Company: G
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001398659-25-000035
Chunk: 40

Company: Genpact LTD
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 40
---
 parties may attempt to hold us liable, through contractual indemnification clauses or directly, for any such losses or damages resulting from such an attack. We may also be liable to our clients or others for damages caused by disclosure of confidential information or system failures. Many of our contracts do not limit our potential liability for breaches of confidentiality. We may also be subject to civil actions and criminal prosecution by governments or government agencies for breaches relating to such data. Our insurance coverage or indemnification protections for breaches or mismanagement of such data may not be adequate to cover all costs related to data loss, cybersecurity attacks, or disruptions resulting from such events, or they may not continue to be available on reasonable terms or in sufficient amounts to cover one or more large claims against us and our insurers may disclaim coverage as to any future claims. The impact of these cybersecurity attacks, data losses, and other security breaches cannot be predicted, but any such attack, loss or breach could disrupt our 

21

operations, or the operations of our clients, suppliers, subcontractors, or other third parties. Incidents of this type have in the past and may in the future require significant management attention and resources and have in the past and may in the future result in the loss of revenues from clients. These incidents could also result in regulatory fines and penalties, financial liability, and reputational harm among our clients and the public, any of which could have a material adverse impact on our financial condition, results of operations, or liquidity.

While we have developed and implemented security measures and internal controls designed to prevent, detect and respond to cyber and other security threats and incidents and to recover data compromised in such incidents, such measures cannot guarantee security and may not be successful in preventing security breaches, in detecting or effectively responding to such breaches or in recovering data compromised or lost. In the ordinary course of business, we are subject to regular incursion attempts from a variety of sources, and we have experienced security incidents, including from cyber threat actors, as a result of attack techniques such as phishing, social engineering, vulnerability exploitation and malware. To date such incidents have not had a material impact on our operations or financial results. However, there is no assurance that such impacts will not be material in the future.

Additionally, our hybrid working model, which includes a high number of employees working remotely, has reduced our ability to enforce physical security controls and monitor employee conduct and has increased the risk that our employees will engage in impermissible or careless conduct, which could give rise to reputational harm and legal liability. Our inability