Company: TIPT
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001393726-25-000028
Chunk: 76

Company: TIPTREE INC.
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 76
---
 Our businesses rely on these systems for a variety of functions, including marketing and selling their products and services, performing their services, managing their operations, processing claims and applications, providing information to customers, performing actuarial analyses and maintaining financial records. Some of these systems may include or rely on third-party systems not located on their premises or under their control. The interruption or loss of their information processing capabilities, or those of their third-party service providers, through cybersecurity attacks, computer hacks, theft, malicious software, phishing, employee error, ransomware, malware, denial-of-service attacks, social engineering, viruses, worms, other malicious software programs, the loss of stored data, programming errors, the breakdown or malfunctioning of computer equipment or software systems, telecommunications and electrical failure or damage caused by weather or natural disasters, war, catastrophes, terrorist attacks, industrial accidents or any 

28

other significant disruptions or security breaches could harm our businesses by hampering their ability to generate revenues and could negatively affect their partner relationships, competitive position and reputation.

In addition, our business’s information systems may be vulnerable to physical or electronic intrusions, computer viruses or other attacks which could disable their information systems and their security measures may not prevent such attacks. Such information systems are additionally vulnerable to security incidents from inadvertent or intentional actions by our employees, third-party vendors, contractors, consultants, business partners, or other third parties, or from cyberattacks by malicious third parties. There are numerous and evolving risks to cybersecurity and privacy from cyber threat actors, including criminal hackers, state-sponsored intrusions, industrial espionage and employee malfeasance. There is also a potential heightened risk of cybersecurity incidents as a result of geopolitical events outside of our control, such as the ongoing Russia-Ukraine conflict, as well as other geographical conflicts. Global cybersecurity threats can range from uncoordinated individual attempts to gain unauthorized access to our IT systems and those of our business partners or third-party service providers to sophisticated and targeted measures known as advanced persistent threats. These cyber threat actors are becoming more sophisticated and coordinated in their attempts to access IT systems and data, including the IT systems of cloud providers and third parties with whom our businesses conduct or may conduct business. Although our businesses devote significant resources to prevent, detect, address and mitigate unwanted intrusions and other threats and protect their systems and data, whether such data is housed internally or by external third parties, such internal controls may not be adequate or successful in protecting against all security breaches and cybersecurity attacks, social-engineering attacks, computer break-ins, theft and