EVERTEC Inc
For the period ended Dec 31, 2024. Filed Mar 3, 2025.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2024 · Filed Mar 3, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-K
Period ended 2023-12-31; filed 2024-02-29.
0001559865-24-000008
Item 1A. —Risk FactorsCurrent report: 10-K
Period ended 2024-12-31; filed 2025-03-03.
0001559865-25-000007
Item 1A. —Risk FactorsThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 149 previous paragraphs and 153 current paragraphs.
90 unchanged; 50 reworded; 13 added; 7 removed; 2 previous and 0 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (13)
Current report
AI and machine-learning models require training on datasets prior to production use, and in some instances, AI algorithms or training methodologies may be flawed. Datasets may be overbroad, insufficient, or contain biased information. Training on incomplete, inadequate, inaccurate, biased or otherwise poor quality data may result in models failing to provide acceptable results. Content generated by AI systems also may be offensive, illegal, or otherwise harmful. Further, such content may appear correct but is factually inaccurate, misleading or otherwise flawed, or that results in unintended biases and discriminatory outcomes, which could negatively impact our users, harm our reputation and business, and expose us to liability. Ineffective or inadequate AI development or deployment practices by us or others could result in incidents that impair the acceptance of AI solutions or cause harm to individuals, users, or society, or result in our products and services not working as intended. Human review of certain outputs may be required. Our implementation of AI systems could result in legal liability, regulatory action, brand, reputational, or competitive harm, or other adverse impacts that could adversely affect our business, financial condition, cash flows and results of operations.
Current report
In addition, certain AI and machine-learning models that we utilize may incorporate data and inputs from third-party sources. If third parties allege that our AI and machine learning models violate copyright law, or that our use of training data violates applicable law or the rights of a third party, we may be subject to legal liability or we may be forced to retrain our models or different datasets, which could result in unexpected costs, and adversely affect the availability of our offerings, their reliability, or otherwise make them less useful for their intended uses.
Current report
The regulatory framework governing the use of AI and machine learning technology is rapidly evolving, and we cannot predict how future legislation and regulation will impact our ability to offer products or services that we develop which leverage artificial intelligence and machine learning technology.
Current report
Our business relies on machine learning, AI, and automated decision-making technologies. The regulatory framework for AI and machine learning technology is rapidly evolving, and many federal, state, and foreign governments have introduced or are currently considering new laws and regulations relating to such technology. As a result, implementation standards and enforcement practices are also likely to remain uncertain for the foreseeable future, and we cannot determine the impact future laws, regulations, or standards may have on our business, or how best to respond to them in future.
Current report
Any failure or perceived failure by us to comply with AI technology-related laws, rules, and regulations could result in proceedings or actions against us by individuals, consumer rights groups, government agencies, or others. We could incur significant costs in investigating and defending such claims and, if found liable, pay significant damages or fines or be required to make changes to our business. Further, these proceedings and any subsequent adverse outcomes may subject us to significant negative publicity, and an erosion of trust. Moreover, it is possible that new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition and antitrust laws, may be interpreted in ways that would limit our ability to use AI and machine learning technologies for our business, or require us to change the way we use AI and machine learning technologies in a manner that negatively affects our businesses. If any of these events were to occur, our business, financial condition, cash flows and results of operations could be materially adversely affected.
Current report
Our operations, business, customers and partners could be adversely affected by climate change or other environmental or social pressures.
Current report
If we were found to be non-compliant with any OSS license terms, third parties could claim ownership of, or demand release of, the OSS or derivative works that we developed using such software, which could include our proprietary source code, or could otherwise seek to enforce the terms of the applicable OSS license, which could subject us to certain requirements, including requirements that we offer our software that incorporates or links to the OSS at a reduced cost or for free, or that we make available the proprietary source code for such software, which we consider to be a trade secret, to the general public. Any such claim could result in costly litigation and could require us to make our software source code freely available, purchase a costly license or cease offering the implicated products or services unless and until we can re-engineer them to avoid infringement, which may be a costly and time-consuming process. In any such event, we could be required to seek licenses from third parties and pay royalties in order to continue using the OSS necessary to operate our business or we could be required to discontinue use of our services and other software in the event re-engineering cannot be accomplished on a timely basis. Any of the foregoing could require us to devote additional research and development resources to re-engineer our services, could result in user dissatisfaction, could allow our competitors to create similar platforms with lower development effort and time and may adversely affect our business, financial condition, cash flows and results of operations. Moreover, any actual or claimed requirement to disclose our proprietary source code or pay damages for breach of contract could harm our business and could help third parties, including our competitors, develop products and services that are similar to or better than ours.
Current report
In particular, in December 2021, OECD released final “Pillar Two” model rules pursuant to the Global Anti-Base Erosion Proposal, or “GloBE,” to reform international corporate taxation. Large multinational enterprises within the scope of the rules are required to calculate their GloBE effective tax rate for each jurisdiction where they operate. Such large multinational enterprises will be liable to pay a top-up tax for the difference between their GloBE effective tax rate per jurisdiction and the 15% minimum rate. The model rules, commentary and guidance allow the OECD’s Inclusive Framework members to begin implementing the Pillar Two rules. Numerous countries have enacted, or are in the process of enacting, legislation to implement Pillar Two model rules. These changes, if and when enacted, by various countries in which we do business may increase our taxes in these countries. The foregoing tax changes and other possible future tax changes may have an adverse impact on us, our business, financial condition, results of operations and cash flow.
Current report
Exposure to foreign exchange fluctuations and capital controls may adversely affect our costs, earnings and the value of some of our assets.
Current report
Our reporting currency is the U.S. dollar; however we conduct a portion of our business in currencies other than the U.S. dollar, as an example the Brazilian Real, the Chilean Peso and the Costa Rica Colon. Some currencies have been historically volatile and may devalue. Our consolidated financials are directly impacted by movements from foreign currencies to U.S. dollar exchange rate. For example, an appreciation of the U.S. dollar against a foreign currency would reduce the U.S. dollar value of our results while any depreciation of the U.S. dollar would increase our costs.
Current report
Further, a continued strengthening of the U.S. dollar could create inflationary pressures and cause foreign governments to, among other measures, increase interest rates. Restrictive macroeconomic policies could reduce the stability of foreign economies and harm our results of operations and profitability.
Current report
Purchases of our common stock pursuant to our stock repurchase plan may affect the value of our common stock, and there can be no assurance that our stock repurchase plan will enhance stockholder value.
Current report
In 2024, we approved an increase to our existing share repurchase authorization to permit repurchases of up to $220 million in worth of shares of our common stock, including through open market purchases, accelerated share repurchase programs, Rule 10b5-1 plans, or privately negotiated transactions, each in accordance with applicable securities laws and other restrictions. Repurchase activity has previously impacted and could in the future increase (or reduce the size of any decrease in) the market price of our common stock. Additionally, repurchases diminish our cash reserves, which could impact our ability to pursue other possible strategic opportunities or could result in lower overall returns on our cash balances. There can be no assurance that any share repurchases will enhance stockholder value because the market price of our common stock shares could decline. Although the share repurchase program is intended to enhance long-term stockholder value, short-term share price fluctuations could reduce the program’s effectiveness.
Removed paragraphs (7)
Previous report
There is no assurance that we will be able to realize the intended benefits of the Popular Transaction, as the term is defined in the "Relationship with Popular" section. Specifically, the Popular Transaction has caused disruptions, and could continue to cause disruptions, in our remaining businesses and has and could continue to otherwise limit our ability to compete for or perform certain contracts or services. The elimination of Popular’s holdings of our common stock and the corresponding termination of Popular’s right to nominate directors to our Board of Directors may negatively impact our business relationship with Popular and increase the likelihood of a change of control of our Company.
Previous report
There are significant risks involved in developing, maintaining and deploying these technologies and there can be no assurance that the usage of such technologies will always enhance our products or services or be beneficial to our business, including our efficiency or profitability. Furthermore, our use of artificial intelligence and machine learning technologies may result in legal and regulatory risks and any resulting investigations or litigation could have an adverse impact on our business, financial condition, and results of our operations.
Previous report
A number of aspects of intellectual property protection in the field of artificial intelligence and machine learning are currently under development, and there is uncertainty and ongoing litigation in different jurisdictions as to the degree and extent of protection warranted for artificial intelligence and machine learning systems and relevant system input and outputs. If we fail to obtain protection for the intellectual property rights concerning our artificial intelligence and machine learning technologies, or later have our intellectual property rights invalidated or otherwise diminished, our competitors may be able to take advantage of our research and development efforts to develop competing products.
Previous report
A protracted government shutdown could negatively affect our financial condition.
Previous report
During any protracted federal government shutdown, the federal government may reduce or cut funding for certain welfare and disaster relief programs. Beneficiaries of certain federal programs, such as the Supplemental Nutrition Assistance Program (SNAP), obtain their benefits through EBT accounts. A temporary or permanent reduction in federal welfare and relief programs could lead to a decrease in electronic benefit card volume. The effect of a protracted government shutdown may materially and adversely affect our revenues, profitability, and cash flows.
Previous report
We continue to incur significant costs as a result of operating as a public company, and our management is required to devote substantial time to compliance with our public company responsibilities and corporate governance practices.
Previous report
We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, the Dodd-Frank Act, the listing requirements of the New York Stock Exchange (The "NYSE") and other applicable securities laws and regulations. The expenses incurred by public companies generally for reporting and corporate governance purposes have been increasing. Our management and other personnel devote a substantial amount of time to compliance with these requirements. Moreover, these rules and regulations have increased and will continue to increase our legal and financial compliance costs and make some activities more time-consuming and costly. We cannot predict or estimate the amount of additional costs we will incur as a public company or the specific timing of such costs. Furthermore, if we are unable to satisfy our obligations as a public company or the specific timing of such costs, we could be subject to delisting of our common stock, fines, sanctions and other regulatory action and potentially civil litigation.
Reworded paragraphs (50)
Previous wording
Readers should carefully consider, in connection with other information disclosed in this Annual Report on Form 10-K, the risks and uncertainties described below. The following discussion sets forth risks that we believe are material to our stockholders and prospective stockholders. The occurrence of any of the following risks might cause our stockholders to lose all or a part of their investment in our Company. Some statements contained in this Report, including statements in the following risk factors section, constitute forward-looking statements. Please also refer to the section titled “Forward- Looking Statements” at the beginning of this Report.
Current wording
Readers should carefully consider, in connection with other information disclosed in this Report, the risks and uncertainties described below. The following discussion sets forth risks that we believe are material to our stockholders and prospective stockholders. The occurrence of any of the following risks might cause our stockholders to lose all or a part of their investment in our Company. Some statements contained in this Report, including statements in the following risk factors section, constitute forward-looking statements. Please also refer to the section titled “Forward- Looking Statements and Risk Factor Summary” at the beginning of this Report.
Previous wording
Our services to Banco Popular, our largest customer, account for a significant portion of our revenues, and we expect that our services to Popular will continue to represent a significant portion of our revenues for the foreseeable future. Additionally, the elimination of Popular’s ownership of our common stock could continue to result in disruptions to relationships with customers and other business partners and adversely affect us.
Current wording
Our services to Banco Popular, our largest customer, account for a significant portion of our revenues, and we expect that our services to Popular will continue to represent a significant portion of our revenues for the foreseeable future. If Popular were to terminate or fail to make required payments under the A&R MSA, or our other material agreements with Popular, our revenues could be materially reduced and our profitability and cash flows could also be materially reduced, all of which would have a material adverse effect.
Previous wording
For the year ended December 31, 2023, approximately 35% of our revenue was attributable to Banco Popular, a wholly-owned subsidiary of Popular. The A&R MSA by and among Popular, Banco Popular de Puerto Rico and EVERTEC Group, is our most significant client contract, and was amended and restated to include a term ending in 2028. If Popular were to terminate or fail to make required payments under the A&R MSA, or our other material agreements with Popular, our revenues could be materially reduced and our profitability and cash flows could also be materially reduced, all of which would have a material adverse impact on our financial condition and results of operations.
Current wording
For the year ended December 31, 2024, approximately 31% of our revenue was attributable to Banco Popular, a wholly-owned subsidiary of Popular. The A&R MSA by and among Popular, Banco Popular de Puerto Rico and EVERTEC Group, is our most significant client contract, and was amended and restated to include a term ending in 2028. If Popular were to terminate or fail to make required payments under the A&R MSA, or our other material agreements with Popular, our revenues could be materially reduced and our profitability and cash flows could also be materially reduced, all of which would have a material adverse impact on our financial condition and results of operations.
Previous wording
Growth in our merchant acquiring business is derived primarily from acquiring new merchant relationships, new and enhanced product and service offerings, cross selling products and services into existing relationships, the shift of consumer spending to increased usage of electronic forms of payment, and the strength of our existing commercial relationship with Banco Popular. A substantial portion of our business is generated from our Amended and Restated Independent Sales Organization Sponsorship and Services Agreement (the “A&R ISO Agreement”) with Banco Popular, which was amended and restated on July 1, 2022, among other things, to extend its term to end in 2035.
Current wording
Growth in our merchant acquiring business is derived primarily from acquiring new merchant relationships, new and enhanced product and service offerings, cross selling products and services into existing relationships, the shift of consumer spending to increased usage of electronic forms of payment, and the strength of our existing commercial relationship with Banco Popular. A substantial portion of our business is generated from our Amended and Restated Independent Sales Organization Sponsorship and Services Agreement (the “A&R ISO Agreement”) with Banco Popular, which was amended and restated in July 2022, among other things, to extend its term to end in 2035.
Previous wording
If we are unable to renew or negotiate extensions for our A&R MSA with Popular, our A&R ISO Agreement with Banco Popular and our A&R ATH Network Participation Agreement with Banco Popular (together with its ATH Support Schedule, the “A&R BPPR ATH Agreement”), or if we are required to provide significant concessions to Popular or Banco Popular to secure extensions or otherwise, our ability to renegotiate our debt, secure additional debt, results of operations, financial condition and trading price of our common stock may be materially adversely affected.
Current wording
If we are unable to renew or negotiate extensions for our A&R MSA with Popular, A&R ISO Agreement with Banco Popular and A&R ATH Network Participation Agreement with Banco Popular (together with its ATH Support Schedule, the “A&R BPPR ATH Agreement”), or if we are required to provide significant concessions to Popular or Banco Popular to secure extensions or otherwise, our ability to renegotiate our debt, secure additional debt, results of operations, financial condition and trading price of our common stock may be materially adversely affected.
Previous wording
Our A&R ISO Agreement with Banco Popular, which sets our merchant acquiring relationship with Popular, now includes revenue sharing provisions with Popular. Banco Popular sponsors us as an independent sales organization with respect to certain credit card associations and is required to exclusively refer to us any merchant that inquires about the service, requests or otherwise evidences interest in merchant and other services. If the A&R ISO Agreement is not renewed, we will have to seek other card association sponsors, we will not benefit from Banco Popular referral of merchants and we may experience the loss of some merchants if Banco Popular itself enters the merchant acquiring business or agrees to sponsor another independent sales organization. Any of these events may negatively impact our financial condition and results of operations.
Current wording
Our A&R ISO Agreement with Banco Popular, which sets our merchant acquiring relationship with Popular, includes revenue sharing provisions with Popular. Banco Popular sponsors us as an independent sales organization with respect to certain payment card network and is required to exclusively refer to us any merchant that inquires about the service, requests or otherwise shows interest in merchant and other services. If the A&R ISO Agreement is not renewed, we will have to seek other card association sponsors, we will not benefit from Banco Popular referral of merchants and we may experience the loss of some merchants if Banco Popular itself enters the merchant acquiring business or agrees to sponsor another independent sales organization. Any of these events may negatively impact our financial condition and results of operations.
Previous wording
Under such agreements, among other things, we provide Banco Popular certain ATM and POS services in connection with our ATH network; we grant a license to use the ATH logo, word mark and associated trademarks; and Banco Popular agrees to support, promote, and market the ATH network and brand and to issue debit cards bearing the symbol of the ATH network. If one or both of the BPPR ATH Agreements are not extended, our ATH brand and network could be negatively impacted, and our financial condition and results of operations also be materially adversely affected.
Current wording
Under such agreements, among other things, we provide Banco Popular certain ATM and POS services in connection with our ATH network; we grant a license to use the ATH logo, word mark and associated trademarks; and Banco Popular agrees to support, promote, and market the ATH network and brand and to issue debit cards bearing the symbol of the ATH network. If one or both of the A&R BPPR ATH Agreements are not extended, our ATH brand and network could be negatively impacted, and our financial condition and results of operations also be materially adversely affected.
Previous wording
The A&R MSA, A&R ISO Agreement, and A&R BPPR ATH Agreement, amended and restated on July 1, 2022, have terms ending in 2028, 2035, and 2030, respectively.
Current wording
The A&R MSA, A&R ISO Agreement, and A&R BPPR ATH Agreement, amended and restated in July 2022, have terms ending in 2028, 2035, and 2030, respectively.
Previous wording
We also depend on our payment processing clients to comply with their contractual obligations, applicable laws, regulatory requirements and credit card associations rules or standards. A client’s failure to comply with any such laws or requirements could force us to declare a breach of contract and terminate the client relationship. The termination of such contracts or relationships, as well as any inability to collect any damages caused, could have a material adverse effect on our business, financial condition, and results of operations. Additionally, any such failure by clients to comply could also result in fines, penalties or obligations imputed to EVERTEC, which could also have a material adverse effect on our business.
Current wording
We also depend on our payment processing clients to comply with their contractual obligations, applicable laws, regulatory requirements and payment card networks rules or standards. A client’s failure to comply with any such laws or requirements could force us to declare a breach of contract and terminate the client relationship. The termination of such contracts or relationships, as well as any inability to collect any damages caused, could have a material adverse effect on our business, financial condition, and results of operations. Additionally, any such failure by clients to comply could also result in fines, penalties or obligations imputed to EVERTEC, which could also have a material adverse effect on our business.
Previous wording
We rely on our information technology systems, employees and certain suppliers and counterparties, and certain failures or disruptions in those systems or chains could materially adversely affect our operations.
Current wording
We rely on our information technology systems, employees and certain suppliers and counterparties, and certain failures or disruptions in those systems or chains that could materially adversely affect our operations.
Previous wording
We rely on computer systems, hardware, software, technology infrastructure, and online sites for both internal and external operations that are critical to our business (collectively, "IT Systems"). For example, we use our IT Systems to connect with our clients, people, and others. We own and manage some of these IT Systems, but also rely on third parties for a range of IT Systems and related products and services, including but not limited to cloud computing services. We and certain of our third-party providers also collect, store, transfer, process, and use business, personal, and financial data about our own business, clients, employees, business partners, and others, including information about individuals and proprietary information belonging to our business such as trade secrets.
Current wording
We rely on computer systems, hardware, software, technology infrastructure, and online sites for both internal and external operations that are critical to our business (collectively, "IT Systems"). For example, we use our IT Systems to connect with our clients, business partners, people, and others. We own and manage some of these IT Systems, but also rely on third parties for a range of IT Systems and related products and services, including but not limited to cloud computing services. We and certain of our third-party providers also collect, store, transfer, process, and use business, personal, and financial data about our own business, clients, employees, business partners, and others, including information about individuals and proprietary information belonging to our business such as trade secrets.
Previous wording
We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity, and availability of our IT Systems and data. These cybersecurity risks may arise from diverse threat actors, such as state-sponsored organizations and opportunistic hackers and hacktivists, as well as through diverse attack vectors, such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error, and as a result of malicious code embedded in open-source software, or misconfigurations, "bugs" or other vulnerabilities in commercial software that is integrated into our (or our suppliers' or service providers') IT Systems, products or services. Additionally, hardware, applications, or services that we develop or procure from third parties may contain defects in design or manufacture or other problems that could compromise the confidentiality, integrity, or availability of our data or IT Systems.
Current wording
We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity, and availability of our IT Systems and data. These cybersecurity risks may arise from diverse threat actors, such as state-sponsored organizations and opportunistic hackers and hacktivists, as well as through diverse attack vectors, such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error, and as a result of malicious code embedded in open-source software, or misconfigurations, "bugs" or other vulnerabilities in commercial software that is integrated into our (or our suppliers' or service providers') IT Systems, products or services. Additionally, hardware, applications, or services that we develop or procure from third parties may contain defects in design or manufacture or other problems that could compromise the confidentiality, integrity, or availability of our data or IT Systems. Given the nature of complex systems, software and services like ours and the scanning tools that we deploy, we regularly identify and track security vulnerabilities. We are unable to comprehensively apply patches or mitigating measures for all vulnerabilities at all times or guarantee that patches will be applied before vulnerabilities can be exploited by a threat actor.
Previous wording
There can also be no assurance that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with, or effective in protecting our IT Systems and data, and our systems and processes may be unable to prevent material security breaches. Security breaches, improper use of our systems, and unauthorized access to our data and information by employees and others may pose a risk that data may be exposed to unauthorized persons or to the public. Such occurrences could adversely affect our business, results of operations, financial position, and reputation, and could result in litigation (including class actions) or regulatory investigations or enforcement actions.
Current wording
There can also be no assurance that our cybersecurity risk management program and processes, including our policies, controls, or procedures, will be fully implemented, complied with, or effective in protecting our IT Systems and data, and our systems and processes may be unable to prevent material security breaches. Security breaches, improper use of our systems, and unauthorized access to our data and information by employees and others pose a risk that data may be exposed to unauthorized persons or to the public. Such occurrences could adversely affect our business, results of operations, financial position, and reputation, and could result in litigation (including class actions) or regulatory investigations or enforcement actions.
Previous wording
In addition, we make extensive use of third-party service providers, including providers that store, transmit and process data. These third-party service providers are also subject to malicious attacks and cybersecurity threats that could adversely affect our business, results of operations, financial condition, and reputation.
Current wording
We make extensive use of third-party service providers, including providers that store, transmit and process data. These third-party service providers are also subject to malicious attacks and cybersecurity threats that could adversely affect our business, results of operations, financial condition, and reputation. In addition, because our services are connected to or integrated with some of our customers’ systems, the circumvention or failure of our cybersecurity defenses or measures could compromise the confidentiality, integrity, and availability of our customers’ own IT Systems and sensitive information.
Previous wording
Many of our services are based on sophisticated software, technology, computing systems, and other IT Systems, and we may encounter delays when developing new technology solutions and services. We and our third-party providers regularly experience cyberattacks and other incidents, and we expect such attacks and incidents to continue in varying degrees. In particular, we have experienced actual and attempted cyber-attacks of our IT Systems, such as through phishing scams, ransomware, exploitation of vulnerabilities in our IT Systems, and other methods of attack. Even though some of these attacks have been successful; none of these actual or attempted cyber-attacks has had a material adverse impact on our operations or financial condition, and we cannot guarantee that any such incidents will not have such an impact in the future. The IT Systems underlying our services have occasionally contained, and may in the future contain, undetected errors or defects when first introduced or when new versions are released. We may experience difficulties in installing or integrating our IT Systems on platforms used by our customers.
Current wording
Many of our services are based on sophisticated software, technology, computing systems, and other IT Systems, and we may encounter delays when developing new technology solutions and services. We and our third-party providers regularly experience cyberattacks and other incidents, and we expect such attacks and incidents to continue in varying degrees. In particular, we have experienced actual and attempted cyber-attacks of our IT Systems, such as through phishing scams, ransomware, exploitation of vulnerabilities in our IT Systems, and other methods of attack. Even though some of these attacks have been successful, none of these actual or attempted cyber-attacks has had a material adverse impact on our operations or financial condition but we cannot guarantee that material incidents will not occur in the future. The IT Systems underlying our services have occasionally contained, and may in the future contain, undetected errors or defects when first introduced or when new versions are released. We may experience difficulties in installing or integrating our IT Systems on platforms used by our customers. For example, in 2024, we identified a cybersecurity incident that exploited a third-party software vulnerability and resulted in unauthorized access to our IT systems that were utilized for servicing certain of our customers. We immediately activated our incident response plan and enlisted the support of third-party cybersecurity forensic experts to assist our team with the investigation. There was no impact on our operations due to the incident, which was swiftly contained and remediated following its detection without any material adverse effect on our operations or financial condition.
Previous wording
Our businesses are dependent on our ability to reliably process, record and monitor a large number of transactions. We settle funds on behalf of financial institutions, other businesses and consumers and process funds transactions from clients, card issuers, payment networks and consumers on a daily basis for a variety of transaction types. Transactions facilitated by us include debit card, credit card, electronic bill payment transactions, ACH payments, electronic benefits transfer (“EBT”) transactions and check clearing that supports consumers, financial institutions, and other businesses. These payment activities rely upon technology infrastructure that facilitates the verification of activity with counterparties, the facilitation of the payment and, in some cases, the detection or prevention of fraudulent payments. If any of our financial, accounting, or other data processing systems or applications or other IT Systems fail or experience other significant shortcomings, our ability to serve our clients and accordingly our results of operations could be materially adversely affected. Such failures or shortcomings could be the result of events that are beyond our control, which may include, for example, computer viruses, fires, electrical or telecommunications outages, natural disasters, future disease pandemics or other public health crisis, terrorist acts, political instability, or other unanticipated damage to property or physical assets. Certain of these events may become more frequent or intense as a result of climate change. For more information, see our risk factor titled "Our operations, business, customers and partners could be adversely affected by climate change". Any such shortcoming could also damage our reputation, require us to expend significant resources to correct the defect, and may result in liability to third parties, especially since some of our contractual agreements with financial institutions require the crediting of certain fees if our systems do not meet certain specified service levels.
Current wording
Our businesses are dependent on our ability to reliably process, record and monitor a large number of transactions. We settle funds on behalf of financial institutions, other businesses and consumers and process funds transactions from clients, card issuers, payment networks and consumers on a daily basis for a variety of transaction types. Transactions facilitated by us include debit card, credit card, electronic bill payment transactions, ACH payments, electronic benefits transfer (“EBT”) transactions and check clearing that supports consumers, financial institutions, and other businesses. These payment activities rely upon technology infrastructure that facilitates the verification of activity with counterparties, the facilitation of the payment and, in some cases, the detection or prevention of fraudulent payments. If any of our financial, accounting, or other data processing systems or applications or other IT Systems fail or experience other significant shortcomings, our ability to serve our clients and accordingly our results of operations could be materially adversely affected. Such failures or shortcomings could be the result of events that are beyond our control, which may include, for example, computer viruses, fires, electrical or telecommunications outages, natural disasters, future disease pandemics or other public health crisis, terrorist acts, political instability, or other unanticipated damage to property or physical assets. Certain of these events may become more frequent or intense as a result of climate change or other environmental or social pressures. For more information, see our risk factor titled "Our operations, business, customers and partners could be adversely affected by climate change or other environmental or social pressures". Any such shortcoming could also damage our reputation, require us to expend significant resources to correct the defect, and may result in liability to third parties, especially since some of our contractual agreements with financial institutions require the crediting of certain fees if our systems do not meet certain specified service levels.
Previous wording
All our businesses require a wide range of expertise and intellectual capital to adapt to the rapidly changing technological, social, economic and regulatory environments. In order to successfully compete and grow, we must recruit, retain and develop personnel who can provide the necessary expertise across a broad spectrum of intellectual capital needs. In addition, we must develop, maintain and, as necessary, implement appropriate succession plans to assure we have the necessary human resources capable of maintaining continuity in our business. The market for qualified personnel is competitive and we may not succeed in recruiting additional personnel or may fail to effectively replace current personnel who depart with qualified or effective successors. In addition, from time to time, there may be changes in our management team that may be disruptive to our business. If our management team, including new hires that we make, fails to work together effectively and to execute our plans and strategies on a timely basis, our business could be harmed. Our effort to retain and develop personnel may also result in significant additional expenses, which could adversely affect our profitability, and may not have the desired effect. We cannot assure that key personnel, including our executive officers, will continue to be employed or that we will be able to attract and retain qualified personnel in the future. Failure to recruit, retain or develop qualified personnel could adversely affect our business, financial condition or results of operations.
Current wording
All our businesses require a wide range of expertise and intellectual capital to adapt to the rapidly changing technological, social, economic and regulatory environments. In order to successfully compete and grow, we must recruit, retain and develop personnel who can provide the necessary expertise across a broad spectrum of intellectual capital needs. In addition, we must develop, maintain and, as necessary, implement appropriate succession plans to assure we have the necessary human resources capable of maintaining continuity in our business and the businesses we acquire, such as Sinqia. The market for qualified personnel is competitive and we may not succeed in recruiting additional personnel or may fail to effectively replace current personnel who depart with qualified or effective successors. In addition, from time to time, there may be changes in our management team that may be disruptive to our business. If our management team, including new hires that we make, fails to work together effectively and to execute our plans and strategies on a timely basis, our business could be harmed. Our effort to retain and develop personnel may also result in significant additional expenses, which could adversely affect our profitability, and may not have the desired effect. We cannot assure that key personnel, including our executive officers, will continue to be employed or that we will be able to attract and retain qualified personnel in the future. Failure to recruit, retain or develop qualified personnel could adversely affect our business, financial condition or results of operations.
Previous wording
Certain states in the United States and most countries have adopted privacy and security laws that may apply to our business. These laws generally require companies to implement specific privacy and information security controls and legal protections to protect certain types of personal information and to collect or use it subject to disclosures. Additional compliance investment and potential business process changes may continue to be required as these laws and others go into effect. Further, in order to comply with the varying state laws around data breaches, we must maintain adequate security measures, which require significant investments in resources and ongoing attention. Additionally, our customers and business partners are imposing more stringent obligations on us in the form of contracts regarding privacy and information security. Even though we believe we and our vendors are generally in compliance with applicable laws, rules and regulations relating to privacy and data security, these laws are in some cases relatively new and the interpretation and application of these laws are uncertain.
Current wording
Certain states in the United States and most countries where we conduct our business have adopted privacy and security laws that may apply to our business. These laws generally require companies to implement specific privacy and information security controls and legal protections to protect certain types of personal information and to collect or use it subject to disclosures. Additional compliance investment and potential business process changes may continue to be required as these laws and others go into effect. Further, in order to comply with the varying state laws around data breaches, we must maintain adequate security measures, which require significant investments in resources and ongoing attention. Additionally, our customers and business partners are imposing more stringent obligations on us in the form of contracts regarding privacy and information security. Laws, rules and regulations relating to privacy and data security are, in some cases, relatively new and the interpretation and application of these laws are uncertain.
Previous wording
Despite our efforts, our practices may not comply, now or in the future, with all such laws, regulations, requirements, and obligations. Any failure, or perceived failure, by us to comply with our posted privacy and security-related policies or with any current or future federal or state data privacy or security-related laws, regulations, regulatory guidance, orders, or other legal obligations relating to privacy or security could adversely affect our reputation, brand and business, and may result in claims, proceedings, or actions against us by governmental entities or others or other liabilities or require us to change our operations and/or cease using certain data sets, and may otherwise adversely affect our financial condition and operating results. We may also be contractually required to indemnify and hold harmless third parties from the costs or consequences of non-compliance with any laws, regulations, or other legal obligations relating to privacy or security or any inadvertent or unauthorized use or disclosure of data that we store or handle as part of operating our business.
Current wording
Despite our efforts, our practices may not comply, now or in the future, with all such laws, regulations, requirements, and obligations. Any failure, or perceived failure, by us to comply with our posted privacy and security-related policies or with any current or future federal or state data privacy or security-related laws, regulations, regulatory guidance, orders, or other legal obligations relating to privacy or security could adversely affect our reputation, brand and business, and may result in claims, proceedings, or actions against us by governmental entities, expose us to liabilities, or require us to change our operations and/or cease using certain data sets, and may otherwise adversely affect our financial condition and operating results. We have historically been and may continue in the future to be contractually required to indemnify and hold harmless third parties from the costs or consequences of non-compliance with any laws, regulations, or other legal obligations relating to privacy or security or any inadvertent or unauthorized use or disclosure of data that we store or handle as part of operating our business, which could result in a material adverse effect on our business.
Previous wording
Under certain circumstances, we may be liable for certain fraudulent transactions and/or credits initiated by merchants or others. For instance, if we were to process payments for a merchant that engaged in unfair or deceptive trade practices, we may be subject to certain fines or penalties. Examples of merchant fraud include merchants or other parties knowingly using a stolen or counterfeit credit, debit or prepaid card, card number, or other credentials to record a false sales or credit transaction, processing an invalid card or intentionally failing to deliver the merchandise or services sold in an otherwise valid transaction. Criminals are using increasingly sophisticated methods to engage in illegal activities such as counterfeiting and fraud. A single significant incident of fraud, or increases in the overall level of fraud, involving our services, could result in reputational damage to us, which could reduce the use and acceptance of our solutions and services or lead to greater regulation that would increase our compliance costs. Failure to effectively manage risk and prevent fraud could increase our chargeback liability or cause us to incur other liabilities, and our insurance coverage may be insufficient or inadequate to compensate us. It is possible that incidents of fraud could increase in the future. Increases in chargebacks or other liabilities could adversely affect our business, financial condition or results of operations.
Current wording
Under certain circumstances, we may be liable for certain fraudulent transactions and/or credits initiated by merchants or others. For instance, if we were to process payments for a merchant that engaged in unfair or deceptive trade practices, we may be subject to certain fines or penalties. Examples of merchant fraud include merchants or other parties knowingly using a stolen or counterfeit credit, debit or prepaid card, card number, or other credentials to record a false sales or credit transaction, processing an invalid card, selling goods or services that are considered forbidden by the payment card networks, or intentionally failing to deliver the merchandise or services sold in an otherwise valid transaction. Criminals and other misfeasors are using increasingly sophisticated methods to engage in forbidden and/or illegal activities such as counterfeiting and fraud. A single significant incident of fraud, or increases in the overall level of fraud, involving our services, could result in reputational damage to us, which could reduce the use and acceptance of our solutions and services or lead to greater regulation that would increase our compliance costs. Failure to effectively manage risk and prevent fraud could increase our chargeback liability or cause us to incur other liabilities, and our insurance coverage may be insufficient or inadequate to compensate us. It is possible that incidents of fraud could increase in the future. Increases in chargebacks or other liabilities could adversely affect our business, financial condition or results of operations.
Previous wording
Changes in technology may limit the competitiveness of and demand for our services. Our businesses operate in industries that are subject to technological advancements, developing industry standards and changing customer needs and preferences. Our business strategy may not effectively respond to these changes, and we may fail to recognize and position ourselves to capitalize upon market opportunities. Also, our customers continue to adopt new technology for business and personal uses. We must anticipate and respond to these industry and customer changes in order to remain competitive within our relative markets. Our inability to respond to new competitors and technological advancements could impact all of our businesses. For example, the inability to adopt technological advancements surrounding POS technology available to merchants could have a material and adverse impact on our merchant acquiring business.
Current wording
Changes in technology may limit the competitiveness of and demand for our services. Our businesses operate in industries that are subject to technological advancements, developing industry standards and changing customer needs and preferences. Our business strategy may not effectively respond to these changes, and we may fail to recognize and position ourselves to capitalize upon market opportunities. Also, our customers continue to adopt new technology for business and personal uses. We must anticipate and respond to these industry and customer changes in order to remain competitive within our relative markets. Doing so has historically required and will continue to require significant investment of resources in anticipating and adapting to such changes in technology. Our inability to respond to new competitors and technological advancements could impact all of our businesses. For example, the inability to adopt technological advancements surrounding POS technology otherwise generally available to merchants could have a material and adverse impact on our merchant acquiring business.
Previous wording
We use machine learning, artificial intelligence, and automated decision making technologies, including proprietary artificial intelligence and machine learning algorithms throughout our business, and are making significant investments to continuously improve our use of such technologies.
Current wording
We currently use machine learning, artificial intelligence (“AI”), and automated decision-making technologies, including proprietary AI and machine learning algorithms throughout our business, and are making significant investments to continuously improve our use of such technologies. Our research and development of such technology remains ongoing, and AI presents numerous risks and challenges that could adversely affect our business. If we fail to keep pace with rapidly evolving AI technological developments, especially in the financial technology sector, our competitive position and business results may suffer.
Previous wording
If the number of electronic and digital payment transactions of the type we process does not continue to grow, if there are other, more attractive emerging means of payments or if businesses or consumers discontinue adopting our services, it could have a material adverse effect on the profitability of our business, financial position, and results of operations. We believe future growth in the use of credit, debit and other electronic and digital payments will be driven by the cost, ease-to-use, and quality of products and services offered to customers and businesses. In order to consistently increase and maintain our profitability, businesses and consumers must continue to use electronic and digital payment methods that we process, including credit and debit cards. If consumers and businesses discontinue the use of credit, debit or prepaid cards as a payment mechanism for their transactions or if there is a change in the mix of payments between cash, alternative currencies and technologies, it could have a material adverse effect on our business, results of operations and financial condition.
Current wording
If the number of electronic and digital payment transactions of the type we process does not continue to grow, if there are other, more attractive emerging means of payments or if businesses or consumers discontinue adopting our services, it could have a material adverse effect on the profitability of our business, financial position, and results of operations. We believe future growth in the use of credit, debit and other electronic and digital payments will be driven by the cost, ease-to-use, availability, and quality of products and services offered to customers and businesses. So that we may consistently increase and maintain our profitability, businesses and consumers must continue to use electronic and digital payment methods that we process, including credit and debit cards. Consumer preference has accelerated the shift away from cash and paper payment methods, with increased demand for omni-channel payment services that facilitate cashless and contactless transactions. If consumers and businesses discontinue the use of credit, debit or prepaid cards as a payment mechanism for their transactions or if there is a change in the mix of payments between cash, alternative currencies and technologies, it could have a material adverse effect on our business, results of operations and financial condition.
Previous wording
Changes in credit card association or other network rules or standards could adversely affect our business.
Current wording
Changes in payment card network or other network rules or standards could adversely affect our business.
Previous wording
In order to provide our transaction-processing services, several of our subsidiaries are registered with or certified by Visa, Discover and MasterCard and other networks as members or as service providers for member institutions. As such, we and many of our customers are subject to card association and network rules that could subject us or our customers to a variety of fines or penalties that may be levied by the card associations or networks for certain acts or omissions by us, acquirer customers, processing customers and merchants. Visa, Discover, MasterCard and other networks, some of which are our competitors, set the standards with which we must comply. The termination of Banco Popular’s or our subsidiaries’ member registration or our subsidiaries’ status as a certified service provider, or any changes in card association or other network rules or standards, including interpretation and implementation of the rules or standards, that increase the cost of doing business or limit our ability to provide transaction-processing services to or through our customers, could have an adverse effect on our business, results of operations and financial condition.
Current wording
In order to provide our transaction-processing services, several of our subsidiaries are registered with or certified by Visa, Discover and MasterCard and other networks as members or as third-party providers for member institutions. As such, we and many of our customers are subject to payment card network rules that could subject us or our customers to a variety of fines or penalties that may be levied by the networks for certain acts or omissions by us, acquirer customers, processing customers and merchants. Visa, Discover, MasterCard and other networks, some of which are our competitors, set the standards with which we must comply. The termination of Banco Popular’s or our subsidiaries’ member registration or our subsidiaries’ status as a registered and certified third party service provider, or any changes in payment network rules or standards, including interpretation and implementation of the rules or standards, that increase the cost of doing business or limit our ability to provide transaction-processing services to or through our customers, could have an adverse effect on our business, results of operations and financial condition.
Previous wording
Additionally, we are subject to the PCI DSS, issued by the Payment Card Industry Security Standards Council. The PCI DSS contains compliance requirements regarding our security surrounding the physical and electronic storage, processing and transmission of cardholder data. If we or our service providers are unable to comply with the security standards required by PCI DSS, we may be subject to fines, restrictions, and expulsion from card acceptance programs, which would materially and adversely affect our business. Additionally, costs and potential problems and interruptions associated with the implementation of new or upgraded IT Systems such as those necessary to maintain compliance with the PCI DSS or with maintenance or adequate support of existing systems could also disrupt or reduce the efficiency of our operations. Any material interruptions or failures in our payment related systems could have a material adverse effect on our business, financial condition and results of operations.
Current wording
Additionally, we are subject to the Payment Card Industry’s Data Security Standards (“PCI DSS”), promulgated by the Payment Card Industry Security Standards Council. The PCI DSS contains compliance requirements regarding our security surrounding the physical and electronic storage, processing, and transmission of cardholder data. If we or our service providers are unable to comply with the security standards required by PCI DSS, we may be subject to fines, restrictions, and expulsion from card acceptance programs, which would materially and adversely affect our business. Additionally, costs and potential problems and interruptions associated with the implementation of new or upgraded IT Systems such as those necessary to maintain compliance with the PCI DSS or with maintenance or adequate support of existing systems could also disrupt or reduce the efficiency of our operations. Any material interruptions or failures in our payment related systems could have a material adverse effect on our business, financial condition and results of operations.
Previous wording
Changes in interchange fees charged by credit card associations and debit networks could increase our costs or otherwise materially adversely affect our business.
Current wording
Changes in interchange fees charged by payment card networks could increase our costs or otherwise materially adversely affect our business.
Previous wording
From time to time, card associations and debit networks change interchange, processing, and other fees, which could impact our merchant acquiring and payment services businesses. Competitive pressures could result in our merchant acquiring and payment services businesses absorbing a portion of such increases in the future, which would increase our operating costs, reduce our profit margin, and adversely affect our business, results of operations and financial condition.
Current wording
From time to time, payment card networks change interchange, processing, and other fees, which could impact our merchant acquiring and payment services businesses. Competitive pressures could result in our merchant acquiring and payment services businesses absorbing a portion of such increases in the future, which would increase our operating costs, reduce our profit margin, and adversely affect our business, results of operations and financial condition. There is currently proposed federal (and state) legislation that, if implemented, may impact credit card interchange and, as a result, impact our business.
Previous wording
Our business is subject to the laws, rules, regulations, and policies in the countries in which we operate, as well as the legal interpretation of such regulations by administrative bodies and the judiciary of those countries. The expansion of our business may also result in increased regulatory oversight and enforcement, as well as any claims by regulatory agencies and courts that we are required to obtain licenses to engage in certain business activity.
Current wording
Our business is subject to the laws, rules, regulations, and policies in the jurisdictions in which we operate, as well as the legal interpretation of such regulations by administrative bodies and the judiciary of those jurisdictions. The expansion of our business may also result in increased regulatory oversight and enforcement, as well as any claims by regulatory agencies and courts that we are required to obtain licenses to engage in certain business activity.
Previous wording
The recent emphasis on environmental, social and other sustainability matters has resulted and may continue to result in the adoption of new laws and regulations, including new reporting requirements. For example, various policymakers, including the SEC, have adopted (or are considering adopting) requirements for the disclosure of certain climate-related information or other environmental, social and governance ("ESG") disclosures. Compliance with environmental, social and other sustainability laws, regulations, expectations or reporting requirements may result in increased compliance costs, as well as additional scrutiny. It is possible that other types of environmental and social regulations, for example regulations regarding the use of energy or water or regulations regarding human capital management matters, may also result in increased costs. Moreover, if we fail to comply with new laws, regulations, expectations or reporting requirements, or if we are perceived as failing, our reputation and business could be adversely impacted. Any reputational damage associated with ESG factors may also adversely impact our ability to recruit and retain employees and customers.
Current wording
The recent emphasis on environmental, social and other sustainability matters has resulted and may continue to result in the adoption of new laws and regulations, including new reporting requirements. For example, various policymakers have adopted (or are considering adopting) requirements for the disclosure of certain climate-related information or other environmental, social and governance ("ESG") disclosures. Compliance with environmental, social and other sustainability laws, regulations, expectations or reporting requirements may result in increased compliance costs, as well as additional scrutiny. It is possible that other types of environmental and social regulations, for example regulations regarding the use of energy or water or regulations regarding human capital management matters, may also result in increased costs. Moreover, such requirements are not uniform across jurisdictions, and may be inconsistently applied or enforced in any given jurisdiction, which can increase the complexity and cost of compliance, and increase the risk of enforcement or litigation relating to our ESG disclosures and initiatives. If we fail to comply with new laws, regulations, expectations or reporting requirements, or if we are perceived as failing, our reputation and business could be adversely impacted. Any reputational damage associated with ESG factors may also adversely impact our ability to recruit and retain employees and customers.
Previous wording
Companies across industries are facing increasing scrutiny from a variety of stakeholders related to their ESG practices. For example, various groups produce ESG scores or ratings based at least in part on a company’s ESG disclosures, and certain market participants, including institutional investors and capital providers, use such ratings to assess companies’ ESG profiles. Unfavorable perceptions of our ESG performance could negatively impact our business, whether from a reputational perspective, through a reduction in interest in purchasing our stock or products, issues in attracting/retaining employees, customers and business partners, or otherwise. Simultaneously, there are efforts by some stakeholders to reduce companies’ efforts on certain ESG-related matters. Both advocates and opponents to certain ESG matters are increasingly resorting to a range of activism forms, including media campaigns and litigation, to advance their perspectives. To the extent we are subject to such activism, it may require us to incur costs or otherwise adversely impact our business.
Current wording
Companies across industries are facing increasing scrutiny from a variety of stakeholders and policymakers related to their ESG practices, such as climate change and human capital matters. For example, various groups produce ESG scores or ratings based at least in part on a company’s ESG disclosures, and certain market participants, including institutional investors and capital providers, use such ratings to assess companies’ ESG profiles. Unfavorable perceptions of our ESG performance could negatively impact our business, whether from a reputational perspective, through a reduction in interest in purchasing our stock or products, issues in attracting/retaining employees, customers and business partners, or otherwise. Simultaneously, there are efforts by some stakeholders to reduce companies’ efforts on certain ESG-related matters. Both advocates and opponents to certain ESG matters are increasingly resorting to a range of activism forms, including media campaigns and litigation, to advance their perspectives. To the extent we are subject to such activism, it may require us to incur costs or otherwise adversely impact our business.
Previous wording
While we have engaged in, and expect to continue to engage in, certain voluntary initiatives (such as voluntary disclosures, certifications, or goals) to improve the ESG profile of our company and/or products or respond to stakeholder concerns, such initiatives may be costly and may not have the desired effect. Expectations around companies’ management of ESG matters continue to evolve rapidly, in many instances due to factors that are out of our control. For example, our actions or statements that we may make based on expectations, assumptions, or third-party information that we currently believe to be reasonable may subsequently be determined to be erroneous or not in keeping with best practice. If we fail to, or are perceived to fail to, comply with or advance certain ESG initiatives (including the manner in which we complete such initiatives), we may be subject to various adverse impacts, including reputational damage and potential stakeholder engagement and/or litigation, even if such initiatives are currently voluntary. There are also increasing regulatory expectations for ESG matters. This and other stakeholder expectations will likely lead to increased costs as well as scrutiny that could heighten all of the risks identified in this risk factor. Additionally, many of our customers, business partners, and suppliers may be subject to similar expectations, which may augment or create additional risks, including risks that may not be known to us.
Current wording
While we have engaged in, and expect to continue to engage in, certain voluntary initiatives (such as voluntary disclosures, certifications, or goals) to improve the ESG profile of our company and/or products or respond to stakeholder concerns, such initiatives may be costly and may not have the desired effect. Expectations around companies’ management of ESG matters continue to evolve rapidly, in many instances due to factors that are out of our control. For example, our actions or statements that we may make based on expectations, assumptions, or third-party information that we currently believe to be reasonable may subsequently be determined to be erroneous or not in keeping with best practice. There are also increasing regulatory expectations for ESG matters. Stakeholder, including policymaker, expectations vary and, at times, conflict; any failure (or perceived failure) to appropriately address ESG matters or successfully navigate stakeholder expectations may result in various adverse impacts, including reputational damage and potential stakeholder engagement and/or litigation. This and other stakeholder expectations will likely lead to increased costs as well as scrutiny that could heighten all of the risks identified in this risk factor. Additionally, many of our customers, business partners, suppliers, and other stakeholders may be subject to similar expectations, which may augment or create additional risks, including risks that may not be known to us.
Previous wording
For the years ended December 31, 2023 and 2022, approximately 73% and 78%, respectively, of our total revenues were generated from our operations in Puerto Rico. Some revenues that are generated from our operations outside Puerto Rico are dependent upon our operations in Puerto Rico. As a result, our financial condition and results of operations are highly dependent on the economic and political conditions in Puerto Rico, and could be significantly impacted by adverse economic or political developments in Puerto Rico, including adverse effects on the trading price of our common stock, our customer base, general consumer spending and the timeliness of the government’s payments, thus increasing our government accounts receivable, and potentially impairing the collectability of those accounts receivable. As of December 31, 2023, we had net receivables of $11.1 million from the Government and certain public corporations.
Current wording
For the years ended December 31, 2024 and 2023, approximately 64% and 73%, respectively, of our total revenues were generated from our operations in Puerto Rico. Some revenues that are generated from our operations outside Puerto Rico are dependent upon our operations in Puerto Rico. As a result, our financial condition and results of operations are highly dependent on the economic and political conditions in Puerto Rico, and could be significantly impacted by adverse economic or political developments in Puerto Rico, including adverse effects on the trading price of our common stock, our customer base, general consumer spending and the timeliness of the government’s payments, thus increasing our government accounts receivable, and potentially impairing the collectability of those accounts receivable. As of December 31, 2024, we had net receivables of $10.7 million from the Government and certain public corporations.
Previous wording
Puerto Rico’s economy, including the ongoing financial crisis and the effects of potential natural disasters, including weather events connected to climate change, or future disease pandemics or other public health crisis, could have a prolonged negative impact on the countries and markets in which we operate and, as a result, could have a material adverse effect on our business and results of operations.
Current wording
Puerto Rico’s economy, including the ongoing financial crisis and the effects of potential natural disasters, including weather events connected to climate change, or future disease pandemics or other public health crises, could have a prolonged negative impact on the countries and markets in which we operate and, as a result, could have a material adverse effect on our business and results of operations.
Previous wording
Puerto Rico’s location in the Caribbean exposes the island to increased risk of hurricanes and other severe tropical weather conditions and natural disasters. Hurricanes and other natural disasters including earthquakes and wildfires, and their potential aftermaths, such as widespread power outages in Puerto Rico, damage to infrastructure and communications networks, and the temporary cessation and slow pace of reestablishment of regular day-to-day commerce, may severely impact the economies of Puerto Rico and the Caribbean more generally. These events have accelerated and could continue to accelerate the ongoing emigration trend of Puerto Rico residents to the United States. Prolonged delays in the repairs to the island’s infrastructures, decline in business volumes, insufficient federal recovery and rebuilding assistance and any other economic declines due to natural disasters and their aftermaths may impact the demand for our services and could have a material adverse effect on our business and results of operations. Additionally, future disease pandemics or any other public health crisis may materially adversely affect our business, results of operations and financial condition, similar to or beyond those disruptions and operational consequences that we experienced in connection with the COVID-19 pandemic. Prolonged economic uncertainties relating to the residual impacts of COVID-19 could limit our ability to grow our business and negatively affect our operating results. Moreover, the global electronic payments industry and the banking and financial services industries depend heavily upon the overall levels of consumer, business and government spending. Adverse economic conditions, such as those caused by the COVID-19 pandemic, could result in a decrease in consumers' use of banking services and financial service providers resulting in significant decreases in the demand for our products and services which could adversely affect our business and operating results.
Current wording
Puerto Rico’s location in the Caribbean exposes the island to increased risk of hurricanes and other severe tropical weather conditions and natural disasters. Hurricanes and other natural disasters including earthquakes and wildfires, and their potential aftermaths, such as widespread power outages in Puerto Rico, damage to infrastructure and communications networks, and the temporary cessation and slow pace of reestablishment of regular day-to-day commerce, may severely impact the economies of Puerto Rico and the Caribbean more generally. These events have accelerated and could continue to accelerate the ongoing emigration trend of Puerto Rico residents to the United States. Prolonged delays in the repairs to the island’s infrastructures, decline in business volumes, insufficient federal recovery and rebuilding assistance and any other economic declines due to natural disasters and their aftermaths may impact the demand for our services and could have a material adverse effect on our business and results of operations. Additionally, future pandemics or any other public health crises may materially adversely affect our business, results of operations and financial condition, similar to or beyond those disruptions and operational consequences that we experienced in connection with the COVID-19 pandemic. Prolonged economic uncertainties could limit our ability to grow our business and negatively affect our operating results. Moreover, the global electronic payments industry and the banking and financial services industries depend heavily upon the overall levels of consumer, business and government spending. Adverse economic conditions could result in a decrease in consumers' use of banking services and financial service providers resulting in significant decreases in the demand for our products and services which could adversely affect our business and operating results.
Previous wording
There are increasing and rapidly evolving concerns over the risks of climate change and related environmental sustainability matters. Our operations, business, customers and partners could be adversely affected by climate change. The physical risks of climate change include rising average global temperatures, rising sea levels and an increase in the frequency and severity of extreme weather events and natural disasters. Such events and disasters could disrupt our operations or the operations of customers or third parties on which we rely and could result in market volatility. Additionally, we may face risks related to the transition to a low-carbon economy. We could experience increased expenses resulting from strategic planning, litigation and changes to our technology, operations, products and services, access to energy and water, as well as reputational harm as a result of negative public sentiment, regulatory scrutiny and reduced stakeholder confidence, due to our response to climate change or real or perceived vulnerability to climate change-related risks. Changes in consumer preferences, travel patterns and legal requirements could increase expenses or otherwise adversely impact our business, customers and partners.
Current wording
There are increasing and rapidly evolving concerns over the risks of climate change and related environmental sustainability matters. Our operations, business, customers and partners could be adversely affected by climate change or other environmental or social pressures. The physical risks of climate change include rising average global temperatures, changing weather and hydrological patterns, rising sea levels and an increase in the frequency and severity of extreme weather events and natural disasters. Such events and disasters could disrupt our operations or the operations of customers or third parties on which we rely and could result in market volatility. Additionally, we may face risks related to the transition to a low-carbon economy. We have historically and could continue to experience increased expenses resulting from strategic planning, litigation and changes to our technology, operations, products and services, access to energy and water, as well as reputational harm as a result of negative public sentiment, regulatory scrutiny and reduced stakeholder confidence, due to our response to climate change or real or perceived vulnerability to climate change-related risks. Changes in consumer preferences, travel patterns and legal requirements could increase expenses or otherwise adversely impact our business, customers and partners.
Previous wording
Our financial performance and results of operations may be adversely affected by general economic, political, and social conditions and uncertainty in the international markets in which we operate. Many countries in Latin America have suffered significant political, social and economic crises in the past, including as a result of the COVID-19 pandemic and the related restrictions imposed to mitigate its impact, as well as the resulting macroeconomic slowdown, and these events may occur again in the future. Instability in Latin America has been caused by many different factors, including (i) exposure to foreign exchange variation, (ii) significant governmental influence over local economies; (iii) substantial fluctuations in economic growth; (iv) instability in the banking sector and high inflation levels or domestic interest rates; (v) wage, price or exchange controls, or restrictions on expatriation of earnings; (vi) changes in governmental economic or tax policies or unexpected changes in regulation which may restrict the movement of funds or results in the deprivation of contract or property rights; (vii) imposition of trade barriers; (viii) terrorist attacks and other acts of violence or war; (ix) high unemployment; and (x) overall political, social, and economic disruptions. Any of these events in the markets in which we operate could result in a material adverse impact on our customers and our business.
Current wording
Our financial performance and results of operations may be adversely affected by general economic, political, and social conditions and uncertainty in the international markets in which we operate. Many countries in Latin America have suffered significant political, social and economic crises in the past and these events may occur again in the future. Instability in Latin America has been caused by many different factors, including (i) exposure to foreign exchange variation, (ii) significant governmental influence over local economies; (iii) substantial fluctuations in economic growth; (iv) instability in the banking sector and high inflation levels or domestic interest rates; (v) wage, price or exchange controls, or restrictions on expatriation of earnings; (vi) changes in governmental economic or tax policies or unexpected changes in regulation which may restrict the movement of funds or results in the deprivation of contract or property rights; (vii) imposition of trade barriers; (viii) terrorist attacks and other acts of violence or war; (ix) high unemployment; and (x) overall political, social, and economic disruptions. Any of these events in the markets in which we operate could result in a material adverse impact on our customers and our business. Further, changes in laws or policies governing the terms of foreign trade, and in particular increased trade restrictions, tariffs or taxes on imports or exports from or to countries where the Company operates, may affect the Company’s business.
Previous wording
Third parties may in the future assert claims of infringement, misappropriation or other violations of intellectual property rights against us. They may also assert such claims against our customers or reseller partners, whom we typically indemnify against claims that our products and services infringe, misappropriate, or otherwise violate the intellectual property rights of third parties. If we do infringe a third party’s rights and are unable to provide a sufficient workaround, we may need to negotiate with holders of those rights to obtain a license to those rights or otherwise settle any infringement claim as a party that makes a claim of infringement against us may obtain an injunction preventing us from shipping products containing the allegedly infringing technology. As the number of products and competitors in our market increase and overlaps occur, claims of infringement, misappropriation and other violations of intellectual property rights may increase. Any claim of infringement, misappropriation or other violation of intellectual property rights by a third party, even those without merit, could cause us to incur substantial costs defending against the claim and could distract our management from our business.
Current wording
Third parties have and may in the future assert claims of infringement, misappropriation or other violations of intellectual property rights against us. They may also assert such claims against our customers or reseller partners, whom we typically indemnify against claims that our products and services infringe, misappropriate, or otherwise violate the intellectual property rights of third parties. If we were found to be infringing a third party’s rights and are unable to provide a sufficient workaround, we may need to negotiate with holders of those rights to obtain a license to those rights or otherwise settle any infringement claim as a party that makes a claim of infringement against us may obtain an injunction preventing us from shipping products containing the allegedly infringing technology. As the number of products and competitors in our market increase and overlaps occur, claims of infringement, misappropriation and other violations of intellectual property rights may increase. Any claim of infringement, misappropriation or other violation of intellectual property rights by a third party, even those without merit, could cause us to incur substantial costs defending against the claim and could distract our management from our business.
Previous wording
We incorporate technology and components from third parties into our products, and our inability to obtain or maintain rights to the technology could harm our business.
Current wording
We incorporate technology and components from third parties into our products, and our inability to obtain or maintain rights to such technology could harm our business.
Previous wording
We have used “open source” software in connection with the development and deployment of some of our software products, and we expect to continue to use open source software in the future.
Current wording
We have used “open source” software (“OSS”) in connection with the development and deployment of some of our software products, and we expect to continue to use OSS in the future. Certain OSS licenses may give rise to requirements to disclose or license our proprietary source code or make available any derivative works or modifications of the OSS on unfavorable terms or at no cost, and we may be subject to such terms if we combine, link or otherwise integrate our proprietary software with OSS in certain ways. The terms of many OSS licenses to which we are subject have not been interpreted by U.S. or foreign courts, and there is a risk that OSS licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to provide or distribute our products or services.
Showing the first 40 of 50 pairs. Open the source sections for the rest.
Rearranged previous paragraphs (2)
Previous report — wording carried elsewhere
Our operations, business, customers and partners could be adversely affected by climate change.
Previous report — wording carried elsewhere
We and our subsidiaries may be able to incur substantial additional indebtedness in the future, some of which may be secured. In addition to the $194.0 million which was available for borrowing under our revolving credit facility as of December 31,