Company: TRUE
Filing Date: 2025-11-06
Form Type: 10-Q
Source: 0001327318-25-000065
Chunk: 131

Company: TrueCar, Inc.
Filing Date: 2025-11-06
Form: 10-Q
Item: Part II, Item 1A
Chunk 131
---
 of security that results in the unauthorized release or transfer of sensitive information, which may include personally identifiable information or other user data, may result in governmental enforcement actions, litigation or public statements against us by consumer advocacy groups or others. Any of these consequences could cause consumers and automobile dealers to lose trust in us, which could have a material adverse effect on our business and prospects. Additionally, if vendors, developers or other third parties that we work with violate applicable laws or our policies, such violations may also put consumer or dealer information at risk and could in turn harm our reputation, business and operating results.

Security breaches and improper access to or disclosure of our data or user data, or other hacking and phishing attacks on our systems, could harm our reputation and adversely affect our business.

Our industry is prone to cyberattacks by third parties seeking unauthorized access to our data or users’ data or to disrupt our ability to provide service. Any failure to prevent or mitigate security breaches and improper access to or disclosure of our data or user data, including personal information, content or payment information from users, could result in the loss or misuse of such data, which could harm our business and reputation and diminish our competitive position. In addition, computer malware, ransomware, viruses, social engineering (such as spear phishing attacks) and general hacking have become more prevalent in our industry, have occurred on our systems in the past and are likely to occur on our systems in the future. Such attacks may cause interruptions to the services we provide, degrade the user experience, cause users to lose confidence and trust in our products, impair our internal systems or result in financial harm to us. Further, these risks could be heightened by the fact that most of our employees work from home.

Our efforts to protect our data or the data we receive could also be unsuccessful due to software bugs or other technical malfunctions; employee, contractor or vendor error or malfeasance; government surveillance; or other threats. In addition, third parties may attempt to fraudulently induce employees or users to disclose information to gain access to our data or our users’ data. Cyberattacks continue to evolve in sophistication and volume, including through the use of artificial intelligence technologies, and may be inherently difficult to detect for long periods of time. Although we have developed systems and processes that are designed to protect our data and user data, to prevent data loss and to prevent or detect security breaches, we cannot assure you that such measures will provide absolute security, and we may need to expend significant resources in protecting against or remediating security breaches