22
without limitation, theft, casualties such as fire, power loss, telecommunications failure or other catastrophic events, as well as from
internal and external cybersecurity threats, including from diverse threat actors, such as state-sponsored organizations, opportunistic
hackers and hacktivists, as well as through diverse attack vectors, such as malfeasance by insiders, human or technological error,
malicious code embedded in open-source software, or misconfigurations, “bugs” or other vulnerabilities in or issues with commercial
software that is integrated into our (or our suppliers’ or service providers’) network infrastructure, products or services, security
breaches, denial of service attacks, viruses, worms, malware, ransomware, social engineering/phishing, breaches of the algorithms
used to encrypt and protect data and other malicious, or disruptive or unauthorized events that jeopardize the confidentiality, integrity or
availability of information systems or information residing therein, including confidential information and personal information (each, a
“Cybersecurity Incident” and collectively, “Cybersecurity Incidents”), and have also experienced Cybersecurity Incidents, including
credential stuffing attacks in which compromised user credentials were used to breach the system. The failure of third-party vendors to
provide adequate services, including, as result of any Security Incident, or to generally fail to employ up-to-date and appropriate data
security and internal control practices, could significantly harm our operations and reputation, which could materially adversely affect
our financial performance. For example, in July 2024 we experienced disruptions to our information technology systems as part of the
CrowdStrike software update that resulted in global information technology outages, including disruptions to our ability to process
customer payments at certain of our restaurants. While we experienced this disruption for a limited period of time, the incident did not
have a significant impact on our business. We also rely on third party services to effectively operate our restaurants including, for
example, gift card distribution and transaction processing services, point-of-sale system services, online ordering services and food
delivery services, and our Cheesecake Rewards® program. We derive substantial revenue from these aspects of our business, which
could suffer in the event of any factor that adversely impacts our vendors’ ability to provide such services. Such factors include, without
limitation, loss of, or significant change in contractual terms of, key vendor contracts, vendor or processor failures, technology failures,
changes in applicable laws or regulations, Cybersecurity Incidents, damage to the reputation of any key vendor and mandated
employment relationships between companies that facilitate third-party delivery services and their service personnel. (See the risk
factor titled “Changes in, or any failure to comply with, applicable laws or regulations could materially adversely affect our ability to
operate our restaurants and/or increase our cost to do so, which could materially adversely affect our financial performance.”)
We may incur additional costs if we are unable to renew our restaurant leases on similar terms and conditions, or at all, or to
relocate our restaurants in certain trade areas, which could materially adversely affect our financial performance.
We currently lease all our restaurant premises and, although we may consider other arrangements, we currently plan to
continue to lease our restaurant locations in the future. Some of our leases have terms that will expire in the next few years and
beyond. Many of these leases include renewal options; some do not. While lease expirations allow us to opportunistically evaluate the
possibility of relocating certain restaurants to higher quality sites and trade areas over time, doing so may involve additional costs, such
as increased rent and other expenses related to renegotiating the terms of occupancy of an existing lease, and the costs to relocate
and develop a replacement restaurant if we choose not to renew a lease, or are unable to do so, on favorable terms in a desirable
location. Delay in delivery of leased premises from our landlords may also result in increased costs. In addition, changing consumer
preferences and demographics in a given area have in the past and may in the future cause us relocate or terminate a restaurant
lease. We may elect to terminate certain leases prior to their expiration dates, and we may be unable to negotiate favorable terms for
such early terminations. Additional costs related to expiring restaurant lease terms, our inability to terminate certain restaurant leases
under favorable terms or the unavailability of suitable replacement locations could materially adversely affect our financial performance.
Any inability to effectively use and manage social media could harm our marketing efforts as well as our reputation, which
could materially adversely affect our financial performance.
Social media provides a powerful medium for consumers, staff members and others to communicate their approval of or
displeasure with a business. This aspect of social media is especially challenging because it allows any individual to reach a broad
audience with an ability to respond or react, in near real time, with comments that are often not filtered or checked for accuracy. Any
negative publicity could “go viral” causing nearly immediate and potentially significant harm to our brand and reputation, whether or not
factually accurate. Our marketing strategy includes an emphasis on social media. As social media continues to grow in popularity,
many of our competitors have expanded and improved their use of social media, making it more difficult for us to differentiate our social
media messaging. As a result, we need to continuously innovate and develop our social media strategies.
If we do not appropriately use and manage our social media strategies, our marketing efforts in this area may not be
successful, and any failure to effectively respond to negative or potentially damaging social media, whether accurate or not, could
damage our reputation, which could materially adversely affect our financial performance.