依賴於促進或支持我們的業務活動，包括供應商、支付處理商以及根據我們與他們的協議可以訪問機密信息的其他方。此外，我們行業中的任何安全危害，無論是實際或感知的，或者信息技術系統中斷，無論是來自對我們技術環境的攻擊，還是來自計算機惡意軟件、自然災害、恐怖主義、戰爭和
電信和電氣故障，都可能中斷我們的業務或運營，損害我們的聲譽，侵蝕借款人信心，對我們吸引新借款人的能力產生負面影響，或者使我們面臨第三方訴訟、監管罰款或
其他行動或責任，這可能會對我們的業務和運營結果產生不利影響。
與其他金融服務
公司一樣，我們一直是並將繼續成為實際或企圖未經授權訪問、錯誤處理或濫用信息、計算機病毒或惡意軟件以及可能獲取機密信息、破壞數據、中斷或
降低服務、破壞系統或造成其他損害的網絡攻擊、分佈式拒絕服務攻擊、數據泄露和其他滲透的對象，滲透或其他類似事件。
While we regularly monitor data flow inside and outside the company, attackers have become very sophisticated in the way they conceal
access to systems, and we may not be aware that we have been attacked. Any event that leads to unauthorized access, use or disclosure of personal information or other sensitive information that we or our vendors maintain, including our own
proprietary business information and sensitive information such as personal information regarding borrowers, loan applicants or employees, could disrupt our business, harm our reputation, compel us to comply with applicable federal and/or state
breach notification laws and foreign law equivalents, subject us to time consuming, distracting and expensive litigation, regulatory investigation and oversight, mandatory corrective action, require us to verify the correctness of database contents,
or otherwise subject us to liability under laws, regulations and contractual obligations, including those that protect the privacy and security of personal information. This could result in increased costs to us and result in significant legal and
financial exposure and/or reputational harm. In addition, any failure or perceived failure by us or our vendors to comply with our privacy, confidentiality or data security-related legal or other obligations to third parties, actual or perceived
security breaches, or any security incidents or other events that result in the unauthorized access, release or transfer of sensitive information, which could include personally identifiable information, may result in governmental investigations,
enforcement actions, regulatory fines, litigation, or public statements against us by advocacy groups or others, and could cause third parties to lose trust in us or we could be subject to claims by third parties that we have breached our privacy-
or confidentiality-related obligations, which could harm our business and prospects. Moreover, data security incidents and other inappropriate access can be difficult to detect, and any delay in identifying them may lead to increased harm of the
type described above. There can be no assurance that our security measures intended to protect our information technology systems and infrastructure will successfully prevent service interruptions or security incidents. For example, in April 2020,
we were made aware of a software error which allowed access to certain consumers accounts through the Upstart website without providing such consumers passwords. As a result, certain of such consumers personal information, such as
their name, address and job information (but not full social security information), could be accessed by a third party. We promptly deployed an update to our software to address such vulnerability and are conducting an internal investigation. Thus
far, we are not aware of any information being compromised as a result of this error. We cannot provide any assurance that similar vulnerabilities will not arise in the future as we continue to expand the features and functionalities of our platform
and introduce new loan products on our platform, and we expect to continue investing substantially to protect against security vulnerabilities and incidents.
我們保留錯誤、遺漏和網絡責任保險政策，涵蓋某些安全和隱私損害。但是，我們無法
確定我們的承保範圍將繼續以經濟上合理的條款提供，或將提供足夠的金額來承保一項或多項大額索賠，或保險公司不會拒絕承保任何未來索賠，或任何
保險公司將
38
