Company: NEWTP
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0001587987-25-000050
Chunk: 173

Company: NewtekOne, Inc.
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1A
Chunk 173
---
 or modify private and sensitive information, including nonpublic personal information related to stockholders (and their beneficial owners) and material nonpublic information. The systems we have implemented to manage risks relating to these types of events could prove to be inadequate and, if compromised, could become inoperable for extended periods of time, cease to function properly or fail to adequately secure private information. Breaches such as those involving covertly introduced malware, impersonation of authorized users and industrial or other espionage may not be identified even with sophisticated prevention and detection systems, potentially resulting in further harm and preventing them from being addressed appropriately. The failure of these systems or of disaster recovery plans for any reason could cause significant interruptions in our and our subsidiaries’ operations and result in a failure to maintain the security, confidentiality or privacy of sensitive data, including personal information relating to stockholders, material nonpublic information and other sensitive information in our possession.

A disaster or a disruption in the infrastructure that supports our business, including a disruption involving electronic communications or other services used by us or third parties with whom we conduct business, or directly affecting our headquarters, could have a material adverse impact on our ability to continue to operate our business without interruption. Our disaster recovery programs may not be sufficient to mitigate the harm that may result from such a disaster or disruption. In addition, insurance and other safeguards might only partially reimburse us for our losses, if at all.

Third parties with which we do business may also be sources of cybersecurity or other technological risk. We outsource certain functions and these relationships allow for the storage and processing of our information, as well as client, counterparty, employee, and borrower information. While we engage in actions to reduce our exposure resulting from outsourcing, ongoing threats may result in unauthorized access, loss, exposure, destruction, or other cybersecurity incident that affects our data, resulting in increased costs and other consequences as described above. Any failure or interruption of the systems we rely on, including as a result of the termination of an agreement with any such third party service provider, could cause delays or other problems in our activities. This, in turn, could have a material adverse effect on our operating results and negatively affect the market price of our securities and our ability to make distributions to our shareholders.

In addition, cybersecurity has become a top priority for regulators around the world, and some jurisdictions have enacted laws requiring companies to notify individuals of data security breaches involving certain types of personal data. For example, the SEC enacted rules, effective as of December 18, 2023, requiring public companies to