Company: BL
Filing Date: 2025-11-07
Form Type: 10-Q
Source: 0001628280-25-050628
Chunk: 210

Company: BLACKLINE, INC.
Filing Date: 2025-11-07
Form: 10-Q
Item: Part I, Item 8
Chunk 210
---
 third-party and public-cloud infrastructure, also face security risks. As we rely more on third-party and public-cloud infrastructure, we are increasingly dependent on third-party security measures to protect against unauthorized access, cyberattacks, and the mishandling of customer, employee and other confidential data, and we may be required to expend significant time and resources to address any incidents related to the failure of those third-party security measures to prevent, detect, remediate, and otherwise address security breaches or incidents. Our ability to monitor our third-party service providers' security measures is limited, and in any event, attackers may be able to circumvent our third-party service providers' security measures. There have been and may continue to be significant attacks on certain third-party service providers, and we cannot guarantee that our or our third-party service providers' systems and networks have not been breached or otherwise compromised, or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our systems and networks or the systems and networks of third parties that support us and our platform. We have experienced incidents targeting our internal systems, and we may also in the future suffer breaches of, or incidents impacting, our internal systems. Security breaches or incidents impacting our platform or our internal systems could create significant interruptions or other disruptions of our software solutions, platform and technology, and may result in significant costs incurred in order to remediate or otherwise respond to a breach or incident, which may include liability for stolen assets or information, repair of system damage, incentives offered to customers or other business partners in an effort to maintain business relationships after a breach, and other costs, expenses and liabilities. We may be required to or find it appropriate to expend substantial capital and other resources to alleviate problems caused by any actual or perceived security breaches or incidents. Further, while we have expended, and will continue to expend, significant resources to enhance and improve our cybersecurity posture and capabilities, these efforts, and any other efforts we may make, may not prevent or significantly mitigate risk in the way we expect, and may require us to incur substantial costs and may require significant resources.

We have incorporated and may continue to incorporate AI/ML solutions and features, such as AI agents, into our platform and otherwise within our business, which may create additional cybersecurity risks or increase cybersecurity risks, including risks of security breaches and incidents. Further, AI/ML technologies may be used for 

43

certain cybersecurity attacks, and may increase their frequency and intensity, resulting in heightened risks of security breaches and incidents.

Additionally, many