Company: NOAH
Filing Date: 2025-04-24
Form Type: 20-F
Source: 0001410578-25-000852
Chunk: 63

Company: NOAH HOLDINGS LTD
Filing Date: 2025-04-24
Form: 20-F
Item: Item 3
Chunk 63
---
 factors; and
----------------------------------------------------------------------------------------------------

●   complying with applicable laws, rules and regulations relating to the collection, use, disclosure or security of personal information, including any requests from regulatory and government authorities relating to such data.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
There have been many media reports about different financial services companies, consumer-based companies, governmental agencies and other organizations involving unauthorized disclosure of confidential information related to their clients or users in recent years, as well as cyber-attacks involving the dissemination, theft and destruction of corporate information or other assets, which resulted in third-party claims or actions against these companies. There have also been incidents where hackers have requested “ransom” payments in exchange for not disclosing client information or for restoring access to information or systems.
We are occasionally the target of attempted cyber-attacks, including denial-of-service attacks, and we continually monitor and develop our systems to protect our technology infrastructure and data from misappropriation or corruption. We may face an increasing number of attempted cyber-attacks as we expand our mobile- and other internet-based products and services, as well as our usage of mobile technologies and as we provide more of these services to a greater number of individual clients. In addition, in collaboration with third-party vendors and their respective service providers, agents, exchanges, clearing houses and other financial institutions, we could be adversely impacted if any of them is subject to a successful cyber-attack or other information security event. These effects could include the loss of access to information or services from the third party subject to the cyber-attack or other security breach, which could, in turn, interrupt certain of our businesses.
Our efforts in enhancing the security of our systems and information may not be successful in anticipating, detecting or implementing effective preventive measures against all cyber threats, especially because the techniques used are increasingly sophisticated, change frequently and are often not recognized until attacks are launched. Cyber-attacks can originate from a variety of sources. Any system failure or security breach or lapse that results in the leakage of user data could harm our reputation and brand and, consequently, our business, in addition to exposing us to potential legal liability. We rely on a complex network of process and software controls to protect the confidentiality of data provided to us or stored on our systems. If we do not maintain adequate internal controls or fail to implement new or improved controls as necessary, we may experience data misappropriation or breach of confidentiality. We could be subject to liability if we inappropriately disclose any client’s personal information, or if third parties are able to penetrate our network security or otherwise gain access