Company: ATLCL
Filing Date: 2025-05-08
Form Type: 10-Q
Source: 0001437749-25-015559
Chunk: 236

Company: Atlanticus Holdings Corp
Filing Date: 2025-05-08
Form: 10-Q
Item: Item 1
Chunk 236
---
 operating activities, our business may be impacted by hosted system shutdowns, service disruptions or security breaches. These incidents may be caused by failures during routine operations such as system upgrades or user errors, as well as network or hardware failures, malicious or disruptive software, computer hackers, rogue employees or contractors, cyber-attacks by criminal groups, geopolitical events, natural disasters, pandemics, failures or impairments of telecommunications networks, or other catastrophic events. If our information systems suffer severe damage, disruption or shutdown and our business continuity plans do not effectively resolve the issues in a timely manner, we could experience delays in reporting our financial results, and we may lose revenue and profits as a result of our inability to collect payments in a timely manner. We also could be required to spend significant financial and other resources to repair or replace networks and information systems.

Unauthorized or unintentional disclosure of sensitive or confidential customer data could expose us to protracted and costly litigation, and civil and criminal penalties. To conduct our business, we are required to manage, use, and store large amounts of personally identifiable information, consisting primarily of confidential personal and financial data regarding consumers across all operations areas. We also depend on our IT networks and systems, and those of third parties, to process, store, and transmit this information. As a result, we are subject to numerous U.S. federal and state laws designed to protect this information. Security breaches involving our files and infrastructure could lead to unauthorized disclosure of confidential information.

We take a number of measures to ensure the security of our hardware and software systems and customer information. Advances in computer capabilities, new discoveries in the field of cryptography or other developments may result in the technology used by us to protect data being breached or compromised. In the past, banks and other financial service providers have been the subject of sophisticated and highly targeted attacks on their information technology. An increasing number of websites have reported breaches of their security.

If any person, including our employees or those of third-party vendors, negligently disregards or intentionally breaches our established controls with respect to such data or otherwise mismanages or misappropriates that data, we could be subject to costly litigation, monetary damages, fines, and/or criminal prosecution. Any unauthorized disclosure of personally identifiable information could subject us to liability under data privacy laws. Further, under credit card rules and our contracts with our card processors, if there is a breach of credit card information that we store, we could be liable to the credit card issuing banks for their cost of issuing new cards and related expenses. In addition, if we