Company: GDOT
Filing Date: 2025-11-10
Form Type: 10-Q
Source: 0001386278-25-000076
Chunk: 288

Company: GREEN DOT CORP
Filing Date: 2025-11-10
Form: 10-Q
Item: Part I, Item 2
Chunk 288
---
 we incur. In addition, our insurance costs may also increase substantially in the future to cover the costs our insurance carriers may incur.

A cyber-attack, incident or security breach could expose us to liability and protracted and costly litigation, regulatory penalties, and could negatively impact our reputation and operating revenues.

We and our retail distributors, tax preparation partners, network acceptance members, third-party processors and the merchants that accept our cards receive, transmit and store confidential customer and other information, including personal information, in connection with the sale and use of our products and services. Despite the encryption software and the other technologies and systems we use to provide security for storage, processing and transmission of confidential customer and other information these technologies or systems have been, and continue to be, vulnerable to cyber-attacks, incidents and data security breaches by third parties and we have experienced, and may in the future experience, attacks, incidents and breaches that circumvent our security measures. The risk of unauthorized circumvention of our security measures has been heightened by advances in artificial intelligence, computer capabilities and the increasing sophistication of hackers, including state sponsored hackers. Our retail distributors, tax preparation partners, network acceptance members, other business partners, third-party processors and the merchants that accept our cards also may experience similar cyber-attacks, incidents or security breaches or discover securities vulnerabilities involving the receipt, transmission and storage of our confidential customer and other information. Improper access to our or these third parties’ systems or databases could result in the theft, publication, deletion or modification of confidential customer and other information.

A data security breach of the systems on which sensitive accountholder or other customer or end-customer data and account information are stored have led, and could in the future lead, to fraudulent activity involving our products and services, reputational damage and claims, and could lead to regulatory actions, including penalties, against us. Further, a cyber-attack or other incident could go undetected and persist in our systems for extended periods. Regardless of whether or not we are sued or face regulatory actions, a breach will require us to carefully assess the materiality of a cyber-attack or other incident. Depending on the nature and magnitude of the accessed data, this effort may require substantial resources. If we are sued in connection with any data security breach, we could be involved in protracted and costly litigation and might be forced to pay damages and/or change our business practices, any of which could have a negative impact on our operating revenues and profitability. We would also likely have to pay (or indemnify the