Company: RSI
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001793659-25-000047
Chunk: 161

Company: Rush Street Interactive, Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 161
---
 used to obtain unauthorized access to, or sabotage, systems change frequently and may not be known until launched against us or our third-party service providers.

Security breaches can also occur as a result of non-technical issues, including intentional or inadvertent breaches by our personnel or by third parties or failures to detect or adequately respond to breaches of our security measures. These risks increase over time as the complexity and number of technical systems and applications we use increases. Breaches of 

41

our security measures or those of our third-party providers, or cybersecurity incidents could result in: unauthorized access to our sites, apps, networks and systems; unauthorized access to and misappropriation of customer or personnel data, including personally identifiable information, or our or third parties’ other confidential or proprietary information; viruses, worms, spyware or other malware being served from our sites, apps, networks or systems; deletion or modification of content or the display of unauthorized content on our sites or apps; interruption, disruption or malfunction of operations; costs relating to breach remediation, deployment of additional personnel and protection technologies, response to governmental investigations and media inquiries and coverage; engagement of third-party experts and consultants; or litigation, regulatory action and other potential liabilities. The online gaming industry continuously experiences social engineering, phishing, malware, ransomware and similar attacks and threats of denial-of-service attacks, none of which to date have been material to our business; however, such attacks could in the future have a material adverse effect on our operations. For instance, although we were unaffected, in late 2022, some of our competitors disclosed that their systems were subject to successful attempts by one or more individuals who ultimately gained unauthorized access to customer accounts and withdrew funds from the customers’ accounts, and in 2023 several land-based casinos experienced ransomware attacks, some of which significantly impacted their ability to operate effectively. If a material security breach were to occur, our reputation and brands could be damaged, our business may suffer, we may have to expend significant capital and other resources to alleviate problems caused by such breaches, and we could be exposed to a risk of loss, litigation or regulatory action and possible liability. We cannot guarantee that recovery protocols and backup systems will be sufficient to prevent data loss. Actual or anticipated attacks may cause us to incur increased costs, including costs to deploy additional personnel and protection technologies, implement policies, procedures and response plans, train employees and engage third-party experts and consultants.

Users may experience password or other compromises, whether related to our system or third-party systems, that enable an unauthorized party