Company: MRT
Filing Date: 2025-04-29
Form Type: 20-F
Source: 0001213900-25-036882
Chunk: 35

Company: Marti Technologies, Inc.
Filing Date: 2025-04-29
Form: 20-F
Item: Item 3
Chunk 35
---
umu) (“ TDPA”), we conducted an internal investigation into the
matter and have not been able to verify the actor’s claim nor do we believe the actor obtained any customer data. Unauthorized parties
may in the future gain access to our systems or facilities through various means, including gaining unauthorized access into our systems
or facilities or those of our service providers, partners or users on our platform, or attempting to fraudulently induce our employees,
service providers, partners, users or others into disclosing user names, passwords, payment card information or other sensitive information,
which may in turn be used to access our information technology systems, or attempting to fraudulently induce employees, partners or others
into manipulating payment information, resulting in the fraudulent transfer of funds to criminal actors. In addition, users on our platform
could have vulnerabilities on their own mobile devices that are entirely unrelated to our systems and platform but could mistakenly attribute
their own vulnerabilities to us. Further, breaches experienced by other companies may also be leveraged against us. For example, credential
stuffing attacks are becoming increasingly common and sophisticated actors can mask their attacks, making them increasingly difficult
to identify and prevent. Certain efforts may be state-sponsored or supported by significant financial and technological resources, making
them even more difficult to detect.

Although we use systems and processes that are
designed to protect users’ data, prevent data loss and prevent other security breaches, these security measures cannot guarantee
security. Our information technology and infrastructure may be vulnerable to cyberattacks or security breaches, and third parties may
be able to access our users’ personal information and limited payment card data that are accessible through those systems. Employee
error, malfeasance or other errors in the storage, use or transmission of personal information could result in an actual or perceived
privacy or security breach or other security incident. Although we have policies restricting the access to the personal information we
store, we may be subject to accusations in the future of employees violating these policies.

Any actual or perceived breach of privacy or security
could interrupt our operations, result in our platform being unavailable, result in loss or improper disclosure of data, result in fraudulent
transfer of funds, harm our reputation and brand, damage our relationships with third-party partners, result in significant legal, regulatory,
and financial exposure and lead to loss of rider confidence in, or decreased use of, our platform, any of which could adversely affect
our business, financial condition, and results of operations. Any breach of privacy or security impacting any entities with which we share