Company: CDLX
Filing Date: 2025-04-03
Form Type: ARS
Source: 0001666071-25-000048
Chunk: 25

Company: Cardlytics, Inc.
Filing Date: 2025-04-03
Form: ARS
Chunk 25
---
 nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we, the third parties with whom we work, and our customers may be vulnerable to a heightened risk of these attacks, including retaliatory cyberattacks, that could materially disrupt our systems and operations, and ability to provide our service. In addition to traditional computer "hackers," we and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), threat actors, software bugs, malicious code (such as viruses and worms), malware (including: as a result of advanced persistent threat intrusions), employee theft or misuse, denial-of-service attacks, credential attacks, credential harvesting, and ransomware attacks, sophisticated nation-state and nation-state supported actors now engage in attacks (including advanced persistent threat intrusions). We also may be the subject of viruses, malware installation, server malfunction, software or hardware failures, loss of data or other computer assets, adware, malicious or unintentional actions or in actions by employees or others with authorized access to our network that create or expose vulnerabilities, attacks enhanced or facilitated by artificial intelligence ("AI"), and other similar threats or other similar issues. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Current or future criminal capabilities, discovery of existing or new vulnerabilities in our systems and attempts to exploit those vulnerabilities or other developments may compromise the technology protecting our systems. Due to a variety of both internal and external factors, including defects or misconfigurations of our technology, our services have in the past and may in the future become vulnerable to security incidents (both from intentional attacks and accidental causes) that cause them to fail to secure networks and detect and block attacks. In the event that our protection efforts are unsuccessful, and our systems are compromised such that a third party gains entry to our or any of our FI partners' systems, we could suffer substantial harm. In addition, many of our employees work remotely, which makes us more vulnerable to cyberattacks and has increased risks to our systems