Company: CRCL
Filing Date: 2025-05-27
Form Type: S-1/A
Source: 0001193125-25-126208
Chunk: 78

Company: Circle Internet Group, Inc.
Filing Date: 2025-05-27
Form: S-1/A
Chunk 78
---
 |

| • |     | result in our systems or services being unavailable and interrupt our operations; |

| • |     | result in improper disclosure of data and violations of applicable privacy and other laws; |

| • |     | result in significant regulatory scrutiny, investigations, fines, penalties, and other legal, regulatory, and financial 
 exposure;                                                                                                               |

| • |     | cause us to incur significant remediation and litigation costs; |

| • |     | lead to theft or irretrievable loss of our or our customers’ assets; |

| • |     | reduce customer confidence in, or decreased use of, our products and services; |

| • |     | divert the attention of management from the operation of our business; |

| • |     | result in significant compensation or contractual penalties from us to our customers or third parties as a result of losses 
 to them or claims by them; and                                                                                              |

| • |     | adversely affect our business and operating results. |

Further, any actual or perceived cyberattack or security breach directed at financial institutions, or digital asset or blockchain companies, whether or not we are directly impacted, could lead to a general loss of confidence in the digital asset economy or in the use of technology to conduct financial transactions. Such loss of confidence could negatively impact us, including the market perception of the effectiveness of our security measures and technology infrastructure. An increasing number of organizations—including large businesses, technology companies, and financial institutions as well as government institutions—have disclosed breaches of their information security systems, some of which have involved sophisticated and highly targeted cyberattacks or security breaches, including on their websites, mobile applications, and infrastructure. Attacks upon systems across a variety of industries, including the digital asset industry, are increasing in their frequency, persistence, and sophistication, and, in many cases, are being conducted by sophisticated, well-funded, and organized groups and individuals, including state actors. The techniques used to obtain unauthorized, improper, or illegal access to systems and information (including customers’ personal data and digital assets), disable or degrade services, or sabotage systems are constantly evolving, may be difficult to detect quickly, and often are not recognized or detected until after they have been launched against a target. These cyberattacks or security breaches may occur on our systems or those of our third-party service providers or partners. Certain types of cyberattacks or security breaches could harm us even if our systems are left undisturbed. For example, cyberattacks or security breaches may be designed to deceive employees and service providers into releasing control