Company: G
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0001398659-25-000035
Chunk: 39

Company: Genpact LTD
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 39
---
 deepfakes or exploitation code. We could also be impacted by cyberattacks by nation states or other organizations arising out of geopolitical tensions or conflicts, including, for instance, by Russia or Russian-affiliated actors in connection with the Russia/Ukraine conflict. We may be unable to anticipate the techniques used by threat actors to infiltrate our systems and may fail to detect or timely detect when an incursion has occurred or to implement adequate preventative and responsive measures. Additionally, in the event of a ransomware or other attack involving data theft and encryption, we could face delays in the recovery of data, or a partial or total loss of data, in the event of a lack of adequate backups or recovery processes or a compromise of our backups or backup systems. The steps we have taken to protect our information systems and data security may be inadequate. Actual or perceived breaches of our security, whether through breach of our computer systems, systems failure (including due to aged IT systems or infrastructure or system misconfigurations) or otherwise, could influence the market perception of the effectiveness of our security measures and, as a result, our reputation could be harmed and we could lose existing or potential clients. Media or other reports of perceived breaches or weaknesses in our systems, products or networks could also adversely impact our brand and reputation and materially affect our business.

Our clients, suppliers, subcontractors, and other third parties with whom we do business, including in particular cloud service providers and software vendors, generally face similar cybersecurity threats, and we must rely on the safeguards adopted by these third parties. If these third parties do not have adequate safeguards or their safeguards fail, it might result in breaches of our systems or applications and unauthorized access to or disclosure of our and our clients’ confidential data. In addition, the products, services and software that we use and provide to our clients, or the third-party components of such products, services and software, sometimes contain or introduce cybersecurity threats or vulnerabilities to our and our clients’ information technology networks, intentionally or unintentionally. We are regularly alerted to vulnerabilities in third-party technology components we use in our business that create risks in our environments. We typically are not aware of such vulnerabilities until we receive notice from the third parties who have discovered the exposure, and our responses to such vulnerabilities may not be adequate or prompt enough to prevent their exploitation.

Our clients’ proprietary, sensitive, or confidential information could also be compromised by a cybersecurity attack affecting us, or their systems could be disabled or disrupted as a result of such an attack. Our clients, regulators, or other third