Flowers Foods (FLO) Risk Analysis

Parties with which we do business may experience uncertainty associated with the Simple Mills Acquisition, including with respect to current or future business relationships with us following the closing of the Simple Mills Acquisition. Our business relationships may be subject to disruption as customers, distributors, suppliers, vendors and joint venture partners may attempt to delay or defer entering into new business relationships with us, negotiate changes in existing business relationships with us or consider entering into business relationships with parties other than us following the Simple Mills Acquisition. These disruptions could have a material and adverse effect on the results of operations, cash flows and financial position of us, regardless of whether the Simple Mills Acquisition is completed, as well as a material and adverse effect on our ability to realize the expected benefits of the Simple Mills Acquisition.

As a producer and marketer of food items, our production processes, product quality, packaging, labeling, storage, and distribution, and the safety of food products and the health and safety of our employees, are subject to regulation by various federal, state and local government entities and agencies. In addition, the marketing and labeling of food products has come under increased scrutiny in recent years, and the food industry has been subject to an increasing number of legal proceedings and claims relating to alleged false or deceptive marketing and labeling under federal, state or local laws or regulations. Uncertainty regarding labeling standards has led to customer confusion and legal challenges. The imposition or proposed imposition of additional product labeling or warning requirements could reduce overall consumption of our products, lead to negative publicity (whether based in scientific fact or not) or leave consumers with the perception (whether or not valid) that our products do not meet their health and wellness needs. Such factors could adversely affect our sales and results of operations. In addition, our operations are subject to extensive and increasingly stringent regulations administered by the Environmental Protection Agency related to the discharge of materials into the environment and the handling and disposition of waste. Failure to comply with these regulations can have serious consequences, including civil and administrative penalties and negative publicity. Changes in applicable laws or regulations or evolving interpretations thereof, including increased government regulations to limit carbon dioxide and other greenhouse gas emissions as a result of concern over climate change, may result in increased compliance costs, capital expenditures, and other financial obligations for us, which could affect our profitability or impede the production or distribution of our products, and affect our sales. Compliance with federal, state and local laws and regulations is costly and time consuming. Failure to comply with, or violations of, applicable laws and the regulatory requirements of one or more of these entities and agencies could subject us to civil remedies, including fines, injunctions, recalls or seizures, as well as potential criminal sanctions, any of which could result in increased operating costs and adversely affect our results of operations and financial condition. Legal proceedings or claims related to our marketing could damage our reputation and/or adversely affect our business or financial results.

We have several large customers that account for a significant portion of sales, and the loss of one of our large customers could adversely affect our financial condition and results of operations. Our top ten customers accounted for 56.7% of sales during Fiscal 2024. Our largest customer, Walmart/Sam's Club, accounted for 22.4% during this period. These customers do not typically enter long-term sales contracts, and instead make purchase decisions based on a combination of price, product quality, consumer demand, and customer service performance. At any time, there is a risk that our customers will give higher priority to their own products or to the products of our competitors, resulting in less shelf space for our products. Additionally, our customers may face financial or other difficulties that may impact their operations and their purchases from us. Disputes with significant suppliers could also adversely affect our ability to supply products to our customers. If our sales to one or more of these customers are reduced, this reduction may adversely affect our business, financial condition or results of operations.

The efficient operation of our business depends on our IT systems. We rely on our IT systems to effectively manage our business data, communications, supply chain, order entry and fulfillment, and other business processes. The failure of our IT systems (including those provided to us by third-parties) to perform as we anticipate could disrupt our business and could result in billing, collecting and ordering errors, processing inefficiencies, and the loss of sales and customers, causing our business and results of operations to suffer. In addition, our IT systems (including those provided to us by third parties), and the IT systems of our third-party business partners, may be vulnerable to damage or interruption from circumstances beyond our control, including fire, natural disasters, systems failures, security breaches or intrusions (including theft of customer, consumer or other confidential data), and cyber incidents. Cyber-attacks and other cyber incidents are occurring more frequently in the United States and are becoming more sophisticated with a wide range of expertise and motives. Such cyber-attacks and cyber incidents can take many forms, including extortion, denial of service, employee or personnel failures, or social engineering through phishing, ransomware or malware. Cybersecurity threat actors also may attempt to exploit vulnerabilities through software including software that is commonly used by companies in cloud-based services and bundled software. In addition, the risk of cyber-attacks has increased in connection with the military conflict between Russia and Ukraine, the conflict in the Middle East, and the resulting geopolitical conflicts. In light of those and other geopolitical events, nation-state actors or their supporters may launch retaliatory cyber-attacks, and may attempt to cause supply chain and other third-party service provider disruptions, or take other geopolitically motivated retaliatory actions that may disrupt our business operations, result in data compromise,or both. These circumstances increase the likelihood of cyber-attacks and/or security breaches. In addition, the rapid evolution and increased adoption of artificial intelligence ("AI") and machine learning technologies may intensify our cybersecurity risks and make it more difficult to anticipate and implement protective measures to recognize, detect, and prevent the occurrence of any of the cyber events described above. Further, the technology and techniques used in cyberattacks are constantly evolving and the pace and extent of that evolution may accelerate with the use of emerging technologies including AI and machine learning. There can be no assurance that the policies, protocols, and practices that we follow to address cybersecurity, including our controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information. We may incur significant costs in protecting or remediating cyber-attacks or other cyber incidents. If we are unable to prevent physical and electronic break-ins, cyber-attacks and other information security breaches, we may suffer financial and reputational damage, operational disruptions, be subject to litigation, civil or criminal investigations, regulatory intervention or incur costs related to remediation, payment of ransom or penalties, including as result of unauthorized disclosure of confidential information belonging to us or to our partners, customers, suppliers or employees.