Internal control over financial reporting, fiscal 2017–2026

analysisA material weakness is a deficiency in internal control that creates a reasonable possibility that a material misstatement of the financial statements will not be prevented or detected in time. Supermicro's management concluded that internal control over financial reporting was not effective at June 30, 2017 because of material weaknesses. Deloitte & Touche LLP's report on internal control described a culture of aggressively focusing on quarterly revenue without sufficient focus on compliance, a failure of senior management to set an appropriate tone, and sales, finance and operations personnel, including officers and managers, who were aware of, condoned or were involved in actions that reflected an inappropriate tone at the top and violated the Code of Conduct and accounting policies. It added that some employees failed to raise material accounting issues with the Audit Committee and the auditor and, for one transaction, appear to have tried to minimize or obscure material facts from them. ¹

analysisRemediation steps reported in the fiscal 2019 annual report included restructuring the sales organization, which led to the resignations of the senior vice presidents of international sales and of worldwide sales, the vice presidents of strategic accounts, strategic sales and business development and certain other sales staff; appointing a new Chief Financial Officer and Corporate Controller in January 2018; and creating the posts of Chief Compliance Officer in May 2018 and Vice President of Internal Audit in August 2018. Management did not conclude that any of the 2017 weaknesses had been remediated at June 30, 2019, because the new controls had not operated long enough and deficiencies remained in the control environment and other components. Deloitte's reports of December 19, 2019 gave an adverse opinion on internal control at that date and an unqualified opinion on the fiscal 2019 financial statements, with an explanatory paragraph on the adoption of the new revenue standard (ASC 606). ¹

analysisIn its fiscal 2020 annual report Supermicro stated that it had remediated the material weaknesses related to all five components of the COSO internal-control framework and to revenue-recognition accounting controls, but its CEO and CFO concluded that disclosure controls were not effective at June 30, 2020 because a material weakness in information technology general controls remained; Deloitte's report of August 28, 2020 expressed an adverse opinion on internal control over financial reporting at that date. For fiscal 2021 management concluded that internal control was effective at June 30, 2021 after remediating that weakness, and Deloitte's reports of August 27, 2021 issued unqualified opinions on internal control and on the fiscal 2021 financial statements. ^{2 3}

analysisIn October 2021 the Compensation Committee awarded discretionary one-time bonuses of $160,000 to David Weigand, $150,000 to Don Clegg and $40,000 to George Kao, primarily to recognize progress in remediating the material weaknesses. At July 31, 2021 Supermicro's executive officers were Charles Liang (President, Chief Executive Officer and Chairman), Weigand (Senior Vice President, Chief Financial Officer and Chief Compliance Officer), Clegg (Senior Vice President of Worldwide Sales), Kao (Senior Vice President of Operations) and Sara Liu (Co-Founder, Senior Vice President and Director), and Daniel W. Fairfax, Fred Chan and Tally Liu sat on the Audit Committee. For fiscal 2023 management again concluded that internal control was effective at June 30, 2023, the annual report stated that past material weaknesses had been remediated, and Deloitte's reports of August 25, 2023 gave unqualified opinions on internal control and on the financial statements. ^{4 3 5 6}

analysisFor fiscal 2024 Supermicro concluded that internal control over financial reporting was not effective at June 30, 2024 because of five material weaknesses: information technology general controls; segregation-of-duties controls; controls over manual journal entries; documentation of controls over the completeness and accuracy of information; and documentation of controls for timely, complete and accurate recording and disclosure, including the timely identification and disclosure of new leasing arrangements and new related-party transactions. None had been remediated when the annual report was filed. BDO USA, P.C., its auditor since 2024, gave an adverse opinion on internal control and an unqualified opinion on the fiscal 2024 financial statements in its report of February 25, 2025. ¹

analysisAt June 30, 2025 four of those weaknesses remained unremediated — information technology general controls, segregation of duties, completeness and accuracy of information, and documentation of controls for timely recording and disclosure, including the timely identification and disclosure of new related-party transactions — while Supermicro said it had remediated the manual-journal-entry weakness and had promoted its controller to Chief Accounting Officer; BDO's report of August 28, 2025 gave an unqualified opinion on the financial statements and an adverse opinion on internal control. For fiscal 2026 Supermicro reported that it had remediated the segregation-of-duties, information-completeness and recording-and-disclosure weaknesses, including through a full redesign of the security roles in its ERP (enterprise resource planning) system, but that the information technology general controls weakness remained, so internal control over financial reporting was not effective at June 30, 2026. BDO's report of August 31, 2026 gave an adverse opinion on internal control and an unqualified opinion on the financial statements, and the annual report records no changes in or disagreements with accountants. ^{2 3}