CTLP · CIK 0000896429
What Cantaloupe, Inc. told the SEC could break it.
Cantaloupe's disclosures cluster on revenue that is both concentrated and easily unwound, alongside a web of outside dependencies. A single customer was about 10% of fiscal 2025 revenue ($28.8 million), and substantially all of its customer contracts can be terminated on just 30 days' notice. The rest of the register is about reliance on third parties and geography: it outsources engineering to firms in jurisdictions including Russia, Ukraine and India; its expansion into Europe, Mexico and other markets brings tariff, currency, sanctions and political-instability exposure; and its core service depends on agreements with large card-processing organizations whose termination could cost it business.
4 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Customer concentration
- one customer ~10% of revenue; 30-day terminable contractsmedium
A single customer was ~10% of FY2025 revenue ($28.8M), and substantially all customer service contracts are terminable on 30 days' notice — concentrating and destabilizing revenue.
“Approximately $ 28.8 million, $ 24.6 million, and $ 28.7 million of the Company's revenue for the years ended June 30, 2025, 2024 and 2023, respectively, were concentrated with one customer, which represented 10 %, 9 % and 12 % of the Company's revenues for each of the years.”
SEC filing →As of 2025
Other disclosures
- engineering outsourced to firms in Russia/Ukraine/India and other countriesmedium
Cantaloupe outsources engineering work to third parties in jurisdictions including Russia, Ukraine, India, Bangladesh, Romania, Colombia and Sweden, exposing development to geopolitical and oversight risk.
“we have worked, and expect to work in the future, with companies located in jurisdictions outside of the U.S., including, but not limited to Sweden, Romania, Columbia, Russia, Ukraine, India and Bangladesh.”
SEC filing →As of 2025
Regulatory & policy
- international expansion (Europe/Mexico) — tariffs, FX, sanctionsmedium
Cantaloupe's expansion into Europe, Mexico and other markets exposes it to new/changing tariffs, FX, sanctions, repatriation restrictions and political instability.
“risks and uncertainties associated with our expansion into and our operations in Europe, Mexico and other foreign markets, including general economic conditions, policy changes affecting international trade (including the imposition of new tariffs, or changes and adjustments to existing tariffs), political instability, inflation rates, recessions, sanctions, foreign currency exchange rates and controls”
SEC filing →As of 2025
Supplier concentration
- dependence on third-party card-processing organizationslow
Cantaloupe relies on agreements with large payment-processing organizations for card authorization, data capture, settlement and merchant accounting; termination of those arrangements could cause it to lose business.
“We rely on agreements with other large payment processing organizations to enable us to provide card authorization, data capture and transmission, settlement and merchant accounting services for the customers we serve. The termination by our card processing providers of their arrangements with us or th”
SEC filing →As of 2025
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch