Company: PERI
Filing Date: 2025-03-25
Form Type: 20-F
Source: 0001178913-25-001021
Chunk: 43

Company: Perion Network Ltd.
Filing Date: 2025-03-25
Form: 20-F
Item: Item 3
Chunk 43
---
 have contributed to a surge in cyber-attacks targeting Israeli companies and products globally, posing a threat to critical infrastructure. Any data breach, cyber-attack or other similar incident impacting us or our third-party service providers, suppliers and vendors, or any failure to make adequate or timely disclosures to the public, regulators, or law enforcement agencies following any such incident, could subject us to substantial system downtimes, operational delays, other detrimental impacts on our operations or ability to provide products and services to our customers, the compromising of sensitive, proprietary, confidential, personal or otherwise protected information, the destruction or corruption of data, other manipulation or improper use of our systems and networks, violations of applicable data protection, data privacy and cybersecurity laws and regulations or notification obligations, violation of contracts, legal claims, regulatory scrutiny or enforcement actions, investigations, financial losses from remedial actions, loss of business or potential liability, and/or damage to our reputation, any of which could have a material adverse effect on our cash flows, competitive position, financial condition and results of operations.
 

Given the unpredictability of the timing, nature and scope of such incidents, and because techniques used to obtain unauthorized access to or sabotage systems and networks change frequently and generally are not identified until they are launched against a target, there can be no assurance that such incidents can be prevented, that such incidents are not occurring currently without our knowledge, or that any such incidents will not have a material adverse effect on us in the future.
 
As cybersecurity threats continue to evolve, we expect to continue to expend significant additional resources to continue to maintain, modify or enhance our protective measures or to investigate or remediate any information technology issues, business interruptions, data breaches, cyber-attacks or other similar incidents. However, we may not be able to anticipate such incidents, and such measures, as well as our response process, may not be adequate, may fail to detect or react to such incidents in a timely manner, may fail to identify or accurately assess the severity of an incident, may not respond quickly enough, or may fail to sufficiently remediate an incident. As a result, we may suffer significant legal, reputational, or financial exposure, which could harm our business, financial condition, and operating results.
 
With respect to our third-party risk management processes, while we generally seek to impose certain cybersecurity requirements on critical third parties with whom we do business, for example, by employing due diligence and onboarding procedures, our ability to monitor such practices is limited, we do not control their cyber risk management and there can