Root-3 Corporation

Root's Form 10-K Item 1C cybersecurity disclosure describes its Information Security Program, third-party risk management, and board/Audit, Risk and Finance Committee governance. The Company states it has experienced cybersecurity threats, attacks, attempted breaches, and fraudulent activity, but is not aware of any incidents since the beginning of 2023 that have materially affected or are reasonably likely to materially affect the Company. No specific reportable breach incident is disclosed.