ONTF ON24 Inc

In June 2021, ON24, Inc. (the “Company”) was subject to a security incident involving ransomware, which impacted certain internal systems and a limited number of customer events. Most Company services continued to be available. Promptly upon detecting the incident, the Company launched an investigation, engaged with law enforcement, and took steps to contain the incident and restore impacted event types. As a result of the Company’s restoration work, all scheduled customer events were operational within 24 hours.

The incident has not resulted in any material impact to the Company, its operations or its ability to provide its services. Likewise, the incident has not had any material impact on the Company’s results of operations or financial position.

Some data maintained in the Company’s internal systems was impacted. The Company has taken steps to avoid the release of any impacted data. The Company recently concluded its forensic analysis and is working to complete its investigation, with assistance from outside experts, including its investigation of the impact to any employee, customer and/or vendor data. The security of its systems is always a top priority for the Company, and it intends to take all necessary actions, including providing notifications as appropriate, based upon the results of its investigation.

2

Cautionary Note Regarding Forward-Looking Statements

This document contains “forward-looking statements” under applicable securities laws. Such statements can be identified by words such as: “expect,” “convert,” “believe,” “plan,” “future,” “may,” “should,” “will,” “ongoing” and similar references to future periods. Forward-looking statements include express or implied statements regarding the Company’s plans, objectives, goals and beliefs, including the Company’s belief that it, its operations, its ability to provide its services, and its results of operations and financial position have not been materially impacted by the June 2021 incident, the outcome or implications of the Company’s investigation, and other statements regarding the Company’s business strategies, growth, or other future events or conditions. Such statements are based on the Company’s current beliefs, expectations and assumptions about future events or conditions, which are subject to inherent risks and uncertainties, including disruptions or other issues with the Company’s technology or third-party services and compliance with data privacy and other laws and regulations, along with the other risks and uncertainties discussed in the filings the Company makes from time to time with the Securities and Exchange Commission. Actual results may differ materially from those indicated in forward-looking statements, and you should not place undue reliance on them. All statements herein are based only on information currently available to us and speak only as of the date hereof. Except as required by law, the Company undertakes no obligation to update any such statement.