Loading...
Insurance Certificates 2023/24 Acorn Technology Services/ A� " CERTIFICATE OF LIABILITY INSURANCE DATE (MM/DD/YYYY) 03/01/2024 THIS CERTIFICATE IS ISSUED AS A MATTER OF INFORMATION ONLY AND CONFERS NO RIGHTS UPON THE CERTIFICATE HOLDER. THIS CERTIFICATE DOES NOT AFFIRMATIVELY OR NEGATIVELY AMEND, EXTEND OR ALTER THE COVERAGE AFFORDED BY THE POLICIES BELOW. THIS CERTIFICATE OF INSURANCE DOES NOT CONSTITUTE A CONTRACT BETWEEN THE ISSUING INSURER(S), AUTHORIZED REPRESENTATIVE OR PRODUCER, AND THE CERTIFICATE HOLDER. IMPORTANT: If the certificate holder is an ADDITIONAL INSURED, the policy(ies) must have ADDITIONAL INSURED provisions or be endorsed. If SUBROGATION IS WAIVED, subject to the terms and conditions of the policy, certain policies may require an endorsement. A statement on this certificate does not confer rights to the certificate holder in lieu of such endorsement(s). PRODUCER techrug Technology Risk Underwriting Group 596-600 Enterprise Drive CONTACT NAME: Katie Baughan PHONE 614-842-6686 FAX 614-888-2739 AIC No Ext : AIC No ADDRESS: katieb@techrug.com INSURER(S) AFFORDING COVERAGE NAIC # Lewis Center, Ohio 43035 INSURERA: RLI INS CO 13056 INSURED CU Technology LLC dba Acorn Technology Services INSURER B : Hamilton Insurance DAC A0765 INSURER C : 1960 Chicago Ave. Suite E9 and Suite C3 Riverside, CA 92507 INSURER D INSURER E INSURER F : COVERAGES CERTIFICATE NUMBER: REVISION NUMBER: THIS IS TO CERTIFY THAT THE POLICIES OF INSURANCE LISTED BELOW HAVE BEEN ISSUED TO THE INSURED NAMED ABOVE FOR THE POLICY PERIOD INDICATED. NOTWITHSTANDING ANY REQUIREMENT, TERM OR CONDITION OF ANY CONTRACT OR OTHER DOCUMENT WITH RESPECT TO WHICH THIS CERTIFICATE MAY BE ISSUED OR MAY PERTAIN, THE INSURANCE AFFORDED BY THE POLICIES DESCRIBED HEREIN IS SUBJECT TO ALL THE TERMS, EXCLUSIONS AND CONDITIONS OF SUCH POLICIES. LIMITS SHOWN MAY HAVE BEEN REDUCED BY PAID CLAIMS. INSR TYPE OF INSURANCE LTR ADDL INSD SUBR WVD POLICY NUMBER POLICY EFF MM/DDIYYYY POLICY EXP MM/DD/YYYY LIMITS A ✓ COMMERCIAL GENERAL LIABILITY Y Y PTB0001949 06/01/2023 06/01/2024 EACH OCCURRENCE $ 2,000,000 CLAIMS -MADE ✓ OCCUR DAMAGE TO TED PREMISES(Ea occurrence) $ 1000,000 MED EXP (Any one person) $ 10,000 PERSONAL & ADV INJURY $ 2,000,000 GEN'L AGGREGATE LIMIT APPLIES PER: GENERAL AGGREGATE $ 4,000,000 ✓ POLICY PRO- JECT LOC PRODUCTS - COMP/OP AGG $ 4,000,000 $ OTHER: A AUTOMOBILE LIABILITY Y Y PTA0001217 06/01/2023 06/01/2024 (CEO, OEaMBINED accident SINGLE LIMIT $ 1,000,000 BODILY INJURY (Per person) $ ANY AUTO OWNED SCHEDULED AUTOS ONLY AUTOS BODILY INJURY (Per accident) $ PROPERTY DAMAGE Per accident $ ✓ HIRED ✓ NON -OWNED AUTOS ONLY AUTOS ONLY UMBRELLA LIAB OCCUR EACH OCCURRENCE $ AGGREGATE $ EXCESS LIAB CLAIMS -MADE $ DED RETENTION $ A WORKERS COMPENSATION AND EMPLOYERS' LIABILITY Y / N ANYPROPRIETOR/PARTNER/EXECUTIVE PTW0001346 06/01/2023 06/01/2024 ✓ PER OTH- STATUTE ER E.L. EACH ACCIDENT $ 1,000,000 OFFICER/MEMBER EXCLUDED? ❑ (Mandatory in NH) N/A E.L. DISEASE - EA EMPLOYEE $ 1,000,000 If yes, describe under DESCRIPTION OF OPERATIONS below E.L. DISEASE - POLICY LIMIT $ 1,000,000 B Errors and Omissions Insurance B1180D221573/038 06/01/2023 06/01/2024 Each Claim $2,000,000 Aggregate $2,000,000 DESCRIPTION OF OPERATIONS I LOCATIONS / VEHICLES (ACORD 101, Additional Remarks Schedule, maybe attached if more space is required) Certificate issued as evidence of insurance per policy terms, conditions and exclusions. City of La Quintaare an additional insured per the terms of the written contract with respect to the General and Automobile coverages (Form PPB 304G 04) (PPB 321 11 10) . The General, Automobile (Form PPB 304G 04) and Umbrella (Form PPU 304G 01 12) insurance policies shall be primary and non-contributory with any coverage held by the additional insureds. A waiver of subrogation in favor of the additional insureds applies to the General, Automobile Policies (Form PPB 304G 04) per written contract. The Errors & Omissions Insurance has insuring agreements for Tech & Professional Services Wrongful Act, Media Wrongful Act, Data & Network Wrongful Act and Breach Response. The Errors and Omissions is a Claims Made policy CERTIFICATE HOLDER CANCELLATION SHOULD ANY OF THE ABOVE DESCRIBED POLICIES BE CANCELLED BEFORE THE EXPIRATION DATE THEREOF, NOTICE WILL BE DELIVERED IN City of La Quinta ACCORDANCE WITH THE POLICY PROVISIONS. 78495 Calle Tampico AUTHORIZED REPRESENTATIVE La Quinta, CA 92253 @ 1988-2015 ACORD CORPORATION. All rights reserved. ACORD 25 (2016/03) The ACORD name and logo are registered marks of ACORD AGENCY CUSTOMER ID: AC220418114040117 LOC #: ,a`oRo ADDITIONAL REMARKS SCHEDULE Page of AGENCY NAMED INSURED McCormick & Reinmuth Insurance Agency Inc. CU Technology LLC dba Acorn Technology Services POLICY NUMBER 1960 Chicago Ave. Suite E9 and Suite C3 Riverside. CA 92507 CARRIER NAIC CODE 13056 EFFECTIVE DATE: ADDITIONAL REMARKS THIS ADDITIONAL REMARKS FORM IS A SCHEDULE TO ACORD FORM, FORM NUMBER: FORM TITLE: ACORD 101 (2008/01) © 2008 ACORD CORPORATION. All rights reserved. The ACORD name and logo are registered marks of ACORD Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services CALIFORNIA SURPLUS LINES NOTICE 2 This insurance is issued pursuant to the California Insurance Code, Sections 1760 through 1780, and is placed in an insurer or insurers not holding a Certificate of Authority from or regulated by the California Insurance Commissioner. LMA9030 01 September 2013 CALIFORNIA SURPLUS LINES NOTICE I (POST BIND) IMPORTANT NOTICE 1. The insurance policy that you have purchased is being issued by an insurer that is not licensed by the State of California. These companies are called "nonadmitted" or "surplus line" insurers. 2. The insurer is not subject to the financial solvency regulation and enforcement that apply to California licensed insurers. 3. The insurer does not participate in any of the insurance guarantee funds created by California law. Therefore, these funds will not pay your claims or protect your assets if the insurer becomes insolvent and is unable to make payments as promised. 4. The insurer should be licensed either as a foreign insurer in another state in the United States or as a non -United States (alien) insurer. You should ask questions of your insurance agent, broker, or "surplus line" broker or contact the California Department of Insurance at the toll -free number 1-800-927-4357 or internet website www.insurance.ca.gov. Ask whether or not the insurer is licensed as a foreign or non -United States (alien) insurer and for additional information about the insurer. You may also visit the NAIC's internet website at www.naic.org. The NAIC - the National Association of Insurance Commissioners - is the regulatory support organization created and governed by the chief insurance regulators in the United States. 5. Foreign insurers should be licensed by a state in the United States and you may contact that state's department of insurance to obtain more information about that insurer. You can find a link to each state from the NAIC internet website: https://naic.org/state_ web_map.htm. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 1 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 6. For non -United States (alien) insurers, the insurer should be licensed by a country outside of the United States and should be on the NAIC's International Insurers Department (IID) listing of approved nonadmitted non -United States insurers. Ask your agent, broker, or "surplus line" broker to obtain more information about that insurer. 7. California maintains a "List of Approved Surplus Line Insurers (LASLI)." Ask your agent or broker if the insurer is on that list, or view that list at the internet website of the California Department of Insurance: www.insurance.ca.gov/01-consumers/120-company/07- lasli/lasli.cfm. 8. If you, as the applicant, required that the insurance policy you have purchased be effective immediately, either because existing coverage was going to lapse within two business days or because you were required to have coverage within two business days, and you did not receive this disclosure form and a request for your signature until after coverage became effective, you have the right to cancel this policy within five days of receiving this disclosure. If you cancel coverage, the premium will be prorated and any broker's fee charged for this insurance will be returned to you. LMA9098B 01 January 2020 CALIFORNIA COMPLAINTS NOTICE To request assistance or make an initial complaint, you should contact TechRUG at: TechRUG, Compliance Officer: 596 Enterprise Drive, Lewis Center, Delaware Telephone Number: County, Ohio 43035, United States Email: In the alternative, or if you are dissatisfied with the resolution of your complaint by the above party, you may wish to contact the Lloyd's Complaints Department at: Lloyd's Complaints Department c/o Lloyd's America Inc. 280 Park Avenue, East Tower, 25th Floor New York, NY 10017 USA Phone: 1-844-849-7828 Email: complaints@lloyds.com Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 2 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services The California Department of Insurance should be contacted only after discussions with the insurer, its agent, or representative, have failed to produce a satisfactory resolution. You may contact the California Department of Insurance to obtain information on your rights or make a complaint at: Consumer Hotline 1-800-927-4357 (HELP) TDD Number 1-800-482-4833 (TTY) California Department of Insurance Consumer Services Division 300 South Spring Street, South Tower Los Angeles, CA 90013 LMA9136A 18 August 2020 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 3 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services kr Lloyd's Certificate I This Insurance is effected with certain Underwriters at Lloyd's, London. This Certificate is issued in accordance with the limited authorization granted by certain Underwriters at Lloyd's, London whose syndicate numbers and the proportions underwritten by them appear in the Schedule attached (such Underwriters being hereinafter called "Underwriters") and in consideration of the premium specified herein, Underwriters hereby bind themselves severally and not jointly, each for his own part and not one for another, their Executors and Administrators. The Assured is requested to read this Certificate, and if it is not correct, return it immediately to the Correspondent for appropriate alteration. All inquiries regarding this Certificate should be addressed to the following Correspondent: TechRUG 596 Enterprise Drive, Lewis Center, Delaware County, Ohio 43035, United States SLC-3 (USA) NMA2868 (amended) (24/08/2000) Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 4 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services CERTIFICATE PROVISIONS 1. Signature Required. This Certificate shall not be valid unless signed by the Intermediary on the attached Declaration Page. 2. Correspondent / Intermediary Not Insurer. Neither the Correspondent nor the Intermediary is an Insurer hereunder and neither is nor shall not be liable for any loss or claim whatsoever. The Insurers hereunder are those Underwriters at Lloyd's, London whose syndicate numbers can be ascertained as hereinbefore set forth. As used in this Certificate "Underwriters" shall be deemed to include incorporated as well as unincorporated persons or entities that are Underwriters at Lloyd's, London. 3. Cancellation. If this Certificate provides for cancellation and this Certificate is cancelled after the inception date, earned premium must be paid for the time the insurance has been in force. 4. Service of Suit. It is agreed that in the event of the failure of Underwriters to pay any amount claimed to be due hereunder, Underwriters, at the request of the Assured, will submit to the jurisdiction of a Court of competent jurisdiction within the United States. Nothing in this Clause constitutes or should be understood to constitute a waiver of Underwriters' rights to commence an action in any Court of competent jurisdiction in the United States, to remove an action to a United States District Court, or to seek a transfer of a case to another Court as permitted by the laws of the United States or of any State in the United States. It is further agreed that service of process in such suit may be made upon the firm or person named in the'Service of Suit' item on the attached Declaration page, and that in any suit instituted against any one of them upon this contract, Underwriters will abide by the final decision of such Court or of any Appellate Court in the event of an appeal. The Service of Suit Designee named on the Declarations Page is authorized and directed to accept service of process on behalf of Underwriters in any such suit and/or upon request of the Assured to give a written undertaking to the Assured that they will enter a general appearance upon Underwriters' behalf in the event such a suit shall be instituted. Further, pursuant to any statute of any state, territory or district of the United States which makes provision therefor, Underwriters hereby designate the Superintendent, Commissioner or Director of Insurance or other officer specified for that purpose in the statute, or his successor or successors in office, as their true and lawful attorney upon whom may be served any lawful process in any action, suit or proceeding instituted by or on behalf of the Assured or any beneficiary hereunder arising out of this contract of insurance, and hereby designate the above -mentioned as the person to whom the said officer is authorized to mail such process or a true copy thereof. 5. Assignment. This Certificate shall not be assigned either in whole or in part without the written consent of the Correspondent endorsed hereon. 6. Attached Conditions Incorporated. This Certificate is made and accepted subject to all the provisions, conditions and warranties set forth herein, attached or endorsed, all of which are to be considered as incorporated herein. 7. Claims. All claims and other enquiries shall be addressed to the Correspondent. Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 5 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 8. Short Rate Cancellation. If the attached provisions provide for cancellation, the table below will be used to calculate the short rate proportion of the premium when applicable under the terms of cancellation. Short Rate Cancellation Table For Term of One Year. Days Per Cent Days Per Cent Days Per Cent Days Per Cent Insurance in of one year Insurance in of one year Insurance in of one year Insurance in of one year Force Premium Force Premium Force Premium Force Premium 1 ........................... 5% 66 - 69 ........................ 29% 154 - 156......................... 53% 256 - 260........................ 77% 2 ........................... 6 70 - 73 ........................ 30 157 - 160.........................54 261 - 264........................ 78 3 - 4............................ 7 74 - 76 ........................ 31 161 - 164.........................55 265 - 269........................ 79 5 - 6............................ 8 77 - 80 ........................ 32 165 - 167.........................56 270 - 273 ( 9 mos ) ........ 80 7 - 8............................ 9 81 - 83 ........................ 33 168 - 171.........................57 274 - 278........................ 81 9 - 10...........................10 84 - 87 ........................ 34 172 - 175.........................58 279 - 282........................ 82 11 - 12...........................11 88 - 91 ( 3 mos )......... 35 176 - 178.........................59 283 - 287........................ 83 13 - 14...........................12 92 - 94 ........................ 36 179 - 182 ( 6 mos ).........60 288 - 291 ........................ 84 15 - 16...........................13 95 - 98 ........................ 37 183 - 187.........................61 292 - 296........................ 85 17 - 18...........................14 99 - 102 ........................ 38 188 - 191.........................62 297 - 301 ........................ 86 19 - 20...........................15 103 - 105 ........................ 39 192 - 196.........................63 302 - 305 ( 10 mos ) ....... 87 21 - 22...........................16 106 - 109 ........................ 40 197 - 200.........................64 306 - 310........................ 88 23 - 25...........................17 110 - 113 ........................ 41 201 - 205.........................65 311 - 314........................ 89 26 - 29...........................18 114 - 116 ........................ 42 206 - 209.........................66 315 - 319........................ 90 30 - 32 (1 mos) ........... 19 117 - 120 ........................ 43 210 - 214 ( 7 mos ).........67 320 - 323........................ 91 33 - 36...........................20 121 - 124 ( 4 mos )......... 44 215 - 218.........................68 324 - 328........................ 92 37 - 40...........................21 125 - 127 ........................ 45 219 - 223......................... 69 329 - 332 ........................ 93 41 - 43...........................22 128 - 131 ........................ 46 224 - 228.........................70 333 - 337 ( 11 mos ) ....... 94 44 - 47...........................23 132 - 135 ........................ 47 229 - 232......................... 71 338 - 342 ........................ 95 48 - 51...........................24 136 - 138 ........................ 48 233 - 237.........................72 343 - 346........................ 96 52 - 54...........................25 139 - 142 ........................ 49 238 - 241.........................73 347 - 351 ........................ 97 55 - 58...........................26 143 - 146 ........................ 50 242 - 246 ( 8 mos ).........74 352 - 355........................ 98 59 - 62 (2 mos) ........... 27 147 - 149 ........................ 51 247 - 250.........................75 356 - 360........................ 99 63 - 65...........................28 150 - 153 ( 5 mos )......... 52 251 - 255.........................76 361 - 365 ( 12 mos ) ....... 100 Rules applicable to insurance with terms less than or more than one year: A. If insurance has been in force for one year or less, apply the short rate table for annual insurance to the full annual premium determined as for insurance written for a term of one year. B. If insurance has been in force for more than one year: Determine full annual premium as for insurance written for a term of one year. 2. Deduct such premium from the full insurance premium, and on the remainder calculate the pro rata earned premium on the basis of the ratio of the length of time beyond one year the insurance has been in force to the length of time beyond one year for which the policy was originally written. 3. Add premium produced in accordance with items (1) and (2) to obtain earned premium during full period insurance has been in force. Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 6 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 9. Complaints: All complaints must be referred in the first instance to the Correspondent. DECUS INSURANCE BROKERS LIMITED COMPLAINTS PROCEDURE How to make a complaint: Should you wish to make a complaint against Decus Insurance Brokers Limited [A complaint is any written communication where there is an expression of dissatisfaction with an insurance product or service], you may do so at any time by referring the matter to: Decus Insurance Brokers Ltd Telephone Number: +44 203 006 6630 The Scalpel, 18th Floor, Fax Number: +44 203 006 6631 52 Lime Street, Email: ttitley@decusbrokers.com London, EC3M 7AF, ENGLAND DECUS INSURANCE BROKERS LIMITED'S COMMITMENT TO CUSTOMERS Decus Insurance Brokers Limited are committed to handing all customers complaints received promptly, fairly and in line with regulatory guidelines. In the event that you remain dissatisfied with the way your complaint has been handled, you may refer the matter to the Complaints team at Lloyd's. Their address is: Complaints, Lloyd's One Lime Street, London, EC3M 7HA Tel No: +44 (0)20 7327 5693 Fax No: +44 (0)20 7327 5225 Email: InternationalComplaints(o-)_lloyds.com Website: https://www.11oyds.com At any time if you are dissatisfied with the way your complaint has been handled, you may refer the matter to your State Department of Insurance 10. Lloyd's is Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority. Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 7 of 76 decus This Declaration Page is attached to and forms part of Certificate provisions. Previous New Authority B118OD231573 (100%) Certificate 131180D231573/009 Number Reference Number Number Insurance is effective with certain Percentage Underwriters at Lloyd's, London One Lime Street, London, EC3M 7HA 100.00% SCHEDULE Type: Technology Professional Liability and Cyber Insurance as more fully defined in the policy wording Form: TechR.U.G. Technology, Cyber and Media Policy Wording — 2022 Name of Insured: CU Technology d.b.a. Acorn Technology Services Type of Insured: Corporation Insured Email: cwolynez@acorntechservices.com Mailing Address of 1960 Chicago Avenue, Suite E9, Riverside, CA 92507 Insured: Period of Insurance: Effective from Thu Jun 01 2023 to Sat Jun 01 2024 Both days at 12.01a.m. Local Standard Time Premium (annual) Premium USD 9,479.25 Policy Fee USD 100.00 Provider Policy Fee USD 100.00 Surplus Lines Tax USD 293.25 Stamping Fee USD 17.60 TRIA Premium USD 95.75 TOTAL USD 10,085.85 Deductible: Breach Response Services: Cyber Extortion Loss: All Other Coverages Waiting Period (Business Income Loss) Limit of Liability: Per Claim and in the Policy Aggregate. USD 0 each and every claim USD 5,000 each and every claim USD 5,000 each and every claim 8 hours USD 2,000,000 Insuring Agreement Aggregate Limit 2. A. Media Tech, Data & Network Liability USD 2,000,000 2. B. Breach Response USD 2,000,000 2. C. Regulatory Defense & Penalties USD 2,000,000 2. D. Payment Card Liabilities & Costs USD 2,000,000 2. E. First Party Data & Network Loss — Dependent Business Loss USD 100,000 2. E. First Party Data & Network Loss — All Other Coverage Under 2. E. USD 2,000,000 2. F. eCrime USD 250,000 2. G. Criminal Reward USD 50,000 Coverage: Worldwide Conditions: Includes the following terms and conditions: Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 8 of 76 D231573 Insured: CU Technology d.b.a. Acorn Technology Services LMA 5389 U.S. Terrorism Risk Insurance Act of 2002 As Amended New and Renewal Business Endorsement LMA 9030 California Surplus Lines Notice 2 LMA 9098B California Surplus Lines Notice 1 (Post Bind) LMA 9136A California Complaints Notice LMA 9191 Lloyd's CCPA Privacy Policy LSW 585 (amended) Premium Payment Warranty LSW 1001 (Insurance) Several Liability Notice NMA 1168 (amended) Small Additional or Return Premiums Clause (U.S.A.) NMA 1998 Service of Suit Clause (U.S.A.) Choice Of Law And Service Of Suit Computer Hardware Replacement Cost Crisis Management Expense Coverage Cryptojacking Endorsement Cyber Insurance - Incident Response Directions Employee Device Endorsement GDPR Cyber Endorsement Data Privacy Notice Invoice Manipulation Coverage Endorsement Reputation Loss State Consumer Privacy Statutes Endorsement TechRUG Technology, Cyber and Media Voluntary Shutdown Coverage Exclusions: Includes the following exclusions: LMA 3100 Sanction Limitation And Exclusion Clause LMA5567A (amended) War and Cyber Operation Exclusion No.4 NMA 1256 Nuclear Incident Exclusion Clause - Liability - Direct (Broad) (U.S.A.) NMA 1477 Radioactive Contamination Exclusion Clause - Liability - Direct (U.S.A.) Asbestos, Pollution, and Contamination Exclusion Endorsement Website: https://www.acorntechservices.com Industry: Technology - B2B Gross Annual USD 5,000,000 Revenue: Historic Coverage Full Prior Acts Continuity Date: Thu Jun 01 2023 US Classification: Surplus Lines Peachtree Special Risk Brokers naming: 3525 Piedmont Rd NE Bldg 5 Suite 700 Atlanta GA 30305 California License #: OE28855 US Surplus lines broker is responsible for collecting and paying all surplus lines taxes and fees. Claim Notification: BatesCarey LLP 191 North Wacker, Suite 2400, Chicago, IL 60606 Email: ktimm@batescarey.com Tel: 001-312-762-3256 Service of Suit: Lloyd's America Inc., Attention: Legal Department, 280 Park Avenue, East Tower, 25th Floor, New York, NY 10017 Insurer: Lloyd's of London, AM Best Rating A XV (Non -admitted) Commission: As per contract Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 9 of 76 D231573 Insured: CU Technology d.b.a. Acorn Technology Services Order Hereon: 100% of 100% Security: Authority Ref. D231573 —Order: 100% 75.0000% 4000 HAM 100.0000% 25.0000% 2121 ARG 100.0000% Losses: No Known Losses in the past 5 years It is understood and agreed that for the purposes of this insurance in the event of any discrepancy between the above referenced proposal form and this Certificate, the terms, conditions, definitions, exclusions and other provisions of this Certificate shall prevail. It is understood and agreed that wherever the words "Named Insured, Company and Policy" appear in this wording they are deemed to read "Named Assured, Underwriters and Certificate" respectively. Correspondent: TechRUG 596 Enterprise Drive, Lewis Center, Delaware County, Ohio 43035, United States Intermediary: Decus Insurance Brokers Ltd The Scalpel, 18th Floor, 52 Lime Street, London, EC3M 7AF, ENGLAND In witness whereof this certificate has been signed on 5th day of June, 2023 By Authorized Signatory Tracey Titley - Decus Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 10 of 76 D231573 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services decus TechR.U.G. Technology, Cyber and Media Policy Wording Underwritten on behalf of: Certain Underwriters at Lloyd's of London Hamilton — Technology, Cyber and Media Page 1 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 11 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Table of Contents: 1. Introductory Clause 2. Insuring Agreements A. Media, Tech, Data & Network Liability B. Breach Response C. Regulatory Defense & Penalties D. Payment Card Liabilities & Costs E. First Party Data & Network Loss F. eCrime G. Criminal Reward 3. Defense and Settlement of Claims 4. Definitions 5. Exclusions 6. General Conditions Hamilton — Technology, Cyber and Media Page 2 Of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 12 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 1. Introductory Clause: IMPORTANT NOTICE: THIS POLICY'S LIABILITY INSURING AGREEMENTS PROVIDE COVERAGE ON A CLAIMS MADE AND REPORTED BASIS AND APPLY ONLY TO CLAIMS FIRST MADE AGAINST THE INSURED DURING THE POLICY PERIOD OR THE OPTIONAL EXTENSION PERIOD (IF APPLICABLE) AND REPORTED TO THE UNDERWRITERS IN ACCORDANCE WITH THE TERMS OF THIS POLICY. AMOUNTS INCURRED AS CLAIMS EXPENSES UNDER THIS POLICY WILL REDUCE AND MAY EXHAUST THE LIMIT OF LIABILITY AND ARE SUBJECT TO RETENTIONS. PLEASE REFER TO THE DECLARATIONS, WHICH SHOW THE INSURING AGREEMENTS THAT THE NAMED INSURED PURCHASED. IF AN INSURING AGREEMENT HAS NOT BEEN PURCHASED, COVERAGE UNDER THAT INSURING AGREEMENT OF THIS POLICY WILL NOT APPLY. THE UNDERWRITERS AGREE WITH THE NAMED INSURED, IN CONSIDERATION OF THE PAYMENT OF THE PREMIUM AND RELIANCE UPON THE STATEMENTS CONTAINED IN THE INFORMATION AND MATERIALS PROVIDED TO THE UNDERWRITERS IN CONNECTION WITH THE UNDERWRITING AND ISSUANCE OF THIS INSURANCE POLICY (HEREINAFTER REFERRED TO AS THE "POLICY") AND SUBJECT TO ALL THE PROVISIONS, TERMS AND CONDITIONS OF THIS POLICY: 2. Insuring Agreements: A. Media, Tech, Data & Network Liability To pay Damages and Claims Expenses, which the Insured is legally obligated to pay because of any Claim first made against any Insured during the Policy Period for a: Tech Wrongful Act; 2. Tech Product Wrongful Act; 3. Media Wrongful Act; or 4. Data & Network Wrongful Act. B. Breach Response To indemnify the Insured Organization for Breach Response Costs incurred by the Insured Organization because of an actual or reasonably suspected Data Breach or Security Breach that the Insured first discovers during the Policy Period. Hamilton — Technology, Cyber and Media Page 3 of 31 Tue Jun 06 7073 @ 8:09:47 1 777157 1 Page 13 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services C. Regulatory Defense & Penalties To pay Penalties and Claims Expenses, which the Insured is legally obligated to pay because of a Regulatory Proceeding first made against any Insured during the Policy Period for a Data Breach or a Security Breach. D. Pavment Card Liabilities & Costs To indemnify the Insured Organization for PCI Fines, Expenses and Costs which it is legally obligated to pay because of a Claim first made against any Insured during the Policy Period. E. First Party Data & Network Loss To indemnify the Insured Organization for: Business Interruption Loss Business Interruption Loss that the Insured Organization sustains as a result of a Security Breach or System Failure that the Insured first discovers during the Policy Period. Dependent Business Interruption Loss Dependent Business Loss that the Insured Organization sustains as a result of a Dependent Security Breach that the Insured first discovers during the Policy Period. Cyber Extortion Loss Cyber Extortion Loss that the Insured Organization incurs as a result of an Extortion Threat first made against the Insured Organization during the Policy Period. Data Recovery Costs Data Recovery Costs that the Insured Organization incurs as a direct result of a Security Breach or System Failure that the Insured first discovers during the Policy Period. Hamilton — Technology, Cyber and Media Page 4 of 31 Tue Jun 06 7073 @ 8:09:42 1 277157 1 Page 14 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services F. eCrime To indemnify the Insured Organization for any direct financial loss sustained resulting from: 1. Fraudulent Instruction; 2. Funds Transfer Fraud; or 3. Telephone Fraud; that the Insured first discovers during the Policy Period. G. Criminal Reward To indemnify the Insured Organization for Criminal Reward Funds. 3. Defense and Settlement of Claims: Defense of Claims Except with respect to coverage under the Payment Card Liabilities & Costs insuring agreement, the Underwriters have the right and duty to defend any covered Claim or Regulatory Proceeding. Defense counsel will be mutually agreed by the Named Insured and the Underwriters but, in the absence of such agreement, the Underwriters' decision will be final. With respect to the Payment Card Liabilities & Costs insuring agreement, coverage will be provided on an indemnity basis and legal counsel will be mutually agreed by the Named Insured and the Underwriters. The Underwriters will pay actual loss of salary and reasonable expenses resulting from the attendance by a corporate officer of the Insured Organization at any mediation meetings, arbitration proceedings, hearings, depositions, or trials relating to the defense of any Claim, subject to a maximum of USD 2,000 per day and USD 100,000 in the aggregate, which amounts will be part of and not in addition to the Policy Aggregate Limit of Liability. Settlement of Claims If the Insured refuses to consent to any settlement recommended by the Underwriters and acceptable to the Claimant, the Underwriters' liability for such Claim will not exceed: Hamilton — Technology, Cyber and Media Page 5 of 31 Tue Jun 06 7073 @ 8:09:42 1 277157 1 Page 15 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 1) the amount for which the Claim could have been settled, less the remaining Retention, plus the Claims Expenses incurred up to the time of such refusal; plus 2) sixty percent (60%) of any Claims Expenses incurred after the date such settlement or compromise was recommended to the Insured plus sixty percent (60%) of any Damages, Penalties and PCI Fines, Expenses and Costs above the amount for which the Claim could have been settled; and the Underwriters will have the right to withdraw from the further defense of such Claim. The Insured may settle any Claim where the Damages, Penalties, PCI Fines, Expenses and Costs and Claims Expenses do not exceed 50% of the Retention, provided that the entire Claim is resolved and the Insured obtains a full release on behalf of all Insureds from all Claimants. 4. Definitions: Additional Insured means any person or entity that the Insured Organization has agreed in writing to add as an Additional Insured under this Policy prior to the commission of any act for which such person or entity would be provided coverage under this Policy, but only to the extent the Insured Organization would have been liable and coverage would have been afforded under the terms and conditions of this Policy had such Claim been made against the Insured Organization. Breach Notice Law means any statute or regulation that requires notice to persons whose personal information was accessed or reasonably may have been accessed by an unauthorized person. Breach Notice Law also includes any statute or regulation requiring notice of a Data Breach to be provided to governmental or regulatory authorities. Breach Response Costs means the following fees and costs incurred by the Insured Organization with the Underwriters' prior written consent in response to an actual or reasonably suspected Data Breach or Security Breach: 1. for an attorney to provide necessary legal advice to the Insured Organization to evaluate its obligations pursuant to Breach Notice Laws or a Merchant Services Agreement; 2. for a computer security expert to determine the existence, cause and scope of an actual or reasonably suspected Data Breach, and if such Data Breach is actively in progress on the Insured Organization's Computer Systems, to assist in containing it; 3. for a PCI Forensic Investigator to investigate the existence and extent of an actual or reasonably suspected Data Breach involving payment card data and for a Qualified Security Assessor to certify and assist in attesting to the Insured Organization's PCI compliance, as required by a Merchant Services Agreement; Hamilton — Technology, Cyber and Media Page 6 of 31 Tue Jun 06 7073 @ 8:09:42 1 277157 1 Page 16 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 4. to notify those individuals whose Personally Identifiable Information was potentially impacted by a Data Breach; 5. to provide a call center to respond to inquiries about a Data Breach; 6. to provide a credit monitoring, identity monitoring or other personal fraud or loss prevention solution, to be approved by the Underwriters, to individuals whose Personally Identifiable Information was potentially impacted by a Data Breach; and 7. public relations and crisis management costs directly related to mitigating harm to the Insured Organization which are approved in advance by the Underwriters in their discretion. Breach Response Costs will not include any internal salary or overhead expenses of the Insured Organization. Business Interruption Loss means: 1. Income Loss; 2. Forensic Expenses; and 3. Extra Expense; actually sustained during the Period of Restoration as a result of the actual interruption of the Insured Organization's business operations caused by a Security Breach or System Failure. Coverage for Business Interruption Loss will apply only after the Waiting Period has elapsed. Business Interruption Loss will not include (i) loss arising out of any liability to any third party; (ii) legal costs or legal expenses; (iii) loss incurred as a result of unfavorable business conditions; (iv) loss of market or any other consequential loss; (v) Dependent Business Loss; or (vi) Data Recovery Costs. Claim means: 1. a written demand received by any Insured for money, services, or any non- monetary or injunctive relief; 2. a written request for mediation or arbitration received by any Insured; 3. a civil proceeding against any Insured commenced by service of a complaint or similar proceeding; 4. a written request to toll or waive any applicable statute of limitations; 5. with respect to coverage provided under the Regulatory Defense & Penalties insuring agreement only, institution of a Regulatory Proceeding against any Insured; and Hamilton — Technology, Cyber and Media Page 7 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 17 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Multiple Claims arising from the same or a series of related, repeated or continuing acts, errors, omissions or events will be considered a single Claim for the purposes of this Policy. All such Claims will be deemed to have been made at the time of the first such Claim. Claims Expenses means: all reasonable and necessary legal costs and expenses resulting from the investigation, defense and appeal of a Claim, if incurred by the Underwriters, or by the Insured with the prior written consent of the Underwriters; and 2. the premium cost for appeal bonds for covered judgments or bonds to release property used to secure a legal obligation; provided the Underwriters will have no obligation to appeal or to obtain bonds. Claims Expenses will not include any salary, overhead, or other charges by the Insured for any time spent in cooperating in the defense and investigation of any Claim, or costs to comply with any regulatory orders, settlements or judgments. Computer Systems means computers, any software residing on such computers and any associated devices or equipment (including computers, hardware, software and input and output devices which are part of an industrial control system, including a supervisory control and data acquisition (SCADA) system): operated by and either owned by or leased to the Insured Organization; or 2. with respect to coverage under Part 4. of the Media, Tech, Data & Network Liability insuring agreement, as well as the Breach Response, Regulatory Defense & Penalties and Payment Card Liabilities & Costs insuring agreements, operated by a third party pursuant to written contract with the Insured Organization and used for the purpose of providing hosted computer application services to the Insured Organization or for processing, maintaining, hosting or storing the Insured Organization's electronic Data. Continuity Date means: the Continuity Date listed in the Declarations; and 2. with respect to any Subsidiaries acquired after the Continuity Date listed in the Declarations, the date the Named Insured acquired such Subsidiary. Hamilton — Technology, Cyber and Media Page 8 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 18 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Control Group means any principal, partner, corporate officer, director, general counsel (or most senior legal counsel) or risk manager of the Insured Organization and any individual in a substantially similar position. Criminal Reward Funds means any amount offered and paid by the Insured Organization with the Underwriters' prior written consent for information that leads to the arrest and conviction of any individual(s) committing or trying to commit any illegal act related to any coverage under this Policy; but will not include any amount based upon information provided by the Insured, the Insured's auditors or any individual hired or retained to investigate the illegal acts. All Criminal Reward Funds offered pursuant to this Policy must expire no later than 6 months following the end of the Policy Period. Cyber Extortion Loss means: 1. any Extortion Payment that has been made by or on behalf of the Insured Organization with the Underwriters' prior written consent to prevent or terminate an Extortion Threat; and 2. reasonable and necessary expenses incurred by the Insured Organization with the Underwriters' prior written consent to prevent or respond to an Extortion Threat. Damages means a monetary judgment, award or settlement, including any award of prejudgment or post -judgment interest. With the prior written consent of the Underwriters, Damages also include the direct net cost of providing any future service credits offered by the Insured Organization in lieu of a monetary payment. Damages will not include: 1. future profits, restitution, disgorgement of unjust enrichment or profits by an Insured, or the costs of complying with orders granting injunctive or equitable relief; 2. return or offset of fees, charges or commissions charged by or owed to an Insured for goods or services already provided or contracted to be provided; 3. taxes or loss of tax benefits; 4. fines, sanctions or penalties against any Insured; 5. punitive or exemplary damages or any damages which are a multiple of compensatory damages, unless insurable by law; 6. discounts, coupons, prizes, awards or other incentives offered to the Insured's customers or clients; 7. liquidated damages, but only to the extent that such damages exceed the amount for which the Insured would have been liable in the absence of such liquidated damages agreement; 8. fines, costs or other amounts an Insured is responsible to pay under a Merchant Services Agreement; or 9. any amounts for which the Insured is not liable, or for which there is no legal recourse against the Insured. Hamilton — Technology, Cyber and Media Page 9 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 19 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Data means any software or electronic data that exists in Computer Systems and that is subject to regular back-up procedures. Data Breach means the theft, loss, or Unauthorized Disclosure of Personally Identifiable Information or Third Party Information that is in the care, custody or control of the Insured Organization or a third party for whose theft, loss or Unauthorized Disclosure of Personally Identifiable Information or Third Party Information the Insured Organization is liable. Data & Network Wrongful Act means: 1. a Data Breach; 2. a Security Breach; 3. failure to timely disclose a Data Breach or Security Breach; or 4. a Privacy Policy Violation. Data Recovery Costs means the reasonable and necessary costs incurred by the Insured Organization to regain access to, replace, or restore Data, or if Data cannot reasonably be accessed, replaced, or restored, then the reasonable and necessary costs incurred by the Insured Organization to reach this determination. Data Recovery Costs will not include: (i) the monetary value of profits, royalties, or lost market share related to Data, including but not limited to trade secrets or other proprietary information or any other amount pertaining to the value of Data; (ii) legal costs or legal expenses; (iii) loss arising out of any liability to any third party; or (iv) Cyber Extortion Loss. Dependent Business means any entity that is not a part of the Insured Organization but which provides necessary products or services to the Insured Organization pursuant to a written contract. Dependent Business Loss means: 1. Income Loss; and 2. Extra Expense; actually sustained during the Period of Restoration as a result of an actual interruption of the Insured Organization's business operations caused by a Dependent Security Breach. Coverage for Dependent Business Loss will apply only after the Waiting Period has elapsed. Hamilton — Technology, Cyber and Media Page 10 of 31 Tue Jun 06 7073 @ 8:09:42 1 277157 1 Page 20 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Dependent Business Loss will not include (i) loss arising out of any liability to any third party; (ii) legal costs or legal expenses; (iii) loss incurred as a result of unfavorable business conditions; (iv) loss of market or any other consequential loss; (v) Business Interruption Loss; or (vi) Data Recovery Costs. Dependent Security Breach means a failure of computer security to prevent a breach of Computer Systems operated by a Dependent Business. Digital Currency means a type of Digital Currency that: 1. requires cryptographic techniques to regulate the generation of units of currency and verify the transfer thereof; 2. is both stored and transferred electronically; and 3. operates independently of a central bank or other central authority. Extortion Payment means Money, Digital Currency, marketable goods or services demanded to prevent or terminate an Extortion Threat. Extortion Threat means a threat to: 1. alter, destroy, damage, delete or corrupt Data; 2. perpetrate the Unauthorized Access or Use of Computer Systems; 3. prevent access to Computer Systems or Data; 4. steal, misuse or publicly disclose Data, Personally Identifiable Information or Third Party Information; 5. introduce malicious code into Computer Systems or to third party Computer Systems from Computer Systems; or 6. interrupt or suspend Computer Systems; unless an Extortion Payment is received from or on behalf of the Insured Organization. Extra Expense means reasonable and necessary expenses incurred by the Insured Organization during the Period of Restoration to minimize, reduce or avoid Income Loss, over and above those expenses the Insured Organization would have incurred had no Security Breach or System Failure occurred. Hamilton — Technology, Cyber and Media Page 11 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 21 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Financial Institution means a bank, credit union, saving and loan association, trust company or other licensed financial service, Securities broker -dealer, mutual fund, or liquid assets fund or similar investment company where the Insured Organization maintains a bank account. Forensic Expenses means reasonable and necessary expenses incurred by the Insured Organization to investigate the source or cause of a Business Interruption Loss. Fraudulent Instruction means the transfer, payment or delivery of Money or Securities by an Insured as a result of fraudulent written, electronic, telegraphic, cable, teletype or telephone instructions provided by a third party, that is intended to mislead an Insured through the misrepresentation of a material fact which is relied upon in good faith by such Insured. Fraudulent Instruction will not include loss arising out of: 1. any actual or alleged use of credit, debit, charge, access, convenience, customer identification or other cards; 2. any transfer involving a third party who is not a natural person Insured, but had authorized access to the Insured's authentication mechanism; 3. the processing of, or the failure to process, credit, check, debit, personal identification number debit, electronic benefit transfers or mobile payments for merchant accounts; 4. accounting or arithmetical errors or omissions, or the failure, malfunction, inadequacy or illegitimacy of any product or service; 5. any liability to any third party, or any indirect or consequential loss of any kind; 6. any legal costs or legal expenses; or 7. proving or establishing the existence of Fraudulent Instruction. Funds Transfer Fraud means the loss of Money or Securities contained in a Transfer Account at a Financial Institution resulting from fraudulent written, electronic, telegraphic, cable, teletype or telephone instructions by a third party issued to a Financial Institution directing such institution to transfer, pay or deliver Money or Securities from any account maintained by the Insured Organization at such institution, without the Insured Organization's knowledge or consent. Funds Transfer Fraud will not include any loss arising out of: 1. the type or kind covered by the Insured Organization's financial institution bond or commercial crime policy; 2. any actual or alleged fraudulent, dishonest or criminal act or omission by, or involving, any natural person Insured; 3. any indirect or consequential loss of any kind; 4. punitive, exemplary or multiplied damages of any kind or any fines, penalties or loss of any tax benefit; Hamilton — Technology, Cyber and Media Page 12 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 22 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 5. any liability to any third party, except for direct compensatory damages arising directly from Funds Transfer Fraud; 6. any legal costs or legal expenses; or proving or establishing the existence of Funds Transfer Fraud; 7. the theft, disappearance, destruction of, unauthorized access to, or unauthorized use of confidential information, including a PIN or security code; 8. any forged, altered or fraudulent negotiable instruments, securities, documents or instructions; or 9. any actual or alleged use of credit, debit, charge, access, convenience or other cards or the information contained on such cards. Income Loss means: an amount equal to: 1. net profit or loss before interest and tax that the Insured Organization would have earned or incurred; and 2. continuing normal operating expenses incurred by the Insured Organization (including payroll), but only to the extent that such operating expenses must necessarily continue during the Period of Restoration. Individual Contractor means: any natural person who performs labor or service for the Insured Organization pursuant to a written contract or agreement with the Insured Organization. The status of an individual as an Individual Contractor will be determined as of the date of an alleged act, error or omission by any such Individual Contractor. Insured means: 1. the Insured Organization; 2. any director or officer of the Insured Organization, but only with respect to the performance of his or her duties as such on behalf of the Insured Organization; 3. an employee (including a part time, temporary, leased or seasonal employee or volunteer) or Individual Contractor of the Insured Organization, but only for work done while acting within the scope of his or her employment and related to the conduct of the Insured Organization's business; 4. a principal if the Named Insured is a sole proprietorship, or a partner if the Named Insured is a partnership, but only with respect to the performance of his or her duties as such on behalf of the Insured Organization; 5. any person who previously qualified as an Insured under parts 2. through 4., but only with respect to the performance of his or her duties as such on behalf of the Insured Organization; 6. an Additional Insured, but only as respects Claims against such person or entity for acts, errors or omissions of the Insured Organization; Hamilton — Technology, Cyber and Media Page 13 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 23 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 7. the estate, heirs, executors, administrators, assigns and legal representatives of any Insured in the event of such Insured's death, incapacity, insolvency or bankruptcy, but only to the extent that such Insured would otherwise be provided coverage under this Policy; and 8. the lawful spouse, including any natural person qualifying as a domestic partner of any Insured, but solely by reason of any act, error or omission of an Insured other than such spouse or domestic partner. Insured Organization means the Named Insured and any Subsidiaries. Loss means Breach Response Costs, Business Interruption Loss, Claims Expenses, Criminal Reward Funds, Cyber Extortion Loss, Damages, Data Recovery Costs, Dependent Business Loss, PCI Fines, Expenses and Costs, Penalties, loss covered under the eCrime insuring agreement and any other amounts covered under this Policy. Any Loss arising from the same or a series of related, repeated or continuing acts, errors, omissions, incidents or events will be considered a single Loss for the purposes of this Policy. With respect to the Breach Response and First Party Data & Network Loss insuring agreements, all acts, errors, omissions, incidents or events (or series of related, repeated or continuing acts, errors, omissions, incidents or events) giving rise to Loss in connection with such insuring agreements will be deemed to have been discovered at the time the first such act, error, omission, incident or event is discovered. Media Activities means creating, displaying, broadcasting, disseminating or releasing Media Material by or on behalf of the Insured Organization to the public, including any blog, webcasts, websites, broadcast or cable stations, or social media web pages, created and maintained by or on behalf of the Insured Organization, but only where such Media Activities and Media Material are intended to inform others of the Insured Organization's own products, services or activities. Media Material means any information, including words, sounds, numbers, images or graphics, but will not include computer software or the actual goods, products or services described, illustrated or displayed in such Media Material. Media Wrongful Act means one or more of the following acts committed on or after the Retroactive Date and before the end of the Policy Period in the course of the Insured Organization's performance of Media Activities or Tech Services: defamation, libel, slander, product disparagement, trade libel, infliction of emotional distress, outrage, outrageous conduct, or other tort related to disparagement or harm to the reputation or character of any person or organization; 2. a violation of the rights of privacy of an individual, including false light, intrusion upon seclusion and public disclosure of private facts; 3. invasion or interference with an individual's right of publicity, including misappropriation of any name, persona, voice or likeness for commercial advantage; Hamilton — Technology, Cyber and Media Page 14 of 31 Tue Jun 06 7073 @ 8:09:42 1 277157 1 Page 24 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 4. false arrest, detention or imprisonment; 5. invasion of or interference with any right to private occupancy, including trespass, wrongful entry or wrongful eviction; 6. plagiarism, piracy or misappropriation of ideas under implied contract; 7. infringement of copyright; 8. infringement of trade dress, domain name, title or slogan, or the dilution or infringement of trademark or service mark, or improper deep -linking or framing or infringement of domain name including cybersquatting violations; 9. negligence regarding the content of any Media Activities, including harm caused through any reliance or failure to rely upon such content; 10. misappropriation of a trade secret; 11. unfair competition including a violation of Section 43(a) of the Lanham Act, but only if alleged in conjunction with and arising out of any of the acts listed in paragraphs 7. or 8. above. Merchant Services Agreement means any agreement between an Insured and a financial institution, credit/debit card company, credit/debit card processor or independent service operator enabling an Insured to accept credit card, debit card, prepaid card or other payment cards for payments or donations. Money means a medium of exchange in current use authorized or adopted by a domestic or foreign government as a part of its currency. Named Insured means the Named Insured listed in the Declarations. PCI Fines, Expenses and Costs means: the monetary amount owed by the Insured Organization under the terms of a Merchant Services Agreement as a direct result of a suspected Data Breach. With the prior consent of the Underwriters, PCI Fines, Expenses and Costs includes reasonable and necessary legal costs and expenses incurred by the Insured Organization to appeal or negotiate an assessment of such monetary amount. PCI Fines, Expenses and Costs will not include any charge backs, interchange fees, discount fees or other fees unrelated to a Data Breach. Penalties means: 1. any monetary civil fine or penalty payable to a governmental entity that was imposed in a Regulatory Proceeding; and 2. amounts which the Insured is legally obligated to deposit in a fund as equitable relief for the payment of consumer claims due to an adverse judgment or settlement of a Regulatory Proceeding (including such amounts required to be paid into a "Consumer Redress Fund"); Hamilton — Technology, Cyber and Media Page 15 of 31 Tue Jun 06 7073 @ 8:09:42 1 277157 1 Page 25 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services but will not include: (i) costs to remediate or improve Computer Systems; (ii) costs to establish, implement, maintain, improve or remediate security or privacy practices, procedures, programs or policies; (iii) audit, assessment, compliance or reporting costs; or (iv) costs to protect the confidentiality, integrity and/or security of Personally Identifiable Information or other information. The insurability of Penalties will be in accordance with the law in the applicable venue that most favors coverage for such Penalties. Period of Restoration means the 180-day period of time that begins upon the actual and necessary interruption of the Insured Organization's business operations. Personally Identifiable Information means: 1. any information concerning an individual that is defined as personal information under any Breach Notice Law; and 2. an individual's drivers license or state identification number, social security number, unpublished telephone number, and credit, debit or other financial account numbers in combination with associated security codes, access codes, passwords or PINs; if such information allows an individual to be uniquely and reliably identified or contacted or allows access to the individual's financial account or medical record information. but will not include information that is lawfully made available to the general public. Policy Period means the period of time between the inception date listed in the Declarations and the effective date of termination, expiration or cancellation of this Policy and specifically excludes any Optional Extension Period or any prior policy period or renewal period. Privacy Policy means the Insured Organization's public declaration of its policy for collection, use, disclosure, sharing, dissemination and correction or supplementation of, and access to Personally Identifiable Information. Privacy Policy Violation means the failure by the Insured to comply with that part of a Privacy Policy that specifically: 1. prohibits or restricts the Insured Organization's disclosure, sharing or selling of Personally Identifiable Information; 2. requires the Insured Organization Identifiable Information or to correct Information after a request is made; Hamilton — Technology, Cyber and Media Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 26 of 76 to provide an individual access to Personally incomplete or inaccurate Personally Identifiable Page 16 of 31 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 3. mandates procedures and requirements to prevent the loss of Personally Identifiable Information; 4. prevents or prohibits improper, intrusive or wrongful collection of Personally Identifiable Information from another person; 5. requires notice to a person of the Insured Organization's collection or use of, or the nature of the collection or use of his or her Personally Identifiable Information; or 6. provides a person with the ability to assent to or withhold assent for (e.g. opt -in or opt -out) the Insured Organization's collection or use of his or her Personally Identifiable Information; provided the Insured Organization has in force, at the time of such failure, a Privacy Policy that addresses those subsections above that are relevant to such Claim. Regulatory Proceeding means a request for information, civil investigative demand, or civil proceeding brought by or on behalf of any federal, state, local or foreign governmental entity in such entity's regulatory or official capacity. Retroactive Date means the applicable date listed in the Declarations. Securities means negotiable and non-negotiable instruments or contracts representing either Money or tangible property that has intrinsic value. Security Breach means a failure of computer security to prevent: 1. Unauthorized Access or Use of Computer Systems, including Unauthorized Access or Use resulting from the theft of a password from a Computer System or from any Insured; 2. a denial of service attack affecting Computer Systems; 3. with respect to coverage under the Liability insuring agreements, a denial of service attack affecting computer systems that are not owned, operated or controlled by an Insured; or 4. infection of Computer Systems by malicious code or transmission of malicious code from Computer Systems. Subsidiary means any entity: 1. which, on or prior to the inception date of this Policy, the Named Insured owns, directly or indirectly, more than 50% of the outstanding voting securities ("Management Control"); and 2. which the Named Insured acquires Management Control after the inception date of this Policy; provided that: (i) the revenues of such entity do not exceed 15% of the Named Insured's annual revenues; or Hamilton — Technology, Cyber and Media Page 17 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 27 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services (ii) if the revenues of such entity exceed 15% of the Named Insured's annual revenues, then coverage under this Policy will be afforded for a period of 60 days, but only for any Claim that arises out of any act, error, omission, incident or event first occurring after the entity becomes so owned. Coverage beyond such 60 day period will only be available if the Named Insured gives the Underwriters written notice of the acquisition, obtains the written consent of Underwriters to extend coverage to the entity beyond such 60 day period and agrees to pay any additional premium required by Underwriters. This Policy provides coverage only for acts, errors, omissions, incidents or events that occur while the Named Insured has Management Control over an entity. System Failure means an unintentional and unplanned interruption of Computer Systems. System Failure will not include any interruption of computer systems resulting from (i) a Security Breach, or (ii) the interruption of any third party computer system. Tech Products means a computer or telecommunications hardware or software product, or related electronic product, that is created, manufactured or developed by the Insured Organization for others, or distributed, licensed, leased or sold by the Insured Organization to others, for compensation, including software updates, service packs and other maintenance releases provided for such products. Tech Wrongful Act means any negligent act, error, omission, misstatement, misleading statement, misrepresentation or unintentional breach of a contractual obligation by the Insured, or by any person or entity for whom the Insured is legally liable, in rendering or failing to render Tech Services that occurs on or after the Retroactive Date and before the end of the Policy Period, but does not mean a Media Wrongful Act. Tech Product Wrongful Act means: any negligent act, error, omission, misstatement, misleading statement, misrepresentation or unintentional breach of a contractual obligation by the Insured that results in the failure of Tech Products to perform the function or serve the purpose intended; or 2. software copyright infringement by the Insured with respect to Tech Products; that occurs on or after the Retroactive Date and before the end of the Policy Period. Tech Services means computer, cloud computing, and electronic technology services, including: data processing, software as a service (SaaS), platform as a service (PaaS), infrastructure as a service (laaS), network as a service (NaaS); Hamilton — Technology, Cyber and Media Page 18 of 31 Tue Jun 06 7073 @ 8:09:42 1 277157 1 Page 28 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 2. data and application hosting, Computer Systems analysis, and technology consulting and training; or 3. custom software programming for a specific client of the Insured Organization and, computer and software systems installation and integration; performed by the Insured, or by others acting under the Insured Organization's trade name, for others for a fee. Telephone Fraud means the act of a third party gaining access to and using the Insured Organization's telephone system in an unauthorized manner. Third Party Information means any trade secret, data, design, interpretation, forecast, formula, method, practice, credit or debit card magnetic strip information, process, record, report or other item of information of a third party not insured under this Policy which is not available to the general public. Transfer Account means an account maintained by the Insured Organization at a Financial Institution from which the Insured Organization can initiate the transfer, payment or delivery of Money or Securities. Unauthorized Access or Use means the gaining of access to or use of Computer Systems by an unauthorized person(s) or the use of Computer Systems in an unauthorized manner. Unauthorized Disclosure means the disclosure of (including disclosure resulting from phishing) or access to information in a manner that is not authorized by the Insured Organization and is without knowledge of, consent or acquiescence of any member of the Control Group. Waiting Period means the period of time that begins upon the actual interruption of the Insured Organization's business operations caused by a Security Breach, System Failure, or Dependent Security Breach, and ends after the elapse of the number of hours listed as the Waiting Period in the Declarations. Exclusions: The coverage under this Policy will not apply to any Loss arising out of: Bodily Injury or Property Damage physical injury, sickness, disease or death of any person, including any mental anguish or emotional distress resulting from such physical injury, sickness, disease or death; or Hamilton — Technology, Cyber and Media Page 19 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 29 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 2. physical injury to or destruction of any tangible property, including the loss of use thereof; but electronic data will not be considered tangible property; except, however, this exclusion does not apply to: (i) the wrongful infliction of mental injury, mental anguish, humiliation, shock, or emotional distress alleged in a loss arising out of Data Breach or Security Breach Conformance with Advertising any actual or alleged failure of any products designed, manufactured, marketed or sold by an Insured Organization or on an Insured Organization's behalf to confirm with any advertisements or representations made by the Insured Organization or on the Insured Organization's behalf, or to perform as advertised or promised. However, this exclusion shall only apply to Claims for a Media Wrongful Act; Contractual with respect to coverage under parts 1. and 3. of the Media, Tech, Data & Network Liability insuring agreement: any obligation the Insured has under contract; but this exclusion will not apply to: 1. the obligation to perform Tech Services, or 2. a Claim for misappropriation of ideas under implied contract, or 3. to the extent the Insured would have been liable in the absence of such contract; Criminal, Intentional or Fraudulent Acts any criminal, dishonest, fraudulent, or malicious act or omission, or intentional or knowing violation of the law, if committed by an Insured, or by others if the Insured colluded or participated in any such conduct or activity; but this exclusion will not apply to: 1. Claims Expenses incurred in defending any Claim alleging the foregoing until there is a final non -appealable adjudication establishing such conduct; or 2. with respect to a natural person Insured, if such Insured did not personally commit, participate in or know about any act, error, omission, incident or event giving rise to such Claim or Loss. For purposes of this exclusion, only acts, errors, omissions or knowledge of a member of the Control Group will be imputed to the Insured Organization; Hamilton — Technology, Cyber and Media Page 20 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 30 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Deceptive Business Practices, Antitrust & Consumer Protection any actual or alleged false, deceptive or unfair trade practices, antitrust violation, restraint of trade, unfair competition (except as provided under part 3. of the Media, Tech, Data & Network Liability insuring agreement), violation of consumer protection law, false, deceptive or misleading advertising, inaccurate cost estimates or failure of goods or services to conform with any represented quality or performance, or violation of the Sherman Antitrust Act, the Clayton Act, or the Robinson-Patman Act; but this exclusion will not apply to: the Breach Response insuring agreement; or 2. coverage for a Data Breach or Security Breach, provided no member of the Control Group participated or colluded in such Data Breach or Security Breach; Dependent System Failure The unintentional and unplanned interruption of computer systems operated by a Dependent Business Distribution of Information the distribution of unsolicited email, text messages, direct mail, facsimiles or other communications, wire tapping, audio or video recording, or telemarketing, if such distribution, wire tapping, recording or telemarketing is done by or on behalf of the Insured Organization; but this exclusion will not apply to Claims Expenses incurred in defending the Insured against allegations of unlawful audio or video recording; FCRA any actual or alleged violation of the Fair Credit Reporting Act, as amended, or any similar federal, state or local law; First Party Data & Network Loss with respect to the First Party Data & Network Loss insuring agreements: seizure, nationalization, confiscation, or destruction of property or data by order of any governmental or public authority; 2. costs or expenses incurred by the Insured to identify or remediate software program errors or vulnerabilities or update, replace, restore, assemble, reproduce, recollect or enhance data or Computer Systems to a level beyond that which existed prior to a Security Breach, System Failure, Dependent Security Breach or Extortion Threat; 3. fire, flood, earthquake, volcanic eruption, explosion, lightning, wind, hail, tidal wave, landslide, act of God or other physical event. Hamilton — Technology, Cyber and Media Page 21 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 31 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Governmental Actions a Claim brought by or on behalf of any state, federal, local or foreign governmental entity, in such entity's regulatory or official capacity; but this exclusion will not apply to the Regulatory Defense & Penalties insuring agreement, or any Claim made against the Insured Organization by a governmental entity solely in its capacity as a customer of the Insured Organization; Harassment or Discrimination any actual or alleged harassment or discrimination of any kind, including, but not limited to, age, colour, race, gender, creed, national origin, marital status, sexual preference, disability or pregnancy; Inaccurate Pricing the actual or alleged inaccurate, inadequate, or incomplete description of the price of goods, products or services, or the quality of goods products or services; Infrastructure Failure failure or malfunction of satellites or of power, utility, mechanical or telecommunications (including internet) infrastructure or services that are not under the Insured Organization's direct operational control; Licensing Bodies & Joint Ventures 1. the actual or alleged obligation to make licensing fee or royalty payments; or any Claim brought by or on behalf of any intellectual property licensing bodies or organizations; 2. any Claim made by or on behalf of any independent contractor, joint venturer or venture partner arising out of or resulting from disputes over ownership of rights in Media Material or services provided by such independent contractor, joint venturer or venture partner; Other Insureds & Related Enterprises a Claim made by or on behalf of: 1. any Insured; but this exclusion will not apply to a Claim made by an individual that is not a member of the Control Group for a Data & Network Wrongful Act, or a Claim made by an Additional Insured; or 2. any business enterprise in which any Insured has greater than 15% ownership interest or made by any parent company or other entity which owns more than 15% of the Named Insured; Hamilton — Technology, Cyber and Media Page 22 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 32 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Patent & Misappropriation of Information 1. infringement, misuse or abuse of patent or patent rights; 2. misappropriation of trade secret arising out of or related to Tech Products or any other products; 3. with respect to any Data & Network Wrongful Act, misappropriation of any Third Party Information (i) by or on behalf of the Insured Organization, or (ii) by any other person or entity if such misappropriation is done with the knowledge, consent or acquiescence of a member of the Control Group; or 4. disclosure, misuse or misappropriation of any ideas, trade secrets or confidential information that came into the possession of any person or entity prior to the date he or she became an Insured or Subsidiary of the Insured Organization; Prior Known Acts & Prior Noticed Claims 1. any act, error, omission, incident or event committed or occurring prior to the inception date of this Policy if any member of the Control Group on or before the Continuity Date knew or could have reasonably foreseen that such act, error or omission, incident or event might be expected to be the basis of a Claim or Loss; 2. any Claim, Loss, incident or circumstance for which notice has been provided under any prior policy of which this Policy is a renewal or replacement; Prohibited, Restricted and Regulated Activities the sale, provision or marketing of prohibited, restricted or regulated items, including, but not limited to, alcoholic beverages, firearms, tobacco and related products (including vaping devices and products), or drugs whether considered legal or illegal. However, this exclusion shall only apply to Claims for Media Wrongful Act; Racketeering, Benefit Plans, Employment Liability & Discrimination 1. any actual or alleged violation of the Organized Crime Control Act of 1970 (commonly known as Racketeer Influenced and Corrupt Organizations Act or RICO), as amended; 2. any actual or alleged acts, errors or omissions related to any of the Insured Organization's pension, healthcare, welfare, profit sharing, mutual or investment plans, funds or trusts; 3. any employer -employee relations, policies, practices, acts or omissions, or any actual or alleged refusal to employ any person, or misconduct with respect to employees; or 4. any actual or alleged discrimination; but this exclusion will not apply to coverage under the Breach Response insuring agreement or coverage for a Data Breach or Security Breach, provided no member of the Control Group participated or colluded in such Data Breach or Security Breach; Hamilton — Technology, Cyber and Media Page 23 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 33 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Recall any costs or expenses incurred or to be incurred by the Insured or others for the reprinting, reposting, recall, inspection, repair, replacement, removal or disposal of any Tech Products, Media Material or work product, including when resulting from or incorporating the results of Retroactive Date any related or continuing act, error, omission, misstatement, misleading statement, misrepresentation, unintentional breach of a contractual obligation, incident or event where the first such act, error, omission, misstatement, misleading statement, misrepresentation or unintentional breach of a contractual obligation, incident or event was committed or occurred prior to the Retroactive Date; Sale or Ownership of Securities & Violation of Securities Laws 1. the ownership, sale or purchase of, or the offer to sell or purchase stock or other securities; or 2. an actual or alleged violation of a securities law or regulation; Tech Services; but this exclusion will not apply to the resulting loss of use of such Tech Products, Media Material or work product resulting from or incorporating the results of Tech Services; Trading Losses & Loss of Money 1. any trading losses, trading liabilities or change in value of accounts; 2. any loss, transfer or theft of monies, securities or tangible property of the Insured or others in the care, custody or control of the Insured Organization; or 3. the monetary value of any transactions or electronic fund transfers by or on behalf of the Insured which is lost, diminished, or damaged during transfer from, into or between accounts; but this exclusion will not apply to coverage under the eCrime insuring agreement; Hamilton — Technology, Cyber and Media Page 24 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 34 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Unsolicited Marketing and Communications Distribution of unsolicited marketing materials by means of email, direct mail, SMS, chat room postings, bulletin board postings, news group postings, pop-up or pop -under internet advertising, facsimile blasting, direct mailing or telemarketing or any actual or alleged violation of CAN-SPAM Act of 2003 or any subsequent amendments to that act, or the Telephone Consumer Protection Act of 1991 or any subsequent amendments to that act or any law, regulation or statute relating to unsolicited communication, distribution, marketing, sending, or transmitting of any communication via telephone or any other electronic or telecommunications device. Over -Redemption 1. any actual or alleged gambling, contest, lottery, promotional game or other game of chance; or 2. the value of coupons, price discounts, prizes, awards, or any other valuable consideration given in excess of the total contracted or expected amount; War and Civil War or resulting from, directly or indirectly occasioned by, happening through or in consequence of: war, invasion, acts of foreign enemies, hostilities (whether war be declared or not), civil war, rebellion, revolution, insurrection, military or usurped power or confiscation or nationalization or requisition or destruction of or damage to property by or under the order of any government or public or local authority; provided, that this exclusion will not apply to Cyber Terrorism. For purposes of this exclusion, "Cyber Terrorism" means the premeditated use of disruptive activities, or threat to use disruptive activities, against a computer system or network with the intention to cause harm, further social, ideological, religious, political or similar objectives, or to intimidate any person(s) in furtherance of such objectives. 5. General Conditions: Limit of Liability and Coverage The Policy Aggregate Limit of Liability listed in the Declarations (the "Policy Aggregate Limit of Liability") is the Underwriters' combined total limit of liability for all Loss payable under this Policy. The limit of liability payable under each insuring agreement will be an amount equal to the Policy Aggregate Limit of Liability unless another amount is listed in the Declarations. Such amount is the aggregate amount payable under this Policy pursuant to such insuring agreement and is part of, and not in addition to, the Policy Aggregate Limit of Liability. Hamilton — Technology, Cyber and Media Page 25 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 35 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services All Dependent Business Loss payable under this Policy is part of and not in addition to the Business Interruption Loss limit listed in the Declarations. The Underwriters will not be obligated to pay any Loss, or to defend any Claim, after the Policy Aggregate Limit of Liability has been exhausted, or after deposit of the Policy Aggregate Limit of Liability in a court of competent jurisdiction. Retentions The Retention listed in the Declarations applies separately to each act, error, omission, incident, event or related acts, errors, omissions, incidents or events giving rise to a Claim or Loss. The Retention will be satisfied by monetary payments by the Named Insured of covered Loss under each insuring agreement. If any Loss arising out of an incident or Claim is subject to more than one Retention, the Retention for each applicable insuring agreement will apply to such Loss, provided that the sum of such Retention amounts will not exceed the largest applicable Retention amount. Coverage for Business Interruption Loss and Dependent Business Loss will apply after the Waiting Period has elapsed and the Underwriters will then indemnify the Named Insured for all Business Interruption Loss and Dependent Business Loss sustained during the Period of Restoration in excess of the Retention. Satisfaction of the applicable Retention is a condition precedent to the payment of any Loss under this Policy, and the Underwriters will be liable only for the amounts in excess of such Retention. Optional Extension Period Upon non -renewal or cancellation of this Policy for any reason except the non-payment of premium, the Named Insured will have the right to purchase, for additional premium in the amount of the Optional Extension Premium percentage listed in the Declarations of the full Policy Premium listed in the Declarations, an Optional Extension Period for the period of time listed in the Declarations. Coverage provided by such Optional Extension Period will only apply to Claims first made against any Insured during the Optional Extension Period and reported to the Underwriters during the Optional Extension Period, and arising out of any act, error or omission committed on or after the Retroactive Date (if applicable) and before the end of the Policy Period. In order for the Named Insured to invoke the Optional Extension Period option, the payment of the additional premium for the Optional Extension Period must be paid to the Underwriters within 60 days of the termination of this Policy. The purchase of the Optional Extension Period will in no way increase the Policy Aggregate Limit of Liability or any sublimit of liability. At the commencement of the Optional Extension Period the entire premium will be deemed earned, and in the event the Named Insured terminates the Optional Extension Period for any reason prior to its natural expiration, the Underwriters will not be liable to return any premium paid for the Optional Extension Period. Hamilton — Technology, Cyber and Media Page 26 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 36 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services All notices and premium payments with respect to the Optional Extension Period option will be directed to the Underwriters through entity listed for Administrative Notice in the Declarations. Notice of Claim or Loss The Insured must notify the Underwriters of any Claim as soon as practicable, but in no event later than: (i) 60 days after the end of the Policy Period; or (ii) the end of the Optional Extension Period (if applicable). Notice must be provided through the contacts listed for Notice of Claim, Loss or Circumstance in the Declarations. With respect to Breach Response Costs, the Insured must notify the Underwriters of any actual or reasonably suspected Data Breach or Security Breach as soon as practicable after discovery by the Insured, but in no event later than 60 days after the end of the Policy Period. Notice must be provided through the contacts listed for Notice of Claim, Loss or Circumstance in the Declarations. Notice of an actual or reasonably suspected Data Breach or Security Breach in conformance with this paragraph will also constitute notice of a circumstance that could reasonably be the basis for a Claim. With respect to Cyber Extortion Loss, the Named Insured must notify the Underwriters via the email address listed in the Notice of Claim, Loss or Circumstance in the Declarations as soon as practicable after discovery of an Extortion Threat but no later than 60 days after the end of the Policy Period. The Named Insured must obtain the Underwriters' consent prior to incurring Cyber Extortion Loss. With respect to Data Recovery Costs, Business Interruption Loss and Dependent Business Loss the Named Insured must notify the Underwriters through the contacts for Notice of Claim, Loss or Circumstance in the Declarations as soon as practicable after discovery of the circumstance, incident or event giving rise to such Loss. The Named Insured will provide the Underwriters a proof of Data Recovery Costs, Business Interruption Loss and Dependent Business Loss, and this Policy will cover the reasonable and necessary costs, not to exceed USD 50,000, that the Named Insured incurs to contract with a third party to prepare such proof. All Loss described in this paragraph must be reported, and all proofs of loss must be provided, to the Underwriters no later than 6 months after the end of the Policy Period. The Named Insured must notify the Underwriters of any loss covered under the eCrime insuring agreement as soon as practicable, but in no event later than 60 days after the end of the Policy Period. Notice must be provided through the contacts listed for Notice of Claim, Loss or Circumstance in the Declarations. Any Claim arising out of a Loss that is covered under the Breach Response, First Party Data & Network Loss or eCrime insuring agreements and that is reported to the Underwriters in conformance with the foregoing will be considered to have been made during the Policy Period. Hamilton — Technology, Cyber and Media Page 27 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 37 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Notice of Circumstance With respect to any circumstance that could reasonably be the basis for a Claim, the Insured may give written notice of such circumstance to the Underwriters through the contacts listed for Notice of Claim, Loss or Circumstance in the Declarations as soon as practicable during the Policy Period. Such notice must include: 1. the specific details of the act, error, omission or event that could reasonably be the basis for a Claim; 2. the injury or damage which may result or has resulted from the circumstance; and 3. the facts by which the Insured first became aware of the act, error, omission or event. Any subsequent Claim made against the Insured arising out of any circumstance reported to Underwriters in conformance with the foregoing will be considered to have been made at the time written notice complying with the above requirements was first given to the Underwriters during the Policy Period. Assistance and Cooperation The Underwriters will have the right to make any investigation they deem necessary, and the Insured will cooperate with the Underwriters in all investigations, including investigations regarding coverage under this Policy and the information and materials provided to the underwriters in connection with the underwriting and issuance of this Policy. The Insured will execute or cause to be executed all papers and render all assistance as is requested by the Underwriters. The Insured agrees not to take any action which in any way increases the Underwriters' exposure under this Policy. Expenses incurred by the Insured in assisting and cooperating with the Underwriters do not constitute Claims Expenses under the Policy. The Insured will not admit liability, make any payment, assume any obligations, incur any expense, enter into any settlement, stipulate to any judgment or award or dispose of any Claim without the written consent of the Underwriters, except as specifically provided in the Settlement of Claims clause above. Compliance with a Breach Notice Law will not be considered an admission of liability. Subrogation If any payment is made under this Policy and there is available to the Underwriters any of the Insured's rights of recovery against any other party, then the Underwriters will maintain all such rights of recovery. The Insured will do whatever is reasonably necessary to secure such rights and will not do anything after an incident or event giving rise to a Claim or Loss to prejudice such rights. If the Insured has waived its right to subrogate against a third party through written agreement made before an incident or event giving rise to a Claim or Loss has occurred, then the Underwriters waive their rights to subrogation against such third party. Any recoveries will be applied first to subrogation expenses, second to Loss paid by the Underwriters, and lastly to the Retention. Any additional amounts recovered will be paid to the Named Insured. Hamilton — Technology, Cyber and Media Page 28 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 38 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Other Insurance The insurance under this Policy will apply in excess of any other valid and collectible insurance available to any Insured unless such other insurance is written only as specific excess insurance over this Policy. Provided, however, this Policy will become primary and non-contributory insurance as respects any insurance maintained by an Additional Insured if primary insurance is required by a contract in place between the Additional Insured and the Insured Organization, but only with respect to any Claim arising solely from the Media, Tech, Data & Network Liability insuring agreements. Action Against the Underwriters No action will lie against the Underwriters or the Underwriters' representatives unless and until, as a condition precedent thereto, the Insured has fully complied with all provisions, terms and conditions of this Policy and the amount of the Insured's obligation to pay has been finally determined either by judgment or award against the Insured after trial, regulatory proceeding, arbitration or by written agreement of the Insured, the claimant, and the Underwriters. No person or organization will have the right under this Policy to join the Underwriters as a party to an action or other proceeding against the Insured to determine the Insured's liability, nor will the Underwriters be impleaded by the Insured or the Insured's legal representative. The Insured's bankruptcy or insolvency of the Insured's estate will not relieve the Underwriters of their obligations hereunder. Entire Agreement By acceptance of the Policy, all Insureds agree that this Policy embodies all agreements between the Underwriters and the Insured relating to this Policy. Notice to any agent, or knowledge possessed by any agent or by any other person, will not effect a waiver or a change in any part of this Policy or stop the Underwriters from asserting any right under the terms of this Policy; nor will the terms of this Policy be waived or changed, except by endorsement issued to form a part of this Policy signed by the Underwriters. Mergers or Consolidations If during the Policy Period the Named Insured consolidates or merges with or is acquired by another entity, or sells more than 50% of its assets to another entity, then this Policy will continue to remain in effect through the end of the Policy Period, but only with respect to events, acts or incidents that occur prior to such consolidation, merger or acquisition. There will be no coverage provided by this Policy for any other Claim or Loss unless the Named Insured provides written notice to the Underwriters prior to such consolidation, merger or acquisition, the Named Insured has agreed to any additional premium and terms of coverage required by the Underwriters and the Underwriters have issued an endorsement extending coverage under this Policy. Hamilton — Technology, Cyber and Media Page 29 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 39 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Assignment The interest hereunder of any Insured is not assignable. If the Insured dies or is adjudged incompetent, such insurance will cover the Insured's legal representative as if such representative were the Insured, in accordance with the terms and conditions of this Policy. Cancellation This Policy may be cancelled by the Named Insured by giving written notice to the Underwriters through the entity listed for Administrative Notice in the Declarations stating when the cancellation will be effective. This Policy may be cancelled by the Underwriters by mailing to the Named Insured at the address listed in the Declarations written notice stating when such cancellation will be effective. Such date of cancellation will not be less than 60 days (or 10 days for cancellation due to non-payment of premium) after the date of notice. If this Policy is canceled in accordance with the paragraphs above, the earned premium will be computed pro rata; but the premium will be deemed fully earned if any Claim, or any circumstance that could reasonably be the basis for a Claim or Loss, is reported to the Underwriters on or before the date of cancellation. Payment or tender of unearned premium is not a condition of cancellation. Singular Form of a Word Whenever the singular form of a word is used herein, the same will include the plural when required by context. Headings The titles of paragraphs, clauses, provisions or endorsements of or to this Policy are intended solely for convenience and reference, and are not deemed in any way to limit or expand the provisions to which they relate and are not part of the Policy. Representation by the Insured All Insureds agree that the statements contained the information and materials provided to the Underwriters in connection with the underwriting and issuance of this Policy are true, accurate and are not misleading, and that the Underwriters issued this Policy, and assume the risks hereunder, in reliance upon the truth thereof. Hamilton — Technology, Cyber and Media Page 30 of 31 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 40 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Named Insured as Agent The Named Insured will be considered the agent of all Insureds, and will act on behalf of all Insureds with respect to the giving of or receipt of all notices pertaining to this Policy, and the acceptance of any endorsements to this Policy. The Named Insured is responsible for the payment of all premiums and Retentions and for receiving any return premiums. Page 31 of 31 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Cyber Insurance — Incident Response Directions Hamilton Policy Reference: B118OD231573/009 Named Insured: CU Technology d.b.a. Acorn Technology Services Policy Period: Effective from Thu Jun 01 2023 to Sat Jun 01 2024 Both days at 12.01a.m. Local Standard Time IMPORTANT INFORMATION IN THE EVENT OF AN INCIDENT AFFECTING THIS POLICY YOU SHOULD CONTACT HAMILTON'S 24/7 INCIDENT RESPONSE PARTNER BATES CAREY LLP AT +1 312 762 3256 or HAM ILTONCYBERno BATESCAREY.COM &RED QUOTE THE HAMILTON POLICY REFERENCE AND NAMED INSURED ABOVE WHAT YOU SHOULD DO Contact Bates Carey LLP Quote the Hamilton Policy Reference above Quote the Named Insured above State you hold a Hamilton policy Cooperate fully with Bates Carey LLP WHAT YOU SHOULD NOT DO Ignore or do nothing Contact another incident Response company Negotiate with cyber criminals Pay money to anyone Contact another law firm Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 42 of 76 Page 11 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services CONDITIONS SECTION Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 43 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services U.S. Terrorism Risk Insurance Act of 2002 as amended New & Renewal Business Endorsement This Endorsement is issued in accordance with the terms and conditions of the "U.S. Terrorism Risk Insurance Act of 2002" as amended, as summarized in the disclosure notice. In consideration of an additional premium of USD 95.75 paid, it is hereby noted and agreed with effect from inception that the Terrorism exclusion to which this Insurance is subject, shall not apply to any "insured loss" directly resulting from any "act of terrorism" as defined in the "U.S. Terrorism Risk Insurance Act of 2002", as amended ("TRIX). The coverage afforded by this Endorsement is only in respect of any "insured loss" of the type insured by this Insurance directly resulting from an "act of terrorism" as defined in TRIA. The coverage provided by this Endorsement shall expire at 12:00 midnight December 31, 2027, the date on which the TRIA Program is scheduled to terminate, or the expiry date of the policy whichever occurs first, and shall not cover any losses or events which arise after the earlier of these dates. The Terrorism exclusion, to which this Insurance is subject, applies in full force and effect to any other losses and any act or events that are not included in said definition of "act of terrorism". This Endorsement only affects the Terrorism exclusion to which this Insurance is subject. All other terms, conditions, insured coverage and exclusions of this Insurance including applicable limits and deductibles remain unchanged and apply in full force and effect to the coverage provided by this Insurance. Furthermore the Underwriter(s) will not be liable for any amounts for which they are not responsible under the terms of TRIA (including subsequent action of Congress pursuant to the Act) due to the application of any clause which results in a cap on the Underwriter's liability for payment for terrorism losses. LMA5389 09 January 2020 Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 44 of 76 LLOYD'S CCPA PRIVACY POLICY' UNDERWRITERS AT LLOYD'S, LONDON This CCPA Privacy Policy explains how Certain Underwriters at Lloyd's, London ("we" or "us") collect, use, and disclose personal information subject to the California Consumer Privacy Act ("CCPA"). "Personal information" is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident ("consumer") or household. This CCPA Privacy Policy also describes the privacy rights of California consumers and how they can exercise those rights. The CCPA does not apply to certain types of information, such as information subject to the Gramm - Leach -Bliley Act ("GLBA") or the Fair Credit Reporting Act ("FCRA"). This means that this CCPA Privacy Policy may not apply to personal information that we collect about individuals who seek, apply for, or obtain insurance products or services for personal, family, or household purposes. The CCPA also has limited application to personal information we collect in connection with providing a product or service to a business. PERSONAL INFORMATION WE COLLECT We collect, and in the past 12 months have collected, the categories of personal information described below from the sources described below. Some of this personal information may be subject to GLBA or FCRA. Directly From You We collect, and in the past 12 months have collected, the following categories of personal information about you that you include in your application or other forms that you submit, or that you otherwise provide to us: • [Personal identifiers, such as name, postal address, email address, Social Security number, policy number, account number, driver's license number, or passport number • Customer records information, such as bank account number, credit or debit card number, other financial information, phone number, health insurance information, or medical history • Protected information, such as race, religion, sexual orientation, gender, age, or marital status • Commercial information, such as records of personal property and insurance products or services purchased or obtained, purchasing or consuming histories, or transaction or account information • Professional or employment related information, such as work history • Education information, such as school and date of graduation] 2 From Our Affiliates and Third Parties We collect the following categories of personal information about you from our affiliates and other third parties, such as agents, brokers, consumer reporting agencies, or loss adjusters: • [Personal identifiers, such as name, postal address, email address, Social Security number, policy number, account number, driver's license number, or passport number • Customer records information, such as bank account number, credit or debit card number, other financial information, phone number, health insurance information, or medical history • Protected information, such as race, religion, sexual orientation, gender, age, or marital status D231573009 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 45 of 76 • Commercial information, such as records of personal property and insurance products or services purchased or obtained, purchasing or consuming histories, or transaction or account information • Professional or employment related information, such as work history • Education information, such as school and date of graduation] 3 We may also draw inferences from the personal information we collect directly from you or from our affiliates and third parties. HOW WE USE PERSONAL INFORMATION The purposes for which we use personal information depend on our relationship or interaction with a specific California consumer. We may use, and in the past 12 months have used, personal information to underwrite your insurance policy and evaluate claims under your policy; to operate and manage our business; to provide and maintain our insurance products and services; to verify your identity; to detect and prevent fraud; for vendor management purposes; to operate, manage, and maintain our business, such as developing and marketing our products and services; to conduct research and data analysis; to comply with applicable laws; to respond to civil, criminal, or regulatory lawsuits or investigations; to exercise our rights or defend against legal claims; to resolve complaints and disputes; to perform compliance activities; and to perform institutional risk control. PERSONAL INFORMATION WE DISCLOSE We disclose, and in the past 12 months have disclosed, the categories of personal information described in "Personal Information We Collect" for the purposes described in "How We Use Personal Information" to the following categories of third parties: 4 • Affiliates • Agents • Brokers • Service providers, such as loss adjusters, fraud prevention services, and software providers • Regulatory and law enforcement agencies • Attorneys, auditors, and other business partners In the past 12 months, we did not sell personal information, as the term "sell' is defined under the CCPA. YOUR RIGHTS You may have certain rights under the CCPA. These rights are subject to certain conditions and exceptions. Your rights under the CCPA may include: 5 Right to Request to Know. You have the right to request to know the following information about our practices over the past 12 months: (i) the categories of personal information we collected about you; (ii) the categories of sources from which we collected the personal information about you; (iii) the categories of third parties with whom we shared personal information, (iv) the categories of personal information we sold or disclosed about you and the categories of third parties to whom we sold or disclosed that particular category of personal information; (v) our business or commercial purpose for collecting or selling your personal information; and (vi) the specific pieces of personal information we collected about you. D231573009 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 46 of 76 You may exercise your right to request to know twice a year, free of charge. If we are unable to fulfil your request to know, we will let you know the reason why. Please note, in response to a request to know, we are prohibited from disclosing your Social Security number; driver's license number or other government -issued identification number; financial account number; any health insurance or medical identification number; an account password, security questions, or answers; and unique biometric data generated from measurements or technical analysis of human characteristics. • Right to Request to Delete. You have the right to request that we delete the personal information that we have collected from you. We may deny your request under certain circumstances, such as if we need to retain your personal information to comply with our legal obligations or if retaining the information is necessary to complete a transaction for which your personal information was collected. If we deny your request to delete, we will let you know the reason why. • Right to Non -Discrimination. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you, or your authorized agent, would like to make a request to know or request to delete, contact us at [toll -free number]6 or email your agent or broker who handled this insurance at the email address under "Contact Us" below. We will take steps to verify your identity before processing your request to know or request to delete. We will not fulfil your request unless you have provided sufficient information for us to reasonably verify that you are the individual about whom we collected personal information. We may request additional information about you so that we can verify your identity. We will only use additional personal information you provide to verify your identity and to process your request. You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent's request, we may verify both your and your agent's identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your personal information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on your behalf. You may also make a consumer request on behalf of your minor child. UPDATES TO PRIVACY NOTICE We may change or update this CCPA Privacy Policy from time to time. If we make material changes to this CCPA Privacy Policy, we will provide you with an updated copy of the policy. CONTACTING US If you have any questions or concerns about this CCPA Privacy Policy or would like to learn more about how we protect your privacy, please contact the agent or broker through whom you purchased this insurance policy at [response]. Effective Date: Thu Jun 01 2023 LMA 9191 18 September 2020 1 This privacy policy does not cover agents of the Underwriters or visitors to the Underwriters' websites. If the Underwriters are selling personal information of agents and coverholders, or they have a website, they will need a separate policy for these individuals. 2 The categories of personal information under the CCPA that are most likely being collected have been listed. The categories of personal information we did not include are biometric information; geolocation information; internet or other electronic network activity; or audio, electronic, visual, or olfactory information since it seemed unlikely that the Underwriters are collecting this D231573009 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 47 of 76 information. This section should be customized so that categories or types of personal information not being collected are deleted. If a specific type of personal information is collected that is not included, that specific piece of personal information should be added to the relevant category. 3 The categories of personal information under the CCPA that are most likely being collected have been listed. The categories of personal information we did not include are biometric information; geolocation information; internet or other electronic network activity; or audio, electronic, visual, or olfactory information since it seemed unlikely that the Underwriters are collecting this information. This section should be customized so that categories or types of personal information not being collected are deleted. If a specific type of personal information is collected that is not included, that specific piece of personal information should be added to the relevant category. 4 Underwriters should confirm this section is accurate as to the parties with whom personal information is shared. 5 It has been assumed that the Underwriters are not selling consumers' personal information and the right to opt -out of the sale of personal information has therefore not been included. If personal information is being sold, this notice will need to be amended/updated. 6 CCPA requires that insurers provide a toll free contact number, for consumers to make requests. This is an obligation that Underwriters will need to rely on their coverholders for, so this should be provided /completed by the coverholder. It is not required that the toll -free number be answered by a live individual. D231573009 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 48 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services PREMIUM PAYMENT WARRANTY IT IS WARRANTED that all Premiums due to the London Intermediary under this Policy are paid within 60 days from Inception. Non -receipt by the London Intermediary of such premiums by Midnight on the Premium Due date shall render this Insurance Policy void with effect from Inception. 11 /93 LSW585 (amended) Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 49 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services SMALL ADDITIONAL OR RETURN PREMIUMS CLAUSE (U.S.A.) NOTWITHSTANDING anything to the contrary contained herein and in consideration of the premium for which this Insurance is written, it is understood and agreed that whenever an additional or return premium of $50 or less becomes due from or to the Assured on account of the adjustment of a deposit premium, or of an alteration in coverage or rate during the term or for any other reason, the collection of such premium from the Assured will be waived or the return of such premium to the Assured will not be made, as the case may be. NMA1168 (amended) Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 50 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services SERVICE OF SUIT CLAUSE (U.S.A.) It is agreed that in the event of the failure of the Underwriters hereon to pay any amount claimed to be due hereunder, the Underwriters hereon, at the request of the Insured (or Reinsured), will submit to the jurisdiction of a Court of competent jurisdiction within the United States. Nothing in this Clause constitutes or should be understood to constitute a waiver of Underwriters' rights to commence an action in any Court of competent jurisdiction in the United States, to remove an action to a United States District Court, or to seek a transfer of a case to another Court as permitted by the laws of the United States or of any State in the United States. It is further agreed that service of process in such suit may be made upon Lloyd's America Inc., Attention: Legal Department, 280 Park Avenue, East Tower, 25th Floor, New York, NY 10017 and that in any suit instituted against any one of them upon this contract, Underwriters will abide by the final decision of such Court or of any Appellate Court in the event of an appeal. The above -named are authorized and directed to accept service of process on behalf of Underwriters in any such suit and/or upon the request of the Insured (or Reinsured) to give a written undertaking to the Insured (or Reinsured) that they will enter a general appearance upon Underwriters' behalf in the event such a suit shall be instituted. Further, pursuant to any statute of any state, territory or district of the United States which makes provision therefor, Underwriters hereon hereby designate the Superintendent, Commissioner or Director of Insurance or other officer specified for that purpose in the statute, or his successor or successors in office, as their true and lawful attorney upon whom may be served any lawful process in any action, suit or proceeding instituted by or on behalf of the Insured (or Reinsured) or any beneficiary hereunder arising out of this contract of insurance (or reinsurance), and hereby designate the above -named as the person to whom the said officer is authorized to mail such process or a true copy thereof. NMA1998 24/04/1986 Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 51 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services CHOICE OF LAW AND SERVICE OF SUIT In consideration of the premium charged for the Policy, it is hereby understood and agreed that GENERAL CONDITIONS is amended to include: Service of Suit It is agreed that in the event of the Underwriters' failure to pay any amount claimed to be due under this Policy, the Underwriters will, at the Insured's request, submit to the jurisdiction of a court of competent jurisdiction within the United States. Nothing in this provision constitutes or should be understood to constitute a waiver of the Underwriters' rights to commence an action in any court of competent jurisdiction in the United States, to remove an action to a United States District Court, or seek a transfer of a case to another court as permitted by the laws of the United States or any state in the United States. It is further agreed that service of processing such suit may be made upon the Underwriters' representative: Lloyd's America Inc., Attention: Legal Department, 280 Park Avenue, East Tower, 25th Floor, New York, NY 10017 and that in any suit instituted against any one of them upon this contract, the Underwriters will abide by the final decision of such court or of any appellate court in the event of an appeal. The person or entity named above is authorized and directed to accept service of process on the Underwriters' behalf in any such suit and/or upon the Insured's request to give a written undertaking to the Insured that they will enter a general appearance upon the Underwriters' behalf in the event such a suit shall be instituted. Pursuant to any statute of any state, territory, or district of the United States which makes provision therefore, the Underwriters hereby designate the Superintendent, Commissioner, or Director of Insurance or other officer specified for that purpose in the statute, or his successor in office, as their true and lawful attorney upon whom may be served any lawful process in any action, suit, or proceeding instituted by or on the Insured's behalf or any beneficiary hereunder arising out of this Policy, and hereby designate the person or entity named above as the persons to whom said officer is authorized to mail such process or a true copy thereof. Choice of Law Any disputes involving this Policy will be resolved applying the law of the state of New York. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 52 of 76 Page 1 of 1 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that: The definition of Extra Expense is deleted in its entirety and replaced with the following: Extra Expense means reasonable and necessary expenses incurred by the Insured Organization during the Period of Restoration to minimize, reduce or avoid Income Loss, over and above those expenses the Insured Organization would have incurred had no Security Breach, System Failure or Dependent Security Breach occurred; and includes reasonable and necessary expenses incurred by the Insured Organization to replace computers or any associated devices or equipment operated by, and either owned by or leased to, the Insured Organization that are unable to function as intended due to corruption or destruction of software or firmware directly resulting from a Security Breach, provided however that the maximum sublimit applicable to Extra Expense incurred to replace such devices or equipment is USD $100,000. Part 2. of the Bodily Injury or Property Damage exclusion is deleted in its entirety and replaced with the following: 2. physical injury to or destruction of any tangible property, including the loss of use thereof; but this will not apply to the loss of use of computers or any associated devices or equipment operated by, and either owned by or leased to, the Insured Organization that are unable to function as intended due to corruption or destruction of software or firmware directly resulting from a Security Breach. Electronic data shall not be considered tangible property; All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 53 of 76 Page 1 of 1 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services CRISIS MANAGEMENT EXPENSE COVERAGE This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that: 1. The Limits listed in the Declarations under COVERAGE SCHEDULE are amended to include: Crisis Management Expenses: $1,000,000 2. INSURING AGREEMENTS is amended to include the following: To indemnify the Named Insured for 100% of the costs of a public relations consultancy incurred by the Insured Organization with Underwriters' prior written consent, for the purpose of averting or mitigating material damage to the Insured Organization's reputation that results or reasonably will result from a Claim covered under by the Policy and publicized through any media channel ("Crisis Management Expenses"); provided, this coverage shall only apply when covered Damages other than (crisis management expenses) exceeds the applicable Retention. 3. The definition of Damages is amended to include Crisis Management Expenses. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 54 of 76 Page 1 of 1 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that: 1. The aggregate sublimit applicable to all loss under this endorsement is USD $100,000. 2. The Retention applicable to each incident, event, or related incidents or events, giving rise to an obligation to pay loss under this endorsement shall be USD $2,500. 3. INSURING AGREEMENTS is amended to include: Cryptojacking To indemnify the Insured Organization for any direct financial loss sustained resulting from Cryptojacking that the Insured first discovers during the Policy Period. 4. DEFINITIONS is amended to include: Cryptojacking means the Unauthorized Access or Use of Computer Systems to mine for Digital Currency that directly results in additional costs incurred by the Insured Organization for electricity, natural gas, oil, or internet (the "Utilities"); provided, however, that such additional costs for the Utilities are: 1. incurred pursuant to a written contract between the Insured Organization and the respective utility provider, which was executed before the Cryptojacking first occurred; 2. billed to the Insured Organization by statements issued by the respective utility provider, which include usage or consumption information; 3. not charged to the Insured Organization at a flat fee that does not scale with the rate or use of the respective utility; and 4. incurred pursuant to statements issued by the respective utility provider and due for payment during the Policy Period. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 55 of 76 Page 1 of 1 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services EMPLOYEE DEVICE ENDORSEMENT This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that the definition of Computer Systems is amended to include computers, any software residing on such computers and any associated devices or equipment (including but not limited to wireless or mobile devices), operated by any person listed in parts 2., 3. or 4. of the Insured definition, but only for work done while acting within the scope of his or her employment and related to the conduct of the Insured Organization's business. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 56 of 76 Page 1 of 1 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that the definition of Data & Network Wrongful Act is amended to include the following: 5. non-compliance with the following obligations under the EU General Data Protection Regulation: (i) Article 5.1(f), also known as the Security Principle; (ii) Article 32, Security of Processing; (iii) Article 33, Communication of a Personal Data Breach to the Supervisory Authority; or (iv) Article 34, Communication of a Personal Data Breach to the Data Subject. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 57 of 76 Page 1 of 1 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Data Privacy Notice A0V HAMILTON This privacy notice is provided by Hamilton Insurance DAC and its London Branch. These firms are collectively referred to as Hamilton, we, our and us throughout this notice. Details on each legal entity is contained within the Companies section below. Your Personal Information Hamilton is committed to respecting your privacy and that of the information you provide to us in our business with you. This data privacy notice seeks to provide you with information about how and why we will use your personal data. We keep our data privacy notice under regular review. When we ask you for your personal data, we will explain why we need it. Reasons we may require your personal data include: • To perform the contract we have entered into with you. • To meet our legal obligations. • For our legitimate interests, where these do not compromise your interests, rights and freedoms. If we are not being sufficiently clear in our explanation, we invite you to tell us. Where we are required to seek your specific consent to process your personal data we will explain what we are asking you to agree and why. In this situation, you have the choice as to whether to give your consent or not. If you do give consent, you may withdraw it at a later date. Where we require your consent but you choose to withhold or withdraw it, we may not be able to perform the contract we have entered into with you. When you provide us with your personal data, we will use it only for the purpose you have provided it. We respect your privacy and will protect your data from unintended use in the same way that we protect our own confidential information. We may disclose your personal data in the following circumstances: Where we are required to do so by law or regulation. To other companies within Hamilton Insurance Group to facilitate the effective management of the group of companies. We will keep your personal data only for so long as is necessary for the purpose it was provided and otherwise in accordance with legal and regulatory requirements. If you would like further information regarding the periods for which your personal information will be stored, please contact us using the details contained within the Contact us section below Policyholders, Insureds and Claimants Insurance involves the use and disclosure of your personal data by various insurance market participants such as intermediaries, insurers and reinsurers. Our core uses and disclosures are consistent with the London Market Core Uses Information Notice (see Iondonmarketgroup.Co.Uk/gdpr). We recommend you review this notice. Business Partners We have a legitimate interest in data required to facilitate the business arrangement between us and for normal exchanges in the course of business. We may also lawfully process your information to perform the contract agreed between us. Unless you have signed up to receive news updates, we will not send this information to you. You may withdraw your consent to receiving news by using the options in the communication sent to you or by contacting us using the details contained within the Contact us section below. Prospective Employees We have a legitimate interest in data required to make contact with you. We may lawfully process data required for pre -employment activities and have a legal obligation to undertake certain checks. Website Users When you visit our website (hamiltongroup.com), your internet browser may provide us with some of your personal information, including: • The time and date you access our website. • Information about your software and your internet protocol address (ip address). • Your location. • The pages you visited. We use this information to improve the delivery of relevant information to you. We may also leave a cookie on your internet browser. Hamilton's cookies policy can be found at hamiltongroup.com/cookies-policy. Data Sharing We may share your personal data with other companies within the Hamilton Insurance Group, some of whom are based outside of the European Union. To fulfil the need for which you have provided us with your personal data, we may share your data with Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 58 of 76 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services companies based outside of the European Union. Not all countries of the world have data protection standards that are the equivalent of those in Ireland. Where we share your personal data with companies that are based outside of the European Union, we will make sure that your information is protected to an equivalent standard by, for example: Contracting with the receiving company with clauses approved by the European Union authorities as providing adequate protection or through the use of Binding Corporate Rules. Sharing the data with companies in countries considered by the European Commission as having suitably high standards of data protection legislation. A list of these countries can be found on the European Union website at ec.europa.eu/info/law/law-topic/data- protection. Sharing the data with companies that have committed to adequate levels of protection through participation in schemes such as the Privacy Shield agreed between the data protection authorities of the European Union and United States. Website Users The website hamiltongroup.com is hosted outside of the European Union by a third party. Your Rights In relation to your personal data, you may have the right to require us to: • Give further details of the use we make of your personal data • Give you a copy of your personal data that we have, including in a structured and commonly used format. • Correct any incorrect personal data that we have. • Delete any personal data that we have no lawful basis to hold. Where our processing is based on consent, you may withdraw your consent at any time. You may also object to our processing of your personal data. If you would like to exercise your rights in relation to your personal data, you should contact us using the details contained within the Contact us section below. We will not charge you for exercising your rights, though if your request for access to your personal information is clearly unfounded or excessive we are permitted to charge a reasonable fee or refuse to comply with the request. Where we require your consent to process your data but you choose to withhold or withdraw it, we may not be able to perform the contract we have entered into with you. Contact Us If you have any questions in relation to this privacy notice or otherwise how Hamilton processes personal data, including requests to exercise a data subject's legal rights, please contact the Data Protection Manager using the details below. +353 (0) 1232 1900, 2 Shelbourne Buildings, Crampton Avenue, Ballsbridge, Dublin 4, Ireland. HIDACComplaints@hamiltongroup.com Complaint Should you believe we have failed to process your personal information appropriately, you are invited to discuss the matter with Hamilton. Our contact details are at the Contact us section above. You may at any time lodge a complaint with either the Data Protection Commission (DPC) at 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland +353 (0)761 104 800 https://www.dataprotection.ie/ or the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow Cheshire, SK9 5AF, United Kingdom 0303 123 1113 or +44 (0) 162 554 5700 www.ico.or-g.uk Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 59 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that: The aggregate sublimit applicable to all loss under this endorsement is USD $100,000. The Retention applicable to each incident, event, or related incidents or events, giving rise to an obligation to pay loss under this endorsement shall be USD $2,500. INSURING AGREEMENTS is amended to include: Invoice Manipulation To indemnify the Insured Organization for Direct Net Loss resulting directly from the Insured Organization's inability to collect Payment for any goods, products or services after such goods, products or services have been transferred to a third party, as a result of Invoice Manipulation that the Insured first discovers during the Policy Period: 4. DEFINITIONS is amended to include: Direct Net Loss means the direct net cost to the Insured Organization to provide goods, products or services to a third party. Direct Net Loss will not include any profit to the Insured Organization as a result of providing such goods, products or services. Invoice Manipulation means the release or distribution of any fraudulent invoice or fraudulent payment instruction to a third party as a direct result of a Security Breach or a Data Breach. Payment means currency, coins or bank notes in current use and having a face value. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 60 of 76 Page 1 of 1 •► • This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that: Limit listed in the Declarations under COVERAGE SCHEDULE is amended to include: Reputation Loss: USD $1,000,000 2. Retention listed in the Declarations under COVERAGE SCHEDULE is amended to include: Each incident giving rise to Reputation Loss: USD $2,500 3. INSURING AGREEMENTS is amended by the addition of: Reputation Loss To indemnify the Insured Organization for Reputation Loss that the Insured Organization sustains solely as a result of an Adverse Media Event that occurs during the Policy Period, concerning: a Data Breach, Security Breach, or Extortion Threat that the Insured first discovers during the Policy Period; or 2. if this policy is a Renewal, a Data Breach, Security Breach, or Extortion Threat that the Insured first discovers during the last 90 days of the prior policy period. 4. DEFINITIONS is amended to include: Adverse Media Event means: publication by a third party via any medium, including but not limited to television, print, radio, electronic, or digital form of previously non-public information specifically concerning a Data Breach, Security Breach, or Extortion Threat; or 2. notification of individuals pursuant to part 4. of the Breach Response Costs definition. Multiple Adverse Media Events arising from the same or a series of related, repeated or continuing Data Breaches, Security Breaches, or Extortion Threats, shall be considered a single Adverse Media Event, and shall be deemed to occur at the time of the first such Adverse Media Event. Claims Preparation Costs means reasonable and necessary costs that the Named Insured incurs to contract with a third party to prepare a proof of loss demonstrating Reputational Loss. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 61 of 76 Page 1 of 3 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Protection Period means the period beginning on the date the Adverse Media Event occurs, and ends after the earlier of: 180 days; or 2. the date that gross revenues are restored to the level they would have been but for the Adverse Media Event. Renewal means an insurance policy issued by the Underwriters to the Named Insured for the policy period immediately preceding this Policy Period that provides coverage for a Data Breach, Security Breach, or Extortion Threat otherwise covered under this Policy. Reputation Loss means: the net profit or loss before interest and tax that the Insured Organization would have earned during the Protection Period but for an Adverse Media Event; and 2. continuing normal operating expenses incurred by the Insured Organization (including payroll), but only to the extent that such operating expenses must necessarily continue during the Protection Period. When calculating any Reputation Loss, due consideration will be given to any amounts made up during, or within a reasonable time after the end of, the Protection Period. Reputation Loss will not mean and no coverage will be available under this endorsement for any of the following: (i) loss arising out of any liability to any third party; (ii) legal costs or legal expenses of any type; (iii) loss incurred as a result of unfavorable business conditions; (iv) loss of market or any other consequential loss; (v) Breach Response Costs; or (vi) Cyber Extortion Loss; There will be no coverage available under this endorsement if there is an actual interruption of the Insured Organization's business operations for any period of time. 5. Limits of Liability under LIMIT OF LIABILITY AND COVERAGE is amended to include: Reputational Loss and Claims Preparation Costs covered under this Policy arising from an Adverse Media Event concerning any Data Breach, Security Breach, or Extortion Threat (including a series of related, repeated or continuing Data Breaches, Security Breaches, or Extortion Threats) first discovered during the last 90 days of the prior policy period, will be considered to have been noticed to the Underwriters during the prior policy period and will be subject to the Policy Aggregate Limit of Liability of the prior policy period. Under such circumstances, if the Policy Aggregate Limit of Liability of the prior policy period is exhausted due to payments made under the prior policy, the Underwriter's obligation to pay Reputational Loss or Claims Preparation Costs under this Policy shall be completely fulfilled and extinguished. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 62 of 76 Page 2 of 3 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 6. Notice of Claim or Loss under GENERAL CONDITIONS is amended to include: With respect to Reputation Loss, the Named Insured must notify the Underwriters through the contacts listed for Notice of Claim, Loss or Circumstance in the Declarations as soon as practicable after discovery of the circumstance, incident or event giving rise to such loss. All Reputation Loss must be reported, and all proofs of loss must be provided, to the Underwriters no later than four (4) months after the end of the Protection Period. 7. This Policy will cover up to USD 50,000 of Claims Preparation Costs in excess of the Retention stated in Section 2. of this endorsement. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 63 of 76 Page 3 of 3 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that: The Policy is amended to include the following insuring agreement: State Consumer Privacy Statutes To pay Penalties and Claims Expenses which the Insured is legally obligated to pay because of any Regulatory Proceeding first made against any Insured during the Policy Period for a violation of the California Consumer Privacy Act or any similar state statutes or state regulations specifically governing the Insured Organization's collection, use, disclosure, sale, processing, profiling, acquisition, sharing, maintenance, retention or storage of or provision of access to personal information or personal data as defined under the California Consumer Privacy Act or similar state statutes or state regulations. The definition of Claim is amended to include institution of a Regulatory Proceeding against any Insured under the State Consumer Privacy Statutes insuring agreement for a violation of the California Consumer Privacy Act or any similar state statutes or state regulations specifically governing the Insured Organization's collection, use, disclosure, sale, processing, profiling, acquisition, sharing, maintenance, retention or storage of or provision of access to personal information or personal data as defined under the California Consumer Privacy Act or similar state statutes or state regulations. The Governmental Actions exclusion will not apply to the State Consumer Privacy Statutes insuring agreement. 4. Solely with respect to the State Consumer Privacy Statutes insuring agreement, the Deceptive Business Practices, Antitrust & Consumer Protection exclusion is deleted in its entirety and replaced with the following: Deceptive Business Practices and Consumer Protection any actual or alleged false, deceptive or unfair trade practices, unfair competition, or violation of consumer protection law; but this exclusion will not apply to coverage under the State Consumer Privacy Statutes insuring agreement, provided no member of the Control Group participated in or colluded in the activities or incidents giving rise to coverage under such insuring agreement; Antitrust any actual or alleged antitrust violation, restraint of trade, false, deceptive or misleading advertising, violation of the Sherman Antitrust Act, the Clayton Act, or the Robinson-Patman Act, or inaccurate cost estimates or failure of goods or services to conform with any represented quality or performance; All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 64 of 76 Page 1 of 1 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that the definition of Security Breach is deleted in its entirety and replaced with the following: Security Breach means: A failure of computer security to prevent: (i) Unauthorized Access or Use of Computer Systems, including Unauthorized Access or Use resulting from the theft of a password from a Computer System or from any Insured; (ii) a denial of service attack affecting Computer Systems; (iii) with respect to coverage under parts 3. and 4. of the Media, Tech, Data & Network Liability insuring agreement, the Regulatory Defense & Penalties insuring agreement, and the Payment Card Liabilities & Costs insuring agreement, a denial of service attack affecting computer systems that are not owned, operated or controlled by an Insured; or (iv) infection of Computer Systems by malicious code or transmission of malicious code from Computer Systems; or Solely with respect to the Business Interruption insuring agreement: (i) the voluntary and intentional shutdown of Computer Systems by the Insured Organization, but only to the extent necessary to limit the Loss during an active or on- going Unauthorized Access or Use of Computer Systems or infection of Computer Systems by malicious code, as covered by 1.(i) or 1.(iv) above; or (ii) the intentional shutdown of Computer Systems by the Insured Organization as expressly required by any federal, state, local or foreign governmental entity in such entity's regulatory or official capacity resulting from a situation described in 1.(i) or 1.(iv) above. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 65 of 76 Page 1 of 1 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services EXCLUSIONS SECTION Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 66 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services SANCTION LIMITATION AND EXCLUSION CLAUSE No (re)insurer shall be deemed to provide cover and no (re)insurer shall be liable to pay any claim or provide any benefit hereunder to the extent that the provision of such cover, payment of such claim or provision of such benefit would expose that (re)insurer to any sanction, prohibition or restriction under United Nations resolutions or the trade or economic sanctions, laws or regulations of the European Union, United Kingdom or United States of America. LMA3100 15 September 2010 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 67 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services War and Cyber Operations Exclusion No.4 (For use on commercial cyber insurance contracts) If there is a conflict between any provision in this policy and this Endorsement, the terms of this Endorsement will prevail. 1. Notwithstanding any provision to the contrary in this insurance, this insurance does not cover that part of any loss, damage, cost, or expense, of any kind: 1.1 directly or indirectly arising from war, and/or 1.2 arising from a cyber operation that is carried out as part of a war, or the immediate preparation for a war, and/or 1.3 arising from a cyber operation that causes a state to become an impacted state. Paragraph 1.3 shall also apply to exclude the direct or indirect effect of a cyber operation on a computer system used by an insured or its third party service provider that is not physically located in the impacted state. Attribution of a cyber operation to a state 2. Notwithstanding the insurer's burden of proof, which shall remain unchanged by this clause, in determining attribution of a cyber operation to a state, the insured and insurer will consider such objectively reasonable evidence that is available to them. This may include formal or official attribution by the government of the state in which the computer system affected by the cyber operation is physically located to another state or those acting at such other state's direction or under its control. 3. The parties shall attempt in good faith to resolve any dispute arising out of or relating to the determination of attribution to this exclusion promptly by negotiation. Should the parties be not able to resolve the issue of attribution within thirty (30) days of the issue being raised in writing, either party may submit the dispute for a binding decision from a competent and disinterested umpire with the relevant knowledge and experience in international law matters to determine the attribution of a state backed cyber-attack to one or more states. All applicable statutes of limitations and defences based upon the passage of time shall be tolled, or a standstill agreement shall be agreed by the parties, until the attribution issue is determined. The parties will take such action, if any, required to effectuate such tolling or standstill agreement. The parties agree that no suit will be filed by either party against the other party seeking resolution of any dispute arising out of or relating to this exclusion no sooner than thirty (30) days after the conclusion of a binding decision from a competent and disinterested umpire, or the parties have otherwise resolved the attribution issue if sooner. Definitions 4. Computer system means any computer, hardware, software, communications system, electronic device, server, cloud infrastructure or microcontroller including any similar system or any configuration of the aforementioned and including any associated input, output, data storage device, networking equipment or back up facility. If there is any inconsistency between definitions of computer system in this exclusion and the contract of insurance, the definition in the contract of insurance shall apply. 5. Cyber operation means the use of a computer system by, at the direction of, or under control of a state to: 5.1. disrupt, deny access to, or degrade functionality of a computer system, and/or 5.2 copy, remove, manipulate deny access to or destroy information in a computer system. LMA5567A (amended 2023) Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 68 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services 6. Essential service means a service that is essential for the maintenance of vital functions of a state including, but not limited to, financial institutions and associated financial market infrastructure, health service or utility services. 7. Impacted state means any state where a cyber operation has a major detrimental impact on: 7.1 the functioning of that state due to disruption to the availability, integrity or delivery of an essential service in that state, and/or 7.2 the security or defence of that state. 8. State means sovereign state and any non-member observer state as classified by the United Nations. 9. War means armed conflict involving physical force: 9.1 by a state against another state, or 9.2 as part of a civil war, rebellion, revolution, insurrection, military action or usurpation of power, whether war be declared or not. LMA5567A (amended) LMA5567A (amended 2023) Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 69 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services NUCLEAR INCIDENT EXCLUSION CLAUSE -LIABILITY -DIRECT (BROAD) (U.S.A.) For attachment to insurances of the following classifications in the U.S.A., its Territories and Possessions, Puerto Rico and the Canal Zone: Owners, Landlords and Tenants Liability, Contractual Liability, Elevator Liability, Owners or Contractors (including railroad) Protective Liability, Manufacturers and Contractors Liability, Product Liability, Professional and Malpractice Liability, Storekeepers Liability, Garage Liability, Automobile Liability (including Massachusetts Motor Vehicle or Garage Liability), not being insurances of the classifications to which the Nuclear Incident Exclusion Clause -Liability -Direct (Limited) applies. This Policy* does not apply: Under any Liability Coverage, to injury, sickness, disease, death or destruction (a) with respect to which an insured under the Policy is also an insured under a nuclear energy liability policy issued by Nuclear Energy Liability Insurance Association, Mutual Atomic Energy Liability Underwriters or Nuclear Insurance Association of Canada, or would be an insured under any such policy but for its termination upon exhaustion of its limit of liability; or (b) resulting from the hazardous properties of nuclear material and with respect to which (1) any person or organization is required to maintain financial protection pursuant to the Atomic Energy Act of 1954, or any law amendatory thereof, or (2) the insured is, or had this Policy not been issued would be, entitled to indemnity from the United States of America, or any agency thereof, under any agreement entered into by the United States of America, or any agency thereof, with any person or organization. Under any Medical Payments Coverage, or under any Supplementary Payments Provision relating to immediate medical or surgical relief, to expenses incurred with respect to bodily injury, sickness, disease or death resulting from the hazardous properties of nuclear material and arising out of the operation of a nuclear facility by any person or organization. III. Under any Liability Coverage, to injury, sickness, disease, death or destruction resulting from the hazardous properties of nuclear material, if: (a) the nuclear material (1) is at any nuclear facility owned by, or operated by or on behalf of, an insured or (2) has been discharged or dispersed therefrom; (b) the nuclear material is contained in spent fuel or waste at any time possessed, handled, used, processed, stored, transported or disposed of by or on behalf of an insured; or (c) the injury, sickness, disease, death or destruction arises out of the furnishing by an insured of services, materials, parts or equipment in connection with the planning, construction, maintenance, operation or use of any nuclear facility, but if such facility is located within the United States of America, its territories or possessions or Canada, this exclusion (c) applies only to injury to or destruction of property at such nuclear facility. IV. As used in this endorsement: NMA 1256 Nuclear Incident Exclusion Clause Liability Page 1 of 2 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 70 of 76 Certificate Number: B118OD231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services "hazardous properties" include radioactive, toxic or explosive properties; "nuclear material' means source material, special nuclear material or by-product material; "source material', "special nuclear material", and "by-product material' have the meanings given them in the Atomic Energy Act 1954 or in any law amendatory thereof; "spent fuel' means any fuel element or fuel component, solid or liquid, which has been used or exposed to radiation in a nuclear reactor; "waste" means any waste material (1) containing by-product material and (2) resulting from the operation by any person or organization of any nuclear facility included within the definition of nuclear facility under paragraph (a) or (b) thereof; "nuclear facility" means: (a) any nuclear reactor, (b) any equipment or device designed or used for (1) separating the isotopes of uranium or plutonium, (2) processing or utilizing spent fuel, or (3) handling, processing or packaging waste, (c) any equipment or device used for the processing, fabricating or alloying of special nuclear material if at any time the total amount of such material in the custody of the insured at the premises where such equipment or device is located consists of or contains more than 25 grams of plutonium or uranium 233 or any combination thereof, or more than 250 grams of uranium 235, (d) any structure, basin, excavation, premises or place prepared or used for the storage or disposal of waste, and includes the site on which any of the foregoing is located, all operations conducted on such site and all premises used for such operations; "nuclear reactor" means any apparatus designed or used to sustain nuclear fission in a self-supporting chain reaction or to contain a critical mass of fissionable material. With respect to injury to or destruction of property, the word "injury" or "destruction" includes all forms of radioactive contamination of property. It is understood and agreed that, except as specifically provided in the foregoing to the contrary, this clause is subject to the terms, exclusions, conditions and limitations of the Policy to which it is attached. * NOTE: As respects policies which afford liability coverages and other forms of coverage in addition, the words underlined should be amended to designate the liability coverage to which this clause is to apply. 17/3/60 NMA1256 NMA 1256 Nuclear Incident Exclusion Clause Liability Page 2 of 2 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 71 of 76 Certificate Number: B 1 180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services RADIOACTIVE CONTAMINATION EXCLUSION CLAUSE -LIABILITY -DIRECT (U.S.A.) For attachment (in addition to the appropriate Nuclear Incident Exclusion Clause -Liability -Direct) to liability insurances affording worldwide coverage. In relation to liability arising outside the U.S.A., its Territories or Possessions, Puerto Rico or the Canal Zone, this Policy does not cover any liability of whatsoever nature directly or indirectly caused by or contributed to by or arising from ionising radiations or contamination by radioactivity from any nuclear fuel or from any nuclear waste from the combustion of nuclear fuel. N MA 1477 13/02/1964 Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 72 of 76 Certificate Number: 131180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services ASBESTOS, POLLUTION, AND CONTAMINATION EXCLUSION ENDORSEMENT This endorsement modifies insurance provided under the following: Hamilton Technology, Cyber and Media Policy Wording In consideration of the premium charged for the Policy, it is hereby understood and agreed that the coverage under this Policy will not apply to any Loss arising out of either in whole or in part, directly or indirectly arising out of or resulting from or in consequence of, or in any way involving: asbestos, or any materials containing asbestos in whatever form or quantity; the actual, potential, alleged or threatened formation, growth, presence, release or dispersal of any fungi, molds, spores or mycotoxins of any kind; any action taken by any party in response to the actual, potential, alleged or threatened formation, growth, presence, release or dispersal of fungi, molds, spores or mycotoxins of any kind, such action to include investigating, testing for, detection of, monitoring of, treating, remediating or removing such fungi, molds, spores or mycotoxins; and any governmental or regulatory order, requirement, directive, mandate or decree that any party take action in response to the actual, potential, alleged or threatened formation, growth, presence, release or dispersal of fungi, molds, spores or mycotoxins of any kind, such action to include investigating, testing for, detection of, monitoring of, treating, remediating or removing such fungi, molds, spores or mycotoxins; The Underwriters will have no duty or obligation to defend any Insured with respect to any Claim or governmental or regulatory order, requirement, directive, mandate or decree which either in whole or in part, directly or indirectly, arises out of or results from or in consequence of, or in any way involves the actual, potential, alleged or threatened formation, growth, presence, release or dispersal of any fungi, molds, spores or mycotoxins of any kind; the existence, emission or discharge of any electromagnetic field, electromagnetic radiation or electromagnetism that actually or allegedly affects the health, safety or condition of any person or the environment, or that affects the value, marketability, condition or use of any property; or 4. the actual, alleged or threatened discharge, dispersal, release or escape of Pollutants; or any governmental, judicial or regulatory directive or request that the Insured or anyone acting under the direction or control of the Insured test for, monitor, clean up, remove, contain, treat, detoxify or neutralize Pollutants. Pollutants means any solid, liquid, gaseous or thermal irritant or contaminant including gas, acids, alkalis, chemicals, heat, smoke, vapor, soot, fumes or waste. Waste includes but is not limited to materials to be recycled, reconditioned or reclaimed. All other terms and conditions of this Policy remain unchanged. Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 73 of 76 Page 1 of 1 Certificate Number: 61180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services SEVERAL LIABILITY NOTICE The subscribing insurers' obligations under contracts of insurance to which they subscribe are several and not joint and are limited solely to the extent of their individual subscriptions. The subscribing insurers are not responsible for the subscription of any co -subscribing insurer who for any reason does not satisfy all or part of its obligations. 08/94 LSW1001 (Insurance) Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 74 of 76 Certificate Number: B1180D231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services Attaching to and forming part of Certificate Number: B118OD231573/009 (100%) SCHEDULE OF LLOYD'S UNDERWRITERS Authority Ref. B118OD231573 : Hereon 100% 75.00000% 4000 HAM 25.00000% 2121 ARG 100.0000% Tue Jun 06 2023 @ 8:09:42 1277157 1 Page 75 of 76 Certificate Number: 13118OD231573/009 (100%) Name Insured: CU Technology d.b.a. Acorn Technology Services LLOYD'S One Lime Street London EC3M 7HA Tue Jun 06 2023 @ 8:09:42 1 277157 1 Page 76 of 76