Company: CRCL
Filing Date: 2025-08-04
Form Type: DRS
Source: 0000950123-25-006942
Chunk: 69

Company: Circle Internet Group, Inc.
Filing Date: 2025-08-04
Form: DRS
Chunk 69
---
 offer customers a secure way to accept and make payments and store value. As a result, any actual or perceived cyberattack or security breach of us or our third-party service providers or partners may:

| • |     | harm our reputation and brand; |

39

CONFIDENTIAL TREATMENT REQUESTED BY CIRCLE INTERNET GROUP, INC. PURSUANT TO 17 C.F.R. § 200.83

| • |     | result in our systems or services being unavailable and interrupt our operations; |

| • |     | result in improper disclosure of data and violations of applicable privacy and other laws; |

| • |     | result in significant regulatory scrutiny, investigations, fines, penalties, and other legal, regulatory, and 
 financial exposure;                                                                                           |

| • |     | cause us to incur significant remediation and litigation costs; |

| • |     | lead to theft or irretrievable loss of our or our customers’ assets; |

| • |     | reduce customer confidence in, or decreased use of, our products and services; |

| • |     | divert the attention of management from the operation of our business; |

| • |     | result in significant compensation or contractual penalties from us to our customers or third parties as a result 
 of losses to them or claims by them; and                                                                          |

| • |     | adversely affect our business and operating results. |

Further, any actual or perceived cyberattack or security breach directed at financial institutions, or digital asset or blockchain companies, whether or not we are directly impacted, could lead to a general loss of confidence in the digital asset economy or in the use of technology to conduct financial transactions. Such loss of confidence could negatively impact us, including the market perception of the effectiveness of our security measures and technology infrastructure. An increasing number of organizations—including large businesses, technology companies, and financial institutions as well as government institutions—have disclosed breaches of their information security systems, some of which have involved sophisticated and highly targeted cyberattacks or security breaches, including on their websites, mobile applications, and infrastructure. Attacks upon systems across a variety of industries, including the digital asset industry, are increasing in their frequency, persistence, and sophistication, and, in many cases, are being conducted by sophisticated, well-funded, and organized groups and individuals, including state actors. The techniques used to obtain unauthorized, improper, or illegal access to systems and information (including customers’ personal data and digital assets), disable or degrade services, or sabotage systems are constantly evolving, may be difficult