Company: NEWTP
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0001587987-25-000050
Chunk: 172

Company: NewtekOne, Inc.
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1A
Chunk 172
---
 amount of remote work could heighten these and other operational risks as certain aspects of the security of such technologies may be complex and unpredictable.

Prior to the January 2025 divestiture of NTS to IPM, we relied on our subsidiary NTS to manage our IT, including software, hardware and cybersecurity. In connection with the sale of NTS to IPM, we entered into an agreement for IPM to continue to manage the Company’s IT. There can be no assurance that IPM will continue to provide the Company with the same level of service or cybersecurity as a third-party provider that NTS provided as a wholly owned subsidiary. 

As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. Although we have insurance in place that covers such incidents, the cost of a breach or cyber-attack could well exceed any such insurance coverage.

61

The failure in cyber-security systems, as well as the occurrence of events unanticipated in our disaster recovery systems and management continuity planning could impair our ability to conduct business effectively.

The occurrence of a disaster, such as a cyber-attack against us or against a third-party that has access to our data or networks, a natural catastrophe, an industrial accident, failure of our disaster recovery systems, or consequential employee error, could have an adverse effect on our ability to communicate or conduct business, negatively impacting our operations and financial condition. This adverse effect can become particularly acute if those events affect our electronic data processing, transmission, storage, and retrieval systems, or impact the availability, integrity, or confidentiality of our data.

We and our subsidiaries depend heavily upon computer systems to perform necessary business functions. Despite our implementation of a variety of security measures, our computer systems, networks, and data, like those of other companies, could be subject to cyber-attacks and unauthorized access, use, alteration, or destruction, such as from physical and electronic break-ins or unauthorized tampering. If one or more of these events occurs, it could potentially jeopardize the confidential, proprietary, and other information processed, stored in, and transmitted through our computer systems and networks. Such an attack could cause interruptions or malfunctions in our operations, which could result in financial losses, litigation, regulatory penalties, client dissatisfaction or loss, reputational damage, and increased costs associated with mitigation of damages and remediation. If unauthorized parties gain access to such information and technology systems, they may be able to steal, publish, delete