Distribution Solutions Group, Inc. 10-Q

ITEM 1A. RISK FACTORS Other than the risk factors discussed below, there have been no material changes from the risk factors disclosed in the “Risk Factors” section in our Annual Report on Form 10-K for the year ended December 31, 2022. Business Risks Cyber-attacks or other information security incidents could have a material adverse effect on our business, operating results and financial condition, subject us to additional legal costs and damage our reputation in the marketplace. We are increasingly dependent on digital technology to process and record financial and operating data and communicate with our employees and business partners. During the normal course of business we receive, retain and transmit certain confidential information that our customers provide to purchase products or services or to otherwise communicate with us, as well as certain information about our employees and other persons and entities. Our technologies, systems, networks and data and information processes (and those of our business partners) have been, and may in the future be, the target of cyber-attacks and/or information security incidents that may have resulted in, or may in the future result in, the unauthorized release, misuse, loss or destruction of proprietary, personal and other information, or other disruption of our business operations, including compromise of our email systems. For example, in February 2022, DSG became aware that its computer network was the subject of a cyber incident potentially involving unlawful access (the “Cyber Incident”). Because of the nature of the information that may have been compromised, we were required to notify the parties whose information was potentially compromised of the incident as well as various governmental agencies and have taken other actions, such as offering credit monitoring services. In addition, from time to time our email systems (and those of our business partners communicating with us) have been subjected to malicious attacks, including phishing attacks. Such attacks or incidents could have a material adverse effect on our operating results and financial condition, subject us to additional legal costs and damage our reputation in the marketplace. For example, a putative class action lawsuit was filed 55 Table of Contents against DSG in April 2023 asserting a variety of claims seeking monetary damages, injunctive relief and other related relief in connection with the Cyber Incident, which could result in additional legal and other costs. The techniques used by criminals to obtain unauthorized access to sensitive data change frequently and often are not recognizable until launched against a target or until a breach has already occurred. Accordingly, we may be unable to anticipate these techniques or implement adequate preventative measures. As cyber threats continue to evolve, we may be required to expend additional resources to continue to modify or enhance our protective measures or to investigate and fix any information security vulnerabilities. We maintain and have access to data and information that is subject to privacy and security laws, data protection laws and applicable regulations. The interpretation and application of such laws, including federal, state and international laws, relating to the collection, use, retention, disclosure, security and transfer of personally identifiable data in the United States (including but not limited to the California Consumer Privacy Act and the California Privacy Rights Act), Europe (including but not limited to the European Union's General Data Protection Regulation) and elsewhere, are uncertain and evolving. Despite our efforts to protect such information, cyber incidents or misplaced or lost data could have a materially adverse impact on our business, and may divert management and employee attention from other business and growth initiatives. Further, an information privacy or security incident could result in legal or reputational risks and could have a materially adverse impact on our business, financial condition and results of operations. Any pursuit or completion by DSG of additional acquisition opportunities would involve risks that could adversely affect our business, financial condition and results of operations. One of our growth strategies is to actively pursue additional acquisition opportunities which complement our business model. However, there are risks associated with pursuing acquisitions, which include the incurrence of significant transaction costs without the guarantee that such transactions will be completed and the risk that we may not realize the anticipated benefits of the acquisition once it is completed. We may fail to successfully identify the right opportunities and/or to successfully integrate the acquired businesses, operations, technologies, systems and/or personnel with those of DSG, which could adversely affect our business, financial condition and results of operations. Common Stock Risks Entities affiliated with LKCM and J. Bryan King beneficially own a significant majority of the outstanding DSG common stock and, therefore, have significant influence over our Company, which could delay or deter a change in control or other business combination or otherwise cause us to take actions with which you may disagree. Based on a Schedule 13D filed with the SEC by LKCM and various other persons and entities (as amended through September 8, 2023), entities affiliated with LKCM beneficially owned in the aggregate approximately 36.4 million shares of DSG common stock as of September 1, 2023, representin g approximately 77.6% of the outstanding shares of DSG common stock as of September 30, 2023. J. Bryan King, Chairman and Chief Executive Officer of the Company, is a Principal of LKCM. In addition, M. Bradley Wallace, who became a director of the Company upon his election at the Company’s 2023 annual stockholders meeting on May 19, 2023, is a Founding Partner of LKCM Headwater Investments, the private capital investment group of LKCM As a result, LKCM has significant influence over the outcome of matters requiring a stockholder vote, including the election of directors and the approval of other significant matters, and LKCM’s interests may not align with the interests of other stockholders. This concentration of ownership could also have the effect of delaying or preventing a change of control or other business combination that might be beneficial to our stockholders. In addition, as a result of this concentrated ownership interest of DSG common stock, DSG believes that it qualifies as a “controlled company.” Under Nasdaq Listing Rules, a listed company of which more than 50% of the voting power is held by an individual, group or another company is a “controlled company” and, accordingly, DSG believes that, if it so desired, it would be generally exempt from the requirements of Rule 5605(b), (d) and (e) of the Nasdaq Listing Rules that among other things would otherwise require DSG to have: • a majority of the DSG Board of Directors comprised of independent directors; • a compensation committee comprised solely of independent directors; and • director nominees be selected, or recommended to the DSG Board of Directors for selection, either by (1) DSG's independent directors constituting a majority of the DSG Board of Directors’ independent directors in a vote in which only independent directors participate or (2) a nominating committee comprised solely of independent directors. 56 Table of Contents Entities affiliated with LKCM beneficially own a significant number of shares of DSG common stock, and any sales of any such shares or the possibility of any such sales could have a negative effect on the price of DSG common stock. Entities affiliated with LKCM beneficially own a significant number of shares of DSG common stock. In accordance with the Merger Agreements, DSG granted to certain entities affiliated with LKCM certain registration rights with respect to the shares of DSG common stock that DSG issued to those entities in connection with the Mergers. Any sales of any of the shares of DSG common stock held by any entities affiliated with LKCM (whether those shares were acquired by those entities in connection with the Mergers or in other transactions), or the anticipation of the possibility of any such sales, could create downward pressure on the market price of DSG common stock.