Build-A-Bear Workshop, Inc.

SEC 10-K Item 1C cybersecurity disclosure describing the registrant's cybersecurity risk management, strategy, and governance program (NIST CSF aligned, PCI DSS where applicable; CTO-led IT security team reporting to Audit Committee). The filing explicitly states that no material cybersecurity incidents have occurred and that cybersecurity threats have not materially affected the company through the date of filing. No breach event is disclosed.