Company: FLYW
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000950170-25-027078
Chunk: 140

Company: Flywire Corp
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 140
---
, computer viruses can be distributed and spread rapidly over the Internet and could infiltrate our systems or those of our contracted third parties. Denial of service or other attacks could be launched against us for a variety of purposes, including interfering with our solutions or to create a diversion for other malicious activities. These and other types of actions and attacks could disrupt our delivery of solutions or make them unavailable. Any such actions or attacks against us or our contracted third parties could impugn our reputation, force us to incur significant expenses in remediating the resulting impacts, expose us to uninsured liability, result in the loss of our bank sponsors or our ability to participate in the payment networks, increase our risk of regulatory scrutiny and the costs associated with such scrutiny, subject us to lawsuits, fines or sanctions, distract our management, or increase our costs of doing business. 

46

We and our contracted third parties could be subject to security breaches by hackers. Our encryption of data and other protective measures may not prevent unauthorized access to or use of personal and sensitive data. A breach of a system may subject us to material losses or liability, including payment network fines, assessments and claims for unauthorized purchases with misappropriated credit, debit or card information, impersonation, or other similar fraud claims. A misuse of such data or a cybersecurity breach could harm our reputation and deter clients and their customers from using electronic payments generally and our solutions specifically, thus reducing our revenue. In addition, any such misuse or breach could cause us to incur costs to correct the breaches or failures, expose us to uninsured liability, increase our risk of regulatory scrutiny and the costs associated with such scrutiny, subject us to lawsuits, and result in the imposition of material penalties and fines under state and federal laws or by the payment networks. The insurance coverage we maintain to cover cyber risks may be insufficient to cover all losses. In addition, a significant cybersecurity breach of our systems or communications could result in payment networks prohibiting us from processing transactions on their networks or the loss of our bank sponsors that facilitate our participation in the payment networks, either of which could materially impede our ability to conduct business.

Additionally, it is also possible that unauthorized access to sensitive customer and business data may be obtained through inadequate use of security controls by our clients, suppliers or other vendors. 

We have administrative, technical, and physical security measures in place, and we have policies and procedures in place to both evaluate the security protocols and practices of our vendors and to contractually require service providers to whom we disclose personal data to implement and maintain privacy and