Westport's Statement on Cybersecurity Incident

Executive Summary

• Westport Fuel Systems disclosed an unauthorized access to its internal IT business applications on March 17, 2026.
• The incident did not affect manufacturing operations or order fulfillment, and no immediate disruption to daily business is expected.
• Because the breach occurred during year‑end reporting, Westport anticipates filing its annual financial results after the March 31, 2026 continuous disclosure deadline, potentially impacting investors’ timing of material information.

Key Details

• Unauthorized access was identified on March 17, 2026 affecting certain internal business applications and employee data.
• Company engaged external experts, activated incident‑response protocols, and is containing the breach while continuing its investigation.
• Manufacturing servers are separate from those compromised; production continuity and order fulfillment remain intact with no anticipated disruptions.
• Westport expects no material impact on daily operations but acknowledges a possible delay in filing annual financial results beyond the March 31, 2026 deadline required by securities regulations.
• The incident triggers an internal assessment of the integrity and accuracy of the year‑end financial statements prior to release.

Notable Quotes

(No direct quotes were provided in the release.)