Fiscal period ending 2025-12-31 versus 2024-12-31
— view filing on EDGAR →
A major acquisition has driven debt 16% higher to $13.1B, materially worsening leverage and refinancing risk against a backdrop of elevated interest rates that have already constrained operational flexibility. Cybersecurity risk has escalated sharply across multiple vectors — geopolitical BRICS-nation targeting, AI-enabled attacks, and supply chain compromise — while new workforce reduction disclosures add execution risk to an already strained capital structure. The Worldpay sale removes one legacy integration overhang, but this is more than offset by the breadth and severity of worsening across debt, cyber, regulatory, and operational themes.
6 company-specific
· 1 eased/removed
· 4 common-mode
Company-specific changes
Revised
Debt increased 16% ($11.3B to $13.1B). Major acquisition added $7.7B debt, substantially increasing leverage and refinancing risk. Material deterioration in capital structure.
Risks Related to Our Indebtedness Our existing debt levels and future levels under existing facilities and debt service requirements may adversely affect us, including our financial condition or…
Revised
New disclosure of workforce reduction and cost-control initiatives creating operational capacity constraints and execution risk on organizational transformation.
Failure to attract and retain talent, including senior management and highly skilled technology personnel, could harm our ability to grow. Our future success depends upon our ability to attract and…
Revised
Risk escalated from hypothetical to current reality: interest rates "have increased significantly" and "may remain elevated." New operational impacts disclosed: rebalancing debt instruments, reduced flexibility, potential credit market access challenges.
Rising interest rates could increase our borrowing costs. Our exposure to market risk for changes in interest rates relates to our short-term commercial paper borrowings and revolving credit…
Revised
New disclosure of material dependence on financial institutions for treasury services; loss of such services could materially harm operations and funds settlement.
Our business, financial condition or results of operations could be adversely affected by business interruptions, errors or failures in connection with our or third-party information technology and…
Revised
Language shifted from hypothetical "could result" to "has resulted, and could in the future result," indicating actual past losses occurred. Removal of treasury services dependency language also narrows but does not offset the materialization of the risk.
Lack of system integrity, fraudulent payments, credit quality, and undetected errors related to funds settlement or the availability of clearing services could result in a financial loss. We settle…
Revised
Added specific recent transactions (Issuer Solutions, Worldpay Minority Sale) and new risks: regulatory/legal non-compliance in acquisitions, revenue growth challenges, and customer/supplier relationship disruption.
Risks Related to Business Combinations and Ventures Strategic transactions, including acquisitions and divestitures, involve significant risks and uncertainties that could adversely affect our…
Eased / removed
Removed
Removal of material post-acquisition risk disclosure. Worldpay sale completed; transition risks and integration uncertainties no longer apply or have been resolved.
Risks Related to Business Combinations and Ventures We may not achieve the anticipated benefits of our recently completed Worldpay Sale, and we may also be exposed to new risks following the sale. We…
Also disclosed — common-mode (AI cybersecurity escalation ×3, AI regulatory compliance)
AI cybersecurity escalation
Revised
New disclosure of geopolitical cyber threat from BRICS nations targeting Western payment infrastructure escalates cybersecurity risk beyond generic digital banking breaches.
High profile digital banking security breaches or information system failures could impact consumer payment behavior patterns in the future and reduce our transaction volumes. We are unable to…
AI cybersecurity escalation
Revised
New disclosure of AI-related IP risk: use of AI technologies may release confidential/proprietary information, creating a substantive new threat to IP protection.
Misappropriation of and infringement on our intellectual property and proprietary rights, or a finding that our patents are invalid, could impair our competitive position. Our ability to compete…
AI cybersecurity escalation
Revised
Added specific emerging threats: AI-enabled attacks, supply chain targeting, business email compromise, and employee AI tool misuse. Expanded systemic criticality disclosure. Escalated risk profile.
Risks Related to Our Business and Operations Security breaches, privacy breaches, cyberattacks, unintentional disclosures of confidential information, breaches of third party service providers…
AI regulatory compliance
Revised
Added specific enforcement consequences: regulatory investigations, reputational damage, enforcement notices, assessment notices, civil claims including class actions. Also added multi-regime fine exposure and NIS2 reference, escalating regulatory risk.
Constantly evolving global privacy, data protection, cybersecurity, cyber resilience, and AI laws and regulations require the Company to adopt new business practices, update contractual provisions in…