Company: DLO
Filing Date: 2025-04-24
Form Type: 20-F
Source: 0000950170-25-058197
Chunk: 19

Company: dLocal Ltd
Filing Date: 2025-04-24
Form: 20-F
Item: Item 3
Chunk 19
---
 Class A common shares to become unpredictable or to decline.

We are subject to cyberattacks and may be subject to breaches of our information technology infrastructure and applications, and any failure to adequately protect our information technology infrastructure and applications could result in data breaches and/or downtime and materially adversely affect our reputation, business, and financial condition.

Our business involves the collection, storage, processing, and transmission of personal and financial data, including names, addresses, email addresses, tax identification numbers, credit card numbers and bank account numbers, as well as information about how consumers interact with our payments platform, all of which may be accessed by some of our employees. Our reputation depends on the reliability of our payments platform as a secure way to make payments. The techniques used to obtain unauthorized, improper, or illegal access to our systems, our data, client data or end-user data, disable or degrade service, or sabotage systems are constantly evolving and have become increasingly complex and sophisticated, may be difficult to detect quickly, and may not be recognized or detected until after they have been launched against a target. In addition, a significant portion of our workforce works in a remote or hybrid capacity. This may cause increases in the unavailability of our systems and infrastructure, interruption of telecommunication services, generalized system failures and heightened vulnerability to cyberattacks. We expect that unauthorized parties will continue to attempt to gain access to our systems or facilities through various means, including hacking into our systems or facilities or those of our clients, partners, or vendors, or attempting to fraudulently induce (for example, through spear phishing attacks or social engineering) our employees, clients, partners, vendors, or other users of our systems into disclosing usernames, tax identifications, passwords, payment card information, or other sensitive information, which may in turn be used to access our information technology systems. In addition, we may also face distributed denial-of-service (or DDoS) attacks, which is a type of cyberattack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to the internet. DDoS attacks are typically accomplished by flooding the targeted machine or resource with extraordinarily high volumes of traffic in an attempt to overload systems with the goal of disrupting the ability of commercial enterprises to process transactions and possibly making their systems unavailable to users, including clients and consumers, for extended periods of time. Recent industry experience has demonstrated that DDoS attacks continue to grow in size and sophistication and have the ability to widely disrupt internet services. Although we have