Company: OWLS
Filing Date: 2025-09-03
Form Type: F-1
Source: 0001193125-25-195057
Chunk: 82

Company: OBOOK HOLDINGS INC.
Filing Date: 2025-09-03
Form: F-1
Chunk 82
---
 governmental
entities or others, including class action privacy litigation in certain jurisdictions, significant fines, penalties, judgments and reputational damages to us.

Cyberattacks and security vulnerabilities could result in serious harm to our reputation, business and financial condition.

We have experienced and may in the future experience cybersecurity incidents, including breaches of our security measures, network breaches and
compromise of personally identifiable customer information due to human error, deception, malfeasance, insider threats, system errors, defects, vulnerabilities or other irregularities. Our networks and systems, as well as our third-party
providers’ networks and systems, may be vulnerable to physical and electronic breaches, computer viruses and other attacks by cyber-criminals, internet fraudsters, employees or others, which could lead to, amongst other things, a leakage of
data, damage related to incursions, destruction of documents, inability or delays in performing our services, including processing transactions and unauthorized transactions.

The methods used to launch cyberattacks continue to evolve. Unauthorized parties may attempt to use different methods to obtain illegal access
to systems and information (including our customers’ and our customers’ payment counterparties’ personal data), disable or degrade service, exploit vulnerabilities or sabotage systems. These methods may not be detected until they
have been launched. Cyberattacks could involve hacking into our systems or facilities or those of our customers, strategic collaborators or other third-party providers, and attempting to fraudulently induce users of these systems (including
employees, vendor and collaborator personnel and customers) into disclosing usernames, passwords, payment card information, multi-factor authentication application access or other sensitive information used to access such systems or facilities. This
information may, in turn, be used to access our customers’ confidential personal or proprietary information and financial instrument data stored on or accessible through our information technology systems and those of our third-party service
providers. This information may also be used to execute fraudulent transactions or engage in other fraudulent actions. Various evolving cybersecurity threats, including advanced and persisting cyberattacks, cyberextortion, distributed denial-of-service (DDoS) attacks, ransomware, spear phishing and social engineering schemes, the introduction of computer viruses or other malware, and the physical
destruction of all or portions of our information technology and infrastructure and those of our strategic collaborators and third-party providers or of other components within our information technology supply chain, are becoming increasingly
sophisticated and complex, may be difficult to detect, and could compromise the confidentiality, availability, and integrity of system data and the systems themselves.

An increasing