Company: ACIW
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000935036-25-000006
Chunk: 85

Company: ACI WORLDWIDE, INC.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 85
---
 compromised or we experience a cybersecurity incident or similar attack, or if our services are subject to attacks that degrade or deny the ability of users to access our products or services, our business may be harmed by disrupting delivery of services and damaging our reputation.

As part of our business, we electronically receive, process, store, and transmit information, including personal information and sensitive business information of our customers. Cybersecurity incidents vary in their form and can include the deployment of harmful malware or ransomware, denial-of-services attacks, and other attacks, which may affect business continuity and threaten the availability, confidentiality and integrity of our systems and information. Cybersecurity incidents can also include employee or personnel failures, fraud, phishing or other social engineering attempts or other methods to cause confidential information, payments, account access or access credentials, or other data to be transmitted to an unintended recipient. Cybersecurity threat actors also may attempt to exploit vulnerabilities in software including software commonly used by companies in cloud-based services and bundled software. Like many other companies, we detect attempts by threat actors to gain access to our systems and networks on a frequent basis, and the frequency of such attempts could increase in the future. Unauthorized access, use, or disruptions to our data, computer systems or databases or other cybersecurity incidents or similar attacks could result in the theft or publication of confidential information or the deletion or modification of records or could 

11

Table of Contents

otherwise cause interruptions in our operations. These concerns about security are increased when we transmit information over the Internet. Security breaches and cybersecurity incidents in connection with the delivery of our products and services, including products and services utilizing the Internet, or well-publicized security breaches, and the trend toward broad consumer and general public notification of such incidents, could significantly harm our business, financial condition, cash flows and/or results of operations. We cannot be certain that advances in criminal capabilities, discovery of new vulnerabilities, attempts to exploit vulnerabilities in our systems, data thefts, physical system or network break-ins or inappropriate access, or other developments will not compromise or breach the technology protecting our networks and confidential information. Computer viruses have also been distributed and have rapidly spread over the Internet. Computer viruses could infiltrate our systems, disrupting our delivery of services and making our applications unavailable. Any inability to prevent security breaches or computer viruses could also cause existing customers to lose confidence in our systems and terminate their agreements with us, and could inhibit our ability to attract new customers. A cybersecurity incident or failure or disruption relating to our information or systems or that of our third-party business partners, or any