Company: FCFS
Filing Date: 2025-02-03
Form Type: 10-K
Source: 0000840489-25-000032
Chunk: 90

Company: FirstCash Holdings, Inc.
Filing Date: 2025-02-03
Form: 10-K
Item: Item 1A
Chunk 90
---
 and other administrative support functions. Additionally, the Company’s storefront operations depend on the efficiency and reliability of the Company’s proprietary pawn POS and loan management system and AFF depends on its systems to process its transaction volume and effectively take applications, decision and service its customers. Furthermore, third parties provide a number of key components necessary to the Company’s business functions and systems. Any problems caused by these third parties could adversely affect the Company’s ability to deliver products and services to its customers and otherwise conduct its business. A shut-down of or inability to access these systems due to a power outage, a cyber-security breach or attack, a breakdown or failure of one or more of its information technology, telecommunications or other systems, or sustained or repeated disruptions of such systems could significantly impair its ability to perform such functions on a timely basis and could result in a deterioration of the Company’s ability to perform its day-to-day operations, provide customer service or perform other necessary business functions.

Security breaches, cyber attacks or fraudulent activity could result in damage to the Company’s operations or lead to reputational damage and expose the Company to significant liabilities.

An important component of the Company’s business involves collection, storage, use, disclosure, processing, transfer and other handling of a wide variety of sensitive, regulated and/or confidential information, including personally identifiable information, for various purposes in its business with customers. While the Company’s pawn business has historically acquired and maintained minimal personal information (primarily name, address, government identification numbers and date of birth). AFF obtains additional personal information, including social security numbers, dates of birth, bank account and payment card information and data from consumer reporting agencies (including credit report information) from its customers, increasing the 

22

potential risk of unauthorized access to such confidential information. The Company is under constant threat of loss due to the velocity and sophistication of security breaches and cyber attacks. These security incidents and cyber attacks may be in the form of computer hacking, acts of vandalism or theft, malware, computer viruses or other malicious codes, phishing, employee error or malfeasance, catastrophes or unforeseen events or other cyber attacks. A security breach of the Company’s computer systems, or those of the Company’s third-party service providers, including as a result of cyber attacks, could cause loss of Company assets, sensitive customer information and transaction data, interrupt or damage its operations or harm its reputation. In addition, the Company could be subject to liability if confidential customer or employee information is misappropriated from its computer systems. Any compromise of security, including security breaches perpetrated