Herc Holdings (HRI) Risk Factors

We are exposed to a variety of claims arising from our operations, including claims by third parties for injury or property damage arising from the operation of our equipment or acts or omissions of our personnel and workers' compensation claims. We are currently a defendant in numerous actions and have received numerous claims on which actions have not yet been commenced for liability and property damage arising from the operation of equipment rented from us. We also are exposed to risk of loss from damage to our equipment and resulting business interruption. Our responsibility for such claims and losses is increased when we waive the provisions in certain of our rental contracts that hold a renter responsible for damage or loss under an optional loss or damage waiver that we offer. While we attempt to mitigate our exposure to large liability losses arising from such claims by maintaining general liability, workers' compensation and vehicle liability insurance coverage, our coverage may not be adequate to protect us against these exposures and we self-insure against losses associated with exposures not covered by these insurance policies. Moreover, in the event that insurance coverage does apply, we will bear a portion of the associated losses through the application of deductibles and self-insured retention in the insurance policies. For a company our size, such deductibles or self-insured retention could be substantial. There is also no assurance that insurance policies of these types will be available for purchase or renewal on commercially reasonable terms, or at all, or that the premiums and deductibles under such policies will not substantially increase, including as a result of market conditions in the insurance industry. If we were to incur one or more liabilities that are significant, individually or in the aggregate, where we are not fully insured, that we self-insure against or that our insurers dispute, it could have a material adverse effect on our financial condition. Even with adequate insurance coverage, we still may experience a significant interruption to our operations as a result of third-party claims or other losses arising from our operations.

An "ownership change" could limit our ability to utilize tax attributes, including net operating losses, capital loss carryovers, excess foreign tax carryforwards, and credit carryforwards, to offset future taxable income. As of December 31, 2023, we had unutilized U.S. federal net operating loss carryforwards of approximately $436 million. Our ability to use such tax attributes to offset future taxable income and tax liabilities may be significantly limited if we experience an "ownership change" as defined in Section 382(g) of the Code. In general, an ownership change will occur if and when the percentage of Herc Holdings' ownership (by value) of one or more "5-percent shareholders" (as defined in the Code) has increased by more than 50 percentage points over the lowest percentage of stock owned by such shareholders at any time during the prior three years (calculated on a rolling basis). An entity that experiences an ownership change generally should be subject to an annual limitation on its pre-ownership change tax loss carryforward which accumulates each year to the extent that there is any unused limitation from a prior year. The limitation on our ability to utilize tax losses and credit carryforwards arising from an ownership change under Section 382 depends on the value of our equity at the time of any ownership change. If we were to experience an "ownership change," it is possible that a significant portion of our tax loss carryforwards could expire before we would be able to use them to offset future taxable income. Many states have adopted the federal Section 382 rules and therefore have similar limitations with respect to state tax attributes.

Our operations are subject to numerous national, state, provincial and local laws and regulations governing environmental protection and occupational health and safety matters. These laws govern such issues as wastewater, storm water, solid and hazardous wastes and materials, air quality and matters of workplace safety. Under these laws and regulations, regardless of fault we may be liable for, among other things, the cost of investigating and remediating contamination at our sites as well as sites to which we have sent hazardous wastes for disposal or treatment, and also fines and penalties for non-compliance. We use hazardous materials to clean and maintain equipment, dispose of solid and hazardous waste and wastewater from equipment washing, and store and dispense petroleum products from storage tanks at certain of our locations. We also indemnify various parties for the costs associated with remediating numerous hazardous substance storage, recycling or disposal sites in many states and, in some instances, for natural resource damages. The amount of any such expense or related natural resource damages for which we may be held responsible could be substantial. We cannot predict the potential financial impact on our business if adverse environmental, health, or safety conditions are discovered, or environmental, health, and safety requirements become more stringent. As of December 31, 2023 and 2022, the aggregate amounts accrued for environmental liabilities, including liability for environmental indemnities, reflected in the Company's consolidated balance sheets in "Accrued liabilities" were $0.4 million. If we are required to incur environmental, health, or safety compliance or remediation costs that are not currently anticipated by us, our financial position, results of operations and cash flows could be materially adversely affected, depending on the magnitude of the cost.

Our ability to successfully execute on our business plan depends upon the contributions of our senior management team as well as other key talent including our dedicated sales force and trades talent such as drivers and mechanics. In recent years, we have experienced increasing competition for available talent in the North American workforce as reflected by the low unemployment rate, shortages of available industry trades talent and increasing costs to retain employees. As a result, we could experience inefficiencies or a lack of business continuity due to employee turnover, new employees' lack of historical knowledge and lack of familiarity with the business processes, operating requirements, purpose and culture, policies and procedures, and key information technologies and related infrastructure used in our day-to-day operations and financial reporting. Historically we have noted a ramp-up period before new members of our sales organization typically achieve a level of sales comparable to those we have employed for a longer period of time. We may also experience additional costs as new employees learn their roles and gain necessary experience, in addition to the cost of hiring new individuals. It is important to our success that newly hired team members quickly adapt to and excel in their new roles. If they are unable to do so, our business and financial results could be materially adversely affected. Further, if we cannot meet our needs for IT staff, we may not be able to fulfill our technology initiatives while continuing to provide maintenance on existing systems. If we were to lose the services of members of our senior management team or other key talent, whether due to death, disability, resignation or termination of employment, our ability to successfully implement our business strategy, financial plans, marketing and other objectives could be significantly impaired. In addition, if we are unable to attract and retain qualified key talent, we may not be able to effectively and efficiently manage our business and execute our business plan.

The market value of our equipment at the time of its disposition could be less than its estimated residual value or its depreciated value at such time. A number of factors could affect the value received upon disposition of our equipment, including: the market price for similar new equipment;the age of the equipment, wear and tear on the equipment relative to its age and the performance of preventive maintenance;the time of year that it is sold;the supply of used equipment relative to the demand for used equipment, including as a result of changes in economic conditions or conditions in the markets that we serve;inventory levels at original equipment manufacturers; and the existence and capacities of different sales outlets. A sale of equipment below its net book value could adversely affect our results of operations, liquidity and cash flows. Accordingly, decisions to reduce the size of our rental fleet in the event of an economic downturn or to respond to changes in rental demand are subject to the risk of loss based on the residual value of rental equipment.

The markets in which we operate are highly competitive. Competitive factors in our industry include price competition, the importance of customer loyalty, changes in market penetration, the introduction of new equipment, services and technology by competitors, changes in marketing, product diversity and quality and the ability to supply equipment and services to customers in a timely, predictable manner. Because we do not have multi-year contractual arrangements with many of our customers, these competitive factors could cause our customers to cease renting our equipment and shift suppliers quickly. The equipment rental market is highly fragmented, and we believe that price is one of the primary competitive factors. The Internet has enabled cost-conscious customers to more easily compare rates available from rental companies. If we try to increase our pricing, our competitors, some of whom may have greater resources and better access to capital or lower fixed operating costs, may seek to compete aggressively on the basis of pricing. In addition, our competitors may reduce prices in order to attempt to gain a competitive advantage, capture market share or compensate for declines in rental activity. To the extent we do not match or remain within a reasonable competitive margin of our competitors' pricing, our revenues and results of operations could be materially adversely affected. If competitive pressures lead us to match any of our competitors' downward pricing and we are not able to reduce our operating costs, then our margins, results of operations and cash flows could be materially adversely impacted. We face competition from traditional rental companies as well as our own suppliers. We purchase our rental equipment from leading, globally-known original equipment manufacturers. Under our supplier arrangements, the suppliers may appoint additional distributors, elect to sell or rent directly to our customers or unilaterally terminate their arrangements with us at any time without cause. Any such actions could have a material adverse effect on our business, financial condition, results of operations, liquidity and cash flows due to a reduction of, or an inability to increase, our revenues.

Our business depends on our ability to maintain positive relations with our key national account customers, which collectively accounted for 44% of our rental revenue in 2023. We cannot assure you that all of these relationships will continue at current levels or on current terms. Our contracts with our customers generally do not obligate them to rent equipment from us. Revenue from customers that have accounted for significant revenue in past periods, individually or as a group, may not continue in future periods or, if continued, may not reach or exceed historical levels in any period. Further, if our key customers fail to remain competitive in their respective markets or encounter financial or operational problems, our business, financial position, results of operations and cash flows may be materially adversely affected.

We regularly possess, collect, receive, store, process, generate, use, disclose, transmit, protect, and handle non-public information about individuals and businesses, including both credit and debit card information and other proprietary, sensitive and confidential personal information (collectively, sensitive information). In addition, our customers regularly transmit sensitive information to us via the Internet and through other electronic means. We rely heavily on communication networks, including the Internet and on IT systems, to process rental and sales transactions, manage our pricing, manage our equipment fleet, manage our financing arrangements, pay suppliers and other third parties, collect from our customers, account for our activities and otherwise conduct our business and report our financial results. Our major IT systems and accounting functions are centralized in a few locations. Any disruption, termination or substandard provision of these services, whether as the result of computer or telecommunications issues (including operational failures, server malfunctions, software bugs, software or hardware failures, loss of data or other IT assets, or similar), cyber attacks (such as computer malware, ransomware, business e-mail compromise, malicious code like viruses or worms, denial of service attacks, credential stuffing, credential harvesting, supply-chain attacks or other social engineering attacks like phishing attacks), personnel misconduct or error, localized conditions (such as a power outage, fire or explosion) or events or circumstances of broader geographic impact (such as an earthquake, storm, flood, other natural disaster, epidemic, strike, act of war, civil unrest or terrorist act), could materially adversely affect our business by disrupting normal operations. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, loss of sensitive information and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Our facilities and systems and those of our third-party service providers may contain defects in design or manufacture or other problems that could compromise information security, and are also subject to the risk of human error. Unauthorized parties also may attempt to gain access to our systems or facilities, or those of third parties with whom we do business. All of the aforementioned threats are prevalent, increasing in their frequency, sophistication and intensity, and come from a variety of sources, including traditional computer "hackers," threat actors, "hacktivists," organized criminal threat actors, sophisticated nation states, and nation-state-supported actors (including nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities). During times of war and other major conflicts, we, the third parties upon which we rely, and our customers may be vulnerable to a heightened risk of these attacks, including retaliatory cyber attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and provide services. Any of the previously identified or similar threats could cause a security breach or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our IT systems, or those of the third parties upon whom we rely. A security breach or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our products and services. We may expend significant resources or modify our business activities to try to protect against security breaches, and certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our IT systems and sensitive information. While we have implemented security measures designed to protect against security breaches, there can be no assurance that these measures are effective. We may be unable in the future to detect vulnerabilities in our IT systems and networks because many of the techniques used to effectuate a security breach are difficult to detect or anticipate until launched against a target and we may be unable to (or delayed in adopting measures to) prevent, contain or detect security breaches or other compromises or implement adequate preventative measures. Applicable data privacy and security obligations may require us to notify relevant stakeholders of security breaches. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. A security breach could adversely affect our corporate reputation as well as our operations, and could result in government enforcement actions, litigation against us, additional reporting requirements and/or oversight, restrictions on processing sensitive information, indemnification obligations, monetary fund diversions, interruptions in our operations, financial loss, the imposition of penalties, and other similar harms. A security breach and attendant consequences could cause the loss of customers, deter new customers from using our services, negatively impact our ability to grow and operate our business, and require that we invest significant additional resources related to our information security systems. In addition, we rely on third-party service providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, and other functions. We may also rely on third-party service providers to provide other products, services, parts, or otherwise to operate our business. Therefore, we are also susceptible to disruptions, failures and breaches of the systems maintained by our outsourced providers, which we do not control. Our ability to monitor these third parties' information security practices is limited, and these third parties may not have adequate information security measures in place. Any disruption, failure, breach or poor performance of any of these systems could lead to lower revenues, increased costs or other material adverse effects on our business and results of operations. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties' infrastructure in our supply chain or our third-party partners' supply chains have not been compromised. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities' systems and technologies. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims. Additionally, we are incorporated into the supply chain of a large number of companies in North America and, as a result, if our products are compromised, a significant number or, in some instances, all of our customers and their data could be simultaneously affected. The potential liability and associated consequences we could suffer as a result of such a large-scale event could be catastrophic and result in irreparable harm.