Company: NEWTP
Filing Date: 2025-03-17
Form Type: 10-K
Source: 0001587987-25-000050
Chunk: 171

Company: NewtekOne, Inc.
Filing Date: 2025-03-17
Form: 10-K
Item: Item 1A
Chunk 171
---
 data. If anyone penetrates our network security or otherwise misappropriates sensitive customer, merchant or cardholder data, we could be subject to liability or business interruption.

In addition, our business operations involve the storage and transmission of Company, customer and employee proprietary information. Our businesses rely on our digital technologies, computer and email systems, software, and networks to conduct operations. Our technologies, systems and networks may become the target of criminal cyber-attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of confidential, proprietary and other information of us or third parties with whom we deal, or otherwise disrupt our or our customers’ or other third parties’ business operations. In the event of any breach of any third-party data processors’ system, we may also be subject to class action lawsuits or other liability. SMBs are less prepared for the complexities of safeguarding cardholder data than their larger counterparts. In the event of noncompliance by a customer or other third-party of data safety and data privacy laws and regulations, we could face fines from governmental or non-governmental agencies. Further, the use of AI by cybercriminals may increase the frequency and severity of cyber-attacks against us or our third-party vendors and clients. It is critical to our business strategy that our facilities and infrastructure remain secure and are perceived by the marketplace to be secure. 

Although we believe we and our IT providers employ security technologies (including data encryption processes, intrusion detection systems), and conduct comprehensive risk assessments and other internal control procedures designed to assure the security of our and our customers’ data, we cannot guarantee that these measures will be sufficient for this purpose. If our and our IT provider’s security measures are breached as a result of third-party action, employee error or otherwise, and as a result our or our customers’ data becomes available to unauthorized parties, we could incur liability and our reputation would be damaged, which could lead to the loss of current and potential customers. If we experience any breaches of our network security or sabotage, we might be required to expend significant capital and other resources to detect, remedy, protect against or alleviate these and related problems, and we may not be able to remedy these problems in a timely manner, or at all. Because techniques used by outsiders to obtain unauthorized network access or to sabotage systems change frequently and generally are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures.

Additionally, the increased use of mobile and cloud technologies due to the increased