ITEM 1A. RISK FACTORS
In addition to the other information contained in this Form 10-K, the following risk factors should be considered in evaluating our business. Our business, financial condition, or results of operations could be materially adversely affected as a result of any of the progression, resultant effects, or outcome of these risks.
Risks related to our business and industry
Our success depends on our ability to maintain our brand value and reputation.
The lululemon name is integral to our business and our expansion strategies. Maintaining, promoting, and positioning our brand will depend largely on the success of our marketing and merchandising efforts and our ability to provide a consistent, high-quality product, and guest experience. Our brand positioning, products, and marketing efforts may not be considered distinct, culturally relevant, or desirable to guests, employees, and other stakeholders.
Our brand and reputation could be adversely affected by negative publicity, if we fail to deliver innovative and high-quality products acceptable to our guests, or if we face or mishandle a product recall, which could be amplified by social media. Our reputation could also be impacted by adverse publicity, whether or not valid, regarding allegations that we, or persons currently or previously associated with us, have violated laws or regulations, including but not limited to those related to safety, employment, discrimination, harassment, whistle-blowing, privacy, corporate citizenship, improper business practices, or cybersecurity. Certain activities on the part of stakeholders, including nongovernmental organizations and governmental institutions, could cause reputational damage, distract senior management, and disrupt our business. Additionally, while we devote considerable effort and resources to protecting our intellectual property, if these efforts are not successful the value of our brand may be harmed. Any harm to our brand and reputation could have a material adverse effect on our financial condition.
We operate in a highly competitive market and our competitors may compete more effectively than we can, resulting in a loss of our market share and a decrease in our net revenue and profitability.
The market for our products is highly competitive. Competition may result in pricing pressures, reduced profit margins or lost market share, or a failure to grow or maintain our market share, any of which could substantially harm our business and results of operations. We compete directly against global as well as regional and country-specific wholesalers and direct
Table of Contents
retailers of athletic apparel, including large, diversified apparel companies with substantial market share, and established companies expanding their production and marketing of technical athletic apparel, as well as against smaller retailers and those specifically focused on women's athletic apparel. We also face competition from wholesalers and direct retailers of traditional commodity athletic apparel, such as cotton T-shirts and sweatshirts. Many of our competitors are large apparel and sporting goods companies with strong worldwide brand recognition. Because of the fragmented nature of the industry, we also compete with other apparel sellers, including those specializing in yoga apparel and other activewear. Our competitors may be able to achieve and maintain brand awareness and market share more quickly and effectively than we can.
We may fail to acknowledge or react appropriately to the entry or growth of a viable competitor or disruptive force, and could struggle to continue to innovate, differentiate, and sustain the value of our brand. Our brand presence and visibility in certain markets may encourage some guests to try or migrate to emerging competitors.
In addition, because we hold limited patents and exclusive intellectual property rights in the technology, fabrics or processes underlying our products, our current and future competitors are able to manufacture and sell products with performance characteristics, fabrication techniques, and styling similar to ours. Even when these products infringe our intellectual property rights, we may not be able to identify all infringing parties, enforce our rights effectively, or obtain timely and meaningful relief. If "dupe" or imitation products proliferate, whether through traditional retail channels or social media-driven trends, and lead consumers to perceive less differentiation between our products and lower-priced alternatives, our ability to maintain our brand premium, drive net revenue growth, and sustain our profitability could be adversely affected.
If we are unable to anticipate consumer preferences and successfully develop and introduce new, innovative, and differentiated products, we may not be able to maintain or increase our sales and profitability.
Our success depends on our ability to identify and originate product trends as well as to anticipate and react to changing consumer preferences on a timely basis and effectively. Our products are subject to changing consumer preferences that cannot be anticipated with certainty. If we are unable to introduce new products or technologies on a timely basis, or if our new offerings are not accepted by guests, competitors may introduce similar products more quickly, which could undermine our goal to be viewed as a leader in technical athletic apparel innovation. Our new products may not meet consumer needs and consumer preferences could shift rapidly to different types of athletic apparel or away from the types of products we make altogether, and our future success depends in part on our ability to anticipate and respond to these changes. Our failure to anticipate and respond effectively to changing consumer preferences could lead to, among other things, lower sales, lower margins, and excess inventory levels. We may not have or successfully leverage relevant data to effectively understand and react to consumer preferences and expectations. Even if we are successful in anticipating consumer preferences, our ability to react to and address those preferences will in part depend upon our continued ability to develop and introduce , high-quality products. Our to effectively introduce new products that are accepted by consumers could result in a decrease in net revenue and excess inventory levels, which could have a material effect on our financial condition.
If any of our products have manufacturing or design defects or are otherwise unacceptable to us or our guests, our business could be harmed.
We have occasionally received, and may in the future receive, product shipments that fail to comply with our specifications or conform to our quality standards. We have also received, and may in the future receive, products that are otherwise unacceptable to us or our guests, including if they fail to meet quality, performance, and fit expectations. Under these circumstances, unless we are able to obtain replacement products in a timely manner, we risk the loss of net revenue resulting from the inability to sell those products and related increased administrative and shipping costs. Additionally, if the unacceptability of our products is not discovered until after such products are sold, our guests could lose confidence in our products, we could face a product recall, we could have regulatory exposure, and our results of operations could suffer and our business, reputation, and brand could be harmed.
The hardware previously sold by our lululemon Studio subsidiary, as well as services currently offered, can be affected by design and manufacturing defects. Sophisticated operating system software and applications, such as those offered by lululemon Studio, often have issues that can unexpectedly interfere with the intended operation of hardware or software products. Defects may also exist in components and products that we source from third parties. Any defects could make our products unsafe and create a risk of property damage or personal injury. The occurrence of real or perceived defects in any of our products, now or in the future, could result in negative publicity, regulatory investigations, or lawsuits filed against us.
Table of Contents
Our sales and profitability may decline as a result of increasing costs and decreasing selling prices.
Our business is subject to pressure on costs and pricing caused by many factors, including tariffs, intense competition, constrained sourcing capacity, inflationary pressure, the availability of qualified labor and wage inflation, pricing pressure from consumers, and changes in consumer demand. These and other factors have, and may in the future, cause us to experience increased costs, reduce our selling prices or experience reduced sales in response to increased prices, any of which could cause our operating margin to decline if we are unable to offset these factors with reductions in operating costs and could have a material adverse effect on our financial condition, operating results, and cash flows. Unionization efforts or other employee organizing activities could lead to higher people costs or reduce our flexibility to manage our employees which may negatively disrupt our operations.
Our results of operations could be materially harmed if we are unable to accurately forecast guest demand for our products.
To ensure adequate inventory supply, we forecast inventory needs and place orders with our manufacturers based on estimates of future demand. Our ability to forecast demand for our products could be affected by many factors, including an increase or decrease in demand for our or our competitors' products, our failure to accurately forecast guest acceptance of new products, product introductions by competitors, unanticipated changes in market conditions (for example, because of global economic conditions such as inflation, an economic downturn, or local and international shipping delays and labor shortages), and weakening of economic conditions or consumer confidence in future economic conditions (for example, because of inflationary pressures, or because of sanctions, restrictions, and other responses related to geopolitical events). If we fail to accurately forecast guest demand, we may experience excess inventory levels or a shortage of products available for sale.
Inventory levels in excess of demand may result in inventory write-downs or write-offs and the sale of excess inventory at discounted prices, which would cause our gross margin to suffer and could impair the strength and exclusivity of our brand. Conversely, if we underestimate demand, our manufacturers may not be able to deliver products to meet our requirements, and this could result in damage to our reputation and guest relationships.
Our limited operating experience and limited brand recognition in new international markets and new product categories may limit our expansion and cause our business and growth to suffer.
Our future growth depends in part on our expansion efforts outside of the Americas. We have limited experience with regulatory environments and market practices internationally, and we may not be able to penetrate or successfully operate in any new market. In connection with our expansion efforts, we may encounter obstacles we did not face in the Americas, including cultural and linguistic differences, differences in regulatory environments, labor practices and market practices, difficulties in keeping abreast of market, business and technical developments, and international guests' tastes and preferences. We may also encounter difficulty expanding into new international markets because of limited brand recognition leading to delayed acceptance of our technical athletic apparel by guests in these new international markets. Our failure to develop our business in new international markets or disappointing growth outside of existing markets could harm our business and results of operations.
In addition, our growth depends in part on our ability to expand product categories and introduce new product lines. We may not be able to successfully manage integration of new product categories or the new product lines with our existing products. Successfully selling new product categories and lines will require developing and testing different strategies. We may be unsuccessful in entering new product categories and developing or launching new product lines, which requires management of new suppliers, potential new customers, and new business models. We may not have the experience of selling in these new product categories and we may not be able to grow as planned. For example, we acquired MIRROR in 2020, which was rebranded as lululemon Studio, and in 2023, we discontinued selling its hardware and offering its digital app-only subscription. If we are unable to effectively and successfully further develop current and future new product categories and lines, we may not be able to increase or maintain our sales and our operating margins may be affected. This may also the attention of management and cause additional expenses.
We may, from time to time, evaluate and pursue other strategic investments or acquisitions. These involve various inherent risks and the benefits sought may not be realized.
Our future success is dependent on the service of our senior management and our ability to maintain our culture and to attract, manage, and retain highly qualified individuals.
The performance of our senior management team and other key employees and contractors may not meet our needs and expectations. Also, the loss of services of any of these key individuals, or any negative public perception with respect to
Table of Contents
these individuals, may be disruptive to, or cause uncertainty in, our business and could have a negative impact on our ability to manage and grow our business effectively. Such disruption could have a material adverse impact on our financial performance, financial condition, and the market price of our stock.
If we are unable to successfully maintain and evolve our unique culture, offer competitive compensation and benefits, and a desirable work model, we may be unable to attract and retain qualified individuals to support our business and growth. Our work model may not meet the needs and expectations of our employees and may not be perceived as favorable compared to other companies. We also face risks related to employee engagement and productivity which could result in increased headcount and labor costs.
Our Chief Executive Officer stepped down effective January 31, 2026, and we appointed interim co-Chief Executive Officers to lead during a transition period while we conduct a search for a permanent Chief Executive Officer. In addition, we have had other recent changes at the senior executive level. These changes may create uncertainty and divert management’s attention and resources. We may not identify or attract a permanent successor on a timely basis, and a prolonged search could extend uncertainty and heighten the risks described in this paragraph. Our interim leadership model may not align with expectations of employees, vendor partners, or other external stakeholders, and could negatively affect our operations, strategic initiatives, employee engagement, and retention. These changes may also lead to negative public perception, including among consumers and our brand community. Any resulting disruption could have a material adverse impact on our business, financial performance, or the market price of our stock.
We may not be able to effectively manage our growth and the increased complexity of our business and as a result our brand image and financial performance may suffer.
We may be unable to achieve our growth objectives if we do not have the right level of efficiency and scalability in our processes and operations. We may experience difficulties in obtaining sufficient raw materials and manufacturing capacity, as well as delays in production and shipments, as our products are subject to risks associated with overseas sourcing and manufacturing. We could be required to continue to expand our sales and marketing, product development and distribution functions, to upgrade our information systems and other processes and technology, and to obtain more space for our expanding workforce. Expansion could increase the strain on our resources, and we could experience operating difficulties, including in hiring, training, and managing an increasing number of employees. These difficulties could result in the erosion of our brand image and a material adverse effect on our financial condition.
Changes in consumer shopping preferences, and shifts in distribution channels could materially impact our results of operations.
We operate an omni-channel retail model and aim to efficiently and effectively serve our guests in the ways most convenient to them. We operate a combination of physical retail locations and e-commerce services via our websites, other region-specific websites, third-party online marketplaces, and mobile apps. The rapid rise of artificial intelligence ("AI")‑enabled shopping tools may reduce our control over consumer decision‑making and brand loyalty, as third‑party AI platforms increasingly influence product discovery and purchases on behalf of customers. Our physical retail locations remain a key part of our growth strategy and we view them as a valuable tool in helping us build our brand and product line as well as enabling our omni-channel capabilities. We plan to continue to expand square footage and open new company-operated stores to support our growth objectives. The diversion of sales from our company-operated stores could adversely impact our return on investment and could lead to impairment charges and store closures, including incurring lease exit costs. We could have difficulty in recreating the in-store experience through direct channels. Our to integrate our digital and physical channels and respond to these risks might impact our business and results of operations, as well as our reputation and brand. In addition, our channels have different operating margins and shifts to diversified distribution channels could impact our overall operating margins and results of operations.
We are subject to risks associated with leasing retail and distribution space subject to long-term and non-cancelable leases.
We lease the majority of our stores and many of our distribution centers, and our inability to secure appropriate real estate or lease terms could impact our operations or ability to deliver our products to the market. Our leases generally have initial terms of between two and 15 years, and generally can be extended in increments between two and five years, if at all. We generally cannot cancel these leases at our option. If an existing or new store is not profitable, and we decide to close it, as we have done in the past and may do in the future, we may nonetheless remain obligated under the applicable lease including, among other things, paying the base rent for the balance of the lease term. Similarly, we may be committed to perform our obligations even if current locations of our stores become unattractive as demographic patterns change. In addition, as our leases expire, we may fail to negotiate renewals, either on commercially acceptable terms or at all, which could require us to close stores in desirable locations.
Table of Contents
Our business is affected by seasonality, which could result in fluctuations in our operating results.
Our business is affected by the seasonal trends common to the retail apparel industry. Our annual net revenue is typically weighted more heavily toward our fourth fiscal quarter, reflecting sales during the holiday season in the Americas, while our operating expenses are more equally distributed throughout the year. Events predominantly impacting our international net revenue, such as those related to Lunar New Year and Singles Day, can fall in different fiscal quarters from year to year. Seasonality, along with other factors that are beyond our control such as weather conditions and the effects of climate change, could adversely affect our business and cause our results of operations to fluctuate.
Risks related to global economic, political, and regulatory conditions
Changes to U.S. tariff and customs policy, including the elimination of the de minimis exemption, have and may further materially increase product costs and negatively affect margins.
As a result of the increased tariffs since April 2025, the cost of inventory in the United States has increased. The United States also eliminated the de minimis duty-free exemption for certain shipments effective May 2, 2025, and an Executive Order extends this elimination globally beginning August 29, 2025, with legislation enacted to repeal the statutory exemption entirely by July 1, 2027. The countries from which we source the majority of our products are now subject to higher tariffs on imports into the United States. Further, the majority of our sales to U.S. e-commerce guests are currently fulfilled from distribution centers in Canada, and historically a significant proportion of these orders qualified for the de minimis exemption. The removal of this exemption increases the cost of fulfilling those orders. As a result, more shipments are now subject to duties, taxes, and customs procedures, which increased product costs during 2025, and which we expect to continue into 2026 and beyond. We are taking steps designed to mitigate some of the financial impact, although we expect the tariff and de minimis changes to adversely affect product costs, gross profit, and income from operations. On February 20, 2026, the U.S. Supreme Court invalidated tariffs imposed under the International Emergency Economic Power Act and immediately after, the U.S. Administration initiated new tariffs at different rates under alternative legislative powers, which increases the uncertainty around tariffs.
There has been significant volatility in U.S. tariff and customs policy recently, with frequent changes in rates, sudden elimination or reinstatement of exemptions, shifts in implementation dates, and reversals of prior actions. In addition, there is uncertainty around how tariff rules will be applied to goods routed through third countries (transshipment) and potential changes to the valuation methodology used to calculate duty, including the first sale declaration program in the United States. Changes in tariff and customs policy and legislation could affect the level of duties imposed and our overall product costs. This volatility makes it more difficult to forecast costs, plan our global supply chain, and provide reliable financial guidance. Policy changes often require rapid operational adjustments that can increase costs and reduce efficiency. Announcements of tariff and custom changes, as well as our disclosures of their potential impacts, have at times contributed to fluctuations in our stock price. We expect such volatility and uncertainty to continue, posing ongoing challenges to our operations, financial planning, and investor communications.
Macroeconomic volatility, inflationary pressures, and shifts in consumer sentiment may reduce demand for our products.
Our performance depends on consumers’ willingness and ability to purchase discretionary products. That willingness can be affected by general economic conditions and uncertainty regarding the overall future environment, tariffs, inflation, changes in interest rates, foreign exchange fluctuations, energy and fuel costs, employment levels, consumer debt, housing market trends, commodity price volatility, and tax policy changes. Geopolitical instability, public health crises, and other macroeconomic events can also weaken consumer confidence. In 2025, we experienced lower store traffic in the Americas, partially reflective of inflationary pressures and economic uncertainty weighing on discretionary spending. Prolonged or worsening macroeconomic volatility could reduce demand, impair our ability to achieve growth targets, and materially impact our net revenue, margins, and cash flows.
Global political and economic instability, including geopolitical conflicts and political polarization, could disrupt our operations and increase costs.
We operate and source products across multiple international markets, and our ability to manage a global supply chain depends on stable economic and political conditions. Global instability, trade disputes, changes in customs treatment including de minimis thresholds, alterations in duty or tariff levels, sanctions, embargoes, or other governmental actions may increase costs, lengthen lead times, or require us to adjust sourcing or distribution strategies. Legislation such as the Uyghur Forced Labor Prevention Act, and similar measures in other jurisdictions, increases compliance obligations, supply chain due diligence requirements, and the risk of shipment delays or detentions. If additional trade restrictions or compliance requirements are enacted, or enforcement becomes more stringent, our sourcing, importation, and delivery capabilities could
Table of Contents
be materially affected, resulting in increased costs and operational disruptions. In addition, heightened geopolitical tensions, including potential conflicts involving Taiwan or other regions where our suppliers are concentrated, could disrupt our supply of raw materials and finished goods. A significant portion of our technical fabrics originates from Taiwan, and any military conflict, trade embargo, or disruption affecting that region could materially impact our ability to source materials and fulfill customer orders. Political polarization in the United States has also led to increased consumer activism, brand boycotts, and public pressure campaigns targeting companies based on their perceived political or social positions. Whether or not we take public positions on social or political issues, we could face reputational harm, reduced consumer demand, or employee relations challenges if we are perceived as aligned or misaligned with particular viewpoints. These dynamics could adversely affect our brand, guest relationships, and results of operations.
Trade restrictions, tariffs, and customs changes could disrupt our supply chain and compress margins.
Our business depends on the efficient, predictable, and cost-effective movement of goods across borders. Governments may impose new tariffs, duties, quotas, customs regulations, or other trade restrictions, or modify the application of existing measures, including reductions in de minimis thresholds, new compliance requirements, or changes in enforcement priorities. These developments can increase product costs, delay shipments, disrupt sourcing, or require changes to our supply chain. If we are unable to offset these impacts through pricing, sourcing adjustments, or other measures, our margins, operational efficiency, and customer satisfaction could be adversely affected. Any price increases intended to offset these added costs could reduce consumer demand and negatively impact net revenue. Trade policy volatility, including frequent changes in rates, sudden elimination or reinstatement of exemptions, shifts in implementation dates, and uncertainty around transshipment rules, makes it more difficult to forecast costs, plan our global supply chain, and provide reliable financial guidance.
Changes in tax laws, transfer pricing, or unanticipated tax liabilities could adversely affect our effective income tax rate and profitability.
We are subject to the income tax laws of the United States, Canada, China Mainland, and other international jurisdictions. Our effective income tax rates could be unfavorably impacted by changes in the mix of earnings amongst countries with differing statutory tax rates, changes in the valuation of deferred tax assets and liabilities, changes in tax laws, new tax interpretations and guidance, the outcome of income tax audits, and any repatriation of unremitted earnings for which we have not previously accrued applicable income taxes and withholding taxes.
Repatriations from our Canadian subsidiaries may be subject to Canadian withholding taxes depending on the amount of paid-up capital available. Since 2022, we have recognized Canadian withholding taxes on accumulated earnings which are not indefinitely reinvested and cannot be repatriated free of withholding tax. We expect to continue recognizing such taxes.
We engage in a number of intercompany transactions across multiple tax jurisdictions. Although we believe that these transactions reflect the accurate economic allocation of profit, the profit allocation and transfer pricing terms may be scrutinized by local tax authorities during an audit and any resulting changes may impact our mix of earnings in countries with differing statutory tax rates. Our bilateral Advance Pricing Arrangement ("APA") with the Internal Revenue Service ("IRS") and Canada Revenue Agency ("CRA") expired at the end of 2020. During 2020, we entered into bilateral negotiations with the IRS and CRA to renew the APA, and in October 2025, the CRA withdrew from bilateral APA negotiations. We continue to apply our transfer pricing methodology but this may be subject to audit, and could result in changes to our profit allocation and effective tax rate. We are in the process of reapplying under the APA program and intend to file a new APA submission with the CRA and IRS in fiscal 2026. We are also negotiating an APA with China Mainland's State Tax Administration, the outcome of which could impact our effective tax rate.
Current economic and political conditions make tax rules in any jurisdiction subject to significant change. Changes in applicable U.S., Canadian, Chinese, or other international tax laws and regulations, or their interpretation, including the possibility of retroactive effect, could affect our income tax expense and profitability. On July 4, 2025, the U.S. passed the One Big Beautiful Bill Act ("OBBBA"), which includes the permanent extension of certain provisions of the Tax Cuts and Jobs Act of 2017, the immediate expensing of domestic research and experimental expenditures, the reinstatement of accelerated depreciation for qualified property, and modifications to the international tax provisions including changes to the global intangible low-tax income ("GILTI"), the foreign-derived intangible income ("FDII") and the base erosion and anti-abuse tax ("BEAT") provisions. On January 5, 2026, the Organization for Economic Cooperation and Development ("OECD") released administrative guidance containing a Side-by-Side ("SbS") system which modifies the operation of the OECD's Pillar Two Global Anti-Base Erosion ("GloBE") Model Rules. The SbS system provides a safe harbor for multinational enterprise ("MNE") groups with an ultimate parent entity in the US, which will exempt a US headquartered MNE group from the application of two of the three Pillar Two top-up taxes. We are currently evaluating the impact of these tax law changes on our financial statements and they may impact our income tax expense, , and capital allocation decisions.
Table of Contents
Our failure to comply with trade and other regulations could lead to investigations or actions by government regulators and negative publicity.
The labeling, distribution, importation, marketing, and sale of our products, as well as components of our products, including chemicals, are subject to regulation by various regulatory bodies. These include federal agencies such as the Federal Trade Commission, Consumer Product Safety Commission and state attorneys general in the United States, the Competition Bureau and Health Canada in Canada, the State Administration for Market Regulation of the PRC, General Administration of Customs of the PRC, as well as other federal, state, provincial, local, and international regulatory authorities in the countries in which our products are distributed or sold. Our ability to track and respond to regulations may not be sufficient to meet the increased number and complexity of regulations we are subject to globally. If we fail to comply with any of these regulations, we could become subject to enforcement actions or the imposition of significant penalties or claims, which could harm our results of operations or our ability to conduct our business. In addition, any audits and inspections by governmental agencies related to these matters could result in significant settlement amounts, damages, fines, or other penalties, financial and management resources, and result in significant legal fees. An outcome of any particular proceeding could have an impact on our business, financial condition, and results of operations. In addition, the adoption of new regulations or changes in the interpretation of existing regulations, or changes in consumer perceptions of the components of our products, may result in significant compliance costs or of product sales and could the marketing of our products, resulting in significant of net revenue.
Our international operations are also subject to compliance with the U.S. Foreign Corrupt Practices Act ("FCPA") and other anti-bribery laws applicable to our operations. In many countries, particularly in those with developing economies, it may be a local custom that businesses operating in such countries engage in business practices that are prohibited by the FCPA or other U.S. and international laws and regulations applicable to us. As we expand our operations across multiple jurisdictions, we could be subject to conflicting laws, or differing consumer sentiment on application of laws, that could lead to non-compliance which could have an adverse effect on our operations. Although we have implemented procedures designed to ensure compliance with the FCPA and similar laws, some of our employees, agents, or other partners, as well as those companies to which we outsource certain of our business operations, could take actions in violation of our policies. Any such violation could have a material and adverse effect on our business.
As we expand internationally, we are subject to complex employee regulations, and if we fail to comply with these regulations, we could be subject to enforcement actions or negative employee relations which could harm our results of operations.
Because a significant portion of our net revenue and expenses are generated in countries other than the United States, fluctuations in foreign currency exchange rates have affected our results of operations and may continue to do so in the future.
The functional currency of our international subsidiaries is generally the applicable local currency. Our consolidated financial statements are presented in U.S. dollars. Therefore, the net revenue, expenses, assets, and liabilities of our international subsidiaries are translated from their functional currencies into U.S. dollars. Fluctuations in the U.S. dollar exchange rates affect the reported amounts of net revenue, expenses, assets, and liabilities.
We also have exposure to changes in foreign currency exchange rates associated with transactions which are undertaken by our subsidiaries in currencies other than their functional currency. These include intercompany transactions and inventory purchases denominated in currencies other than the functional currency of the purchasing entity. As a result, we have been impacted by changes in foreign currency exchange rates and may be impacted for the foreseeable future. The potential impact of currency fluctuation increases as our international expansion increases.
Although we use financial instruments to hedge certain foreign currency risks, these measures may not fully offset the negative impact of foreign currency rate movements.
We are exposed to credit-related losses in the event of nonperformance by the counterparties to forward currency contracts used in our hedging strategies.
Our financial condition could be adversely affected by public health crises.
The occurrence of global or regional public health crises, such as pandemics or epidemics, and the related governmental and private sector responses, could reduce store traffic and consumer spending, result in temporary or permanent closures of retail locations, offices, and factories, and negatively impact the flow of goods. Such events could cause health officials to impose restrictions and recommend precautions that disrupt our operations, reduce consumer willingness to visit stores, and
Table of Contents
negatively affect employee availability. Health events may also cause long-term changes to consumer shopping behavior, preferences, and demand for our products.
Risks related to our supply chain
Disruptions of our supply chain, which is dependent on international suppliers, could have a material adverse effect on our operating and financial results.
Disruption of our supply chain capabilities due to trade restrictions, political instability, war (including the conflicts in the Middle East), terrorism, severe weather, natural disasters, public health crises, product recalls, labor supply shortages or stoppages, the financial or operational instability of key suppliers and carriers, changes in diplomatic or trade relationships (including any sanctions, restrictions, tariffs, and other responses such as those related to current geopolitical events), or other reasons could impair our ability to distribute our products. To the extent we are unable to mitigate the likelihood or potential impact of such events, there could be a material adverse effect on our operating and financial results.
In addition, we do not manufacture our products or raw materials and rely on suppliers and manufacturers located predominantly in APAC and China Mainland. We also source other materials used in our products, including items such as content labels, elastics, buttons, clasps, and drawcords, from suppliers located primarily in this region. Based on cost, during 2025:
• Approximately 40% of our products were manufactured in Vietnam, 18% in Cambodia, 11% in Sri Lanka, 11% in Indonesia, and 7% in Bangladesh, and the remainder in other regions; and
• Approximately 34% of the fabric used in our products originated from Taiwan, 29% from China Mainland, 10% from South Korea, 10% from Vietnam, and the remainder from other regions. Our concentration of fabric sourcing in Taiwan exposes us to geopolitical risks, including the possibility of military conflict, trade restrictions, or disruptions affecting that region.
The entire apparel industry, including our company, could face supply chain challenges as a result of the impacts of global public health crises, political instability, inflationary pressures, macroeconomic conditions, and other factors, including reduced freight availability and increased costs, port disruption, manufacturing facility closures, and related labor shortages and other supply chain disruptions.
Our supply chain capabilities may be disrupted due to these or other factors, such as severe weather, natural disasters, war or other military conflicts, terrorism, labor supply shortages or stoppages, the financial or operational instability of key suppliers or the countries in which they operate, or changes in diplomatic or trade relationships (including any sanctions, restrictions, and other responses to geopolitical events). Any significant disruption in our supply chain capabilities could impair our ability to procure or distribute our products, which would adversely affect our business and results of operations.
A relatively small number of vendors supply and manufacture a significant portion of our products, and losing one or more of these vendors could adversely affect our business and results of operations.
Many of the specialty fabrics used in our products are technically advanced textile products developed and manufactured by third parties and may be available, in the short term, from only one or a limited number of sources. We have no long-term contracts with any of our suppliers or manufacturers for the production and supply of our raw materials and products, and we compete with other companies for fabrics, other raw materials, and production. During 2025, we worked with approximately 51 vendors to manufacture our products and 65 suppliers to provide the fabric for our products. Based on cost, during 2025:
• Approximately 47% of our products were manufactured by our top five vendors, the largest of which produced approximately 15% of our products; and
• Approximately 48% of our fabrics were produced by our top five fabric suppliers, the largest of which produced approximately 20% of fabric used.
We have experienced, and may in the future experience, a significant disruption in the supply of fabrics or raw materials and may be unable to locate alternative suppliers of comparable quality at an acceptable price, or at all. In addition, if we experience significant increased demand, or if we need to replace an existing supplier or manufacturer, we may be unable to locate additional supplies of fabrics or raw materials or additional manufacturing capacity on terms that are acceptable to us, or at all, or we may be unable to locate any supplier or manufacturer with sufficient capacity to meet our requirements or fill our orders in a timely manner. Identifying a suitable supplier is an involved process that requires us to become satisfied with its quality control, responsiveness and service, financial stability, and labor and other ethical practices. Even if we are able to
Table of Contents
expand existing or find new manufacturing or fabric sources, we may encounter delays in production and added costs as a result of the time it takes to train our suppliers and manufacturers in our methods, products, and quality control standards.
Our supply of fabric or manufacture of our products could be disrupted or delayed by economic or political or global health conditions, and the related government and private sector responsive actions such as closures, restrictions on product shipments, and travel restrictions. Delays related to supplier changes could also arise due to an increase in shipping times if new suppliers are located farther away from our markets or from other participants in our supply chain. In addition, freight capacity issues continue to persist worldwide as there is much greater demand for shipping and reduced capacity and equipment. Any delays, interruption, or increased costs in the supply of fabric or manufacture of our products could have an adverse effect on our ability to meet guest demand for our products and result in lower net revenue and income from operations both in the short and long term.
Our business could be harmed if our suppliers and manufacturers do not comply with our Vendor Code of Ethics or applicable laws.
While we require our suppliers and manufacturers to comply with our Vendor Code of Ethics, which includes labor, health and safety, and environmental standards, we do not control their operations. If they do not comply with these standards or applicable laws or there is negative publicity regarding the production methods of any of our suppliers or manufacturers, even if unfounded or not specific to our supply chain, our reputation and sales could be adversely affected, we could be subject to legal liability, or could cause us to contract with alternative suppliers or manufacturing sources.
The fluctuating cost of raw materials and the cost of producing our products could increase our cost of goods sold.
The fabrics used to make our products include synthetic fabrics whose raw materials include petroleum-based products. Our products also include silver and natural fibers, including cotton. Our costs for raw materials are affected by, among other things, weather, consumer demand, speculation on the commodities market, the relative valuations and fluctuations of the currencies of producer versus consumer countries, and other factors that are generally unpredictable and beyond our control. Any and all of these factors may be exacerbated by global climate change. In addition, political instability, trade relations, sanctions, inflationary pressure, or other geopolitical or economic conditions could cause raw material costs to increase or impact availability and have an adverse effect on our future margins. Increases in the cost of raw materials, including petroleum or the prices we pay for silver and our cotton yarn and cotton-based textiles, could have a material adverse effect on our cost of goods sold, results of operations, financial condition, and cash flows.
A significant portion of our products are produced in South and South East Asia and increases in the costs of labor and other costs of doing business in the countries in this region could significantly increase our costs to produce our products and could have a negative impact on our operations and earnings. Factors that could negatively affect our business include labor shortages and increases in labor costs, labor disputes, pandemics, the impacts of climate change, difficulties and additional costs in transporting products manufactured from these countries to our distribution centers and significant revaluation of the currencies used in these countries, which may result in an increase in the cost of producing products. Also, the imposition of trade sanctions or other regulations against products imported by us from, or the loss of "normal trade relations" status with any country in which our products are manufactured, could significantly increase our cost of products and harm our business.
If we encounter problems with our distribution system, our ability to deliver our products to the market and to meet guest expectations could be harmed.
We rely on our distribution facilities for our product distribution. They utilize and rely on computer controlled and automated equipment, which means their operations may be subject to a number of risks related to malware, the proper operation of software and hardware, electronic or power interruptions, or other system failures. In addition, our operations could also be interrupted by labor shortages and disruptions, pandemics, the impacts of climate change, extreme or severe weather conditions or by floods, fires, or other natural disasters near our distribution centers. The concentration of our primary offices, several of our distribution centers, and a number of our stores along the west coast of North America could amplify the impact of a natural disaster occurring in that area to our business. If we encounter problems with our distribution system, our ability to meet guest expectations, manage inventory, complete sales, and achieve objectives for operating efficiencies could be .
Table of Contents
Risks related to information security and technology
We may be unable to safeguard against security breaches which could damage our customer relationships and result in significant legal and financial exposure.
We receive and maintain confidential, proprietary, and personally identifiable information, including for example, credit card information, and information about our customers, our employees, job applicants, and other third parties. Our business employs systems and websites that allow for the storage, transmission, and safeguarding of this information. However, despite our safeguards and security processes and protections, security breaches could occur and expose us to a risk of theft or misuse of this information, and could result in litigation and potential liability.
The retail industry has been the target of recent cyberattacks. We may not have the resources or technical sophistication to anticipate, detect, or prevent rapidly evolving types of cyberattacks. Attacks may be targeted at us, our vendors or customers, or others who have entrusted us with information. In addition, despite taking measures to safeguard our information security and privacy environment from security breaches, our customers and our business, including our supply chain, could still be exposed to risk. Actual or anticipated attacks may cause us to incur increasing costs including to deploy additional personnel and protection technologies, train employees and engage third-party experts and consultants. We have in the past experienced, and we expect to continue to experience, cyberattacks, including phishing, and other attempts to breach, or gain unauthorized access to, our systems. Although these attacks have not had a material impact on our operations to date, they may in the future. In addition, the increased use of employee-owned devices for communications as well as work-from-home arrangements present additional operational risks to our technology systems, including increased risks of . in AI and other technological developments could increase the sophistication of and may result in the technology used by us to protect transaction or other data being or compromised. In addition, our increasing use of AI tools and technologies, including generative AI, introduces new security risks, such as the potential for of AI models, data exposure through AI systems, or reliance on AI outputs that may be or biased. Measures we implement to protect may also have the potential to impact our customers' shopping experience or decrease activity on our websites by making them more to use or requiring website .
Data and security breaches can also occur as a result of non-technical issues including intentional or inadvertent breach, including by misusing AI, by employees or persons with whom we have commercial relationships that result in the unauthorized release or use of personal or confidential information, and we may in some cases be held responsible for such incidents under evolving privacy laws. Any compromise or breach of our security could result in a violation of applicable privacy and other laws, significant legal and financial exposure, and damage to our brand and reputation or other harm to our business.
We are subject to an evolving cybersecurity, privacy, and AI regulatory environment, and failure to comply with new or existing requirements, including federal cybersecurity incident disclosure obligations, could result in regulatory enforcement and further financial or reputational harm. Emerging laws and regulations governing AI, including the European Union AI Act, China's generative AI regulations, and potential U.S. federal and state AI legislation, may impose new compliance obligations, restrict certain uses of AI technology, or require transparency regarding AI-driven decision-making. Data localization and sovereignty requirements in certain jurisdictions may require us to store and process data locally, increasing operational complexity and costs. Sovereign AI initiatives, under which governments require AI systems to be developed, trained, or operated within national borders using local data, could limit our ability to deploy centralized AI tools globally and may require significant investment in region-specific infrastructure. Our cybersecurity insurance may not cover all losses or liabilities related to cyberattacks. Furthermore, a sophisticated attack could persist undetected within our systems for an extended period before being discovered, potentially amplifying its impact.
Privacy and data protection laws increase our compliance burden.
We are subject to a variety of privacy and data protection laws and regulations that change frequently and have requirements that vary across jurisdictions. For example, we are subject to obligations under privacy laws such as the General Data Protection Regulation ("GDPR") in the European Union, the Personal Information Protection and Electronic Documents Act (“PIPEDA”) in Canada, the California Consumer Privacy Act ("CCPA") as modified by the California Privacy Rights Act (“CPRA”), and the Personal Information Protection Law (“PIPL”) in the People's Republic of China ("PRC") (2) . Some privacy laws prohibit or restrict the transfer of personal information to certain other jurisdictions and may require data localization. We are subject to privacy and data protection audits or investigations by various government agencies. Our efforts to comply with privacy laws may complicate our operations and add to our compliance costs. A significant breach or failure or perceived failure by us or our third-party service providers to comply with these laws, regulations, policies or regulatory guidance may
(2) PRC includes China Mainland, Hong Kong SAR, Taiwan, and Macau SAR.
Table of Contents
subject us to potential regulatory enforcement activity, fines, private litigation including class actions, and other costs and might have a materially adverse impact on our reputation, business operations, financial condition, or results of operations.
Disruption of our technology systems or unexpected network interruption could disrupt our business.
We are dependent on networks, technology systems, and third parties to operate our e-commerce websites, process transactions, respond to guest inquiries, manage inventory, purchase, sell and ship goods, and maintain cost-efficient operations. The failure of our technology systems to operate properly or effectively, problems with transitioning to upgraded or replacement systems, or difficulty in integrating new systems, could adversely affect our business. In addition, if changes in technology cause our information systems to become obsolete, we do not effectively leverage AI, or if our information systems are inadequate to handle our operations, we could lose guests.
Our technology systems, websites, and operations of third parties on whom we rely, may encounter damage, slowdown, or disruption including complete outages caused by a failure to upgrade systems, system failures, malware, computer hackers including cyberattacks assisted by AI, natural disasters, or other causes. These could cause information, including data related to guest orders, to be lost or delayed which could, especially if the disruption or slowdown occurred during the holiday season, result in delays in the delivery of products to our stores and guests or lost sales, which could reduce demand for our products and cause our sales to decline. Any significant in our technology systems or websites could our reputation and credibility, and could have a material effect on our business, financial condition, and results of operations.
Our technology-based systems that give our customers the ability to shop with us online may not function effectively.
Many of our customers shop through our e-commerce websites and mobile apps and we use social media in addition to these websites and apps to interact with our customers and to enhance their shopping experience. We may not efficiently and effectively implement and leverage technological advancements such as AI to support these interactions, which could have an adverse impact on our results of operations if our competitors are more effective than us, if this disrupts our operations, or if this leads to increased operating costs. Any failure on our part to provide attractive, effective, reliable, user-friendly e-commerce platforms that offer a wide assortment of merchandise with rapid delivery options and that continually meet the changing expectations of shoppers could place us at a competitive disadvantage, result in the loss of e-commerce and other sales, our reputation with customers, have a material impact on the growth of our e-commerce business globally and could have a material impact on our business and results of operations.
Risks related to intellectual property
Our fabrics and manufacturing technology generally are not patented and can be imitated by our competitors. If our competitors sell products similar to ours at lower prices, our net revenue and profitability could suffer.
The intellectual property rights in the technology, fabrics, and processes used to manufacture our products generally are owned or controlled by our suppliers and are generally not unique to us. Our ability to obtain intellectual property protection for our products is therefore limited. We hold limited patents and exclusive intellectual property rights in the technology, fabrics or processes underlying our products. As a result, our current and future competitors are able to manufacture and sell products with performance characteristics, fabrics and styling similar to our products. Because many of our competitors have significantly greater financial, distribution, marketing, and other resources than we do, they may be able to manufacture and sell products based on our fabrics and manufacturing technology at lower prices than we can. If our competitors sell products similar to ours at lower prices, our net revenue and profitability could suffer.
Our failure or inability to protect our intellectual property rights could diminish the value of our brand and weaken our competitive position.
We currently rely on a combination of patent, copyright, trademark, trade dress, trade secret, and unfair competition laws, as well as confidentiality procedures and licensing arrangements, to establish and protect our intellectual property rights. The steps we take to protect our intellectual property rights may not be adequate to prevent infringement of these rights by others, including imitation of our products and misappropriation of our brand. In addition, any of our intellectual property rights may be challenged, which could result in them being narrowed in scope or declared invalid or unenforceable, or our intellectual property protection may be unavailable or limited in some international countries where laws or law enforcement practices may not protect our intellectual property rights as fully as in the United States or Canada, and it may be more difficult for us to successfully challenge the use of our intellectual property rights by other parties in these countries. If we fail to protect and maintain our intellectual property rights, the value of our brand could be , and our competitive position may .
Table of Contents
Our trademarks, patents, and other proprietary rights could potentially conflict with the rights of others and we may be prevented from selling some of our products.
Our success depends in large part on our brand image. We believe that our trademarks, patents, and other proprietary rights have significant value and are important to identifying and differentiating our products from those of our competitors and creating and sustaining demand for our products. We have applied for and obtained some United States, Canada, and international trademark registrations and patents, and will continue to evaluate additional trademarks and patents as appropriate. However, some or all of these pending trademark or patent applications may not be approved by the applicable governmental authorities. Moreover, even if the applications are approved, third parties may seek to oppose or otherwise challenge these applications or registrations. Additionally, we may face obstacles as we expand our product line and the geographic scope of our sales and marketing. Third parties may assert intellectual property claims against us, particularly as we expand our business and the number of products we offer. Our defense of any claim, regardless of its merit, could be expensive and time-consuming and could divert management resources. Successful us could result in significant monetary liability or prevent us from selling some of our products. In addition, resolution of may require us to redesign our products, license rights from third parties, or using those rights altogether. Any of these events could our business and cause our results of operations, liquidity, and financial condition to .
Risks related to legal and governance matters
Our business could be negatively affected as a result of actions of stockholders, activists, or shifting consumer sentiment.
We may be subject to actions or proposals from stockholders, political or consumer activists, or others that may not align with our business strategies or the interests of our other stockholders. For example, certain stockholders have recently publicly expressed views regarding our strategic direction, leadership, and governance, including the search for a new chief executive officer. On December 29, 2025, Dennis J. "Chip" Wilson delivered a notice of intent to nominate three directors for election at the 2026 Annual Meeting of Stockholders and submitted a non-binding stockholder proposal requesting that our board of directors take all necessary steps to immediately declassify the board so that all directors are elected on an annual basis.
Other actions or proposals could include responses to geopolitical conflict, including between the PRC and other countries, or to our perceived positions on social, political, or cultural issues in the United States or elsewhere. Consumer boycotts, negative social media campaigns, or other forms of public pressure, whether based on accurate perceptions or not, could adversely affect our brand reputation, guest relationships, and sales. Responding to such actions can be costly and time-consuming, disrupt our business and operations, and divert the attention of our board of directors, management, and employees from the pursuit of our business strategies. Stockholders, political or consumer activists, or others may create perceived uncertainties as to the future direction of our business or strategy which may be exploited by our competitors and may make it more difficult to attract and retain qualified personnel and potential guests, and may affect our relationships with current guests, vendors, investors, and other third parties. Responding to the proxy contest and any related actions by Mr. Wilson or other stockholders may our business, cause us to incur substantial costs, and the attention of our board of directors, management, and employees from the pursuit of our business strategies. The perceived uncertainties as to our future direction also could affect the market price and of our securities.
We are subject to periodic claims and litigation that could result in unexpected expenses and could ultimately be resolved against us.
From time to time, we are involved in litigation and other proceedings, including matters related to product liability claims, stockholder class action and derivative claims, commercial disputes and intellectual property, as well as trade, regulatory, employment, and other claims related to our business. Any of these proceedings could result in significant settlement amounts, damages, fines, or other penalties, divert financial and management resources, and result in significant legal fees. An unfavorable outcome of any particular proceeding could exceed the limits of our insurance policies or the carriers may decline to fund such final settlements and/or judgments and could have an adverse impact on our business, financial condition, and results of operations. In addition, any proceeding could negatively impact our reputation among our guests and our brand image.
There is considerable patent and other intellectual property development activity in our market, and litigation, based on allegations of infringement or other violations of intellectual property, is frequent in the fitness and technology industries. Furthermore, it is common for individuals and groups to purchase patents and other intellectual property assets for the purpose of making claims of infringement to extract settlements from companies like ours. Our use of third-party content, including music content, software, and other intellectual property rights may be subject to claims of infringement or misappropriation. We cannot guarantee that our internally developed or acquired technologies and content do not or will not
Table of Contents
infringe the intellectual property rights of others. From time to time, our competitors or other third parties may claim that we are infringing upon or misappropriating their intellectual property rights, and we may be found to be infringing upon such rights. Any claims or litigation could cause us to incur significant expenses and, if successfully asserted against us, could require that we pay substantial damages or ongoing royalty payments, prevent us from offering our platform or services or using certain technologies, force us to implement expensive workarounds, or impose other unfavorable terms. We expect that the occurrence of infringement claims is likely to grow as the market for fitness products and services grows and as we introduce new and updated products and offerings. Accordingly, our exposure to resulting from could increase and this could further exhaust our financial and management resources. Any of the foregoing could prevent us from competing effectively and could have an effect on our business, financial condition, and operating results.
Anti-takeover provisions of Delaware law and our certificate of incorporation and bylaws could delay and discourage takeover attempts that stockholders may consider to be favorable.
Certain provisions of our certificate of incorporation and bylaws and applicable provisions of the Delaware General Corporation Law may make it more difficult or impossible for a third party to acquire control of us or effect a change in our board of directors and management. These provisions include:
• the classification of our board of directors into three classes, with one class elected each year;
• prohibiting cumulative voting in the election of directors;
• the ability of our board of directors to issue preferred stock without stockholder approval;
• the ability to remove a director only for cause and only with the vote of the holders of at least 66 2/3% of our voting stock;
• a special meeting of stockholders may only be called by our chairman or Chief Executive Officer, or upon a resolution adopted by an affirmative vote of a majority of the board of directors, and not by our stockholders;
• prohibiting stockholder action by written consent; and
• our stockholders must comply with advance notice procedures in order to nominate candidates for election to our board of directors or to place stockholder proposals on the agenda for consideration at any meeting of our stockholders.
In addition, we are governed by Section 203 of the Delaware General Corporation Law which, subject to some specified exceptions, prohibits "business combinations" between a Delaware corporation and an "interested stockholder," which is generally defined as a stockholder who becomes a beneficial owner of 15% or more of a Delaware corporation's voting stock, for a three-year period following the date that the stockholder became an interested stockholder. Section 203 could have the effect of delaying, deferring, or preventing a change in control that our stockholders might consider to be in their best interests.
Risks related to environmental, social, and governance issues
Climate change and related pressures may adversely impact our business, supply chain, and financial results.
We are subject to physical and transitional risks related to climate change, as well as increasing pressure from investors, regulators, and advocacy organizations regarding climate-related disclosures and action. Physical risks, such as rising global temperatures, changing weather patterns, and increasing frequency and severity of extreme weather events, could disrupt our supply chain, increase raw material and production costs (including cotton availability and pricing), and reduce consumer demand or shift purchasing behavior. These changes may also result in water scarcity, energy constraints, and infrastructure damage affecting our facilities, vendors, or logistics. In addition, growing regulatory and stakeholder expectations around climate-related disclosures, targets, and emissions reductions may increase compliance costs and require additional resources. Climate-related regulations vary widely across jurisdictions and are evolving rapidly, creating uncertainty around our obligations. Voluntary alignment with emerging standards or initiatives may also require capital investment or operational adjustments.
We also face increasing scrutiny and conflicting pressure from institutional investors, proxy advisory firms, regulatory agencies, political groups, and other stakeholders. Some advocate for accelerated climate commitments and detailed climate-related financial disclosures, while others have challenged or opposed such actions through litigation, legislative action, or public campaigns. These conflicting expectations and potential enforcement risks, whether from taking action or choosing not to do so, could adversely impact our reputation, operations, investor relationships, or legal risk profile.
Table of Contents
We face heightened scrutiny and legal risks from competing pressures regarding our ESG practices and disclosures.
We are increasingly subject to scrutiny from institutional investors, advocacy organizations, and other stakeholders regarding our environmental, social, and governance ("ESG") policies, disclosures, and performance. Some stakeholders advocate for greater transparency and more aggressive ESG-related commitments across areas such as human capital, labor practices, supply chain oversight, and diversity. Others, including advocacy organizations and litigation-focused groups, have criticized ESG-related initiatives and have challenged companies, through lawsuits, regulatory investigations, and public campaigns, for implementing ESG strategies they deem inconsistent with fiduciary duties or legal obligations.
We may face reputational, operational, or legal consequences if our ESG practices or disclosures are perceived as insufficient, inconsistent, misleading, or politically misaligned. We may also face additional compliance costs as regulatory requirements evolve, including potential SEC or international climate and sustainability disclosure rules. We could also incur additional costs to comply with divergent stakeholder expectations and evolving ESG disclosure frameworks, and we may be subject to increased activism, legal exposure, or reputational risk, regardless of whether our ESG practices are expanded or limited in the future.
ITEM 1C. CYBERSECURITY
Risk Management and Strategy
Our business operations and relationships with customers and suppliers are heavily reliant on technology. We operate a cybersecurity program designed to assess and manage our material cybersecurity risks and protect our technology systems and data, and to detect and respond to cybersecurity incidents. While our program is designed to reduce risk, no program can eliminate all cybersecurity risk or the risk of cyber incidents.
We manage strategic risks, including cybersecurity risk, through our Enterprise Risk Management program which has direct involvement from the board of directors, the audit committee, and senior management. Through this process, we have identified cybersecurity as a risk management priority.
Governance
Our board of directors is responsible for the oversight of cybersecurity risks and has delegated primary responsibility to the audit committee, which is responsible for overseeing our enterprise risk assessments and management policies, procedures, and practices (including regarding those risks related to information security, cybersecurity, data protection, and AI).
The audit committee maintains a cybersecurity sub-committee that is comprised of our Chief AI & Technology Officer ("CATO"), our SVP, Chief Information Security Officer ("CISO"), and representatives from the audit committee and board of directors that have knowledge and experience in cybersecurity matters. The cybersecurity sub-committee reviews our cybersecurity risk assessments and the steps being taken to monitor, control, and report on those risks as well as discusses regulatory and market developments. They also review our process for identifying and responding to cybersecurity incidents in a timely manner, and details of cybersecurity attacks or incidents which have occurred.
Management generally meets with, and provides reports to, the cybersecurity sub-committee on a quarterly basis. The audit committee and board of directors receive periodic reports regarding the activities of the cybersecurity sub-committee. These reports and meetings are designed to inform the board of directors and committees about the current state of our information security program including cybersecurity risks, the nature, timing, and extent of cybersecurity incidents, if any, and the resolution of such matters.
Cybersecurity Program and Incident Response
Our CISO is responsible for our cybersecurity program, including risk assessments, information security activities, and controls. The CISO is responsible for establishing and maintaining corporate information security policies and overseeing our risk management activities, which prioritize vulnerability management, risk reduction, and prevention. Our CISO also leads our Cyber Defense and Incident Response (“CDIR”) team which identifies, assesses, escalates, and remediates cybersecurity incidents. Our current CISO, who joined lululemon in March 2026, has approximately 20 years of technology experience, including with cybersecurity, data science, and production engineering teams. Our previous CISO is currently serving in an advisor role during the transition.
Table of Contents
The CDIR team monitors and manages key cybersecurity risks, including threats related to third parties, cloud security, malicious code, e-commerce systems, and store technology, as well as identifying and assessing new potential cyber threats. It also conducts security reviews, assesses vulnerabilities, and analyzes threat intelligence to strengthen our cyber defenses and incident response efforts.
As part of our cybersecurity program, we conduct cybersecurity awareness training including phishing simulations and supplemental campaigns as well as mandatory e-learning for all our employees. Our employees have multiple mechanisms for reporting cybersecurity and data privacy concerns. We work with third-party cybersecurity advisors to undertake assessments of our critical systems and to remediate any high-risk vulnerabilities identified. We also engage third parties to perform penetration testing on our key systems to identify potential weaknesses.
As part of our cyber incident response plan, we utilize an established framework to assess the severity of cybersecurity incidents. Under the plan, incidents are escalated to relevant senior management, and the board of directors, as appropriate, based on their severity. Our disclosure committee assesses the materiality of severe incidents including both quantitative and qualitative factors.
Third Parties
We utilize third-party service providers as a normal part of our business operations. To address cybersecurity risks arising from our relationships with third-party service providers, we employ a vendor risk program . We monitor risks relating to potential compromises of sensitive information at our third-party service providers and re-evaluate the risks associated with our partners periodically. Prior to exchanging our data with third-party service providers, they are required to go through a vendor risk assessment. We also conduct third-party security reviews and evaluate their network, processes, and systems. In addition, we obtain annual attestation reports related to data security and privacy from certain third-party service providers to further support compliance with industry-standard cybersecurity protocols.
Impact of Cybersecurity Risks on Strategy and Results
As of the date of this annual report, we are not aware of any cybersecurity incidents that have had a material impact on our business. However, like many companies, we continue to face ongoing cyber threats, including phishing and other unauthorized access attempts. These or other incidents could materially affect our business in the future. For more information, see “Risks related to information security and technology” included in Item 1A. Risk Factors of this annual report.
