Ethan Allen (ETD) Risk Analysis

Our design centers are typically located in urban settings as freestanding destinations or as part of suburban shopping malls, depending upon the real estate opportunities in a particular market. Our business competes with other retailers and as a result, our success may be affected by our ability to renew current design center leases and to select and secure appropriate retail locations for existing and future design centers. We have potential exposure to market risk related to conditions in the commercial real estate market. At June 30, 2025, there were 142 Company-operated retail design centers averaging approximately 14,000 square feet in size per location. Of these 142 properties, we own 48 and lease 94. Our retail segment real estate holdings could suffer significant impairment in value if we are forced to close design centers and sell or lease the related properties during periods of weakness in certain markets. We are also exposed to risk related to conditions in the commercial real estate rental market with respect to the right-of-use assets we carry on our balance sheet for leased design centers and retail home delivery centers. At June 30, 2025, the unamortized balance of such right-of-use assets totaled $109.2 million. Should we have to close or abandon one or more of these leased locations, we could incur additional impairment charges if rental market conditions do not support a fair value for the right of use asset in excess of carrying value.

Maintaining and enhancing our brand is critical to our ability to expand our base of customers and may require us to make substantial investments. Our advertising campaigns utilize direct mail, digital, newspapers, magazines, television, and radio to maintain and enhance our existing brand equity. We cannot provide assurance that our advertising and other efforts to promote and maintain awareness of our brand will not require us to incur substantial costs. If these efforts are unsuccessful or we incur substantial costs in connection with these efforts, our business, operating results and financial condition could be materially adversely affected.

We believe that our copyrights, trademarks, service marks, trade secrets, and all of our other intellectual property are important to our success. We rely on patent, trademark, copyright and trade secret laws, and confidentiality and restricted use agreements, to protect our intellectual property and may seek licenses to intellectual property of others. Some of our intellectual property is not covered by any patent, trademark, or copyright or any applications for the same. We cannot provide assurance that agreements designed to protect our intellectual property will not be breached, that we will have adequate remedies for any such breach, or that the efforts we take to protect our proprietary rights will be sufficient or effective. Any significant impairment of our intellectual property rights or failure to obtain licenses of intellectual property from third parties could harm our business or our ability to compete. Moreover, we cannot provide assurance that the use of our technology or proprietary know-how or information does not infringe the intellectual property rights of others. If we have to litigate to protect or defend any of our rights, such litigation could result in significant expense.

Cyberattacks designed to gain access to and extract sensitive information or otherwise affect or compromise the confidentially, integrity, and availability of information, including phishing attempts, denial of service attacks, and malware or ransomware incidents, have occurred over the last several years at a number of major global companies and have resulted in, among other things, the unauthorized release of confidential information, system failures including material business disruptions, and negative brand and reputational impacts. Despite widespread recognition of the cyberattack threat and improved data protection methods, cyberattacks on organizations continue to be sophisticated, persistent, and ever-changing, making it difficult to prevent and detect these attacks. Additionally, we rely on third-party service providers to execute certain business processes and maintain certain information technology systems and infrastructure, and we supply such third-party providers with the personal information required for those services. Cyberattacks are becoming more sophisticated, and in some cases have caused significant harm. Computer hackers and others routinely attempt to breach the security of technology products, services and systems, and to fraudulently induce employees, customers, or others to disclose information or unwittingly provide access to systems or data. We operate many aspects of our business through server and web-based technologies, and store various types of data on such servers or with third parties who in turn store it on servers and in the cloud. Any disruption to the internet or to the Company's or its service providers' global technology infrastructure, including malware, insecure coding, "Acts of God," attempts to penetrate networks, data theft or loss and human error, could have adverse effects on the Company's operations. A cyberattack of our systems or networks that impairs our information technology systems could disrupt our business operations and result in loss of service to customers. We believe we have a comprehensive cybersecurity program designed to protect and preserve the integrity of our information technology systems. We expect to continue to experience attempted cyberattacks of our IT systems or networks, through malware, ransomware, computer viruses, phishing attempts, social engineering and other means of unauthorized access; however, none of the attempted cyberattacks has had a material impact on our operations or financial condition to date. If a computer security breach or cyberattack affects our systems or results in the unauthorized release of proprietary or personally identifiable information, our reputation could be materially damaged, our customer confidence could be diminished, and our operations, including technical support for our devices, could be impaired. We would also be exposed to litigation and potential liability, which could have a material adverse effect on our business, results of operations, cash flows and financial condition. Moreover, the costs to eliminate or alleviate network security problems, bugs, viruses, worms, malicious software programs and security vulnerabilities could be significant, and our efforts to address these problems may not be successful, resulting potentially in the theft, loss, destruction or corruption of information we store electronically, as well as unexpected interruptions, delays or cessation of service, any of which could cause harm to our business operations. Where necessary and applicable, we have enabled certain employees to arrange for a hybrid work approach. Although we continue to implement strong physical and cybersecurity measures to ensure that our business operations remain functional and to ensure uninterrupted service to our customers, our systems and our operations remain vulnerable to cyberattacks and other disruptions due to the fact that certain employees work remotely and we cannot guarantee that our mitigation efforts will be effective.

Our primary and back-up information technology systems are subject to damage or interruption from power outages, computer and telecommunications failures, viruses, phishing attempts, spoofing, cyberattacks, malware and ransomware attacks, security breaches, severe weather, natural disasters, and errors by employees or third-party contractors. Though losses arising from some of these issues may be covered by insurance, interruptions to our critical business information technology systems or failure of our back-up systems could result in longer production times or negatively impact clients resulting in damage to our reputation and a reduction in sales. If our critical information technology systems or back-up systems were damaged or ceased to function properly, we might have to make a significant investment to repair or replace them. Further, information systems of our suppliers or service providers may be vulnerable to attacks by hackers and other security breaches, including computer viruses and malware, through the internet, email attachments and persons with access to these information systems. If our suppliers or service providers were to experience a system disruption, attack or security breach that impacts a critical function, it could result in disruptions in our supply chain, the loss of sales and customers, potential liability for damages to our customers, reputational damage and incremental costs, which could adversely affect our business, results of operations and profitability.

We make certain accounting estimates and projections with regards to individual design center operations as well as overall Company performance in connection with our impairment analysis for long-lived assets in accordance with applicable accounting guidance. An impairment charge may be required if the impairment analysis indicates that the carrying value of an asset exceeds the sum of the expected undiscounted cash flows of the asset. The projection of future cash flows used in this analysis requires the use of judgment and a number of estimates and projections of future operating results, including sales growth rates. If actual results differ from Company estimates, additional charges for asset impairments may be required in the future. If impairment charges are significant, our financial results could be negatively affected.