Company: TALK
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0000950170-25-038107
Chunk: 37

Company: Talkspace, Inc.
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1A
Chunk 37
---
 of the proliferation of new technologies, including the increased adoption of AI technologies, and the increased sophistication and activities of perpetrators of cyber-attacks. Malicious actors are increasingly sophisticated and operating large-scale and complex automated attacks, including on companies within the healthcare industry. The techniques, sources and targets of these attacks change and are often not recognized until such attacks are launched or have been in place for some time. In an increasing amount of cases, these malicious actors are or are acting on behalf of state sponsors which further increases the risk of sophistication, capability and funding for the attack. As cyber threats continue to evolve, we may be required to expend additional resources to further enhance our information security measures, develop additional protocols and/or to investigate and remediate any information security vulnerabilities. If our or our third-party vendors’ security measures fail or are breached, it could result in unauthorized persons accessing sensitive customer or member data (including PHI), a loss of or damage to our data, an inability to access data sources, or process data or provide our services to our customers and members. Such failures or breaches of our or our third-party vendors’ security measures, or our or our third-party vendors’ inability to effectively resolve such failures or breaches in a timely manner, could severely damage our reputation, adversely affect customer, member or investor confidence in us, and reduce the demand for our services from existing and potential customers and members. In addition, we could face litigation, damages for contract breach, monetary penalties, or regulatory actions for violation of applicable laws or regulations and incur significant costs for remedial measures to prevent future occurrences and mitigate past violations.

20

Any potential security breach could result in increased costs associated with liability for stolen assets or information, repairing system damage that may have been caused by such breaches, incentives offered to customers or other business partners in an effort to maintain our business relationships after a breach and implementing measures to prevent future occurrences, including organizational changes, deploying additional personnel and protection technologies, training employees and engaging third-party experts and consultants. Although we maintain insurance covering certain security and privacy damages and claim expenses, we may not carry insurance or maintain coverage sufficient to compensate for all liability and we cannot be certain that our insurance coverage will be adequate for data security liabilities actually incurred, will cover any indemnification claims against us relating to any incident, will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. In any event, insurance coverage would not address the reputational damage that could result from a security