Company: MSTR
Filing Date: 2025-07-07
Form Type: 8-K
Source: 0000950170-25-094137
Chunk: 61

Company: Strategy Inc
Filing Date: 2025-07-07
Form: 8-K
Item: Item 8.01
Chunk 61
---
 fraudulent inducement of employees, customers, or channel partners to disclose sensitive information such as usernames or passwords, and employee, customer, or channel partner error or malfeasance. A security breach could result in unauthorized access to or disclosure, modification, misuse, loss, or destruction of our customers’, prospects’, vendors’, or channel partners’ data, our data (including our proprietary information, intellectual property, or trade secrets), our networks or other systems, or the cloud environments we manage. Third parties may also conduct attacks designed to prevent access to critical data or systems through ransomware or temporarily deny customers access to our cloud environments.

We, and our service providers, have experienced and may in the future experience attempts by third parties to identify and exploit software and service vulnerabilities, penetrate or bypass our security measures, and gain unauthorized access to our or our customers’ or service providers’ cloud environments, networks, and other systems. Security measures that we or our third-party service providers have implemented may not be effective against all current or future security threats. Because there are many different security breach techniques and such techniques continue to evolve, we may be unable to anticipate, detect, or mitigate attempted security breaches and implement adequate preventative measures.

Any security breach, ransomware attack, or successful denial of service attack could result in a loss of customer confidence in the security of our offerings and damage to our brand, reduce the demand for our offerings, disrupt our normal business operations, require us to spend material resources to investigate or correct the breach, require us to notify affected customers or individuals and/or applicable regulators and others, provide identity theft protection services to individuals, expose us to legal liabilities, including litigation, regulatory enforcement actions, and indemnity obligations, and materially adversely affect our revenues and operating results. Our software operates in conjunction with and is dependent on third-party products and components across a broad ecosystem. If there is a security vulnerability in one of these products or components, and if there is a security exploit targeting it, we could face increased costs, liability claims, customer dissatisfaction, reduced revenue, or harm to our reputation or competitive position. Our insurance policies may not be adequate to compensate us for the potential losses arising from any cybersecurity breach or incident. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and could have high deductibles in any event, and defending a suit, regardless of its merit, could be costly and divert management attention.

These risks will increase as