Company: BLND
Filing Date: 2025-08-07
Form Type: 10-Q
Source: 0001855747-25-000069
Chunk: 287

Company: Blend Labs, Inc.
Filing Date: 2025-08-07
Form: 10-Q
Item: Part II, Item 1A
Chunk 287
---
 to obtain loans or other financial products), wire fraud attempts to overload our servers with distributed denial-of-service attacks, employee theft, error, or malfeasance, unauthorized access by third parties (including foreign governments or state actors with significant financial and technological resources) or internal actors, or other attacks, and other types of disruptions, exposure, and security breaches and incidents. Any vulnerabilities can be exploited from inadvertent or intentional actions of our employees, partners, vendors, service providers, customers, or by malicious third parties. While we take steps to ensure any such vulnerabilities are patched in our systems, but we cannot guarantee that all vulnerabilities have been patched in every system upon which we are dependent or that additional vulnerabilities of other software upon which we rely will not be discovered. Additionally, to the extent manual processes are involved in the handling of sensitive information, such sensitive information could be inadvertently misdirected despite our training and quality assurance precautions. While we have taken steps to protect the sensitive and confidential information that we have access to and have implemented multiple overlapping controls to reduce risk of a single control failure, our security measures or those of our partners, vendors, or other service providers could be breached or we could suffer data loss, unavailability, corruption, or unauthorized use or other processing, or unauthorized access to or other compromises of our platform or the systems or networks used in our business. 

53

Cybersecurity risks for the financial services industry have increased significantly in recent years due to new technologies, increasing reliance on technology, and increasing sophistication of organized crime, hackers, and other actors. Cyberattacks are increasing in frequency, levels of persistence, sophistication and intensity, and techniques used to obtain unauthorized access or to sabotage systems change frequently and may not be known until they are launched against a target. We and our partners, vendors, and other service providers may be unable to anticipate or prevent these attacks, react in a timely manner, or implement adequate preventive measures, and we may face delays in our detection or remediation of, or other responses to, security breaches and other privacy- and security-related incidents. These security risks that we and our partners, vendors, and other service providers face have been heightened by an increase in employees and service providers working remotely. Additionally, these risks may be elevated in connection with geopolitical events such as the current war in Ukraine and the conflict in the Middle East.

In addition, consumers on our platform could have vulnerabilities on their own devices that are unrelated to our systems and platform but could mistakenly attribute their own vulnerabilities to us. Consumers on our platform may