StubHub Holdings, Inc.

Management’s Evaluation of Disclosure Control and Procedures

The Company’s management is responsible for maintaining disclosure controls and procedures that are designed to ensure that information required to be disclosed in our reports that we file or submit under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and that such information is accumulated and communicated to our management, including our principal executive officer and principal financial officer, to allow timely decisions regarding required disclosure. Because of the inherent limitations, disclosure controls and procedures, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the objectives of disclosure controls and procedures are met.

Under the supervision and with the participation of our management, including our principal executive officer and principal financial officer, we evaluated the effectiveness of the design and operation of our disclosure controls and procedures (as such term is defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) as of the end of the period covered by this Quarterly Report. Based on this evaluation, our principal executive officer and principal financial officer have concluded that our disclosure controls and procedures were not effective as of September 30, 2025, due to material weaknesses in our internal control over financial reporting that we previously identified in the “Risk Factors” section of our Prospectus, filed with the SEC on September 17, 2025 pursuant to Rule 424(b) under the Securities Act of 1933, as amended (the "Securities Act"), and which had not been fully remediated as of September 30, 2025.

Notwithstanding the identified material weaknesses in internal control over financial reporting, our management performed additional analysis as deemed necessary to ensure that our condensed consolidated financial statements included in this Quarterly Report fairly present, in all material respects, our financial condition, results of operations and cash flows for the periods presented in accordance with GAAP.

Previously Reported Material Weaknesses

A material weakness is a deficiency, or combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the Company’s annual or interim financial statements will not be prevented or detected on a timely basis.

As disclosed in "Risk Factors—We have identified material weaknesses in our internal control over financial reporting. If we fail to remedy these material weaknesses, experience additional material weaknesses in the future or otherwise fail to continue to design, implement and maintain effective internal control over financial reporting, we may not be able to accurately report our financial condition or results of operations which may adversely affect investor confidence in us and, as a result, negatively impact the value of our Class A common stock.", we have identified material weaknesses in our internal control over financial reporting. In particular:

As of December 31, 2024, the following material weaknesses existed:

•we did not design or maintain an effective control environment commensurate with our financial reporting requirements; specifically, we did not maintain a sufficient complement of personnel with an appropriate degree of accounting knowledge, experience and training to appropriately analyze, record and disclose accounting and reporting requirements; and

•we did not effectively design and maintain effective controls in response to the risks of material misstatement; specifically, changes to existing controls or the implementation of new controls have not been sufficient to respond to changes to the risks of material misstatement to financial reporting.

These material weaknesses contributed to the following additional material weaknesses:

•we did not design and maintain formal accounting policies, procedures and controls over significant accounts and disclosures to achieve complete, accurate and timely financial accounting, reporting and disclosures, including segregation of duties and adequate controls related to the preparation and review of journal entries and account reconciliations; and

•we did not design and maintain controls over the accounting for revenue and associated reserves, income taxes, indirect taxes and the preparation of the financial statements including the statement of cash flows and related disclosures.

The material weaknesses described above resulted in the restatement of our consolidated financial statements as of and for the years ended December 31, 2022 and 2021 and audit adjustments to revenue and associated reserves, indirect tax contingencies, income taxes and classification of financial statement accounts in our consolidated financial statements as of and for the years ended December 31, 2024, 2023 and 2022. Additionally, these material weaknesses could result in a misstatement of substantially all of our accounts or disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected.

In addition to the above, we did not design and maintain effective controls over IT general controls for information systems that are relevant to the preparation of the consolidated financial statements. Specifically, we did not design and maintain: (i) program change management controls for financial systems to ensure that IT program and data changes affecting financial IT applications and underlying accounting records are identified, tested, authorized and implemented appropriately, (ii) user access controls to ensure appropriate segregation of duties and that adequately restrict user and privileged access to financial applications, programs, and data to appropriate personnel, (iii) computer operations controls to ensure that critical batch jobs are monitored and data backups are authorized and monitored and (iv) testing and approval controls for program development to ensure that new software development is aligned with business and IT requirements. These IT deficiencies did not result in any misstatements to the consolidated financial statements; however, the deficiencies, when aggregated, could impact our ability to maintain effective segregation of duties, as well as the effectiveness of IT-dependent controls (such as automated controls that address the risk of material misstatement to one or more assertions, along with the IT controls and underlying data that support the effectiveness of system-generated data and reports) that could result in misstatements potentially impacting all financial statement accounts and disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected on a timely basis. Accordingly, we have determined these deficiencies in the aggregate constitute a material weakness.

Management’s Remediation Plan

We are in the process of implementing a plan to remediate the material weaknesses described above. Our remediation plan includes the hiring of additional accounting and financial reporting personnel and implementing additional policies, procedures and controls, all of which have and will continue to cause us to incur additional costs. We have performed a risk assessment and begun identifying control activities to be implemented in response to the identified risks, which will include improving our IT general controls, segregation of duties controls, period-end financial reporting controls, journal entry controls and additional procedures and controls within the areas of revenue and associated reserves, income taxes, indirect taxes and the preparation for the financial statements including the statement of cash flows and related disclosures. In addition, we have engaged a third-party provider to help us assess and improve our internal control over financial reporting in preparation for compliance with Section 404. When we are satisfied the internal control over financial reporting associated with the material weaknesses has been effectively designed and has operated within our company for a sufficient period of time, we will determine if we have remediated our material weaknesses. We have not been required to provide a management assessment of internal control over financial reporting under the rules and regulations of the SEC regarding compliance with Section 404(a) of the Sarbanes-Oxley Act (“Section 404(a)”). It is possible that if we had a Section 404(a) assessment, additional material weaknesses may have been identified. Additionally, our registered independent public accounting firm has not been engaged to perform an audit of our internal control over financial reporting.

Changes in Internal Control over Financial Reporting

Other than as noted in "—Management's Remediation Plan" above, there were no changes in our internal control over financial reporting that occurred during the three months ended September 30, 2025, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

PART II - OTHER INFORMATION