Item 2. Management’s Discussion and Analysis
Item 2. Management’s Discussion and Analysis of Financial Condition and Results of Operations
Cautionary Note Regarding Forward-Looking Statements
This Form 10-Q may contain information that are "forward-looking statements" within the meaning of Section 27A of the Securities Act of 1933, as amended; Section 21E of the Securities Exchange Act of 1934, as amended; and the Private Securities Litigation Reform Act of 1995. Whenever we use words such as "believe," "may," "could," "would," "might," "should," "expect," "intend," "plan," "estimate," "target," "anticipate" and negatives and derivatives of these or similar expressions, or when we make statements concerning future financial results, product offerings or other events that have not yet occurred, we are making forward-looking statements. These forward-looking statements are based upon our present intent, beliefs or expectations, but are not guaranteed to occur and may not occur. Actual future results may differ materially from those contained in or implied by our forward-looking statements due to various factors which are more fully described in Part I, Item 1A. Risk Factors in our 2022 Annual Report as well as the risk factors described in Part II, Item 1A of this Report on Form 10-Q. Although we have sought to identify the most significant risks to our business, we cannot predict whether, or to what extent, any of such risks may be realized. We also cannot assure you that we have identified all possible issues that we might face. We undertake no obligation to update any forward-looking statements that we make.
Overview
Progress provides enterprise software products for the development, deployment and management of high-impact business applications.
The key tenets of our strategic plan and operating model are as follows:
Be the Trusted Provider of the Best Products to Develop, Deploy and Manage High Impact Applications . A key element of our strategy is centered on building and maintaining the best products and tools enterprises need to build, deploy, and manage modern, strategic business applications. We offer these products and tools to both new customers and partners, as well as our existing partner and customer ecosystems.
21
Focus on Customer and Partner Retention to Drive Recurring Revenue and Profitability . Our organizational philosophy and operating principles focus primarily on customer and partner retention and success, and a streamlined operating approach to drive predictable and stable recurring revenue and high levels of profitability.
Follow a Total Growth Strategy through Accretive M&A. We are pursuing a total growth strategy driven by accretive acquisitions of businesses within the infrastructure software space, with products that appeal to both IT organizations and individual developers. These acquisitions must meet strict financial and other criteria, which help further our goal to provide significant stockholder returns by providing scale and increased cash flows. In April 2019, we acquired Ipswitch, Inc.; in October 2020, we acquired Chef Software, Inc.; in November 2021, we acquired Kemp Technologies; and in February 2023, we acquired MarkLogic. These acquisitions met our strict financial criteria.
Employ a Multi-Faceted Capital Allocation Strategy . Our capital allocation policy emphasizes accretive M&A, which allows us to expand our business and drive significant stockholder returns. We also utilize dividends and share repurchases to return capital to stockholders. We intend to continue to repurchase our shares in sufficient quantities to offset dilution from our equity plans and to continue to return a portion of our annual cash flows from operations to stockholders in the form of dividends.
We expect to continue to pursue acquisitions meeting our financial criteria that are designed to expand our business and drive significant stockholder returns. As a result, our expected uses of cash could change, our cash position could be reduced, and we may incur additional debt obligations to the extent we complete additional acquisitions. However, we currently believe that existing cash balances, together with funds generated from operations and amounts available under our Credit Facility, will be sufficient to finance our operations and meet our foreseeable cash requirements, including quarterly cash dividends and stock repurchases to Progress stockholders, as applicable, through at least the next twelve months.
Critical Accounting Policies
Management’s discussion and analysis of financial condition and results of operations are based upon our consolidated financial statements, which have been prepared in accordance with GAAP. We make estimates and assumptions in the preparation of our consolidated financial statements that affect the reported amounts of assets and liabilities, revenue and expenses and related disclosures of contingent assets and liabilities. We base our estimates on historical experience and various other assumptions that are believed to be reasonable under the circumstances. However, actual results may differ from these estimates. The most significant estimates relate to revenue recognition and business combinations. For further information regarding the application of these and other accounting policies, see Note 1 to our Consolidated Financial Statements in Item 8 of our 2022 Annual Report. There have been no significant changes to our critical accounting policies and estimates since our 2022 Annual Report.
Use of Constant Currency
Revenue from our international operations has historically represented a substantial portion of our total revenue. As a result, our revenue results have been impacted, and we expect will continue to be impacted, by fluctuations in foreign currency exchange rates. For example, if the local currencies of our foreign subsidiaries strengthen, our consolidated results stated in U.S. dollars are positively impacted.
As exchange rates are an important factor in understanding period-to-period comparisons, we believe the presentation of revenue growth rates on a constant currency basis enhances the understanding of our revenue results and evaluation of our performance in comparison to prior periods. The constant currency information presented is calculated by translating current period results using prior period weighted average foreign currency exchange rates. These results should be considered in addition to, not as a substitute for, results reported in accordance with GAAP.
22
Results of Operations
Revenue
Three Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
Revenue $ 174,992 $ 151,217 16 % 14 %
Nine Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
Revenue $ 517,469 $ 444,886 16 % 16 %
Total revenue increased as compared to the same periods last year primarily due to our acquisition of MarkLogic in February 2023, as well as increases in our OpenEdge and Kemp product offerings. In the third fiscal quarter, these increases were partially offset by a decrease in our DataDirect and Chef product offerings. In the first nine months of fiscal year 2023, there was also an increase in our DataDirect, Sitefinity, DevTools, and Chef product offerings.
Software License Revenue
Three Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
Software licenses $ 50,544 $ 47,618 6 % 4 %
As a percentage of total revenue 29 % 31 %
Nine Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
Software licenses $ 164,519 $ 135,182 22 % 22 %
As a percentage of total revenue 32 % 30 %
Software license revenue increased as compared to the same periods last year primarily due to our acquisition of MarkLogic in February 2023, as well as increases in our OpenEdge and Kemp product offerings. In the third fiscal quarter, these increases were partially offset by decreases in our DataDirect and Chef product offerings. In the first nine months of fiscal year 2023, there was also an increase in our DataDirect product offerings.
Maintenance and Services Revenue
Three Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
Maintenance $ 105,164 $ 91,043 16 % 14 %
As a percentage of total revenue 60 % 60 %
Services 19,284 12,556 54 % 52 %
As a percentage of total revenue 11 % 9 %
Total maintenance and services revenue $ 124,448 $ 103,599 20 % 19 %
As a percentage of total revenue 71 % 69 %
23
Nine Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
Maintenance $ 299,917 $ 272,337 10 % 10 %
As a percentage of total revenue 58 % 61 %
Services 53,033 37,367 42 % 42 %
As a percentage of total revenue 10 % 9 %
Total maintenance and services revenue $ 352,950 $ 309,704 14 % 14 %
As a percentage of total revenue 68 % 70 %
Maintenance revenue increased as compared to the same periods last year primarily due to our acquisition of MarkLogic in February 2023, as well as increases in our OpenEdge and Chef product offerings. Services revenue increased as compared to the same periods last year primarily due to increased services revenue from our acquisition of MarkLogic, partially offset by a decrease in our Chef product offerings. The maintenance increase in the third quarter of fiscal year 2023 was also due to the positive impact of foreign exchange in our EMEA region. The maintenance increase in the first nine months of fiscal year 2023 was partially offset by a decrease in our Kemp product offerings. The services increase in the first nine months of fiscal year 2023 was also due to increases in our Sitefinity and DevTools product offerings.
Revenue by Region
Three Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
North America $ 101,923 $ 84,826 20 % 20 %
As a percentage of total revenue 58 % 56 %
Europe, the Middle East and Africa ("EMEA") $ 56,779 $ 52,670 8 % 4 %
As a percentage of total revenue 32 % 35 %
Latin America $ 6,318 $ 4,577 38 % 32 %
As a percentage of total revenue 4 % 3 %
Asia Pacific $ 9,972 $ 9,144 9 % 10 %
As a percentage of total revenue 6 % 6 %
Nine Months Ended % Change
(In thousands) August 31, 2023 August 31, 2022 As Reported Constant Currency
North America $ 306,483 $ 248,313 23 % 23 %
As a percentage of total revenue 59 % 56 %
Europe, the Middle East and Africa ("EMEA") $ 166,369 $ 156,006 7 % 7 %
As a percentage of total revenue 32 % 35 %
Latin America $ 15,297 $ 13,138 16 % 14 %
As a percentage of total revenue 3 % 3 %
Asia Pacific $ 29,320 $ 27,429 7 % 8 %
As a percentage of total revenue 6 % 6 %
Total revenue generated in North America increased $17.1 million and $58.2 million in the third quarter and first nine months of fiscal year 2023, respectively. The increase was primarily due to our acquisition of MarkLogic and increased revenue from our OpenEdge product offering. The increases in revenue over both periods in EMEA was primarily due to our acquisition of MarkLogic and increased revenue from our OpenEdge and Kemp product offerings. The increases in both periods in revenue in Latin America were primarily due to increases in our OpenEdge product offerings. The increases in revenue generated in Asia Pacific in both periods were due to increases in our Chef and Kemp product offerings.
In the first nine months of fiscal year 2023 revenue generated in markets outside North America represented 41% of total revenue on an actual and constant currency basis. In the first nine months of fiscal year 2022 revenue generated in markets outside North America represented 44% of total revenue on an actual and a constant currency basis.
24
Cost of Software Licenses
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 Change August 31, 2023 August 31, 2022 Change
Cost of software licenses $ 2,732 $ 2,477 $ 255 10 % $ 7,998 $ 7,669 $ 329 4 %
As a percentage of software license revenue 5 % 5 % 5 % 6 %
As a percentage of total revenue 2 % 2 % 2 % 2 %
Cost of software licenses consists primarily of costs of inventories, royalties, electronic software distribution, duplication, and packaging. Cost of software licenses as a percentage of software license revenue varies from period to period depending upon the relative product mix.
Cost of Maintenance and Services
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 Change August 31, 2023 August 31, 2022 Change
Cost of maintenance and services $ 22,192 $ 15,761 $ 6,431 41 % $ 62,663 $ 46,707 $ 15,956 34 %
As a percentage of maintenance and services revenue 18 % 15 % 18 % 15 %
As a percentage of total revenue 13 % 10 % 12 % 10 %
Components of cost of maintenance and services:
Personnel related costs $ 16,578 $ 11,338 $ 5,240 46 % $ 46,367 $ 33,175 $ 13,192 40 %
Contractors and outside services 3,650 2,956 694 23 % 10,467 9,178 1,289 14 %
Hosting and other 1,964 1,467 497 34 % 5,829 4,354 1,475 34 %
Total cost of maintenance and services $ 22,192 $ 15,761 $ 6,431 41 % $ 62,663 $ 46,707 $ 15,956 34 %
Cost of maintenance and services consists primarily of costs of providing customer support, consulting, and education. The increases in all periods were primarily due to increased headcount, contractor and outside services costs, and hosting costs resulting from our acquisition of MarkLogic.
Amortization of Intangibles
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Amortization of intangibles $ 7,995 $ 5,558 44 % $ 22,253 $ 16,589 34 %
As a percentage of total revenue 5 % 4 % 4 % 4 %
Amortization of intangibles included in costs of revenue primarily represents the amortization of the value assigned to technology-related intangible assets obtained in business combinations. The increases in all periods are due to the acquisition of MarkLogic.
25
Gross Profit
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Gross profit $ 142,073 $ 127,421 11 % $ 424,555 $ 373,921 14 %
As a percentage of total revenue 81 % 84 % 82 % 84 %
Our gross profit increased in all periods primarily due to the increases in revenue, offset by the increases in costs of software licenses, costs of maintenance and services and the amortization of intangibles, each as described above.
Sales and Marketing
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 Change August 31, 2023 August 31, 2022 Change
Sales and marketing $ 38,612 $ 34,595 $ 4,017 12 % $ 112,513 $ 100,768 $ 11,745 12 %
As a percentage of total revenue 22 % 23 % 22 % 23 %
Components of sales and marketing:
Personnel related costs $ 33,919 $ 29,994 $ 3,925 13 % $ 98,243 $ 86,145 $ 12,098 14 %
Contractors and outside services 785 592 193 33 % 2,990 2,171 819 38 %
Marketing programs and other 3,908 4,009 (101) (3) % 11,280 12,452 (1,172) (9) %
Total sales and marketing $ 38,612 $ 34,595 $ 4,017 12 % $ 112,513 $ 100,768 $ 11,745 12 %
Sales and marketing expenses increased in all periods primarily due to increased personnel related costs associated with our acquisition of MarkLogic, as well as increases in contractors and outside services costs, partially offset by decreases in marketing and sales events costs.
Product Development
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 Change August 31, 2023 August 31, 2022 Change
Product development costs $ 33,138 $ 28,650 $ 4,488 16 % $ 98,396 $ 85,966 $ 12,430 14 %
As a percentage of total revenue 19 % 19 % 19 % 19 %
Components of product development costs:
Personnel related costs $ 31,528 $ 28,044 $ 3,484 12 % $ 94,647 $ 83,277 $ 11,370 14 %
Contractors and outside services 1,376 275 1,101 400 % 3,166 1,989 1,177 59 %
Other product development costs 234 331 (97) (29) % 583 700 (117) (17) %
Total product development costs $ 33,138 $ 28,650 $ 4,488 16 % $ 98,396 $ 85,966 $ 12,430 14 %
Product development expenses increased in all periods primarily due to increased personnel related costs associated with our acquisition of MarkLogic, as well as an increase in contractors and outside services costs, partially offset by decreases in other product development costs.
26
General and Administrative
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 Change August 31, 2023 August 31, 2022 Change
General and administrative $ 20,791 $ 20,141 $ 650 3 % $ 61,046 $ 56,339 $ 4,707 8 %
As a percentage of total revenue 12 % 13 % 12 % 13 %
Components of general and administrative:
Personnel related costs $ 15,871 $ 14,798 $ 1,073 7 % $ 49,146 $ 44,600 $ 4,546 10 %
Contractors and outside services 3,592 2,152 1,440 67 % 9,271 6,481 2,790 43 %
Other general and administrative costs 1,328 3,191 (1,863) (58) % 2,629 5,258 (2,629) (50) %
Total cost of general and administrative $ 20,791 $ 20,141 $ 650 3 % $ 61,046 $ 56,339 $ 4,707 8 %
General and administrative expenses include the costs of our finance, human resources, legal, information systems and administrative departments. General and administrative expenses increased in all periods primarily due to higher personnel costs associated with our acquisition of MarkLogic, as well as an increase in contractors and outside services costs, partially offset by a decrease in other general and administrative costs.
Amortization of Intangibles
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Amortization of intangibles $ 17,668 $ 11,716 51 % $ 48,825 $ 35,330 38 %
As a percentage of total revenue 10 % 8 % 9 % 8 %
Amortization of intangibles included in operating expenses primarily represents the amortization of value assigned to intangible assets obtained in business combinations other than assets identified as purchased technology. Amortization of intangibles increased due to the addition of MarkLogic intangible assets, as discussed above.
Cyber Incident and Vulnerability Response Expenses, Net
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Cyber incident and vulnerability response expenses, net $ 951 $ — * $ 5,126 $ — *
As a percentage of total revenue 1 % — % 1 % — %
*not meaningful
As previously disclosed, following (i) the detection of irregular activity on certain portions of our corporate network that was disclosed on December 19, 2022, and (ii) the discovery of the MOVEit Vulnerability that was disclosed on June 5, 2023, in each instance, we engaged outside cybersecurity experts and other incident response professionals to conduct a forensic investigation and assess the extent and scope of these matters. Cyber incident and MOVEit Vulnerability costs relate to the engagement of external cybersecurity experts and other incident response professionals and are net of received and expected insurance recoveries.
27
Restructuring Expenses
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Restructuring expenses $ 843 $ 130 * $ 6,230 $ 784 *
As a percentage of total revenue — % — % 1 % — %
*not meaningful
Restructuring expenses recorded in the third fiscal quarter and first nine months of fiscal year 2023 relate to the restructuring activities that occurred in the first and fourth quarters of fiscal years 2023 and 2020, respectively, resulting from the acquisitions of MarkLogic and Chef, respectively. Restructuring expenses recorded in the third quarter of fiscal year 2022 are comprised mostly of costs related to the acquisition of Kemp and the Chef restructuring action of 2020. See the Liquidity and Capital Resources section of this Item 2, Management’s Discussion and Analysis of Financial Condition and Results of Operations.
Acquisition-Related Expenses
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Acquisition-related expenses $ 699 $ 168 * $ 4,433 $ 3,816 16 %
As a percentage of total revenue — % — % 1 % 1 %
*not meaningful
Acquisition-related costs are expensed as incurred and include those costs incurred as a result of a business combination. These costs consist of professional service fees, including third-party legal and valuation-related fees. Acquisition-related expenses increased due to our acquisition of MarkLogic. Acquisition-related expenses in the same periods of fiscal year 2022 were primarily related to our pursuit of other acquisition opportunities, as well as the acquisition of Kemp.
Gain on Sale of Assets Held for Sale
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Gain on sale of assets held for sale $ — $ — * $ — $ (10,770) *
As a percentage of total revenue — % — % — % 2 %
*not meaningful
In the second quarter of fiscal year 2022, we sold corporate land and building assets previously reported as assets held for sale on our consolidated balance sheet. As the sale price less cost to sell was greater than the carrying value of these assets we recognized a net gain on the sale of approximately $10.8 million in the second quarter of fiscal year 2022.
Income from Operations
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Income from operations $ 29,371 $ 32,021 (8) % $ 87,986 $ 101,688 (13) %
As a percentage of total revenue 17 % 21 % 17 % 23 %
Income from operations decreased in the third quarter and first nine months of fiscal year 2023 due to an increase in costs of revenue and operating expenses, offset by increased revenue, as shown above.
28
Other (Expense) Income, Net
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Interest expense $ (8,532) $ (4,009) 113 % $ (22,894) $ (11,368) 101 %
Interest income and other, net 788 247 219 % 1,895 991 91 %
Foreign currency loss, net (675) (577) 17 % (1,502) (832) 81 %
Total other expense, net $ (8,419) $ (4,339) 94 % $ (22,501) $ (11,209) 101 %
As a percentage of total revenue (5) % (3) % (4) % (3) %
Other expense, net, increased in both periods shown primarily due to increased interest expense on our term loan and our revolving line of credit, which we drew on to fund part of our acquisition of MarkLogic. Interest income and other, net increased due to our acquisition of MarkLogic. Foreign currency loss increased in all periods shown.
Provision for Income Taxes
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Provision for income taxes $ 1,854 $ 5,885 (68) % $ 10,623 $ 19,118 (44) %
As a percentage of income before income taxes 9 % 21 % 16 % 21 %
Our effective tax rate was 9% and 16% for the three and nine months ended August 31, 2023, respectively and 21% for both the three and nine months ended August 31, 2022. The primary reason for the decrease in the effective rate was due to discrete tax benefits related to stock-based compensation and the impacts of Notice 2023-55, which was issued by the Internal Revenue Service during July 2023 and provides temporary relief for taxpayers in determining whether a foreign tax is eligible for a foreign tax credit under Sections 901 and 903 of the Internal Revenue Code. There were no significant discrete tax items in the three or nine months ended August 31, 2022.
Net Income
Three Months Ended Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022 % Change August 31, 2023 August 31, 2022 % Change
Net income $ 19,098 $ 21,797 (12) % $ 54,862 $ 71,361 (23) %
As a percentage of total revenue 11 % 14 % 11 % 16 %
Select Performance Metrics:
Management evaluates our financial performance using a number of financial and operating metrics. These metrics are periodically reviewed and revised to reflect changes in our business.
Annual Recurring Revenue (ARR)
We are providing an ARR performance metric to help investors better understand and assess the performance of our business because our mix of revenue generated from recurring sources has increased in recent years. ARR represents the annualized contract value for all active and contractually binding term-based contracts at the end of a period. ARR includes maintenance, software upgrade rights, both public and dedicated cloud instances and on-premises subscription-based transactions and managed services. ARR mitigates fluctuations due to seasonality, contract term and the sales mix of subscriptions for term-based licenses and SaaS. ARR is not calculated in accordance with GAAP. ARR does not have any standardized meaning and is therefore unlikely to be comparable to similarly titled measures presented by other companies. ARR should be viewed independently of revenue and deferred revenue and is not intended to be combined with or to replace either of those items. ARR is not a forecast and the active contracts at the end of a reporting period used in calculating ARR may or may not be extended or renewed by our customers.
29
We define ARR as the annual recurring revenue of term-based contracts from all customers at a point in time. We calculate ARR by taking monthly recurring revenue, or MRR, and multiplying it by 12. MRR for each month is calculated by aggregating, for all customers during that month, monthly revenue from committed contractual amounts, additional usage and monthly subscriptions. The calculation is done at constant currency using the current year budgeted exchange rates for all periods presented.
Our ARR was $577.0 million and $488.0 million as of August 31, 2023 and 2022, respectively, which is an increase of 18% year-over-year. The growth in our ARR is primarily driven by the acquisition of MarkLogic.
Net Retention Rate
We calculate net retention rate as of a period end by starting with the ARR from the cohort of all customers as of 12 months prior to such period end ("Prior Period ARR"). We then calculate the ARR from these same customers as of the current period end ("Current Period ARR"). Current Period ARR includes any expansion and is net of contraction or attrition over the last 12 months but excludes ARR from new customers in the current period. We then divide the total Current Period ARR by the total Prior Period ARR to arrive at the net retention rate. Net retention rate is not calculated in accordance with GAAP.
Our net retention rates have generally ranged between 100% and 102% for all periods presented. Our high net retention rates illustrate our predictable and durable top line performance.
Liquidity and Capital Resources
Cash and Cash Equivalents
(In thousands) August 31, 2023 November 30, 2022
Cash and cash equivalents $ 137,999 $ 256,277
The decrease in cash and cash equivalents of $118.3 million from the end of fiscal year 2022 was due to cash outflows of $355.3 million for cash paid for acquisitions, net of cash acquired, repayment of the revolving line of credit of $55.0 million, repurchases of common stock of $30.0 million, dividend payments of $23.7 million, payments of debt obligations of $5.2 million, and purchases of property and equipment of $3.2 million. These cash outflows were offset by proceeds from the issuance of debt of $195.0 million to partially fund the acquisition of MarkLogic, cash inflows from operations of $140.8 million, $12.3 million in cash received from the issuance of common stock, and the effect of exchange rates on cash of $5.5 million. Except as described below, there are no limitations on our ability to access our cash and cash equivalents.
As of August 31, 2023, $84.4 million of our cash and cash equivalents was held by our foreign subsidiaries. Foreign cash includes unremitted foreign earnings, which are invested indefinitely outside of the U.S. As such, the foreign cash is not available to fund our domestic operations. If we were to repatriate these earnings, we may be subject to income tax withholding in certain tax jurisdictions and a portion of the repatriated earnings may be subject to U.S. income tax. However, we do not anticipate that this would have a material adverse impact on our liquidity.
Share Repurchase Program
In January 2023, our Board of Directors increased our share repurchase authorization by $150 million, to an aggregate authorization of $228.0 million. In the nine months ended August 31, 2023 and August 31, 2022, we repurchased and retired 0.5 million shares for $30.0 million and 1.7 million shares for $75.5 million, respectively. The shares were repurchased in both periods as part of our Board of Directors authorized share repurchase program. As of August 31, 2023, there was $198.0 million remaining under the current authorization.
Dividends
On September 20, 2023, our Board of Directors declared a quarterly dividend of $0.175 per share of common stock, which will be paid on December 15, 2023 to stockholders of record as of the close of business on December 1, 2023. Future declarations of dividends and the establishment of future record and payment dates are subject to the final determination of our Board of Directors.
30
Restructuring Activities
See Note 12 to the condensed consolidated financial statements.
Long-term Debt and Credit Facility
See Note 7 to the condensed consolidated financial statements.
Cash Flows From Operating Activities
Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022
Net income $ 54,862 $ 71,361
Non-cash reconciling items included in net income 96,452 79,505
Changes in operating assets and liabilities (10,555) 1,157
Net cash flows from operating activities $ 140,759 $ 152,023
In the first nine months of fiscal year 2023, operating cash flows decreased as a result of higher operating expenses, due to the acquisition of MarkLogic, higher interest expense on debt, and an increase in cash paid for income taxes, as compared to the same period in 2022, partially offset by higher billings and collections. Our gross accounts receivable as of August 31, 2023, decreased by $2.0 million from the end of fiscal year 2022 and our days sales outstanding (DSO) in accounts receivable increased to 49 days from 48 days in the third fiscal quarter of 2022 due to the timing of billings and collections.
Cash Flows (Used in) From Investing Activities
Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022
Net investment activity $ 438 $ 1,200
Purchases of property and equipment (3,181) (3,086)
Payments for acquisitions, net of cash acquired (355,250) —
Proceeds from sale of long-lived assets, net — 25,998
Other investing activities — 134
Net cash flows (used in) from investing activities $ (357,993) $ 24,246
Net cash outflows and inflows of our net investment activity are generally a result of the timing of our purchases and maturities of securities, which are classified as cash equivalents or short-term securities. In the first nine months of fiscal year 2023, we had payments for acquisitions net of cash acquired of $355.3 million. We also purchased $3.2 million of property and equipment in the first nine months of fiscal year 2023, as compared to $3.1 million in the first nine months of fiscal year 2022. In the second quarter of fiscal year 2022 we received $26.0 million net proceeds from the sale of long-lived assets.
31
Cash Flows From (Used in) Financing Activities
Nine Months Ended
(In thousands) August 31, 2023 August 31, 2022
Proceeds from stock-based compensation plans $ 20,373 $ 10,384
Repurchases of common stock (30,000) (75,524)
Proceeds from the issuance of debt 195,000 7,474
Payment of debt issuance costs — (1,957)
Repayment of revolving line of credit (55,000) —
Principal payment on term loan (5,157) (5,154)
Dividend payments to stockholders (23,669) (23,351)
Other financing activities (8,101) (5,405)
Net cash flows from (used in) financing activities $ 93,446 $ (93,533)
During the first nine months of fiscal year 2023, we received $195.0 million in net proceeds from the issuance of debt to partially fund the acquisition of MarkLogic. During the first nine months of fiscal year 2022, we received $7.5 million in net proceeds from the issuance of debt in connection with our amended term loan. We received $20.4 million from the exercise of stock options and the issuance of shares under our employee stock purchase plan as compared to $10.4 million in the first nine months of fiscal year 2022. Further, we repurchased $30.0 million of our common stock under our share repurchase plan compared to $75.5 million in the same period of the prior year. We also made payments on our long-term debt of $60.2 million (including a $55.0 million repayment on the revolving line of credit) in the first nine months of fiscal year 2023 and $5.2 million in the same period in 2022. Finally, we made dividend payments of $23.7 million to our stockholders during the first nine months of fiscal year 2023 and $23.4 million in the first nine months of fiscal year 2022.
Liquidity Outlook
Cash from operations in fiscal year 2023 could be affected by various risks and uncertainties, including, but not limited to, the effects of various risks detailed in Part I, Item 1A. Risk Factors in our 2022 Annual Report which have led to increased disruption and volatility in capital markets and credit markets that could adversely affect our liquidity and capital resources in the future. However, based on our current business plan, we believe that existing cash balances, together with funds generated from operations and amounts available under our Credit Facility, will be sufficient to finance our operations and meet our foreseeable cash requirements through at least the next twelve months. We do not contemplate a need for any foreign repatriation of the earnings which are deemed invested indefinitely outside of the U.S. Our foreseeable cash needs include capital expenditures, acquisitions, debt repayments, quarterly cash dividends, share repurchases, lease commitments, restructuring obligations and other long-term obligations.
Legal and Other Regulatory Matters
See discussion below in Recent Developments: MOVEit Vulnerability for a discussion of the legal proceedings related to the MOVEit Vulnerability.
Recent Accounting Pronouncements
Refer to Note 1 - Nature of Business and Basis of Presentation (Part I, Item 1 of this Form 10-Q) for further discussion.
Recent Developments: MOVEit Vulnerability
Description of Event
As disclosed via a Form 8-K filed on June 5, 2023, on the evening of May 28, 2023 (Eastern Time), our MOVEit technical support team received an initial customer support call indicating unusual activity within their MOVEit Transfer instance. An investigative team was mobilized and, on May 30, 2023, the investigative team discovered a zero-day vulnerability in MOVEit Transfer (including our cloud-hosted version of MOVEit Transfer known as MOVEit Cloud). The investigative team determined the zero-day vulnerability (the “MOVEit Vulnerability”) could provide for unauthorized escalated privileges and access to the customer’s underlying environment in both MOVEit Transfer (the on-premise version) and MOVEit Cloud (a cloud-hosted version of MOVEit Transfer that we deploy in both (i) a public cloud format, as well as, (ii) for a small group of
32
customers, in customer-dedicated cloud instances that are hosted, separate and apart from the public instances of our MOVEit Cloud platform). We promptly took down MOVEit Cloud for further investigation and notified all then-known current and former MOVEit Transfer and MOVEit Cloud customers in order to apprise them of the MOVEit Vulnerability and alert them to immediate remedial actions. In parallel, our team developed a patch for all supported versions of MOVEit Transfer and MOVEit Cloud, which was released on May 31, 2023, and allowed for the restoration of MOVEit Cloud that same day.
MOVEit Transfer is a secure file-transfer software that is installed by customers on-premise and does not have any on-going telemetry after installation that allows us to track, among other things, a customer’s product usage, deployed version, file transfer activity (including any data that is transferred by or stored within the customer’s MOVEit Transfer instance), or whether the customer has applied any security patches or bug fixes to their MOVEit Transfer instance. However, certain MOVEit Transfer customers have reported that malicious threat actors have exploited the MOVEit Vulnerability to obtain access to their environments and portions of their sensitive customer data.
Furthermore, we currently have not seen any evidence that sensitive customer data has been exfiltrated from the public MOVEit Cloud instances. For a small group of customers, we provide dedicated MOVEit Cloud instances that are hosted, for each such customer, separate and apart from the public instances of our MOVEit Cloud platform. Two of our dedicated MOVEit Cloud customers have reported that malicious threat actors have exploited the MOVEit Vulnerability to obtain access to their dedicated MOVEit Cloud environment. As of the date of the filing of this report on Form 10-Q, one such customer has confirmed that no sensitive data was compromised and the other has reported that certain personally identifiable information was exfiltrated.
Since our disclosures regarding the MOVEit Vulnerability, various third-parties have been actively scrutinizing MOVEit Transfer and MOVEit Cloud, leading to the discovery and our prompt patching of additional vulnerabilities. We are currently not aware of any evidence that these additional vulnerabilities were exploited by malicious threat actors prior to creating patches to address them and making those patches available to our MOVEit Transfer customers and applying those patches to the MOVEit Cloud environments – both the public and dedicated cloud instances.
Progress has remained fully operational at all times before and after the discovery of the MOVEit Vulnerability and, as of the time of the filing of this report on Form 10-Q, has not uncovered evidence of unauthorized activity in Progress' corporate environment or impact to products beyond MOVEit Transfer and MOVEit Cloud related to this attack. MOVEit Transfer and MOVEit Cloud represented less than 4% in aggregate of the Company’s revenue for the nine months ended August 31, 2023.
Progress engaged outside cybersecurity experts and other incident response professionals to conduct a forensic investigation and assess the extent and scope of the MOVEit Vulnerability. The Company (i) has and is continuing to implement a series of additional security and related measures aimed at addressing the MOVEit Vulnerability and subsequently discovered vulnerabilities and further strengthening the overall security of our MOVEit applications, (ii) has engaged outside legal counsel to conduct a thorough independent investigation of the MOVEit Vulnerability, and (iii) has engaged with federal law enforcement and other federal agencies with respect to the MOVEit Vulnerability. As our fact-gathering investigation and litigation response continues, we will continue to assess the potential impact of the MOVEit Vulnerability on our business, operations, and financial results.
Expenses Incurred and Amounts Accrued
For the three and nine months ended August 31, 2023, we incurred $1.0 million of costs related to the MOVEit Vulnerability. Costs are provided net of received and expected insurance recoveries of approximately $1.9 million, which was recognized during the third quarter of fiscal year 2023. The timing of recognizing insurance recoveries may differ from the timing of recognizing the associated expenses.
Future Costs
We expect to incur investigation, legal and professional services expenses associated with the MOVEit Vulnerability in future periods. We will recognize these expenses as services are received, net of received and expected insurance recoveries. Our financial liability arising from any of the foregoing will depend on many factors, including limitations contained within our customer contracts, the amount of private litigation, and the number and extent of formal government investigations into the matter, therefore it is not possible at this time to estimate the quantitative impact of any such liability with any reasonable degree of certainty.
33
Insurance Coverage
During the period when the November 2022 cyber incident and the MOVEit Vulnerability occurred, we maintained $15.0 million of cybersecurity insurance coverage, which is expected to reduce our exposure to expenses and liabilities arising from these events. As of August 31, 2023, we have recorded approximately $4.9 million in insurance recoveries, of which, $3.0 million was related to the November 2022 cyber incident and $1.9 million was related to the MOVEit Vulnerability, providing us with $10.1 million of additional cybersecurity insurance coverage (which is subject to a $0.5 million retention per claim). We will pursue recoveries to the maximum extent available under our insurance policies.
Future Capital Investments
In addition, we may accelerate or make additional investments in our information technology systems, but we are unable to estimate such investments because the nature and scope has not yet been determined. We currently do not expect such amounts to be material to any fiscal period.
Effect on Sales and Customer Loyalty
The MOVEit Vulnerability may adversely affect our future performance and financial results. Customer confidence in Progress may also be impacted by the MOVEit Vulnerability. Through our response speed and transparent communications, we are committed to, and actively engaged in, activities to restore any loss in customer confidence. However, we currently cannot predict the length or extent of any ongoing impact to sales.
Litigation and Governmental Investigations
As of the date of the filing of this report on Form 10-Q, (i) we have received formal letters from 23 customers and others that claim to have been impacted by the MOVEit Vulnerability, some of which have indicated that they intend to seek indemnification from us related to the MOVEit Vulnerability, (ii) we have received a letter from an insurer providing notice of a subrogation claim (where the insurer is seeking recovery for all expenses incurred in connection with the MOVEit Vulnerability), and (iii) we are party to 58 class action lawsuits filed by individuals who claim to have been impacted by exfiltration of data from the environments of our MOVEit Transfer customers (on October 4, 2023, the Judicial Panel on Multidistrict Litigation issued an order consolidating litigation relating to the MOVEit Vulnerability where we are a party in the United States District Court, District of Massachusetts).
We have also been cooperating with several inquiries from domestic and foreign data privacy regulators, inquiries from several state attorneys general, as well as formal investigations from: (i) a U.S. federal law enforcement agency (as of the date of the filing of this report, the law enforcement investigation that we are cooperating with is not an enforcement action or formal governmental investigation of which we have been told that we are a target), and (ii) the SEC (as further described hereafter). On October 2, 2023, Progress received a subpoena from the SEC seeking various documents and information relating to the MOVEit Vulnerability. As described in the cover letter accompanying the subpoena, at this stage, the SEC investigation is a fact-finding inquiry, the investigation does not mean that Progress or anyone else has violated federal securities laws, and the investigation does not mean that the SEC has a negative opinion of any person, entity, or security. Progress intends to cooperate fully with the SEC in its investigation.
Such claims and investigations may have an adverse effect on how we operate our business and our results of operations, and in the future, we may be subject to additional governmental or regulatory investigations, as well as additional litigation or indemnification claims. While a loss from these matters is possible, we cannot reasonably estimate a range of possible losses at this time, particularly while the foregoing matters are pending and our fact-gathering investigation into the matter is ongoing. Furthermore, with respect to the litigation, the proceedings remain in the early stages, alleged damages have not been specified, there is uncertainty as to the likelihood of a class or classes being certified or the ultimate size of any class if certified, and there are significant factual and legal issues to be resolved. Also, each of the governmental inquiries and investigations mentioned above could result in adverse judgements, settlements, fines, penalties, or other resolutions, the amount, scope and timing of which could be material, but which we are currently unable to predict. As such, we have not recorded a loss contingency liability for litigation, claims and governmental investigations in the second quarter. See Note 15 to Consolidated Financial Statements included in Item 1, Financial Statements.
Text extracted from the filing as submitted to EDGAR. Formatting, tables and exhibits are simplified for reading; the original document is authoritative for anything you rely on.