Company: RSI
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001793659-25-000047
Chunk: 160

Company: Rush Street Interactive, Inc.
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 160
---
 others. As a result, our customers’, suppliers’, partners’ and/or personnel’s data and funds may be lost, disclosed, corrupted, accessed or taken without such individuals’ consent. We provide confidential and proprietary data to our third-party partners and service providers when it is reasonably necessary to conduct our business. While we obtain assurances from those parties that they have systems and processes in place to protect such data, and where applicable, that they will take steps to assure the protections of such data by third parties, nonetheless those partners and service providers and their technology and systems are also subject to the same risks noted above. To help protect customer accounts, we offer, and in some jurisdictions we require, multi-factor authentication and strong authentication. Given the data intensive nature of our business, we have experienced attempts to breach our systems and other similar incidents in the past and expect to experience additional attempts in the future. We have been and will likely continue to be subject to attempts to gain unauthorized access to customer accounts through our information systems or those we develop for our business partners, including through phishing attacks, exploiting software vulnerabilities or credential stuffing by malicious actors who may try to deploy viruses, worms or other malicious programs. To date, these attacks have not had a material impact on our operations or financial results, but we cannot assure you that they will not have a material impact in the future, including by overloading our systems and network and preventing our legitimate customers from accessing our offerings.

We rely on third-party encryption and authentication technology in an effort to securely store, limit access to, and transmit confidential and sensitive information. Advances in computer capabilities, new technological discoveries or other developments such as artificial intelligence may result in failures of this technology to protect transaction data or other confidential and sensitive information from being compromised. In addition, websites are often attacked through compromised credentials, including those obtained through phishing and credential stuffing. Our security measures, and those of our third-party providers, may not detect, prevent or hinder all attempts to breach our systems, denial-of-service attacks, viruses, malicious software, break-ins, phishing attacks, social engineering, security breaches or other attacks and similar disruptions that may jeopardize the security of information stored in or transmitted by our websites, apps, networks and systems or that we or such third parties otherwise maintain, including payment card systems, which may subject us to fines or higher transaction fees, or limit or terminate our access to certain payment methods. We and such third parties may not anticipate, detect or prevent all types of attacks until after they have already been launched. Further, techniques