Company: DBRG
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0001679688-25-000017
Chunk: 69

Company: DigitalBridge Group, Inc.
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1A
Chunk 69
---
 potential to disrupt our operations, cause material harm to our financial condition, result in misappropriation of assets, compromise confidential information and/or damage our business relationships. 

As an asset manager, our business is highly dependent on information technology networks and systems, including systems provided by third parties over which we have no control. We may also have limited opportunity to verify the security, effectiveness and resiliency of systems provided by third parties or to cause third parties to implement necessary or desirable improvements for such systems. In the normal course of business, we and our service providers process proprietary, confidential, and personal information provided by our customers, employees, and vendors. In addition to our information technology networks and systems, our funds’ portfolio companies maintain their own information technology networks and systems to access, store, transmit, and manage or support a variety of business processes and proprietary, confidential, and personal information. The risk of a cybersecurity incident or system or network disruption to networks and systems, including through cyber-attacks or cyber intrusions, including by computer hackers, nation-state affiliated actors, and cyber terrorists, has generally increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased. A cybersecurity incident or a significant and extended disruption to our or our funds’ portfolio companies’ systems or systems provided by third parties caused by a third-party or by employee error, negligence or fraud, or a failure to report such an incident or significant and extended disruption in the timeframe required by law, may result in compromise or corruption of, or unauthorized access to or acquisition of, proprietary, confidential, or personal information collected in the course of conducting our business, misappropriation of assets, disruption of our operations, material harm to our financial condition, cash flows, and the market price of our common shares, significant remediation expenses, and increased cybersecurity protection and insurance costs. A cybersecurity incident or disruption could also interfere with our ability to comply with financial reporting requirements or result in loss of competitive position, regulatory actions or increased regulatory scrutiny, litigation, breach of contracts, reputational harm, damage to our stakeholder relationships, or legal liability. While we may be entitled to damages if our third-party service providers fail to satisfy their cybersecurity-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’