Company: MHLA
Filing Date: 2025-03-10
Form Type: 10-K
Source: 0001412100-25-000011
Chunk: 38

Company: Maiden Holdings, Ltd.
Filing Date: 2025-03-10
Form: 10-K
Item: Item 1A
Chunk 38
---
, necessary business functions. Like all companies, our information technology systems are vulnerable to data breaches, interruptions or failures due to events that may be beyond our control, including, but not limited to, natural disasters, theft, terrorist attacks, computer viruses, hackers and general technology failures. Our information technology systems include the Internet and third-party hosted services. We use information systems to process financial information and results of operations for internal reporting purposes and for regulatory financial reporting, legal and tax requirements. We also use information systems for electronic communications with customers and our various locations.

A shutdown or inability to access one or more of our facilities, a power outage, a security breach, or a failure of one or more of our information technology, telecommunications or other systems could significantly impair our ability to perform such functions on a timely basis. These incidents could be caused by malicious or disruptive software, computer hackers, rogue employees, cyber-attacks, failures of telecommunications systems or other catastrophic events. If sustained or repeated, such a business interruption, system failure or service denial could result in a deterioration of our ability to write and process business, provide customer service, pay claims in a timely manner or perform other necessary business functions. Furthermore, a significant portion of the communications between our employees and our business, banking and investment partners depends on information technology and electronic information exchange. In addition, we may suffer financial and reputational damage because of lost or misappropriated confidential information belonging to us, and may become subject to legal action and increased regulatory oversight. We could also be required to spend significant financial and other resources to remedy any damage caused to repair or replace information systems.

19

We believe that we have established and implemented appropriate security measures, controls and procedures to safeguard our information technology systems and to prevent unauthorized access to such systems and any data processed and/or stored in such systems, and we periodically employ third parties to evaluate and test the adequacy of such systems, controls and procedures. In addition, we have established a business continuity plan which is designed to ensure that we are able to maintain all aspects of our key business processes functioning in the midst of certain disruptive events, including any disruptions to or breaches of our information technology systems. We continue to make investments in technologies, cyber-insurance and training. Our business continuity plans are tested and evaluated for adequacy. Despite these safeguards, disruptions to and breaches of our information technology systems are possible and may negatively impact our business.

Like most major corporations, the Company’s information systems are a target of attacks. Although we have experienced no known material or threatened cases