Company: SABR
Filing Date: 2025-11-05
Form Type: 10-Q
Source: 0001628280-25-049383
Chunk: 123

Company: Sabre Corp
Filing Date: 2025-11-05
Form: 10-Q
Item: Part II, Item 1A
Chunk 123
---
 the past been, and could at any time, including in the future, be compromised as a result. In addition, the techniques employed in connection with these threats and intrusions are changing, developing and evolving rapidly, including from emerging technologies such as advanced forms of AI. The costs and impacts related to these incidents, including the costs of investigation and remediation, any associated penalties assessed by any governmental authority or payment card brand, and any indemnification or other contractual obligations to our customers, may be material and could damage our reputation. 

As an example, in the third quarter of 2023, we became aware that an unauthorized actor had illegally extracted certain company data and posted it to the dark web. Immediately upon becoming aware of this extraction, we initiated an investigation, with the assistance of cybersecurity and forensics professionals. We have also notified federal law enforcement and have provided, and will continue to provide, other required notifications. To date this cybersecurity incident has not had a material impact on our financial condition, results of operations or liquidity. However, there is no assurance that it will not result in significant costs to us, reputational harm, expenditure of additional resources, lawsuits and related fees, costs and expenses, or regulatory inquiries in the future that could result in a material adverse effect. For example, we are subject to a lawsuit seeking class certification filed against us in the United States District Court for the Northern District of Texas. The complaint generally asserts negligence and other claims based on this cybersecurity incident, and, in addition to monetary damages, the plaintiffs are also seeking declaratory and injunctive relief.  We intend to vigorously defend against these claims. See “—We are involved in various legal proceedings which may cause us to incur significant fees, costs and expenses and may result in unfavorable outcomes.”    

Any computer viruses, malware, denial of service attacks, ransomware attacks, attacks on, or exploitations of, hardware or software vulnerabilities, physical or electronic break-ins, phishing attacks, cybersecurity incidents such as the items described above, or other security incident or compromise of the information handled by us or our service providers may jeopardize the security or integrity of information in our computer systems and networks or those of our customers and cause significant interruptions in our and our customers’ operations.

Any systems and processes that we have developed or utilize that are designed to protect customer information and prevent data loss and other security incidents cannot provide absolute security. In addition, we may not successfully implement remediation plans to address all potential exposures. It is possible that we may have to expend