Company: BPOPM
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001193125-25-043848
Chunk: 41

Company: POPULAR, INC.
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 41
---

severity.
For example, 
certain customers have been affected by brute force attacks on one of
our platforms, which resulted in certain of our customers log-
in
credentials
and
information
being
exposed
and
accounts
being
taken
over,
resulting
in
fraudulent
transfers
or
withdrawals.
Popular
customers have
also
been impacted
by card
skimming
events in
our
ATM
terminals. As
a result,
we have
notified, and 
conducted
additional
remediation
for,
customers
identified
as
affected
by
these
incidents.
Cyber-security
risks
have
also
been 
recently exacerbated
by the
discovery of
zero-day vulnerabilities
in widely
distributed third
party software,
which have
in the
past 
affected and in the future could affect Popular’s or any
of its service provider’s systems, as further
detailed below. 
The
increased
use
of
remote
access
and
third-party
video
conferencing
solutions
to
enable
work-from-home 
arrangements for employees and facilitate
the use of digital
channels by our customers,
has also increased our
exposure to cyber-
attacks, including through the use of deep fakes and brand impersonation.
In addition, a third party could misappropriate confidential 
information obtained
by intercepting
signals or
communications from
mobile devices
used by
Popular’s customers
or employees. 
Recent
geopolitical conflicts
have also
exacerbated the
risks related
to
supply-chain compromises
and de-stabilizing
activities of 
nation-state
sponsored
actors.
Although
we
are
regularly
targeted
by
unauthorized
threat-actor
activity,
we
have
not,
to
date, 
experienced any material losses as a result of
cyber-attacks.
A material compromise or circumvention of the security of our systems could
have serious negative consequences for us, 
including
significant
disruption
of
our
operations
and
those
of
our
clients,
customers
and
counterparties,
misappropriation
of 
confidential
information
of
Popular
or
that
of
our
clients,
customers,
counterparties
or
employees,
or
damage
to