Company: CRCL
Filing Date: 2025-08-04
Form Type: DRS
Source: 0000950123-25-006942
Chunk: 72

Company: Circle Internet Group, Inc.
Filing Date: 2025-08-04
Form: DRS
Chunk 72
---
 liability, or require us to expend significant resources on information security and in responding to any such actual or perceived incident or related investigations or litigation.

Although we maintain insurance coverage that we believe is adequate for our business, it may be insufficient to protect us against all losses and costs
stemming from cyberattacks or security breaches, other types of unlawful activity, or any resulting disruptions from such events. Furthermore, there can be no assurance that we will be able to maintain such insurance coverage at reasonable costs or
at all. Although we currently maintain disaster recovery and business continuity plans to address disruptions of our systems, we may not be able to adequately continue our business or return to operability within a reasonable period of time in the
case of such an occurrence. Recovery of our systems may be additionally hampered where we have outsourced the operation of systems and information storage to third parties. Outages and disruptions of our systems, including any caused by cyberattacks
or security breaches, may harm our business, results of operations, financial condition, and prospects.

As a remote-first company, we are subject to heightened operational and cybersecurity risks.

We are a remote-first company, meaning that for all existing roles our employees work from
their homes or shared office spaces hosted by third parties, which subjects us to heightened operational risks. For example, at

41

CONFIDENTIAL TREATMENT REQUESTED BY CIRCLE INTERNET GROUP, INC. PURSUANT TO 17 C.F.R. § 200.83

these locations, technologies may not be as robust as those used in corporate offices, which could cause our networks, information systems, applications, and other tools to be more limited or
less reliable, and our security systems may be less secure than those used in corporate offices. While we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from home, we
may be subject to increased cybersecurity risk which could expose us to risks of data or financial loss and could disrupt our business operations.

We are and may continue to be subject to litigation, including individual and class action lawsuits, as well as regulatory audits, disputes, inquiries, investigations, and enforcement actions by regulators and governmental authorities.

We have been and may from time to time become subject to
material claims, arbitrations, individual and class action lawsuits, government and regulatory investigations, inquiries, actions, or requests and other proceedings alleging violations of laws, rules, and regulations, both foreign and domestic,
involving the provision of regulated financial services, intellectual property,