Company: OWLS
Filing Date: 2025-02-07
Form Type: DRS/A
Source: 0000950123-25-001222
Chunk: 75

Company: OBOOK HOLDINGS INC.
Filing Date: 2025-02-07
Form: DRS/A
Chunk 75
---
 their costs and expenses. If there is improper
disclosure of or unauthorized access to funds, digital assets, or other assets, or other sensitive data on our systems or our partners’ systems, we could incur significant financial losses and remediation costs and become subject to claims,
litigation, regulatory scrutiny and investigations. In addition, if our own confidential business information or sensitive customer information were improperly disclosed, our business could be adversely affected.

We are subject to numerous laws across various jurisdictions regarding the collection, use, retention, processing and transfer of data in
connection with our operations, and these laws and related regulatory regimes are evolving and may be subject to differing interpretations. Many jurisdictions have enacted laws requiring companies to notify individuals, customers or government
regulators of data security breaches involving certain types of personal data and our agreements with certain business customers and our partners require us to notify them in the event of a security incident, and such notification may be costly and
could lead to negative publicity. Any failure, or perceived failure, for us to comply with our privacy policies or with any applicable privacy laws in one or more jurisdictions could result in proceedings or actions against us by governmental
entities or others, including class action privacy litigation in certain jurisdictions, significant fines, penalties, judgments and reputational damages to us.

51

Cyberattacks and security vulnerabilities could result in serious harm to our reputation, business and financial condition.

We may experience cybersecurity incidents, including breaches of our security measures, network breaches and
compromise of personally identifiable customer information due to human error, deception, malfeasance, insider threats, system errors, defects, vulnerabilities or other irregularities. Our networks and systems, as well as our third-party
providers’ networks and systems, may be vulnerable to physical and electronic breaches, computer viruses and other attacks by cyber-criminals, internet fraudsters, employees or others, which could lead to, amongst other things, a leakage of
data, damage related to incursions, destruction of documents, inability or delays in performing our services, including processing transactions and unauthorized transactions.

The methods used to launch cyberattacks continue to evolve. Unauthorized parties may attempt to use different methods to obtain illegal access
to systems and information (including our customers’ and our customers’ payment counterparties’ personal data), disable or degrade service, exploit vulnerabilities or sabotage systems. These methods may not be detected until they have
been launched. Cyberattacks could involve hacking into our systems or facilities or those of our customers, partners or other third-party providers, and attempting to fraud