NETSTREIT (NTST) Risk Analysis

When excessive moisture accumulates in buildings or on building materials, or moisture otherwise occurs within a building or building materials, mold growth may occur, particularly if the moisture problem remains undiscovered or is not addressed over a period of time. Some molds may be toxic and produce airborne toxins or irritants. Concern about indoor exposure to mold has been increasing, as exposure to mold may cause a variety of adverse health effects and symptoms, including allergic or other reactions. As a result, should our tenants or their employees or customers be exposed to mold at any of our properties, we could be required to undertake a costly remediation program to contain or remove the mold from the affected property. In addition, exposure to mold by our tenants or others could subject us to liability if property damage or health concerns arise. If we were to become subject to significant mold-related liabilities, we could be materially and adversely affected.

We are dependent on the efforts and performance of our key management, including Mark Manheimer, our Chief Executive Officer, and Daniel Donlan, our Chief Financial Officer. We cannot guarantee we will retain any of our executive leadership team, and they could be difficult to replace. The loss of their services until suitable replacements are found could adversely affect our business, diminish our investment opportunities, and weaken our relationships with lenders, business partners, existing and prospective tenants, and industry personnel, all of which could materially and adversely affect us.

We compete with numerous developers, owners, and operators of properties, many of which own properties similar to ours in the same markets in which our properties are located, some of which may have greater financial resources than we do. If our competitors offer space at rental rates below current market rates, or below the rental rates we currently charge, we may lose existing or potential tenants, and we may be pressured to reduce our rental rates or to offer more substantial rent abatements, tenant improvements, early termination rights, or below-market renewal options in order to retain tenants when our leases expire. This competition also may increase the demand for the types of properties in which we typically invest and, therefore, reduce the number of suitable investment opportunities available to us, and increase the prices paid for such acquisition properties. Accordingly, competition for the acquisition of real property and tenants could materially and adversely affect us.

Each of our properties is leased by a single tenant. Therefore, we believe that the success of our investments is materially dependent on the financial stability of our tenants. The success of any one of our tenants is dependent on its individual business and its industry, which could be adversely affected by poor management, global market and economic conditions in general, changes in consumer trends and preferences that decrease demand for a tenant's products or services, or other factors over which neither they nor we have control. Our portfolio includes properties leased to single tenants that operate in multiple locations, which means that, as of December 31, 2024, we owned numerous properties leased by the same entity (or related group of entities), including Dollar General, CVS, Walgreens, Dollar Tree / Family Dollar, Food Lion / Stop & Shop, Hobby Lobby, 7-Eleven, Advance Auto Parts, and Sam's / Walmart. To the extent we own numerous properties leased and/or operated by one entity (or related group of entities), the general failure of that single entity (or related group of entities) or a loss or significant decline in its business could materially and adversely affect us. At any given time, any tenant may experience a downturn in its business that may weaken its operating results or the overall financial condition of individual properties or its business as a whole. As a result, a tenant may delay lease commencement, fail to make rental payments when due, decline to extend a lease upon expiration, become insolvent, or declare bankruptcy. For example, in 2024, Big Lots filed for bankruptcy protection and Walgreens announced that it would close about 1,200 underperforming stores in the United States over three years. We depend on our tenants to operate the properties we own in a manner that generates revenues sufficient to allow them to meet their obligations to us, including their obligations to pay rent, maintain certain insurance coverage, and pay real estate taxes. The ability of our tenants to fulfill their obligations under our leases may depend, in part, upon the overall profitability of their operations. Cash flow generated by certain tenant businesses may not be sufficient for a tenant to meet its obligations to us. We could be materially and adversely affected if a number of our tenants were unable to meet their obligations to us.

We rely on information systems across our operations and corporate functions, including finance and accounting, and depend on such systems to ensure payment of obligations, collection of cash, data warehousing to support analytics, and other various processes and procedures. Our ability to manage our business depends significantly on the reliability and capacity of these systems. The failure of these systems to operate effectively, maintenance problems, failures or delays in upgrading or transitioning to new platforms, or a breach in security of these systems or data (such as in the event of cyber-attacks, malicious internet-based activity, online and offline fraud, and administrative or technical failures and other similar activities that threaten the confidentiality, integrity, and availability of our information technology systems, including those of the third parties with whom we work, or data) has in the past, and may again in the future, result in the theft of intellectual property, personal information or personal property, damage to our reputation and third-party claims, as well as reduced efficiency in our operations and in the accuracy of our internal and external financial reporting. For example, during the second quarter of 2024, the Company was the victim of a criminal scheme involving a business email compromise of an employee that led to two fraudulent transfers to a third party impersonating one of our development partners. A failure or weakness in our information systems (or those of the third parties with whom we work) has in the past and could again in the future materially and adversely affect us, and the remediation of any such problems could result in significant unplanned expenditures. Our reliance on third parties could introduce new cybersecurity risks and vulnerabilities and other threats to our business operations. We engage a variety of third parties to process and store data, some of which may be private or include personal information. We also depend on third parties to host certain of our systems and infrastructure. Our ability to monitor these third parties' information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences, including harm to our business, results of operations, and financial condition. We and the third parties with whom we work are subject to a variety of evolving threats, including, but not limited to, social-engineering attacks (including through deep fakes, which are increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential stuffing attacks, credential harvesting, personnel misconduct or error, ransomware attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. It may be difficult or costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors have in the past and may in the future gain access to other networks and systems after a compromise of our networks and systems. While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as in our hardware and software, including that of third parties with whom we work). We have not and may not in the future, however, detect and remediate all such vulnerabilities, including on a timely basis. Further, we have (and may in the future) experienced delays in developing and deploying remedial measures and patches designed to address any such identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident. Applicable data privacy and security obligations may require us, or we may voluntarily choose, to notify relevant stakeholders (including affected individuals, customers, regulators, and investors) of security incidents, or to take other actions. Such disclosures and actions are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent or cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business.

Changes in global or national market and economic conditions, such as global economic and financial market volatility and global geopolitical conflict, have caused, and may continue to cause, among other things, tightening in the credit markets, lower levels of liquidity, fluctuating interest rates and inflation, increases in the rate of default and bankruptcy, and lower consumer and business spending, which could materially and adversely affect us. For example, the current and continuing macro-economic conditions of fluctuating inflation and fluctuating interest rates have increased the costs associated with acquiring new properties and decreased the availability of financing on terms that we find attractive, which has reduced our ability to acquire properties at our historical rate with attractive terms. Other potential consequences of changes in economic and financial conditions include: changes in the performance of our tenants, which may result in lower rent and lower recoverable expenses than the tenant can afford to pay, and tenant defaults under the lease; current or potential tenants may delay or postpone entering into long-term leases with us; continuing increased costs of acquiring new properties on attractive terms; inability to borrow on terms and conditions that we find to be acceptable, which could continue to reduce our ability to pursue acquisition opportunities or increase future interest expense; and the recognition of impairment charges on or reduced values of our properties, which may adversely affect our results of operations or limit our ability to dispose of assets at attractive prices and may reduce the availability of buyer financing. We are also limited in our ability to reduce costs to offset the results of a prolonged or severe economic downturn given certain fixed costs and commitments associated with our operations. Accordingly, a decline in economic conditions could materially and adversely affect us.