Company: OWLS
Filing Date: 2025-02-07
Form Type: DRS/A
Source: 0000950123-25-001222
Chunk: 76

Company: OBOOK HOLDINGS INC.
Filing Date: 2025-02-07
Form: DRS/A
Chunk 76
---
ulently induce users of these systems (including employees, vendor and
partner personnel and customers) into disclosing usernames, passwords, payment card information, multi-factor authentication application access or other sensitive information used to access such systems or facilities. This information may, in turn,
be used to access our customers’ confidential personal or proprietary information and financial instrument data stored on or accessible through our information technology systems and those of our third-party partners. This information may also
be used to execute fraudulent transactions or engage in other fraudulent actions. Various evolving cybersecurity threats, including advanced and persisting cyberattacks, cyberextortion, distributed denial-of-service (DDoS) attacks, ransomware, spear phishing and social engineering schemes, the introduction of computer viruses or other malware, and the physical destruction of all or portions of our
information technology and infrastructure and those of our partners and third-party providers or of other components within our information technology supply chain, are becoming increasingly sophisticated and complex, may be difficult to detect, and
could compromise the confidentiality, availability, and integrity of system data and the systems themselves.

An increasing number of
organizations, including large businesses, technology companies and financial institutions, as well as government institutions, have disclosed breaches of their information security systems, some of which have involved sophisticated and highly
targeted attacks. Attacks upon systems across a variety of industries, including the blockchain economy, are increasing in their frequency, persistence and sophistication, and, in many cases, are being conducted by sophisticated, well-funded and
organized groups and individuals, including state actors.

Cybersecurity breaches and other exploited security vulnerabilities, whether
actual or perceived, could interrupt our operations, result in our systems or products and services being unavailable, subject us to significant costs and third-party liabilities, result in improper data disclosure and violations of applicable
privacy and other laws, require us to alter our business practices, incur significant remediation costs, diminish customer confidence in, or decreased use of, our products and services, damage our reputation and brands, divert management from
concentrating on business operations, result in significant compensation or contractual penalties from customer losses or claims, or leave us susceptible to litigation, regulatory investigations, and significant fines and penalties. See
“—We and our merchants, partners and others who use our services obtain and process a large amount of sensitive customer data. Any real or perceived improper use of, disclosure of, or access to such data could harm our reputation, as well
as have an adverse effect on our business.” In addition, any cybersecurity incidents, including cyber