Company: RSKD
Filing Date: 2025-03-06
Form Type: 20-F
Source: 0001851112-25-000006
Chunk: 11

Company: RISKIFIED LTD.
Filing Date: 2025-03-06
Form: 20-F
Item: Item 3
Chunk 11
---
 access to or disclosure, modification, misuse, loss or destruction of such data. Any security breaches, computer malware, ransomware or extortion based attack, exploited hardware or software bugs, distributed denial-of-service (“ DDoS”) attacks, misconfigurations or similar vulnerabilities experienced by us or by our third-party service providers, including from diverse threat actors, such as state-sponsored organizations, opportunistic hackers and hacktivists, could expose us to a risk of loss of Personal Information, confidential or proprietary information, operational disruptions, loss of business, severe reputational damage adversely affecting merchant or investor confidence, regulatory investigations and orders, litigation (including class action lawsuits), indemnity obligations, damages for contract breach, fines and

penalties for violation of applicable laws or regulations, and significant costs for remediation and incentives offered to merchants or other business partners in an effort to maintain business relationships after a breach, and other liabilities.

We regularly experience and expect to continue to experience actual and attempted cyber-attacks on our IT Systems, such as through phishing scams and ransomware. Additionally, in the aftermath of Hamas’ attack on Israel on October 7, 2023, many Israeli websites reported a significant increase in DDoS attacks. Although none of these actual or attempted cyber-attacks to date, individually or in the aggregate, has had a material adverse impact on our operations or financial condition, we cannot guarantee that such incidents will not have such an impact in the future. Cyberattacks and other malicious Internet-based activity continue to increase generally. If our products or security measures are perceived as weak or are actually compromised as a result of third-party action, employee or merchant error, malfeasance, stolen or fraudulently-obtained log-in credentials, or otherwise, our merchants may curtail or stop using our products, our reputation could be damaged, our business may be adversely affected, and we could incur significant liability. Further, because our products and services are integrated with our customers’ systems and processes, any circumvention, disruption or failure of our cybersecurity defenses or measures could compromise the confidentiality, integrity, and availability of our customers’ own IT Systems and/or our customers’ proprietary or other sensitive information which could result in legal claims or proceedings (such as class actions), regulatory investigations and enforcement actions, fines and penalties, negative reputational impacts that cause us to lose existing or future customers, and/or significant incident response, system restoration or remediation and future compliance costs. We may be unable to anticipate or prevent techniques used to obtain unauthorized access to or to sabotage