Origin Materials (ORGN) Risk Analysis

In the ordinary course of our business, we may process proprietary, confidential, and sensitive data, including personal data, intellectual property, and trade secrets (collectively, sensitive information). Cyberattacks, malicious internet-based activity, and online and offline fraud are prevalent and continue to increase. These threats are becoming increasingly difficult to detect. These threats come from a variety of sources, including traditional computer "hackers," threat actors, personnel (such as through theft or misuse), sophisticated nation-states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our products. We and the third parties upon which we rely may be subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including those perpetrated by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe – particularly for companies like ours that are engaged in manufacturing – and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Additionally, remote work has become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could also expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities' systems and technologies. A security incident or other interruption could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information. A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our products. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program. We rely upon third-party service providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, encryption and authentication technology, employee email, content delivery to customers, manufacturing processing, process orders and invoices, payments, inventory management and other functions. We also depend on these systems to respond to customer inquiries, support our overall internal control process, maintain property, plant and equipment records, and pay amounts due to vendors and other creditors. Our ability to monitor these third parties' information security practices is limited, and these third parties may not have adequate information security measures in place. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties' infrastructure in our supply chain or our third-party partners' supply chains have not been compromised. We may share or receive sensitive information with or from third parties. We may expend significant resources or modify our business activities in an effort to protect against security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures, industry-standard or reasonable security measures to protect our information technology systems and sensitive information. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps to detect and remediate vulnerabilities, but we may not be able to detect and remediate all vulnerabilities because the threats and techniques used to exploit such vulnerabilities change frequently and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited but may not be detected until after a security incident has occurred. These vulnerabilities pose material risks to our business. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems, our efforts may not be successful. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. Applicable data privacy and security obligations may require us to notify relevant stakeholders of security incidents. Such disclosures are costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences. If we (or third parties upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may negatively impact our ability to grow and operate our business. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our data privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position.

The specialty chemicals and caps and closures industries are highly competitive, and we face significant competition from large established producers of fossil-based materials, recycled fossil-based materials, incumbent HDPE and polypropylene caps and closures, and a variety of current and future producers of low-carbon, biodegradable, or renewable resource-based materials. Many of our current competitors have longer operating histories, greater name recognition, larger customer bases and significantly greater financial, sales and marketing, manufacturing, distribution, technical and other resources than us. Recently, certain of our competitors in both the specialty chemicals and caps and closures industries have announced products that may compete directly with our own. Our competitors may be able to adapt more quickly to new or emerging technologies, changes in customer requirements and changes in laws and regulations. In addition, current and potential competitors have established or may establish financial or strategic relationships among themselves or with existing or potential customers or other third parties. Accordingly, new competitors or alliances among competitors could emerge and rapidly acquire significant market share. Our competitors may also improve their relative competitive position by successfully introducing new products or products that can be substituted for our products, improving their manufacturing processes, or expanding their capacity or manufacturing capabilities. Further, if our competitors are able to compete at advantageous cost positions, this could make it increasingly difficult for us to compete in markets for less-differentiated applications. If we are unable to keep pace with our competitors' product and manufacturing process innovations or cost position, it could harm our results of operations, financial condition and cash flows.

We currently have commercial arrangements with a limited number of customers from which we expect to derive a significant portion of near-term revenue. The loss of one or more of our significant customers, a substantial reduction in their orders, their failure to exercise customer options to enter into new offtake agreements or purchase commitments or to purchase product, their unwillingness to extend contractual deadlines if we fail to meet production, product, or specification requirements, their inability to perform under their contracts or a significant deterioration in their financial condition could harm our business, results of operations and financial condition. If we fail to perform under the terms of these agreements, the customers could seek to terminate these agreements and/or pursue damages against us, which could harm our business.

Our results of operations could be adversely affected by general conditions in the global economy and in the global financial markets, including inflation and supply disruption. A domestic or global financial crisis can cause extreme volatility and disruptions in the capital and credit markets. A severe or prolonged economic downturn, which could result from an event like the COVID-19 pandemic or the global sanctions imposed against Russia following its military intervention in Ukraine, or inflation in fuel costs resulting from regional instability due to the military conflict in Israel and Gaza, could result in a variety of risks to our business, including our inability to purchase necessary supplies on acceptable terms, if at all, and our inability to raise additional capital when needed on acceptable terms, if at all. A weak or declining economy could strain our suppliers, possibly resulting in supply disruption, or cause delays in payments for our services by third-party payers or our collaborators. Any of the foregoing could harm our business and we cannot anticipate all of the ways in which the current economic climate and financial market conditions could adversely impact our business.

Our expansion model is global and we expect to need to source feedstock and supplies from suppliers around the world. In particular, our biomass conversion chemical manufacturing process is designed to use local timber and forest residues as our primary raw materials, which must be sourced locally. For the Origin 1 plant, this means we will need to source feedstock, as well as other supplies, from Canadian suppliers or arrange for transport of such feedstock and supplies into Canada. Similarly, we expect to source PET, including recycled PET, from suppliers local to our caps and closures manufacturing lines, or to arrange for transport of PET to the site of those lines. The U.S. federal government or other governmental bodies may propose changes to international trade agreements, tariffs, taxes and other government rules and regulations, and may impose sanctions limiting trade with other countries. If foreign currency exchange rates fluctuate or any restrictions or significant increases in costs or tariffs or sanctions are imposed related to feedstock and supplies sourced to our plants as a result of amendments to existing trade agreements or otherwise, this may increase our supply and shipping costs, resulting in potential decreased margins. We may expand our operations to countries with unstable governments that are subject to instability, corruption, changes in rules and regulations and other potential uncertainties that could harm our business, financial condition, results of operations and prospects. The extent to which our margins could decrease in response to any future tariffs is uncertain. We continue to evaluate the impact of trade agreements, as well as foreign currency exchange rate fluctuations and other recent changes in foreign trade policy on our supply chain, costs, sales and profitability. In addition, pandemics such as COVID-19 may result in increased travel restrictions and the extended shutdown of certain businesses throughout the world, and prolonged closures in Canada, Europe, Asia and elsewhere may disrupt the operations of certain suppliers of feedstock and other supplies, which could, in turn, negatively impact our business, financial condition, results of operations and prospects.