Company: FRHC
Filing Date: 2025-06-13
Form Type: 10-K
Source: 0000924805-25-000012
Chunk: 133

Company: Freedom Holding Corp.
Filing Date: 2025-06-13
Form: 10-K
Item: Item 1A
Chunk 133
---
, stored in, and transmitted through our computer systems and networks or the computer systems and networks of our customers or other third parties with whom we conduct business; or (b) otherwise cause interruptions or malfunctions in our operations or the operations of our customers or third parties with whom we conduct business. In addition, new and expanding data privacy laws and regulations (such as the GDPR) are, or soon will be, in effect in many of the jurisdictions where we conduct business. These pose increasingly complex compliance challenges, which may increase compliance costs, and compliance failures could result in significant fines, penalties and liability.

We have previously experienced cybersecurity incidents which breached our information systems, but these were contained by our response teams and generated negligible impacts. There is also a possibility that we are not currently aware of certain undisclosed vulnerabilities in our IT systems and other assets. There is an increased likelihood that escalation of tensions from the Russia-Ukraine conflict could result in cyber-attacks that could either directly or indirectly impact our operations. Although our subsidiaries have implemented cybersecurity controls for mitigating these risks, we cannot be sure that our network and information technology systems will not be subject to such issues, or, if they are, that we will be able to maintain the integrity of our customers' and employees' data or that malware or other technical or operational issues will not disrupt our network or systems and cause significant harm to our operations. If our services are affected by attacks or malware and this degrades our services, our products and services may be perceived as being vulnerable to cybersecurity risk and the integrity of our data protection systems may be questioned. As a result, users and customers may curtail or stop using our products and services, and we might incur reputational damage, litigation exposure, regulatory fines, penalties, reimbursement or other compensatory costs.

 If possible outbreaks or other events occur in the future, we may again be required to move a significant portion of our workforce to working remotely, which could result in increased overall IT, information security and data protection risks associated with widespread remote work, as remote working environments may be less secure and more susceptible to IT and information security threats.

The infrastructure on which our IT systems depend is subject to events that could interrupt our ability to operate.

The infrastructure upon which our operations and IT systems depend, including electrical communications and internet, and transportation and other services, are vulnerable to damage or disruptions from events outside our control, including natural disasters, military conflicts, power, telecommunications and internet unavailability or outages, terrorist acts, riots, government shutdown orders, changes in government