Company: RSI
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001793659-25-000047
Chunk: 162

Company: Rush Street Interactive, Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 162
---
 to obtain a customer’s password to access or obtain that customer’s transaction data or personal information, resulting in the perception that our systems are insecure. Any compromise or breach of our security measures, or those of our third-party providers, could violate applicable privacy, data protection, data security, network and information systems security and other laws and cause significant legal and financial exposure, adverse publicity and a loss of confidence in our security measures, which could have a material adverse effect on our business, financial condition, results of operations and prospects. We continue to devote significant resources to protect against security breaches, and we may need to in the future to address problems caused by breaches, including notifying affected customers, authorities and regulatory bodies, investigating the matter, and responding to any resulting litigation or regulatory investigations or action, which in turn, diverts resources from growing and expanding our business.

Damage and claims arising from a breach may not be completely covered by our applicable insurance, if at all, or may exceed the amount of any insurance available.

We rely on information technology and other systems and platforms, and failures, errors, defects or disruptions therein could harm our brand and reputation, subject us to liability, disrupt our business, affect our ability to scale our technical infrastructure and adversely affect our operating results and growth prospects. Further, our offerings, online gaming platform and other software applications and systems, and certain third-party platforms that we use could contain undetected errors.

Our technology infrastructure is critical to the performance of our platform and offerings and to customer satisfaction. However, our systems may not be adequately designed with the necessary reliability and redundancy to avoid performance delays or outages that could harm our business. We cannot assure you that absolute security will be provided by the measures we take to: detect, prevent, stop or respond to cyber attacks and protect our systems, data and customer information; prevent outages, or data or information loss; and prevent or detect security breaches or fraud. Such measures include a disaster recovery strategy for server and equipment failure, back-office systems and the use of third parties for certain cybersecurity services. We have experienced, and we may in the future experience, disruptions, outages and other performance problems on our platform or offerings due to a variety of factors, including human or software errors, infrastructure changes, power supply issues and capacity constraints. For example, we recently experienced a disruption to our operations in several markets that was caused by a configuration issue set by one of our third-party hosting facilities. To date, such disruptions, individually and in the aggregate, have not had a material