Company: BPOPM
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001193125-25-043848
Chunk: 42

Company: POPULAR, INC.
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 42
---
computers
or 
systems used
by us
or by
our clients,
customers and
counterparties, and
could result
in violations of
applicable privacy
and other 
laws,
financial
loss
to
us
or
to
our
customers,
increased
regulatory
scrutiny
and
enforcement
actions,
customer
dissatisfaction, 
significant litigation exposure and harm to our reputation,
all of which could have a material adverse
effect on us.
The
extent
of
a
particular
cyber-attack
and
the
steps
that
we
may
need
to
take
to
investigate
the
attack
may
not
be 
immediately
clear,
and
it
may
take
a
significant
amount
of
time
before
such
an
investigation
can
be
completed.
While
such
an 
investigation is ongoing, Popular may not necessarily know the full extent
of the harm caused by the cyber-attack, and that
damage 
may continue to spread.
These factors may inhibit
our ability to provide
rapid, full and reliable
information about the cyber-attack to 
our clients,
customers, counterparties
and regulators,
as well
as the
public. Moreover,
new regulations may
require us
to disclose 
information about a cybersecurity event before
it has been resolved or
fully investigated. Furthermore, it may not
be clear how best 
to
contain
and
remediate
the
potential
harm
caused
by
the
cyber-attack,
and
certain
errors
or
actions
could
be
repeated
or 
compounded before they are
discovered and remediated. Cyber-attacks could
also cause interruptions in our
operations and result 
in the incurrence of significant costs, including those related
to forensic analysis and legal counsel.
We also
rely on
third parties
for the
performance of
a significant
portion of
our information
technology functions and
the 
provision of information security,
technology and business process services. As a result, a
successful compromise or circumvention 
of
the security
of
the systems
of these
third-party service
providers could
have serious
negative consequences
for us,
including 
compromise
of
our
systems,
misappropriation of
our
confidential