Company: ATLCL
Filing Date: 2025-11-10
Form Type: 10-Q
Source: 0001437749-25-033947
Chunk: 276

Company: Atlanticus Holdings Corp
Filing Date: 2025-11-10
Form: 10-Q
Item: Item 1
Chunk 276
---
 noncompliance. Further, there are various other statutes and regulations relevant to the direct email marketing, debt collection and text-messaging industries including the Telephone Consumer Protection Act. The interpretation of many of these statutes and regulations is evolving in the courts and administrative agencies and an inability to comply with them may have an adverse impact on our business.

In addition to the foregoing enhanced data security requirements, various federal banking regulatory agencies, and all 50 states, the District of Columbia, Puerto Rico and the Virgin Islands, have enacted data security regulations and laws requiring varying levels of consumer notification in the event of a security breach. Also, federal legislators and regulators are increasingly pursuing new guidelines, laws and regulations that, if adopted, could further restrict how we collect, use, share and secure consumer information, possibly impacting some of our current or planned business initiatives.

Unplanned system interruptions or system failures could harm our business and reputation. Any interruption in the availability of our transactional processing services due to hardware, operating system failures, or system conversion will reduce our revenues and profits. Any unscheduled interruption in our services results in an immediate, and possibly substantial, reduction in our ability to serve our customers, thereby resulting in a loss of revenues. Frequent or persistent interruptions in our services could cause current or potential consumers to believe that our systems are unreliable, leading them to switch to our competitors or to avoid our websites or services, and could permanently harm our reputation.

Although our systems have been designed around industry-standard architectures to reduce downtime in the event of outages or catastrophic occurrences, they remain vulnerable to damage or interruption from earthquakes, floods, fires, power loss, telecommunication failures, computer viruses, computer denial-of-service attacks, and similar events or disruptions. Some of our systems are not fully redundant, and our disaster recovery planning may not be sufficient for all eventualities. Our systems also are subject to break-ins, sabotage, and intentional acts of vandalism. Despite any precautions we may take, the occurrence of a natural disaster, pandemic, a decision by any of our third-party hosting providers to close a facility we use without adequate notice for financial or other reasons or other unanticipated problems at our hosting facilities could cause system interruptions, delays, and loss of critical data, and result in lengthy interruptions in our services. Our business interruption insurance may not be sufficient to compensate us for losses that may result from interruptions in our service as a result of system failures.

Climate change and related regulatory responses may impact our business. Climate change as a result of emissions of greenhouse gases is a significant topic