Petiq (PETQ) Risk Analysis

From time to time, we are subject to allegations, and may be party to legal claims and regulatory proceedings, relating to our business operations. Such allegations, claims and proceedings may be brought by third parties, including our customers, employees, governmental or regulatory bodies or competitors. Defending against such claims and proceedings, regardless of their merits or outcomes, is costly and time consuming and may divert management's attention and personnel resources from our normal business operations, and the outcome of many of these claims and proceedings cannot be predicted. If any of these claims or proceedings were to be determined adversely to us, a judgment, a fine or a settlement involving a payment of a material sum of money were to occur, or injunctive relief were issued against us, our reputation could be affected and our business, financial condition and results of operations could be materially adversely affected.

In connection with the ownership and operations of our business, we are subject to laws and regulations relating to the protection of the environment and health and safety matters, including those governing the management and disposal of wastes and the cleanup of contaminated sites. We could incur costs, including fines and other sanctions, cleanup costs, and third-party claims, as a result of violations of or liabilities under environmental laws and regulations. Although we are not aware of any of our sites at which we currently have material remedial obligations, the imposition of remedial obligations as a result of the discovery of contaminants in the future could result in additional costs. Continuing political and social attention to the issue of climate change has resulted in both existing and pending international agreements and national, regional, or local legislation and regulatory measures to limit greenhouse gas emissions, such as cap and trade regimes, carbon taxes, restrictive permitting, increased fuel efficiency standards, and incentives or mandates for renewable energy. Such measures could subject us and our vendors to additional costs and restrictions and require significant operating and capital expenditures, including with respect to waste and energy reduction, compliance costs, and workforce initiatives, which could adversely impact our business, financial condition, results of operations and cash flows.

The pet medication, snack, food and health and wellness industry is highly competitive. We compete on the basis of product quality, product availability, palatability, loyalty and trust, product variety and ingredients, product packaging and design, shelf space, reputation and brand, price point and promotional efforts. We compete directly and indirectly with both manufacturers and distributors of pet medication and health and wellness products and online distributors, as well as with veterinarians. We face competition from companies that distribute various pet medications to traditional retailers and pet health and wellness products companies such as Elanco (formerly Bayer AG), Hartz (Unicharm Corp.), Mars, Inc. ("Mars"), Manna Pro, Nestlé S.A., Spectrum Holdings, Promika LLC, Tevra Brands, and The J.M. Smucker Company, most of which are larger than we are and have greater financial resources. Similarly, we face intense competition from manufacturers who sell pet medications and pet health and wellness products to e-commerce and other retailers and to veterinarians, who compete directly with our retailers to offer consumers pet flea and tick and other pet health and wellness products. Our retail customers compete with veterinarians for the sale of pet Rx and OTC pet medications and other health and wellness products. Many pet owners may prefer the convenience of purchasing their pet medications or other health products during a veterinarian visit. In order to effectively compete with veterinarians, we and retail partners must continue to price competitively and to educate pet owners about the product availability, service and savings offered by purchasing pet medications and other health products in their retail stores or from their websites. Within our Services segment, we compete directly with veterinarians. Our primary competitors for our veterinary clinics in most markets are individual practitioners or small, regional multi-clinic practices. In addition, some national companies such as Banfield Pet Hospitals, VCA Animal Hospitals, or Petco are developing or have developed networks of veterinary clinics or hospitals in markets in which we currently operate. These competitors may be able to identify and adapt to changes in consumer preferences more quickly than us due to their resources and scale. They may also be more successful in marketing and selling their products, or services, better able to increase prices to reflect cost pressures and better able to increase their promotional activity, which may impact us and the entire pet health and wellness industry. If these or other competitive pressures cause our products to lose market share or experience margin erosion, our business, financial condition and results of operations would be materially adversely affected.

We must accurately forecast demand for all of our products in order to ensure that we have enough products available to meet the needs of our retail customers. Our forecasts are based on multiple assumptions that may cause our estimates to be inaccurate and affect our ability to obtain adequate manufacturing capacity (whether our own manufacturing capacity or contract manufacturing capacity) in order to meet the demand for our proprietary value-branded products, which could prevent us from meeting increased retail customer or consumer demand and harm our brand, our sub-brands and our business. If we do not accurately align our manufacturing capabilities with demand, our business, financial condition and results of operations may be materially adversely affected. If for any reason we were to change any one of our contract manufacturers, we could face difficulties that might adversely affect our ability to maintain an adequate supply of our proprietary value-branded products, and we would incur costs and expend resources in the course of making the change. Moreover, we might not be able to obtain terms as favorable as those received from our current contract manufacturers, which in turn would increase our costs. In addition, we must continuously monitor our inventory and product mix against forecasted demand. If we underestimate demand, we risk having inadequate supplies. We also face the risk of having too much inventory on hand that may reach its expiration date and become unsalable, and we may be forced to rely on markdowns or promotional sales to dispose of excess or slow-moving inventory. If we are unable to manage our supply chain effectively, our operating costs could increase and our profit margins could decrease.

The materials used to manufacture our products may be subject to availability constraints and price volatility caused by changes in demand, weather conditions, supply conditions, government regulations, economic climate, disease outbreaks and other factors. In addition, labor costs may be subject to volatility caused by the supply of labor, governmental regulations, economic climate and other factors. Increases in the demand for, availability or the price of, materials used to manufacture our products and increases in labor costs could increase the costs to manufacture our products, result in product delivery delays or shortages, and impact our ability to launch new products on a timely basis or at all. We may not be able to pass all or a material portion of any higher material or labor costs on to our customers, which could materially adversely affect our operating results and financial condition. Certain third-party suppliers are the sole or exclusive source of certain materials and services necessary for production of our products. We may be unable to meet demand for certain of our products if any of our third-party suppliers cease or interrupt operations, fail to renew contracts with us or otherwise fail to meet their obligations to us.

In the ordinary course of our business, we and the third parties upon which we rely process sensitive data, and, as a result, we and the third parties upon which we rely face a variety of evolving threats that could cause security incidents. Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive data and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer "hackers," threat actors, "hacktivists," organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our products and services. We and the third parties upon which we rely are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, attacks enhanced or facilitated by AI, telecommunications failures, earthquakes, fires, floods, and other similar threats. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Remote work has become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers, and devices outside our premises or network, including working at home, while in transit and in public locations. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities' systems and technologies. We may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program. We rely on our information technology systems to effectively manage our sales and marketing, accounting, financial and legal and compliance functions, engineering and product development tasks, research and development data, communications, supply chain, order entry and fulfillment and other business processes. We also rely on third parties and virtualized infrastructure to operate and support our information technology systems. Our ability to monitor these third parties' information security practices is limited, and these third parties may not have adequate information security measures in place. If our third-party service providers experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties' infrastructure in our supply chain or our third-party partners' supply chains have not been compromised. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we may experience delays in deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive data or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our services. We may expend significant resources or modify our business activities to try to protect against security incidents. Additionally, certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive data. Applicable data privacy and security obligations may require us to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security incidents. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent or cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive data about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, sensitive data of the Company or our customers could be leaked, disclosed, or revealed as a result of or in connection with our employees', personnel's, or vendors' use of generative AI technologies.

Our results of operations may be affected by unfavorable changes in the domestic and global economy on us or our customers and potential customers. The keeping of pets and the purchase of pet-related products and services may constitute discretionary spending for some consumers and any material decline in the amount of consumer discretionary spending may reduce overall levels of pet ownership or spending on pets. Unfavorable economic conditions, including conditions resulting from an economic recession in the United States or other major markets, financial and credit market fluctuations, high levels of inflation and/or interest rates, international trade relations, political turmoil, natural catastrophes, outbreaks of contagious diseases, lower corporate earnings, reduction in business confidence and activity, global geopolitical conflicts, and terrorist attacks, could cause a decrease in consumer sentiment, adversely impact our retail customers and suppliers and our community clinics and wellness centers, and negatively affect the growth of our business and our results of operations. Our competitors, many of which are larger and have greater financial resources than we do, may respond to challenging market conditions by lowering prices in an attempt to attract our customers. We cannot predict the timing, strength, or duration of any economic slowdown, instability, or recovery, generally or how any such event may impact our business.

Pandemics or disease outbreaks, such as the COVID-19 pandemic, have impacted and may continue to impact our business through adversely affected workforces, economies and financial markets globally, leading to a reduction or inability for our customers, partners, suppliers or vendors or other parties with whom we do business to meet their contractual obligations, and for a period of time, a reduction in customer spending on our products and services, and such conditions may reoccur in the future. For example, in our Services segment, we closed or cancelled clinics in 2020 and 2021 in response to COVID-19 and related public health measures and following initial reopening we experienced an elevated level of clinic closures due to labor shortages related to the COVID-19 pandemic.The extent to which pandemics or disease outbreaks in the future will impact our business, financial condition and results of operations in the future will depend on future developments, which are highly uncertain.