Company: SRFM
Filing Date: 2025-03-21
Form Type: 10-K
Source: 0000950170-25-043326
Chunk: 86

Company: SURF AIR MOBILITY INC.
Filing Date: 2025-03-21
Form: 10-K
Item: Item 1A
Chunk 86
---
 upon which we rely, may experience service interruptions, outages or degradation because of hardware and software defects or malfunctions, human error or malfeasance by third parties or our employees, contractors, service providers, earthquakes, hurricanes, floods, fires, natural disasters, power losses, disruptions in telecommunications services, fraud, military or political conflicts, terrorist attacks, cyberattacks, ransomware attacks or other events. We do not carry cyber insurance, which may expose us to certain potential losses for damages or result in penalization with fines in an amount exceeding our resources. As we do not currently have insurance protection for cybersecurity breaches, we may not have sufficient remedies available to us from our third-party service providers to cover all of our losses that may result from such interruptions, outages or degradations. 

Our software and the third-party software that we incorporate into our platform may be subject to errors, defects or vulnerabilities. Any errors, defects or vulnerabilities discovered in our platform, whether in our code or that of third-party software on which our software relies, could result in negative publicity, a loss of customers or loss of revenue, access or other performance issues, security incidents or other liabilities. Errors, defects and vulnerabilities could also prevent customers from booking flights, which would adversely affect our flyer utilization rates, or disrupt communications within the company (e.g., flight schedules or passenger manifests), which could affect our on-time 

38

performance. We may need to expend significant financial and development resources to analyze, correct, eliminate or work around errors or defects or to address and eliminate vulnerabilities. Any failure to timely and effectively resolve any such errors, defects or vulnerabilities could negatively impact our reputation or brand, and could have a material adverse effect on our business, financial condition and results of operations. 

In addition, our transition of our workforce to a hybrid work environment, where our employees are often working remotely, could also increase our vulnerability to risks related to our hardware and software systems, including risks of phishing and other cybersecurity attacks. Our systems may be subject to additional risk introduced by software that we license from third parties. This licensed software may introduce vulnerabilities within our own operations as it is integrated with our systems, or as we provide services to our customers. 

We are subject to cyberattacks, system failures and other events or conditions that can interrupt the availability or reduce or affect the speed or functionality of our technology platform, especially because we are in the process of maturing our security programs and have not yet implemented the expected security controls to prevent such disruptions. These events could result in