Company: SABR
Filing Date: 2025-05-07
Form Type: 10-Q
Source: 0001597033-25-000061
Chunk: 220

Company: Sabre Corp
Filing Date: 2025-05-07
Form: 10-Q
Item: Part I, Item 8
Chunk 220
---
In addition, we, like most technology companies, are the target of cybercriminals who attempt to compromise our systems. We are subject to and experience threats and intrusions that have to be identified and remediated to protect sensitive information along with our intellectual property and our overall business. To address these threats and intrusions, we have a team of experienced security experts and support from firms that specialize in data security and cybersecurity. We are periodically subject to these threats and intrusions, and sensitive information has in the past been, and could at any time, including in the future, be compromised as a result. In addition, the techniques employed in connection with these threats and intrusions are changing, developing and evolving rapidly, including from emerging technologies such as advanced forms of AI. The costs and impacts related to these incidents, including the costs of investigation and remediation, any associated penalties assessed by any governmental authority or payment card brand, and any indemnification or other contractual obligations to our customers, may be material and could damage our reputation. 

As an example, in the third quarter of 2023, we became aware that an unauthorized actor had illegally extracted certain company data and posted it to the dark web. Immediately upon becoming aware of this extraction, we initiated an investigation, with the assistance of cybersecurity and forensics professionals. We have also notified federal law enforcement and have provided, and will continue to provide, other required notifications. To date this cybersecurity incident has not had a material impact on our financial condition, results of operations or liquidity. However, there is no assurance that it will not result in significant costs to us, reputational harm, expenditure of additional resources, lawsuits and related fees, costs and expenses, or regulatory inquiries in the future that could result in a material adverse effect. For example, in December 2024 and January 2025, four lawsuits were filed against us in the United States District Court for the Northern District of Texas, each of which is seeking class certification. In April 2025, these lawsuits were consolidated into one lawsuit filed against us in the United States District Court for the Northern District of Texas. The complaint generally asserts negligence and other claims based on this cybersecurity incident, and, in addition to monetary damages, the plaintiffs are also seeking declaratory and injunctive relief.  We intend to vigorously defend against these claims. See “—We are involved in various legal proceedings which may cause us to incur significant fees, costs and expenses and may result in unfavorable outcomes.”    

Any computer viruses, malware, denial of