Company: BBD
Filing Date: 2025-05-30
Form Type: 6-K
Source: 0001292814-25-002283
Chunk: 133

Company: BANK BRADESCO
Filing Date: 2025-05-30
Form: 6-K
Chunk 133
---
 Defense Program
(PROCON) or the Public Prosecutor responsible for consumer rights, in addition to individuals and private or non-governmental associations,
for example, may file complaints or file lawsuits based on violations of the LGPD that have caused or may cause harm to individuals. Likewise,
the data subjects of the personal data that are harmed may judge individual lawsuits requiring indemnities.

Any
non-compliance with the LGPD can also negatively affect our reputation, our financial condition, the result of our operations and the
market value of our shares.

Failure to adequately protect us from cyber security risks can affect us materially and adversely.

We are
exposed to failures, deficiency or inadequacy of our internal processes, systems and processes of our service providers, human error or
misconduct, such as cyberattacks. While we have procedures and controls
to protect our information technology systems and platforms, we are subject to cyber security risks that can affect us materially and
adversely in the event of failures to adequately protect our assets and people or assets and staff members of our service providers.

| 112 – Reference Form – 2024 |

| 4. Risk factors |

Like
other large corporations, we are heavily dependent on innovations and technologies, which exposes us to internal and external events that
can affect the availability of our information technology systems and infrastructure. These events can also occur in our service providers,
who are part of our supply chain and have the potential to adversely affect our business and activities.

Risks
that can directly or indirectly impact us or our service providers include, but are not limited to: penetration of information technology
systems and platforms by malicious individuals; infiltration of malware such as computers with viruses into our systems; intentional or
accidental contamination of our networks and systems or those of our service providers that we exchange data with, unauthorized access
to confidential client data, and/or organization data, and cyberattacks that may cause service degradation and/or outage that can result
in business losses.

Cyber
security and its risks are addressed at the highest strategic level within our Organization. We consider the possibility of loss, theft
or alteration of data processed and stored by us or our third-party service providers as an aggravating factor in our risk analysis. This
is due to the potential exploitation of vulnerabilities and weaknesses in systems, devices, networks or other digital media in both our
information technology environment and our service providers (i.e., ransomware).

Our
Corporate Security Department performs a prior and periodical analysis in the control environment of third-party