitive information or transfer funds via illegal electronic spamming, phishing, spoofing or other tactics. Additionally, cyber attackers can develop and deploy malware, credential theft or guessing tools, and other malicious software programs to gain access to sensitive data or fraudulently obtain assets we hold. We have implemented security measures to safeguard our systems and data and to manage cyber security risk. We monitor and develop our information technology networks and infrastructure and invest in the development and enhancement of our controls designed to prevent, detect, address, and mitigate the risk of unauthorized access, misuse, computer viruses, and other events that could have a security impact. We conduct periodic security awareness trainings for our employees to educate them on how to identify and alert management regarding phishing emails, spoofed or manipulated electronic communications, and other critical security threats. We have implemented internal controls around our treasury function including enhanced payment authorization procedures, verification requirements for new vendor set-up and vendor information changes and bolstered outgoing payment notification processes and account reconciliation procedures. While, to date, we are not aware of having experienced a significant security incident or cyber-attack, there can be no assurance that our actions, security measures, and controls designed to prevent, detect, or respond to intrusion; to limit access to data; to prevent loss, destruction, alteration, or exfiltration of business information; or to limit the negative impact from such attacks can provide absolute security against a security incident. A principal reason that we cannot provide absolute protection from security incidents is that it may not always be possible to anticipate, detect, or recognize threats to our systems, or to implement effective preventive measures against all security incidents due to, among other things, the frequent change in techniques used in cyber-attacks, which may not be recognized until launched, and the wide variety of sources from which a cyber-attack can originate. We may not be able to immediately address the consequences of a security incident due to a cyber-attack. The extent of a particular cyber-attack and the steps that we may need to take to investigate the attack may not be immediately clear. Therefore, in the event of an attack, it may take a significant amount of time before such an investigation can be completed. During an investigation, we may not necessarily know the extent of the damage incurred or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, which could further increase the costs and consequences of a cyber-attack. Even if we are not targeted directly, cyber-attacks on the U.S. government, financial markets, financial institutions, or other businesses, including our tenants, vendors, software creators, cloud providers, and other third parties with whom we do business, could disrupt our normal business operations and networks. We maintain insurance to protect ourselves against certain losses incurred in the event of a security incident or disruption of our information systems. However, we cannot be certain that the coverage will be adequate to compensate us for all damages that may arise. In addition, we cannot be certain that such insurance coverages will remain available to us in the future on commercially reasonable terms, or at all.

The financial performance of our Land Development and Sales segment is dependent upon our success in obtaining discretionary and ministerial approvals for proposed development projects. Obtaining all the necessary approvals to develop a parcel of land is often difficult, costly and may take several years, or longer, to complete. In some situations, we may be unable to obtain the necessary approvals to proceed with a real estate development or may be required to alter our plans for the development. Delays or failures to obtain these approvals may have a material adverse effect on our financial results.

Various federal, state, and local environmental laws, ordinances and regulations regulate our properties and could make us liable for the costs of removing or cleaning up hazardous or toxic substances on, under, or in property we currently own or operate or that we previously owned or operated. These laws could impose liability without regard to whether we knew of, or were responsible for, the presence of hazardous or toxic substances. The presence of hazardous or toxic substances, or the failure to properly clean up such substances when present, could jeopardize our ability to develop, use, sell or rent our real property or to borrow using our real property as collateral. If we arrange for the disposal or treatment of hazardous or toxic wastes, we could be liable for the costs of removing or cleaning up wastes at the disposal or treatment facility, even if we never owned or operated that facility. Certain laws, ordinances, and regulations, particularly those governing the management or preservation of wetlands, coastal zones and threatened or endangered species, could limit our ability to develop, use, sell or rent our real property.

We intend to develop subdivisions, resort and other properties as suitable opportunities arise, taking into consideration the general economic climate. New project developments have a number of risks, including risks associated with: - construction delays or cost overruns that may increase project costs;- receipt of zoning, subdivision, water availability, occupancy and other required governmental permits and authorizations;- development costs incurred for projects that are not pursued to completion;- earthquakes, tsunamis, hurricanes, floods, fires or other natural disasters that could adversely impact a project;- defects in design or construction that may result in additional costs to remedy or require all or a portion of a property to be closed during the period required to rectify the situation;- ability to raise capital;- impact of governmental fines and assessments such as park fees or affordable housing requirements;- governmental restrictions on the nature or size of a project or timing of completion; and - the potential lack of adequate building/construction capacity for large development projects. If any development project is not completed on time or within budget, this could have a material adverse effect on our financial results.

Our real estate products face significant competition from other luxury resort real estate properties on Maui, and from other residential property in Hawai‘i and the mainland United States. In many cases, our competitors are larger than us and have greater access to capital. If we are unable to compete with these competitors, our financial results could be materially adversely affected.