Ormat Techno (ORA) Risk Analysis

We are involved in the ordinary course of business and otherwise in a number of lawsuits involving, among other matters, employment, commercial, and environmental issues, and other claims for injuries and damages. We are also involved in the ordinary course of business in regulatory investigations and other administrative proceedings, and we are exposed to the risk that we become the subject of additional regulatory investigations or administrative proceedings. We evaluate litigation claims and legal proceedings to assess the likelihood of unfavorable outcomes and to estimate, if possible, the amount of potential losses. Based on these evaluations and estimates, when required by applicable accounting rules, we establish reserves and disclose the relevant litigation claims or legal proceedings, as appropriate. These evaluations and estimates are based on the information available to management at the time and involve a significant amount of judgment. Actual outcomes or losses may differ materially from current evaluations and estimates. The settlement or resolution of such claims or proceedings may have a material adverse effect on us. We use appropriate means to contest or otherwise respond to litigation and/or regulatory proceedings threatened or filed against us, but the litigation and/or regulatory enforcement environments poses a significant business risk.

Risks attributable to fluctuations in currency exchange rates can arise when any of our foreign subsidiaries incur operating or other expenses in one type of currency but receive revenues in another. In such cases, an adverse change in exchange rates can reduce such subsidiary's ability to meet its debt service obligations, reduce the amount of cash and income we receive from such foreign subsidiary or increase such subsidiary's overall expenses. In addition, the imposition by foreign governments of restrictions on the transfer of foreign currency abroad, restrictions on the conversion of local currency into foreign currency, or the local currency has strengthened significantly against the U.S. dollar, would have an adverse effect on the operations of our foreign power plants and foreign manufacturing operations, and may limit or diminish the amount of cash and income that we receive from such foreign power plants and operations.

We have made, and may continue to make, investments in EGS, which is an emerging geothermal technology that differs materially from conventional geothermal development. EGS projects seek to create or enhance geothermal reservoirs through advanced drilling, stimulation, and reservoir management techniques. While EGS has the potential to expand the geographic and resource base for geothermal energy, the technology has not yet been widely deployed at commercial scale. EGS projects involve substantial technical, operational, and geological uncertainties, including risks related to reservoir creation and sustainability, drilling success rates, well productivity, thermal recovery, induced seismicity, permitting, and long-term system performance. There can be no assurance that EGS projects in which we invest will achieve expected technical milestones, operate reliably, or produce energy at commercially viable levels. In addition, EGS projects generally require significant upfront capital investment, extended development timelines, and may be dependent on continued technological advances, third-party expertise, government incentives, or regulatory support. Cost overruns, delays, or changes in regulatory frameworks could adversely affect project economics. Further, because EGS is a relatively nascent technology, there is limited operating history to validate assumptions regarding long-term performance, maintenance requirements, and decommissioning obligations. If our EGS investments fail to progress as anticipated, experience technical or regulatory setbacks, or do not achieve commercial viability, we may be required to impair some or all of our investments, incur additional costs, or forego expected returns. Any such outcomes could have a material adverse effect on our results of operations, financial condition, and cash flows.

Our existing intellectual property rights may not be adequate to protect our business. We occasionally file patent applications which cover our products (mainly power units based on the ORC) and systems (mainly geothermal power plants and industrial waste heat recovery plants for electricity production). However, the patent application process is expensive, time-consuming and complex and we may not be able to prepare, file, prosecute, maintain and enforce all necessary or desirable patent applications at a reasonable cost or in a timely manner. Patents may be invalidated and patents may not be issued on the basis of our patent applications. Additionally, the scope of patent protection can be reinterpreted after issuance. Even if our patent applications do issue as patents, they may not issue in a form that is sufficiently broad to protect our technology, prevent competitors or other third parties from competing with us or otherwise provide us with any competitive advantage. In addition, any patents issued to us or for which we have use rights may be challenged, narrowed, invalidated or circumvented. Third parties may initiate opposition, interference, re-examination, post-grant review, inter partes review, nullification or derivation actions, or similar proceedings challenging the inventorship, validity, enforceability or scope of our patents. An adverse determination in any such proceeding or litigation could reduce the scope of, or invalidate our patent rights, allow third parties to commercialize our technology and compete directly with us, without payment to us, or result in our inability to commercialize our technology without infringing third-party patent rights. Such proceedings also may result in substantial cost and require significant time from our management, even if the eventual outcome is favorable to us. Our competitors or other third parties may also be able to circumvent our patents by developing similar or alternative technologies in a non-infringing manner. Consequently, we do not know whether any of our technology will be protectable or remain protected by valid and enforceable patents. In order to safeguard our unpatented proprietary know-how, trade secrets and technology, we rely on a combination of trade secret protection and non-disclosure provisions in agreements with employees and third parties having access to confidential or proprietary information. These measures may not adequately protect us from disclosure, use, reverse engineering, infringement, misappropriation or other violation of our proprietary information and other intellectual property rights by third parties. Furthermore, non-disclosure provisions can be difficult to enforce and, even if successfully enforced, may not be entirely effective. In addition, we cannot guarantee that we have entered into non-disclosure agreements with all employees and third parties that have or may have had access to our trade secrets and other confidential or proprietary information. Even if we adequately protect our intellectual property rights, litigation may be necessary to enforce these rights, which could result in substantial costs to us and a substantial diversion of management attention. Furthermore, attempts to enforce our intellectual property rights against third parties could also provoke these third parties to assert their own intellectual property or other rights against us, or result in a holding that invalidates or narrows the scope of our rights, in whole or in part. Our success and ability to compete also depends in part on our ability to operate without infringing, misappropriating or otherwise violating the intellectual or proprietary rights of third parties. While we have attempted to ensure that our technology and the operation of our business does not infringe on other parties' patents and other intellectual property or proprietary rights, our competitors or other third parties may assert that certain aspects of our business or technology infringe upon, misappropriate or otherwise violate their intellectual property or proprietary rights. In addition, former employers of our current, former or future employees may assert claims that such employees have improperly disclosed to us the confidential or proprietary information of these former employers. Infringement, misappropriation or other intellectual property violation claims, regardless of merit or ultimate outcome, can be expensive, hard to predict and time-consuming and can divert management's attention from our core business. An assertion of an intellectual property infringement, misappropriation or other violation claim against us may result in adverse judgments, settlements on unfavorable terms or cause us to pay significant money damages, lose significant revenues, be prohibited from using the relevant technology or other intellectual property, or incur significant license, royalty or technology development expenses. Future litigation may also involve non-practicing entities or other intellectual property owners who have no relevant product offerings or revenue and against whom our own intellectual property may therefore provide little or no deterrence or protection.

We rely on information technology systems that allow us to create, store, retain, transmit and otherwise process proprietary and sensitive or confidential information, including our business and financial information, and personal information regarding our employees and third-parties. We also rely on our operational technology systems to manufacture equipment for our energy projects, operate our power plants and provide our services. In addition, we often rely on third-party vendors to host, maintain, modify and update our systems. Our and our third-party vendors' technology systems can be damaged by malicious events such as cyber and physical attacks, computer viruses, malicious and destructive code, phishing attacks, denial of service or information, as well as security breaches, natural disasters, fire, power loss, telecommunications failures, employee misconduct, human error, and third parties such as traditional computer hackers, persons involved with organized crime or foreign state or foreign state-supported actors. Furthermore, our disaster recovery planning may not be sufficient for all situations. Any failure, disruptions to or decrease in the functionality of our or our third-party vendors' operational and information technology networks could impact our ability to maintain effective internal controls over financial reporting, cause harm to the environment, the public or our employees, and significantly disrupt and damage our assets and operations or those of third parties. We and our third-party vendors have been, and may in the future be, subject to breaches and attempts to gain unauthorized access to our information technology systems or sensitive or confidential data, or to disrupt our operations.  To date, none of these breaches or attempts has, individually or in the aggregate, resulted in a security incident with a material effect on our operations or our financial condition, results of operations, liquidity, or cash flows. Despite implementation of security and control measures, we and our third-party vendors have not always been able to, and there can be no assurance that we or our third-party vendors will be able to in the future, anticipate or prevent unauthorized access to our or our third-party vendors' operational technology networks, information technology systems or data, or the disruption of our or our third-party vendors' operations. We may be unable to anticipate techniques used to breach and may not become aware in a timely manner of such a security breach, which could exacerbate any damage we experience. Such events could cause interruptions in the operation of our business, damage our operational technology networks and information technology systems, subject us to significant expenses, remediation costs, litigation, disputes, claims by third parties and regulatory actions or investigations that could result in damages, material fines and penalties, and harm to our reputation, any of which could have a material adverse effect on our financial condition, results of operations, liquidity, and cash flows. We may maintain cyber liability insurance that covers certain damages caused by cyber incidents. However, there is no guarantee that adequate insurance will continue to be available at rates that we believe are reasonable or that the costs of responding to and recovering from a cyber-incident will be covered by insurance or recoverable in rates. In addition, we are subject to various legislation, regulations, directives and guidelines from federal, state, local and foreign agencies, such as FERC, that are intended to strengthen cybersecurity measures required for information and operational technology and critical energy infrastructure and that apply to the collection, use, retention, protection, disclosure, transfer and other processing of personal information. In California, there are obligations on businesses to be transparent with their data privacy practices and vests consumers and employees with rights to access and delete the personal information held by businesses. These cybersecurity, data protection and privacy law regimes continue to evolve and may result in ever-increasing public scrutiny and escalating levels of capital expenditures, regulatory enforcement, sanctions and fines and increased costs for compliance. Any failure to comply with FERC or any of these legal requirements could result in enforcement action against us, including fines, imprisonment of company officials and public censure, any of which could harm our reputation and have a material adverse effect on our financial condition, results of operations, liquidity, and cash flows.

Our businesses often rely on a single customer to purchase all or a significant portion of a facility's output. The financial performance of these facilities depends on the ability of each customer to perform its obligations under a long-term agreement between the parties. A facility's financial results could be materially and adversely affected if any of our customers fail to fulfill its contractual obligations and we are unable to find other customers in the marketplace to purchase at the same level of profitability. We cannot assure that such performance failures by our customers will not occur, or that if they do occur, such failures will not adversely affect the cash flows or profitability of our businesses. Moreover, there can be no assurance that we will be able to enter into replacement agreements on favorable terms or at all. While we have historically been able to collect on substantially all of our receivable balances, we have received late payments and have amounts overdue from certain of our significant customers. In the Electricity segment, we are exposed to the credit and financial condition of KPLC that buys the power generated from our Olkaria III complex in Kenya. In 2025, KPLC accounted for 11.9% of our total revenues. There has been a deterioration in the collection from KPLC that became slower than in the past, and as of December 31, 2025, the amount overdue from KPLC in Kenya was $29.5 million of which $21.1 million was paid in January and February of 2026. In addition, KPLC recently requested more favorable rates on its existing PPAs with it. Any change in KPLC's financial condition or the terms of our agreement with KPLC, may adversely affect us. In Honduras, as of December 31, 2025, the total amount overdue from ENEE was $20.3 million of which $1.0 million was collected in January and February of 2026. In addition, due to the financial situation in Honduras, the Company may experience additional delays in collection. The Company believes it will be able to collect all past due amounts in Honduras. We are also exposed to the credit and financial condition of SCPPA and its municipal utility members that account for 17.8% of our total revenues in 2025, as customers that buy the output from seven of our geothermal power plants. Because our contracts with SCPPA are long-term, we may be adversely affected if the credit quality of any of these customers were to decline or if their respective financial conditions were to deteriorate or if they are otherwise unable to perform their obligations under our long-term contracts. In addition, we generate a significant portion of our revenue from our two largest projects, the McGinness Hills complex in east Nevada and the Olkaria III Complex in Kenya, which together accounted for approximately 23.7% of the total generating capacity of our Electricity segment in 2025. These two facilities accounted for 20.7% of our total revenues for the year ended December 31, 2025. Any disruption to the operation of these facilities would have a disproportionately adverse effect on our revenues and on our profitability. In 2025, we experienced high curtailments in the McGinness Hills complex related mostly to third party grid maintenance that impacted our revenues by approximately $6.3 million.