or mobile
communication channels, including social media. Our programs may
not be or remain effective or could require increased expenditures,
which could have a significant adverse effect on our revenue and
results of operations.
Risks Related to Regulatory, Legal and Cybersecurity
Changes
in government regulations could have an adverse effect on our
financial condition and results of operations.
We are
subject to numerous federal, state and local laws and regulations
that govern numerous aspects of our business. In recent years, a
number of new laws and regulations have been adopted, there has
been expanded enforcement of certain existing laws and regulations
by federal, state and local agencies, and the interpretation of
certain laws and regulations has become increasingly complex. These
laws and regulations, and related interpretations and enforcement
activity, may change as a result of a variety of factors, including
political, economic or social events. Changes in, expanded
enforcement of, or adoption of new federal, state or local laws and
regulations governing areas such as minimum wage or living wage
requirements, workplace-regulation and other labor or employment
benefits laws, supply chain, taxes, including changes to corporate
tax rates, privacy and information security, or environmental
regulation such as carbon emission standards and environmental,
social and governance (ESG) programs, transparency and reporting,
could increase our costs of doing business or impact our sales,
operations or profitability.
In addition
to increased regulatory compliance requirements, changes in laws
could make ordinary conduct of our business more expensive or
require us to change the way we do business. For example, changes
in federal and state minimum wage laws could raise the wage
requirements for certain of our employees, which would likely cause
us to reexamine our entire wage structure for stores. Other laws
related to employee benefits and treatment of employees, including
laws related to limitations on employee hours, work scheduling,
supervisory status, leaves of absence, mandated health benefits or
overtime pay, could also negatively impact us, such as by
increasing compensation and benefits costs for overtime and medical
expenses.
Any
failure of our management information systems or the inability of
third parties to continue to upgrade and maintain our systems could
have an adverse effect on our business, financial condition and
results of operations.
We depend on
the accuracy, reliability and proper functioning of our management
information systems, including the systems used to track our sales
and facilitate inventory management. We also rely on our management
information systems for point-of-sale, merchandise planning and
allocation, replenishment and markdowns, as well as other key
business functions. These functions enhance our ability to process
and optimize sales while limiting markdowns and reducing inventory
risk through properly marking down slow-selling styles, reordering
existing styles and effectively distributing new inventory to our
stores. We do not currently have redundant systems for all
functions performed by our management information systems. Any
interruption in these systems, such as the interruption we
experienced in January 2023 (described below), could impair our
ability to manage our inventory effectively, which could have an
adverse effect on our business.
Our
computer systems and the
third-party systems we rely on are also subject to damage or
interruption from a number of causes, including power outages;
computer and telecommunications failures; computer viruses,
malware, ransomware, phishing or distributed denial-of-service
attacks; security breaches; cyber-attacks; catastrophic events such
as fires, floods, earthquakes, tornadoes, hurricanes; acts of war
or terrorism and design or usage errors by our employees or
contractors. Compromises, interruptions or shutdowns of our
systems, including those managed by third parties, whether
intentional or inadvertent, could lead to delays in our
business operations and, if
significant or extreme, affect our results of
operations.
For example,
as previously disclosed in our Form 8-K filed with the SEC on
February 23, 2023, we experienced a disruption of our back office
and distribution center IT systems in January 2023 due to what is
known as Hive ransomware. The incident did not result in a material
disruption to our business or operations, material costs net of
insurance coverage or other adverse material consequences; however,
there can be no assurance of a similar result in the
future.
We depend on
third-party suppliers to maintain and periodically upgrade our
management information systems. Due to ever-evolving cybersecurity
threats, we and our third-party service providers and vendors must
continually evaluate and adapt our respective systems and processes
and overall security environment. If any of these suppliers is
unable to continue to maintain and upgrade these software programs
and/or if we are unable to convert to alternate systems in an
efficient and timely manner, it could result in an adverse effect
on our business.
Failure
to maintain the security of employee, customer or vendor
information could expose us to litigation, government enforcement
actions and materially impact our reputation and business
operations.
Over the
normal course of business operations, we obtain certain private or
confidential information of our employees, customers, and vendors.
This information may be stored within our internal information
technology environments or hosted by third party service providers.
We have implemented security procedures and technology that are
intended to safeguard this information from cybersecurity attacks
and data breaches. These safeguards include, but are not limited
to, routine penetration