Company: PAYC
Filing Date: 2025-02-20
Form Type: 10-K
Source: 0000950170-25-024136
Chunk: 37

Company: Paycom Software, Inc.
Filing Date: 2025-02-20
Form: 10-K
Item: Item 1A
Chunk 37
---
 Even without a direct breach of our systems, cyber-attacks on such third-party vendors or on our clients could adversely impact our business and reputation.

Although we have security measures in place to protect client information and prevent data loss and other security breaches, these measures have been in the past and in the future may be breached as a result of third-party action, employee error, third-party or employee malfeasance or otherwise. Globally, cybersecurity attacks are increasing in number and the threat actors are increasingly organized and well financed, or at times supported by state actors. In addition, geopolitical tensions or conflicts, such as Russia’s invasion of Ukraine, the ongoing conflict between Israel and Hamas, or increasing tension with China, may create a heightened risk of cybersecurity attacks. Because the techniques used to obtain unauthorized access or to sabotage systems change frequently, we may not be able to anticipate these techniques and implement adequate preventative or protective measures. While we currently maintain a cyber liability insurance policy, cyber liability insurance may be inadequate or may not be available in the future on acceptable terms, or at all. In addition, our cyber liability insurance policy may cover only a portion of losses incurred in investigating or remediating an incident, if at all, and may not cover all claims made against us. Undergoing a government investigation or defending a lawsuit, regardless of merit, could be costly and divert management’s attention from our business and operations.

Any actual or perceived breach of our security could damage our reputation, cause existing clients to discontinue the use of our solution, prevent us from attracting new clients, or subject us to third-party lawsuits, regulatory investigations and fines or other actions or liabilities, any of which could adversely affect our business, operating results or financial condition.

Any damage, failure or disruption of our SaaS network infrastructure or data centers could impair our ability to effectively provide our solution, harm our reputation and adversely affect our business.

Our SaaS network infrastructure is a critical part of our business operations. Our clients access our solution through standard web browsers, smart phones, tablets and other web-enabled devices and depend on us for fast and reliable access to our solution. We serve all of our clients from our three fully redundant data centers located in Oklahoma and Texas. Our SaaS network infrastructure and data centers are vulnerable to damage, failure and disruption.

In the future, we may experience issues with our computing and communications infrastructure or data centers caused by the following factors:

•human error;

•telecommunications failures or outages from third-party providers;

•computer viruses or cyber-attacks;

18