Company: BL
Filing Date: 2025-08-06
Form Type: 10-Q
Source: 0001666134-25-000031
Chunk: 58

Company: BLACKLINE, INC.
Filing Date: 2025-08-06
Form: 10-Q
Item: Part I, Item 4
Chunk 58
---
 information of their customers or employees. Additionally, we maintain our own proprietary, confidential and otherwise sensitive information. Our platform is at risk for security breaches and incidents as a result of third-party action, employee, vendor or contractor error or malfeasance, cyberattacks (including from nation states and affiliated actors) and other forms of hacking, denial of service attacks, malfeasance, ransomware, viruses and other malicious software, or other factors. The risk of a cybersecurity incident occurring has increased as more companies and individuals work remotely, potentially exposing us to new, complex threats and increasing the potential for security breaches or incidents relating to phishing and other social engineering attacks, use of personal devices, and employee, vendor, or service provider error or malfeasance. Additionally, geopolitical events and an uncertain political climate, including war and political and social upheaval in certain regions of the world, may create heightened risks of cybersecurity incidents for us and our service providers, and we and they may be unable to defend against any such attacks. If any unauthorized or inadvertent access to, or a security breach or incident impacting our platform or other systems or networks used in our business occurs, such event could result in significant interruptions or other disruptions to our software solutions, platform and technology, the loss, alteration, or unavailability of data, unauthorized access to, or use, disclosure, or unauthorized processing of data, including proprietary, personal, or confidential data, and any such event, or the belief or perception that it has occurred, could result in a loss of business, severe reputational damage adversely affecting customer or investor confidence, regulatory investigations and orders, litigation, indemnity obligations, and damages for contract breach or penalties for violation of applicable laws or regulations. Additionally, service providers who store or otherwise process data on our behalf, including third-party and public-cloud infrastructure, also face security risks. As we rely more on third-party and public-cloud infrastructure, we are increasingly dependent on third-party security measures to protect against unauthorized access, cyberattacks, and the mishandling of customer, employee and other confidential data, and we may be required to expend significant time and resources to address any incidents related to the failure of those third-party security measures to prevent, detect, remediate, and otherwise address security breaches or incidents. Our ability to monitor our third-party service providers' security measures is limited, and in any event, attackers may be able to circumvent our third-party service providers' security measures. There have been and may continue to be significant attacks on certain third-party service providers,