Company: MTCH
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000891103-25-000027
Chunk: 110

Company: Match Group, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 110
---
 credit card information, and account login credentials. Such attacks are becoming increasingly sophisticated and some actors are using AI technology to launch more automated, targeted and coordinated attacks. While we have invested (and continue to invest) in the protection of our systems and infrastructure, in related personnel and training, and in employing a data minimization strategy, where appropriate, there can be no assurance that our efforts will prevent significant breaches in our systems or other such events from occurring. Some of our systems have experienced past security incidents, and, although they did not have a material adverse effect on our operating results, there can be no assurance of a similar result in the future. There is also no guarantee that a series of incidents may not be determined to be material at a later date in the aggregate, even if they may not be material individually at the time of their occurrence.

We may also face cybersecurity threats due to error or intentional misconduct by employees, contractors or other third-party service providers. Certain aspects of effective cybersecurity are dependent upon our employees, contractors and/or other third-party service providers safeguarding our sensitive information and adhering to our security policies and access control mechanisms. We have in the past experienced, and may in the future experience, security incidents arising from a failure to properly handle sensitive information or adhere to our security policies and access control mechanisms and, although we believe no such events have had a material adverse effect on our business, there can be no assurance that an insider threat will not result in an incident that is material to us.

It may be difficult to determine the best way to investigate, mitigate, contain, and remediate the harm caused by a cyber incident. Such efforts may not be successful, and we may make errors or fail to take necessary actions. It is possible that threat actors may gain undetected access to other networks and systems after establishing a foothold on an internal system. Cyber incidents and attacks can have cascading impacts that unfold with increasing speed across our internal networks and systems. In addition, it may take considerable time for us to investigate and evaluate the full impact of incidents, particularly for sophisticated attacks. These factors may inhibit our ability to provide prompt, full and reliable information about an incident. Any cyber or similar attack we are unable to protect ourselves against could damage our systems and infrastructure, prevent 

18

us from providing our services, tarnish our brand reputation, result in the disclosure of confidential or sensitive information of our users, and/or be costly to remedy, as well as subject us to investigations by regulatory authorities and/or litigation that could result in