Company: BLND
Filing Date: 2025-11-06
Form Type: 10-Q
Source: 0001855747-25-000092
Chunk: 496

Company: Blend Labs, Inc.
Filing Date: 2025-11-06
Form: 10-Q
Item: Part I, Item 8
Chunk 496
---
 in our detection or remediation of, or other responses to, security breaches and other privacy- and security-related incidents. These security risks that we and our partners, vendors, and other service providers face have been heightened by an increase in employees and service providers working remotely. Additionally, these risks may be elevated in connection with geopolitical events such as the current war in Ukraine and the conflict in the Middle East.

In addition, consumers on our platform could have vulnerabilities on their own devices that are unrelated to our systems and platform but could mistakenly attribute their own vulnerabilities to us. Consumers on our platform may also provide sensitive information to third parties through their use of our platform, and consumers could mistakenly attribute any misuse of such information by third parties to us. Further, breaches and incidents experienced by other companies may be leveraged against us. For example, credential stuffing and business email compromise attacks are becoming increasingly common and sophisticated actors can mask their attacks, making them increasingly difficult to identify and prevent. Certain efforts may be state-sponsored or supported by significant financial and technological resources, making them even more difficult to detect, remediate, and otherwise respond to. 

There also have been and may continue to be significant supply chain attacks, and we cannot guarantee that our or our partners’, vendors’, or service providers’ systems and networks have not been breached or that they do not contain exploitable defects or bugs that could result in a breach of or incident impacting, or a disruption to our systems and networks or the systems and networks of third parties that support us and our services. In addition, laws, regulations, government guidance, and industry standards and practices in the United States and elsewhere are rapidly evolving to combat these threats. We may face increased compliance burdens regarding such requirements with regulators and customers regarding our products and services and will incur additional costs for oversight and monitoring of our own supply chain. 

Although we have developed systems and processes that are designed to help protect the confidential and sensitive information we maintain and our partners, vendors, and other service providers maintain on our behalf, including personal information of our customers, consumers, and employees, protect our systems, prevent data loss, and prevent security breaches and security incidents, these security measures may not have fully protected our systems in the past and cannot guarantee security in the future. We also have incorporated, and may continue to incorporate, artificial intelligence (“AI”) technologies into our platform and otherwise in our business, which may increase cybersecurity risks. Further, AI technologies may be used in connection with certain cybersecurity attacks, resulting in heightened risks of security breaches and incidents.