Company: FOACW
Filing Date: 2025-05-20
Form Type: 10-K/A
Source: 0001828937-25-000032
Chunk: 39

Company: Finance of America Companies Inc.
Filing Date: 2025-05-20
Form: 10-K/A
Chunk 39
---
 cyber-attack could adversely affect our results of operations and financial condition.

We collect and store certain personal and financial information from customers, employees, and other third parties. Security breaches or cyber-attacks involving our systems or facilities, or the systems or facilities of our service providers, could expose us to a risk of loss of personally identifiable information of customers, employees, and third parties or other confidential, proprietary, or competitively sensitive information, which could potentially have an adverse impact on our future business with current and potential customers, results of operations, and

#### 24
financial condition. We could also be subjected to cyber-attacks, such as ransomware, that could result in slow performance and loss or temporary unavailability of our information systems, adversely affecting our operational efficiency and ultimately our results of operations and financial condition. Other mortgage lenders and servicers have in the past been the subject of cyber-attacks resulting in data breaches and temporary unavailability of information systems. Mortgage lenders, servicers, and other mortgage industry participants may continue to be targeted in such attacks in the future. Globally, cyber-attacks are expected to continue accelerating in both frequency and sophistication with increasing use by malicious actors of tools and techniques that could hinder our ability to identify, investigate, and recover from incidents. Such attacks may also increase as a result of retaliation by members of foreign countries in response to actions taken by the U.S. in connection with geopolitical conflicts in many parts of the world, such as the ongoing Ukraine-Russia war and the conflicts in the Middle East. Furthermore, our employees operate under a hybrid workforce model and such model may be more vulnerable to security breaches.

We rely on encryption and other information security technologies licensed from third parties to provide security controls necessary to help in securing online transmission of confidential information pertaining to customers, employees, and other aspects of our business. A failure in our information security technologies may result in a compromise or breach of the technology that we use to protect sensitive data. A party who is able to circumvent our security measures by methods such as hacking, fraud, trickery, or other forms of deception could access sensitive personal and financial information or cause interruption in our operations. We are required to expend capital and other resources to protect against such security breaches or cyber-attacks or to remediate problems caused by such breaches or attacks. Our security measures are reasonably designed to protect against security breaches and cyber-attacks, but our failure to prevent such security breaches and cyber-attacks could subject us to liability, regulatory action, decrease our profitability, and damage our