Company: WLTH
Filing Date: 2025-09-23
Form Type: DRS/A
Source: 0001524566-25-000011
Chunk: 103

Company: WEALTHFRONT CORP
Filing Date: 2025-09-23
Form: DRS/A
Chunk 103
---
 diverse threat actors, such as sophisticated nation-state and nation-state-supported actors, opportunistic hackers, and hacktivists engaging in attacks. The operation of our platform involves the use, collection, storage, sharing, disclosure, transfer, and other processing of client information, including personal data. Security breaches and other security incidents could expose us to a risk of loss or exposure of this information, which could result in potential liability, investigations, regulatory fines, penalties for violation of applicable laws or regulations, litigation, and remediation costs, as well as reputational harm. As the breadth and complexity of the technologies we use and the software and platforms we develop continue to grow, the potential risk of security breaches and cybersecurity attacks increases.

<div align='center'>75</div>

Cybersecurity attacks and other malicious internet-based activity continue to increase and financial technology platform providers have been and expect to continue to be targeted. We might be a particularly attractive target of attacks seeking to access client data or assets and might in the future experience adverse effects relating to real or perceived security incidents, whether or not related to the security of our platform or systems. The increasing sophistication and resources of cyber criminals and other non-state actors and increased actions by nation-state actors, including their techniques and tools—such as AI—that circumvent security controls, evade detection, and remove forensic evidence, make it difficult to keep up with new threats and detect, investigate, remediate or recover from a future breach of security. Additionally, there is an increased risk that we might experience cybersecurity-related incidents as a result of any of our employees, service providers, or other third-parties working remotely on less secure systems and environments. Further, we have in the past integrated, and may in the future integrate, the technologies of companies we acquire. As such, we may assume liabilities for breaches experienced by the companies we acquire to the extent they have cybersecurity vulnerabilities or unsophisticated security measures that expose us to significant cybersecurity, operational, and financial risks. Moreover, any integration of AI in our or any service providers’ operations, products, or services is expected to pose new or unknown cybersecurity risks and challenges. While we take significant efforts to protect our systems and data, including establishing internal processes and implementing technological measures designed to provide multiple layers of security, our safety and security measures may not be fully implemented or complied with or might be insufficient to prevent damage to, or interruption or breach of, our information systems, data (including personal data), and operations. We and certain of our third-party service providers are routinely