−Removed: STAFF COMMENTS.
+Added: UNRESOLVED STAFF
CYBERSECURITY
6 unchanged sentences
our board of directors of the details of such incident as well as the measures taken in response to such incident.
−Removed: In fiscal year 2024
−Removed: we did no t identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business
−Removed: strategy, results of operations, or financial condition .
+Added: September 8, 2025, Jones Soda experienced a disruption in its corporate environment which was the result of an encryption event due to
+Added: a ransomware attack.
+Added: The Company was able to recover its data from back-ups not affected by the encryption event and was fully operational
+Added: with its systems within two weeks.
+Added: All affected parties were notified of potential information related to the data breach affecting the
+Added: Company’s employees.
+Added: The Company has since switched IT managed services providers and have installed a higher level of security
+Added: protecting the Company’s data.
+Added: The Company believes that this event did not have material affect on our business strategy, results
+Added: of operations, or financial condition.
+Added: do not own any real property.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.