Biggest changeThis could further the risks associated with our substantial indebtedness. • We may not be able to generate sufficient cash to service all of our indebtedness, and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful. • Our inability to generate sufficient cash flow to satisfy our debt obligations, or to refinance our indebtedness on commercially reasonable terms or at all, would materially and adversely affect our financial position and results of operations and our ability to satisfy our obligations. • The expected LIBOR phase-out may have unpredictable impacts on contractual mechanics in the credit markets or the broader financial markets, which could have an adverse effect on our results of operations. • Our stock price has recently been volatile and has declined, and may continue to be volatile and/or decline, regardless of our operating performance. • Our business and operations are exposed to risks arising from developments and trends associated with climate change and ESG, including risks associated with our own reporting. • Anti-takeover provisions in our organizational documents might discourage, delay or prevent acquisition attempts for us that you might consider favorable. • Our ability to pay cash dividends may be limited by the terms of our secured credit facility. • Economic and other conditions may adversely impact the valuation of our assets resulting in impairment charges that could have a material adverse impact on our results from operations. • We may not be able to attract and retain the skilled employees that we need to support our business. • We are subject to losses from risks for which we do not insure. • If we fail to implement and maintain proper and effective internal controls over financial reporting, our ability to produce accurate financial statements on a timely basis could be impaired, which could cause investors to lose confidence in our reported financial information and have a negative effect on our stock price. • The continuing impact of “Brexit” may have a negative effect on our business. • If we experience changes in tax laws or adverse outcomes resulting from examination of our tax returns, it could adversely affect our results of operations.
Biggest changeThis could further the risks associated with our substantial indebtedness. • We may not be able to generate sufficient cash to service all of our indebtedness, and may be forced to take other actions to satisfy our obligations under our indebtedness, which may not be successful. • Our inability to generate sufficient cash flow to satisfy our debt obligations, or to refinance our indebtedness on commercially reasonable terms or at all, would materially and adversely affect our financial position and results of operations and our ability to satisfy our obligations. • Our stock price has recently been volatile and has declined, and may continue to be volatile and/or decline, regardless of our operating performance, and you may not be able to resell shares of our common stock at or above the price you paid or at all. • Our business and operations are exposed to risks arising from developments and trends associated with climate change and ESG, including risks associated with our own reporting. • Anti-takeover provisions in our organizational documents might discourage, delay or prevent acquisition attempts for us that you might consider favorable. • Our ability to pay cash dividends may be limited by the terms of our secured credit facility. • Economic and other conditions may adversely impact the valuation of our assets resulting in impairment charges that could have a material adverse impact on our results from operations. • Our efforts to execute any element of our business strategy, including our transformation plan to optimize our operating model and invest in our technology, could experience difficulties, delays, or unexpected costs and may not achieve anticipated benefits and savings. • Management has determined that our internal control over financial reporting and disclosure controls and procedures were not effective as of December 31, 2023.
In addition to the risks described in this section, several factors that could cause the price of our common stock to fluctuate significantly include, among others, the following, most of which we cannot control: • quarterly variations in our operating results compared to market expectations; • guidance that we provide to the public, any changes in this guidance or our failure to meet this guidance; • changes in preferences of our customers; • announcements of new products or significant price reductions by us or our competitors; • size of our public float; 33 • stock price performance of our competitors; • publication of research reports about our industry; • changes in market valuations of our competitors; • fluctuations in stock market prices and volumes; • default on our indebtedness; • actions by our competitors; • changes in senior management or key personnel; • changes in financial estimates by securities analysts; • negative earnings or other announcements by us or other credit reporting agencies; • downgrades in our credit ratings or the credit ratings of our competitors; • issuances of capital stock or future sales of our common stock or other securities; • investor perceptions or the investment opportunity associated with our common stock relative to other investment alternatives; • the public response to press releases or other public announcements by us or third parties, including our filings with the SEC; • announcements relating to litigation; • the sustainability of an active trading market for our stock; • changes in accounting principles; • global economic, legal and regulatory factors unrelated to our performance; and • other events or factors, including those resulting from natural disasters, war, acts of terrorism or responses to these events.
In addition to the risks described in this section, several factors that could cause the price of our common stock to fluctuate significantly include, among others, the following, most of which we cannot control: • quarterly variations in our operating results compared to market expectations; • guidance that we provide to the public, any changes in this guidance or our failure to meet this guidance; • changes in preferences of our customers; • announcements of new products or significant price reductions by us or our competitors; • size of our public float; • stock price performance of our competitors; • publication of research reports about our industry; • changes in market valuations of our competitors; • fluctuations in stock market prices and volumes; • default on our indebtedness; • actions by our competitors; • changes in senior management or key personnel; • changes in financial estimates by securities analysts; • negative earnings or other announcements by us or other credit reporting agencies; • downgrades in our credit ratings or the credit ratings of our competitors; • issuances of capital stock or future sales of our common stock or other securities; • investor perceptions or the investment opportunity associated with our common stock relative to other investment alternatives; • the public response to press releases or other public announcements by us or third parties, including our filings with the SEC; • announcements relating to litigation; • the sustainability of an active trading market for our stock; • changes in accounting principles; • global economic, legal and regulatory factors unrelated to our performance; and • other events or factors, including those resulting from natural disasters, war, acts of terrorism or responses to these events.
The following legal and regulatory developments also could have a material adverse effect on our business, financial condition or results of operations: • amendment, enactment or interpretation of laws and regulations that restrict the access and use of personal information and reduce the availability or effectiveness of our solutions or the supply of data available to customers; • changes in governmental, cultural and consumer attitudes in favor of further restrictions on information collection and sharing, which may lead to regulations that prevent full utilization of our solutions; 26 • failure of data suppliers or customers to comply with laws or regulations, where mutual compliance is required; • failure of our solutions to comply with current laws and regulations; and • failure of our solutions to adapt to changes in the regulatory environment in an efficient, cost-effective manner.
The following legal and regulatory developments also could have a material adverse effect on our business, financial condition or results of operations: • amendment, enactment or interpretation of laws and regulations that restrict the access and use of personal information and reduce the availability or effectiveness of our solutions or the supply of data available to customers; • changes in governmental, cultural and consumer attitudes in favor of further restrictions on information collection and sharing, which may lead to regulations that prevent full utilization of our solutions; • failure of data suppliers or customers to comply with laws or regulations, where mutual compliance is required; • failure of our solutions to comply with current laws and regulations; and • failure of our solutions to adapt to changes in the regulatory environment in an efficient, cost-effective manner.
These provisions provide for, among other things: • the ability of our board of directors to issue one or more series of preferred stock; • advance notice for nominations of directors by stockholders and for stockholders to include matters to be considered at our annual meetings; and • certain limitations on convening special stockholder meetings The anti-takeover provisions discussed above could make it more difficult for a third party to acquire us, even if the third party’s offer may be considered beneficial by many of our stockholders.
These provisions provide for, among other things: • the ability of our Board to issue one or more series of preferred stock; • advance notice for nominations of directors by stockholders and for stockholders to include matters to be considered at our annual meetings; and • certain limitations on convening special stockholder meetings. 35 The anti-takeover provisions discussed above could make it more difficult for a third party to acquire us, even if the third party’s offer may be considered beneficial by many of our stockholders.
While we do not believe that the outcome of any pending or threatened legal proceeding, investigation, examination or 28 supervisory activity will have a material adverse effect on our financial position, such events are inherently uncertain and adverse outcomes could result in significant monetary damages, penalties or injunctive relief against us.
While we do not believe that the outcome of any pending or threatened legal proceeding, investigation, examination or supervisory activity will have a material adverse effect on our financial position, such events are inherently uncertain and adverse outcomes could result in significant monetary damages, penalties or injunctive relief against us.
(collectively, the “TU Entities”) and the former President of our Consumer Interactive business, John Danaher, seeking restitution, civil money penalties, and injunctive relief, among other remedies, and alleging that the TU Entities violated the Consent Order and engaged in deceptive acts and practices in marketing the TransUnion Credit Monitoring product, among other allegations. The CFPB further alleges that Mr.
(collectively, the “TU Entities”) and the former President of our Consumer Interactive business, John Danaher, seeking restitution, civil money penalties, and injunctive relief, among other remedies, and alleging that the TU Entities violated the 2017 Consent Order and engaged in deceptive acts and practices in marketing the TransUnion Credit Monitoring product, among other allegations. The CFPB further alleges that Mr.
If we fail to retain our employees, we could incur significant expense replacing employees and our ability to provide quality services could diminish, resulting in a material adverse effect on our business. We are subject to losses from risks for which we do not insure. For certain risks, we do not maintain insurance coverage because of cost and/or availability.
If we fail to retain our employees, we could incur significant expense replacing employees and our ability to provide quality services could diminish, resulting in a material adverse effect on our business. 37 We are subject to losses from risks for which we do not insure. For certain risks, we do not maintain insurance coverage because of cost and/or availability.
The discontinuation of LIBOR and the transition from LIBOR to SOFR or other benchmark rates could have an unpredictable impact on contractual mechanics in the credit markets or result in disruption to the broader financial markets, including causing interest rates under our current or future agreements to perform differently than in the past, which could have an adverse effect on our results of operations.
The discontinuation of LIBOR and the transition to SOFR or other benchmark rates could have an unpredictable impact on contractual mechanics in the credit markets or result in disruption to the broader financial markets, including causing interest rates under our current or future agreements to perform differently than in the past, which could have an adverse effect on our results of operations.
Even if we devote substantial management attention and resources to integrating acquired businesses in order to fully realize the anticipated benefits of such acquisitions, the businesses and assets acquired may not be successful or continue to grow at the same rate as when operated independently or may require greater resources and 30 investments than we originally anticipated.
Even if we devote substantial management attention and resources to integrating acquired businesses in order to fully realize the anticipated benefits of such acquisitions, the businesses and assets acquired may not be successful or continue to grow at the same rate as when operated independently or may require greater resources and investments than we originally anticipated.
The credit agreement governing Trans Union LLC’s senior secured credit facility restricts our ability to dispose of assets and use the proceeds from those dispositions and may also restrict our 32 ability to raise debt or equity capital to be used to repay other indebtedness when it becomes due.
The credit agreement governing Trans Union LLC’s senior secured credit facility restricts our ability to dispose of assets and use the proceeds from those dispositions and may also restrict our ability to raise debt or equity capital to be used to repay other indebtedness when it becomes due.
Nevertheless, because SOFR is a backward-looking fully secured overnight rate and LIBOR is a forward-looking unsecured rate, SOFR is likely to be lower than LIBOR on most dates, and any spread adjustment applied by market participants to alleviate any mismatch during a transition period will be subject to methodology that remains undefined.
Because SOFR is a backward-looking, fully secured overnight rate and LIBOR is a forward-looking, unsecured rate, SOFR is likely to be lower than LIBOR on most dates, and any spread adjustment applied by market participants to alleviate any mismatch during a transition period will be subject to methodology that remains undefined.
When these industries or the broader financial markets experience a downturn, demand for our services and revenues may be adversely affected. • We are subject to significant competition in the markets in which we operate and we may face significant competition in the new markets that we plan to enter. • To the extent the availability of free or relatively inexpensive consumer information increases, the demand for some of our services may decrease. • Our relationships with key long-term customers may be materially diminished or terminated. • If we are unable to develop successful new services in a timely manner, or if the market does not adopt our new services, our ability to maintain or increase our revenue could be adversely affected. • If our outside service providers and key vendors are not able to or do not fulfill their service obligations, our operations could be disrupted and our operating results could be harmed. • There may be further consolidation in our end-customer markets, which may adversely affect our revenues. • Data security and integrity are critically important to our business, and cybersecurity incidents, including cyberattacks, breaches of security, unauthorized access to or disclosure of our intellectual property or confidential information, business disruption, or the perception that confidential information is not secure, could result in a material loss of business, regulatory enforcement, substantial legal liability and/or significant harm to our reputation. • We may be unable to adequately anticipate, prevent or mitigate damage resulting from increasingly sophisticated methods of illegal or fraudulent activities committed against us, which could harm our business, financial condition and results of operations and could significantly harm our reputation. • If we experience system failures, personnel disruptions or capacity constraints, or our customers do not modify their systems to accept new releases of our distribution programs, the delivery of our services to our customers could be delayed or interrupted, which could harm our business and reputation and result in the loss of revenues or customers. • We could lose our access to data sources which could prevent us from providing our services. • If we fail to maintain and improve our systems, our data matching technology, and our interfaces with data sources and customers, demand for our services could be adversely affected. • Our business is subject to various governmental regulations, laws and orders, compliance with which may cause us to incur significant expenses or reduce the availability or effectiveness of our solutions, and the failure to comply with which could subject us to civil or criminal penalties or other liabilities. • The Consumer Financial Protection Bureau (“CFPB”) has supervisory and examination authority over our business and has in the past, and may in the future, initiate enforcement actions with regard to our compliance with federal consumer financial laws.
When these industries or the broader financial markets experience a downturn, demand for our services and revenues may be adversely affected. • We are subject to significant competition in the markets in which we operate and we may face significant competition in the new markets that we plan to enter. • To the extent the availability of free or relatively inexpensive consumer information increases, the demand for some of our services may decrease. • Our relationships with key long-term customers may be materially diminished or terminated. • If we are unable to develop successful new services in a timely manner, or if the market does not adopt our new services, our ability to maintain or increase our revenue could be adversely affected. • If our outside service providers and key vendors are not able to or do not fulfill their service obligations, our operations could be disrupted and our operating results could be harmed. • There may be further consolidation in our end-customer markets, which may adversely affect our revenues. • Data security and integrity are critically important to our business, and cybersecurity incidents, including cyberattacks, breaches of security, unauthorized access to or disclosure of our intellectual property or confidential information, business disruption, or the perception that confidential information is not secure, could result in a material loss of business, regulatory enforcement, substantial legal liability and/or significant harm to our reputation. • We may be unable to adequately anticipate, prevent or mitigate damage resulting from increasingly sophisticated methods of illegal or fraudulent activities committed against us, which could harm our business, financial condition and results of operations and could significantly harm our reputation. • If we experience system failures, personnel disruptions or capacity constraints, or our customers do not modify their systems to accept new releases of our distribution programs, the delivery of our services to our customers could be delayed or interrupted, which could harm our business and reputation and result in the loss of revenues or customers. • We could lose our access to data sources which could prevent us from providing our services. • If we fail to maintain and improve our systems, our data matching technology, and our interfaces with data sources and customers, demand for our services could be adversely affected. • Our business is subject to various governmental regulations, laws and orders, compliance with which may cause us to incur significant expenses or reduce the availability or effectiveness of our solutions, and the failure to comply with which could subject us to civil or criminal penalties or other liabilities. • The CFPB has supervisory and examination authority over our business and has in the past, and may initiate enforcement actions with regard to our compliance with federal consumer financial laws.
Additionally, given some of our equity interests in various companies, we may be limited in our ability to require or influence such companies to make 31 acquisitions or take other actions that we believe to be in our or their best interests. Our inability to take such actions could have a material impact on our revenues or earnings.
Additionally, given some of our equity interests in various companies, we may be limited in our ability to require or influence such companies to make acquisitions or take other actions that we believe to be in our or their best interests. Our inability to take such actions could have a material impact on our revenues or earnings.
The extent of a particular cybersecurity incident and the steps that we may need to take to investigate it may not be immediately clear, and it may take a significant amount of time before such an investigation can be completed and full and reliable 24 information about the incident is known.
The extent of a particular cybersecurity incident and the steps that we may need to take to investigate it may not be immediately clear, and it may take a significant amount of time before such an investigation can be completed and full and reliable information about the incident is known.
We could also become subject to increased legislative, regulatory or judicial restrictions or mandates on the collection, disclosure or use of such data, in particular if such data is not collected by our providers in a way that allows us to legally use the data.
We could also become subject to increased legislative, regulatory or judicial restrictions or mandates on the collection, disclosure or use of such data, 25 in particular if such data is not collected by our providers in a way that allows us to legally use the data.
There may also be adverse publicity and uncertainty associated with investigations, litigation and orders (whether pertaining to us, our customers or our competitors) that could decrease customer acceptance of our services or result in material discovery expenses.
There may also be 28 adverse publicity and uncertainty associated with investigations, litigation and orders (whether pertaining to us, our customers or our competitors) that could decrease customer acceptance of our services or result in material discovery expenses.
For example, under U.S. federal law today, we are required to provide consumers with one credit report per year free of charge, and beginning in April 2020, we began offering consumers free weekly credit reports.
For example, under U.S. federal 26 law today, we are required to provide consumers with one credit report per year free of charge, and beginning in April 2020, we began offering consumers free weekly credit reports.
Any determination to pay dividends in the future will be at the discretion of our board of directors and will depend upon results of operations, financial condition, contractual restrictions, restrictions imposed by applicable law and other factors our board of directors deems relevant.
Any determination to pay dividends in the future will be at the discretion of our Board and will depend upon results of operations, financial condition, contractual restrictions, restrictions imposed by applicable law and other factors our Board deems relevant.
We may not be able to immediately address the consequences of a cybersecurity incident because a successful breach of our computer systems, software, networks or other technology assets could occur and persist for an extended period of time before being detected due to, among other things: • the breadth and complexity of our operations and the high volume of transactions that we process; • the large number of customers, counterparties and third-party service providers with which we do business; • the proliferation and increasing sophistication of cyberattacks; • the possibility that a malicious third party compromises the software, hardware or services that we procure from a service provider unbeknownst to both the provider and to TransUnion; and • the possibility that a third party, after establishing a foothold on an internal network without being detected, might obtain access to other networks and systems.
We may not be able to timely address the consequences of a cybersecurity incident because a successful breach of our computer systems, software, networks or other technology assets could occur and persist for an extended period of time before being detected due to, among other things: • the breadth and complexity of our operations and the high volume of transactions that we process; • the large number of customers, counterparties and third-party service providers with which we do business; • the proliferation and increasing sophistication of cyberattacks; 24 • the possibility that a malicious third party compromises the software, hardware or services that we procure from a service provider unbeknownst to both the provider and to TransUnion; and • the possibility that a third party, after establishing a foothold on an internal network without being detected, might obtain access to other networks and systems.
Our largest customers, and therefore our business and revenues, are influenced by macroeconomic conditions and are impacted by the availability of credit, the level and volatility of interest rates, inflation, employment levels, consumer confidence and housing demand.
Our largest customers, and therefore our business and revenues, are influenced by macroeconomic conditions and are impacted by the availability of credit, the level and volatility of interest rates, inflation, employment levels, consumer confidence and 21 housing demand.
Also, in July 2019, TransUnion Limited, a Hong Kong entity in which the Company holds a majority interest, was a victim of a fraud incident that occurred in July 2019 in our Asia Pacific region (the “Fraud Incident”) involving employee impersonation and fraudulent requests that successfully ta rgeted TransUnion Limited, which resulted in a series of fraudulently induced wire transfers totaling $17.8 million, a portion of which has been subsequently recovered.
Also, in July 2019, TransUnion Limited, a Hong Kong entity in which the Company holds a majority interest, was a victim of a fraud incident that occurred in July 2019 in our Asia Pacific region involving employee impersonation and fraudulent requests that successfully ta rgeted TransUnion Limited, which resulted in a series of fraudulently induced wire transfers totaling $17.8 million, a portion of which has been subsequently recovered.
As a result, five U.S. states have passed comprehensive privacy legislation intended to provide consumers with greater transparency and control over their personal information by providing consumers with certain rights, such as the right to know what personal information is being collected about them, and the right to access, delete, correct, or opt out of the sale of their personal information.
As a result, thirteen U.S. states have passed comprehensive privacy legislation intended to provide consumers with greater transparency and control over their personal information by providing consumers with certain rights, such as the right to know what personal information is being collected about them, and the right to access, delete, correct, or opt out of the sale of their personal information.
As of December 31, 2022, we have an accrued liability of $56.0 million in connection with this matter and there is a reasonable possibility that a loss in excess of the amount accrued may be incurred, and such an outcome could have a material adverse effect on our results of operations and financial condition.
As of December 31, 2023, we have an accrued liability of $56.0 million in connection with this matter and there is a reasonable possibility that a loss in excess of the amount accrued may be incurred, and such an outcome could have a material adverse effect on our results of operations and financial condition.
Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies have adopted consumer notification and other requirements in the event that consumer information is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible.
Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies around the world have adopted consumer notification and other requirements in the event that consumer information is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible.
Although we believe we have made appropriate provisions for taxes in the jurisdictions in which we operate, changes in tax laws, or challenges from tax authorities under existing tax laws could adversely affect our business, financial condition and results of operations. 37 ITEM 1B. UNRESOLVED STAFF COMMENTS None.
Although we believe we have made appropriate provisions for taxes in the jurisdictions in which we operate, changes in tax laws, or challenges from tax authorities under existing tax laws could adversely affect our business, financial condition and results of operations. 38 ITEM 1B. UNRESOLVED STAFF COMMENTS None.
Currently, public concern is high with regard to the operation of credit reporting agencies in the United States, as well as the collection, use, accuracy, correction and sharing of personal information, including Social Security numbers, dates of birth, financial information, medical information, department of motor vehicle data and other personal data.
Currently, public concern is high with regard to the operation of consumer reporting agencies in the United States, as well as the collection, use, accuracy, correction and sharing of personal information, including Social Security numbers, dates of birth, financial information, medical information, department of motor vehicle data and other personal data.
Acquisitions, such as the acquisitions of Neustar and Sontiq, involve significant risks and uncertainties, including: • failing to achieve the financial and strategic goals for the acquired business; • paying more than fair market value for an acquired company or assets; • failing to integrate the operations and personnel of the acquired businesses in an efficient and timely manner; • disrupting our ongoing businesses, including loss of sales; • distracting management focus from our existing businesses; • assumption of unanticipated or contingent liabilities; • failing to retain key personnel; • incurring the expense of an impairment of assets due to the failure to realize expected benefits; • damaging relationships with employees, customers or strategic partners; • diluting the share value of existing stockholders; and • incurring additional debt or reducing available cash to service our existing debt.
Acquisitions involve significant risks and uncertainties, including: • failing to achieve the financial and strategic goals for the acquired business; • paying more than fair market value for an acquired company or assets; • failing to integrate the operations and personnel of the acquired businesses in an efficient and timely manner; • disrupting our ongoing businesses, including loss of sales; • distracting management focus from our existing businesses; • assumption of unanticipated or contingent liabilities; • failing to retain key personnel; • incurring the expense of an impairment of assets due to the failure to realize expected benefits; • damaging relationships with employees, customers or strategic partners; • diluting the share value of existing stockholders; and • incurring additional debt or reducing available cash to service our existing debt.
The NORA letter alleges that Trans Union LLC and TURSS violated the FCRA by failing to (i) follow reasonable procedures to assure maximum possible accuracy of information in consumer reports and (ii) disclose to consumers the sources of such information.
The NORA letter alleged that Trans Union LLC and TURSS violated the FCRA by failing to (i) follow reasonable procedures to assure maximum possible accuracy of information in consumer reports and (ii) disclose to consumers the sources of such information.
Danaher violated the Consent Order and that we and Trans Union LLC provided substantial assistance to TransUnion Interactive, Inc. in violating the Consent Order and the law. We are currently in active litigation with the CFPB on this matter.
Danaher violated the 2017 Consent Order and that we and Trans Union LLC provided substantial 27 assistance to TransUnion Interactive, Inc. in violating the 2017 Consent Order and the law. We are currently in active litigation with the CFPB on this matter.
Further, it is possible that we may acquire a company that has experienced a security incident that the acquired company has yet to discover, investigate and remediate.
Further, it is possible that we may acquire a company that has experienced a security incident or has security vulnerabilities that the acquired company has yet to discover, investigate and remediate.
Unauthorized disclosure, loss or corruption of our data or inability of our customers to access our systems could disrupt our operations, subject us to substantial regulatory and legal proceedings and potential liability, result in a material loss of business and/or significantly harm our reputation.
Unauthorized disclosure, loss or corruption of our data or inability of our customers to access our systems could disrupt our operations, subject us to substantial regulatory and legal proceedings (including class actions) and potential liability, result in a material loss of business and/or significantly harm our reputation.
In August 2022, the TransUnion Entities received a NORA letter from the CFPB, informing us that the CFPB’s Enforcement Division is considering whether to recommend that the CFPB take legal action against us following an investigation relating to potential violations of law related to the placement and lifting of security freezes resulting from certain system issues.
In August 2022, the TU Entities received a NORA letter from the CFPB, informing us that the CFPB’s Enforcement Division was considering whether to recommend that the CFPB take legal action against us following an investigation relating to potential violations of law related to the placement and lifting of security freezes resulting from certain system issues.
See “Management’s Discussion and Analysis of Financial Condition and Results of Operations-Twelve Months Ended December 31, 2022, 2021 and 2020-Revenue-International Segment.” As we continue to expand our business, our success will partially depend on our ability to anticipate and effectively manage these and other risks.
See “Management’s Discussion and Analysis of Financial Condition and Results of Operations-Twelve Months Ended December 31, 2023, 2022 a nd 2021-Revenue-International Segment.” As we continue to expand our business, our success will partially depend on our ability to anticipate and effectively manage these and other risks.
While we have engaged and may engaged in the future in voluntary initiatives and reporting on ESG matters, such initiatives and reporting may not have the desired effect.
While we have engaged and may engaged in the future in voluntary initiatives and reporting on ESG matters, such initiatives and reporting may be costly and may not have the desired effect.
Actions by the CFPB or other regulators against us or our executives could result in increased operating costs, reputational harm, payment of damages and civil monetary penalties, injunctive relief and/or restitution, any of which could have a material adverse effect on our business, results of operations and financial condition. The CFPB has broad authority over our business.
Actions by the CFPB or other regulators against us or our executives could result in increased operating costs, reputational harm, payment of damages and civil money penalties, injunctive relief and/or restitution, any of which could have a material adverse effect on our business, results of operations and financial condition. The CFPB has broad authori ty over our business.
A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the control system’s objectives will be met.
A control system, no matter how well desig ned and operated, can provide only reasonable, not absolute, assurance that the control system’s objectives will be met.
See “Business-Legal and Regulatory Matters.” The Consumer Financial Protection Bureau (“CFPB”) has supervisory and examination authority over our business and may initiate enforcement actions with regard to our compliance with federal consumer financial laws.
See “Business-Legal and Regulatory Matters.” The CFPB has supervisory and examination authority over our business and may initiate enforcement actions with regard to our compliance with federal consumer financial laws.
Our substantial indebtedness may: • make it difficult for us to satisfy our financial obligations, including with respect to our indebtedness; • limit our ability to borrow additional funds for working capital, capital expenditures, acquisitions or other general business purposes; • limit our ability to use our cash flow or obtain additional financing for future working capital, capital expenditures, acquisitions or other general business purposes; • require us to use a substantial portion of our cash flow from operations to make debt service payments; • expose us to the risk of increased interest rates as certain of our borrowings, including Trans Union LLC’s senior secured credit facility, are at variable rates of interest; • limit our ability to pay dividends; • limit our flexibility to plan for, or react to, changes in our business and industry; • place us at a competitive disadvantage compared with our less-leveraged competitors; and • increase our vulnerability to the impact of adverse economic and industry conditions.
Our substantial indebtedness may: • make it difficult for us to satisfy our financial obligations, including with respect to our indebtedness; • limit our ability to borrow additional funds for working capital, capital expenditures, acquisitions or other general business purposes; • limit our ability to use our cash flow or obtain additional financing for future working capital, capital expenditures, acquisitions or other general business purposes; • require us to use a substantial portion of our cash flow from operations to make debt service payments; • expose us to the risk of increased interest rates as certain of our borrowings, including Trans Union LLC’s senior secured credit facility, are at variable rates of interest; • limit our ability to pay dividends; • limit our flexibility to plan for, or react to, changes in our business and industry; • place us at a competitive disadvantage compared with our less-leveraged competitors; and • increase our vulnerability to the impact of adverse economic and industry conditions. 32 In addition, the credit agreement governing Trans Union LLC’s senior secured credit facility contains restrictive covenants that may limit our ability to engage in activities that may be in our long-term best interest.
In addition, a significant amount of our revenues are concentrated among certain customers, industries, 21 product offerings and in distinct geographic regions, primarily in the United States. Our 2022 revenue in our U.S. Markets Financial Services vertical and in our Consumer Interactive segment accounted for approximately 33% and 16% of consolidated gross revenues, respectively.
In addition, a significant amount of our revenue is concentrated among certain customers, industries, product offerings and in distinct geographic regions, primarily in the United States. Our 2023 revenue in our U.S. Markets Financial Services vertical and in our Consumer Interactive segment accounted for approximately 33% and 15% of consolidated gross revenues, respectively.
Risks Related to Our Indebtedness We have a substantial amount of debt which could adversely affect our financial position and prevent us from fulfilling our obligations under the debt instruments. As of December 31, 2022, the book value of our debt was approximately $5,670.1 million consisting of outstanding borrowings under Trans Union LLC’s senior secured credit facility.
Risks Related to Our Indebtedness We have a substantial amount of debt which could adversely affect our financial position and prevent us from fulfilling our obligations under the debt instruments. As of December 31, 2023, the book value of our debt w as approximately $5,340.4 million consisting of outstanding borrowings under Trans Union LLC’s senior secured credit facility.
This is because, among other things: • the techniques used in cyberattacks change frequently and may not be recognized until after the attacks have succeeded; • cyberattacks can originate from a wide variety of sources, including sophisticated threat actors involved in organized crime, sponsored by nation-states, or linked to terrorist or hacktivist organizations; and • third parties may seek to gain access to our systems either directly or using equipment or security passwords belonging to employees, customers, third-party service providers or other users.
This is because, among other things: • the techniques used in cyberattacks change frequently and are increasingly sophisticated (including due to attacker’s use of artificial intelligence), and may not be recognized until after the attacks have succeeded; • cyberattacks can originate from a wide variety of sources, including sophisticated threat actors involved in organized crime, sponsored by nation-states, or linked to terrorist or hacktivist organizations; and • third parties may seek to gain access to our systems either directly or using equipment or security passwords belonging to employees, customers, third-party service providers or other users (such as through social engineering and phishing attacks).
We and our subsidiaries may be able to incur substantial additional indebtedness in the future. The terms of the credit agreement govern our debt limit, but do not prohibit, us or our subsidiaries from incurring additional indebtedness, and any additional indebtedness incurred in compliance with these restrictions could be substantial.
The terms of the credit agreement govern our debt limit, but do not prohibit, us or our subsidiaries from incurring additional indebtedness, and any additional indebtedness incurred in compliance with these restrictions could be substantial.
On a regular basis, we evaluate our assets for impairment based on various factors, including actual operating results and expected trends of projected revenues, profitability and cash flows. As of December 31, 2022, our consolidated balance sheet included goodwill of $5,551.4 million and other net intangibles of $3,675.5 million.
On a regular basis, we evaluate our assets for impairment based on various factors, including actual operating results and expected trends of projected revenues, profitability and cash flows. As of December 31, 2023, our Consolidated Balance Sheet included goodwill of $5,176.0 million and other net intangibles of $3,515.3 million.
Actions by the CFPB or other regulators against us or our executives could result in increased operating costs, reputational harm, payment of damages and civil monetary penalties, injunctive relief and/or restitution, any of which could have a material adverse effect on our business, results of operations and financial condition. • Regulatory oversight of our contractual relationships with certain of our customers may adversely affect our business. • The outcome of litigation, inquiries, investigations, examinations or other legal proceedings in which we are involved, in which we may become involved, or in which our customers or competitors are involved could subject us to significant monetary damages or restrictions on our ability to do business. • Our results of operations have been materially and adversely impacted and could be materially and adversely impacted in the future by the COVID-19 global pandemic or the outbreak of other highly infectious diseases. 20 • Our ability to expand our operations in, and the portion of our revenue derived from, markets outside the United States is subject to economic, political and other inherent risks, which could adversely impact our growth rate and financial performance. • The ongoing military action between Russia and Ukraine could adversely affect our business, financial condition and operating results. • We may be unable to protect our intellectual property adequately or cost-effectively, which may cause us to lose market share or force us to reduce our prices.
Actions by the CFPB or other regulators against us or our executives could result in increased operating costs, reputational harm, payment of damages and civil money penalties, injunctive relief and/or restitution, any of which could have a material adverse effect on our business, results of operations and financial condition. • Regulatory oversight of our contractual relationships with certain of our customers may adversely affect our business. • The outcome of litigation, inquiries, investigations, examinations or other legal proceedings in which we are involved, in which we may become involved, or in which our customers or competitors are involved could subject us to significant monetary damages or restrictions on our ability to do business. • Our ability to expand our operations in, and the portion of our revenue derived from, markets outside the United States is subject to economic, political and other inherent risks, which could adversely impact our growth rate and financial performance. 20 • We face geopolitical and other risks associated with our international operations, which could materially adversely impact our results of operations and our financial condition. • We may be unable to protect our intellectual property adequately or cost-effectively, which may cause us to lose market share or force us to reduce our prices.
Over the last several months, high inflation levels have had a significant negative impact on our business by decreasing demand for credit due to slower consumer spending on non-essential goods and services and due to the Federal Reserve raising interest rates to combat inflation. Continued inflation and additional interest rate increases could further materially impact our business.
High inflation levels has a negative impact on our business by decreasing demand for credit due to slower consumer spending on non-essential goods and services and due to the Federal Reserve raising interest rates to combat inflation. Continued inflation and additional interest rate increases could further materially impact our business.
If these unfavorable macroeconomic conditions persist longer than we currently expect, or are worse than we currently expect, our estimates of revenue growth rates and EBITDA margins would decline, which could lead to an impairment of goodwill in our United Kingdom reporting unit or other reporting units.
If these unfavorable macroeconomic conditions persist longer than we currently expect, or are worse than we currently expect, our estimates of revenue growth rates and EBITDA margins would decline, which could lead to an impairment of goodwill.
For example, in January 2017, as part of an agreed settlement with the CFPB, we agreed among other things, to implement certain practice changes in the way we advertise, market and sell products and services offered directly to consumers.
For example, in January 2017, as part of a Consent Order entered into with the CFPB, we agreed among other things, to implement certain practice changes in the way we advertise, market and sell products and services offered directly to consumers.
We cannot provide assurance that we will be successful in maintaining our relationships with these external data source providers or that we will be able to continue to obtain data from them on acceptable terms or at all.
We cannot provide assurance that we will be successful in maintaining our relationships with these external data source providers or that we will be able to continue to obtain data from them on acceptable terms or at all. Furthermore, we cannot provide assurance that we will be able to obtain data from alternative sources if our current sources become unavailable.
The NORA letter alleged that we failed to comply with and timely implement a Consent Order issued by the CFPB in January 2017 (the “Consent Order”), and further alleged additional violations related to TransUnion Interactive Inc.’s marketing practices.
The NORA letter alleged that we failed to comply with and timely implement the January 2017 Consent Order (the “2017 Consent Order”), and further alleged additional violations related to TransUnion Interactive Inc.’s marketing practices.
Various meteorological phenomena and extreme weather events (including, but not limited to, storms, flooding, drought, wildfire, and extreme temperatures) may disrupt our operations or those of our suppliers, require us to incur additional operating or capital expenditures or otherwise adversely impact our business, financial condition, or results of operations.
Various meteorological phenomena and extreme weather events (including, but not limited to, storms, flooding, drought, wildfire, and extreme temperatures) may directly or indirectly disrupt our operations (including the productivity of our employees) or those of our suppliers or infrastructure on which we rely, require us to incur additional operating or capital expenditures or otherwise adversely impact our business, financial condition, or results of operations.
We may, however, declare and pay cash dividends up to an unlimited amount unless a default or event of default exists under the senior secured credit facility.
The terms of our senior secured credit facility impose certain limitations on our ability to pay dividends. We may, however, declare and pay cash dividends up to an unlimited amount unless a default or event of default exists under the senior secured credit facility.
During times of economic distress, declining demand and declining earnings could lead to us to have less favorable estimates of our future cash flows, discount rates or market multiples. Such changes could lead to lower estimated fair values of our reporting 35 units, which could lead to a material impairment charge.
During times of economic distress, declining demand and declining earnings could lead to us to have less favorable estimates of our future cash flows, discount rates or market multiples. Such changes could lead to lower estimated fair values of our reporting units, which could lead to a material impairment charge. In certain markets where we operate, macroeconomic conditions are unfavorable.
Additional risks and uncertainties not currently known to us or those we currently view to be immaterial may also materially and adversely affect our business, financial condition or results of operations.
However, the selected risks described below are not the only risks facing us. Additional risks and uncertainties not currently known to us or those we currently view to be immaterial may also materially and adversely affect our business, financial condition or results of operations.
See “FINANCIAL STATEMENTS AND SUPPLEMENTARY DATA - Notes to Consolidated Financial Statements,” Note 22, “Contingencies” for information regarding the CFPB matter.
See Part II, Item 8, “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” Note 23, “Contingencies” for information regarding the CFPB matter.
See “FINANCIAL STATEMENTS AND SUPPLEMENTARY DATA - Notes to Consolidated Financial Statements,” Note 22, “Contingencies” for information regarding our legal proceedings.
See Part II, Item 8, “Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements,” Note 23, “Contingencies” for information regarding our legal proceedings.
Our disclosures on these matters, a failure to satisfy evolving stakeholder expectations for ESG practices and reporting, or a failure to meet our commitments or targets on our established timeline may potentially harm our reputation and impact relationships with investors.
Our disclosures on these matters, a failure to satisfy evolving stakeholder expectations for ESG practices and reporting, or a failure or perceived failure to meet our commitments or targets (including the manner in which we complete such initiatives) on our established timeline may potentially harm our reputation and impact relationships with investors.
ITEM 1A. RISK FACTORS You should carefully consider the following risks as well as the other information included in this report, including “Selected Financial Data,” “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our financial statements and related notes.
ITEM 1A. RISK FACTORS You should carefully consider the following risks as well as the other information included in this report, including “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our financial statements and related notes. Any of the following risks could materially and adversely affect our business, financial condition or results of operations.
For example, reported revenue from our International segment increased 7.7% including the impact of foreign currencies, or 15.0% on a constant currency basis which excludes the impact of foreign currencies.
For example, in 2023, reported revenue from our International segment increased 9.2% including the impact of foreign currencies, or 12.2% on a constant currency basis which excludes the impact of foreign currencies.
The defensive measures that we take to manage threats, especially cyber-related threats, to our business may not adequately anticipate, prevent or mitigate harm we may suffer from such threats. Criminals use evolving and increasingly sophisticated methods of perpetrating illegal and fraudulent act ivities.
The defensive measures that we take to manage threats, especially cyber-related threats, to our business may not adequately anticipate, prevent or mitigate harm we may suffer from such threats. Criminals use evolving and increasingly sophisticated methods of perpetrating illegal and fraudulent act ivities. For example, in September 2020, TransUnion experienced a series of Distributed Denial of Service (“DDoS”) attacks .
These cyberattacks can take many forms, but they typically have one or more of the following objectives, among others: • obtain unauthorized access to confidential consumer information; • manipulate or destroy data; or 23 • disrupt, sabotage or degrade service on our systems.
These cyberattacks can take many forms, but they typically have one or more of the following objectives, among others: • obtain unauthorized access to confidential data such as personal information; • manipulate or destroy data; • disrupt, sabotage or degrade service on our systems; or • affect our operations or data through attacks on third-party business partners or service providers.
Our success depends, in part, on our ability to protect and preserve the proprietary aspects of our technology and services. If we are unable to protect our intellectual property, including trade secrets and other unpatented intellectual property, our competitors could use our intellectual property to market and deliver similar services, decreasing the demand for our services.
If we are unable to protect our intellectual property, including trade secrets and other unpatented intellectual property, our competitors could use our intellectual property to market and deliver similar services, decreasing the demand for our services.
Our total scheduled principal repayments of debt made in 2022 and 2021 were $114.5 million and $54.8 million, respectively. Our total interest expense for 2022 and 2021 was $230.9 million and $112.6 million, respectively.
Our total scheduled principal repayments of debt made in 2023 and 2022 were $100.0 million and $114.5 million, respectively. Our total interest expense for 2023 and 2022 was $288.2 million and $230.9 million, respectively.
If a successful claim of infringement is brought against us and we fail to develop non-infringing products or services, or to obtain licenses on a timely and cost-effective basis, our reputation, business, financial condition and results of operations could be adversely affected.
If a successful claim of infringement is brought against us and we fail to develop non-infringing products or services, or to obtain licenses on a timely and cost-effective basis, our reputation, business, financial condition and results of operations could be adversely affected. 30 Risks Related to Our Growth Strategy When we engage in acquisitions, investments in new businesses or divestitures of existing businesses, we face risks that may adversely affect our business.
It is possible that neither the acquired company nor TransUnion may identify the issue in a timely manner and the event could spread more broadly to other parts of TransUnion during the integration effort.
While we execute security due diligence in these transactions, it is possible that neither the acquired company nor TransUnion may identify these issues in a timely manner, which could spread more broadly to other parts of TransUnion during the integration effort.
If we cannot make our scheduled debt payments, we will be in default and all outstanding principal and interest on our debt may be declared due and payable, the lenders under Trans Union LLC’s senior secured credit facility could terminate their commitments to loan money, Trans Union LLC’s secured lenders (including the lenders under Trans Union LLC’s senior secured credit facility) could foreclose against the assets securing their borrowings and we could be forced into bankruptcy or liquidation.
If we cannot make our scheduled debt payments, we will be in default and all outstanding principal and interest on our debt may be declared due and payable, the lenders under Trans Union LLC’s senior secured credit facility could terminate their commitments to loan money, Trans Union LLC’s secured lenders (including the lenders under Trans Union LLC’s senior secured credit facility) could foreclose against the assets securing their borrowings and we could be forced into bankruptcy or liquidation. 33 Risks Related to Ownership of Our Common Stock Our stock price has recently been volatile and has declined, and may continue to be volatile and/or decline, regardless of our operating performance, and you may not be able to resell shares of our common stock at or above the price you paid or at all.
As a result, our stockholders may be limited in their ability to obtain a premium for their shares. Our ability to pay cash dividends may be limited by the terms of our secured credit facility.
As a result, our stockholders may be limited in their ability to obtain a premium for their shares. Our ability to pay cash dividends may be limited by the terms of our secured credit facility. In February 2018, our Board approved a dividend policy pursuant to which we intend to pay quarterly cash dividends on our common stock.
While we have established ESG practices, including climate-related targets and goals, these targets and goals are based on certain assumptions, estimates and third-party data, and we may not meet such targets or goals on our established timeline or at all. This includes our goals regarding GHG emissions reduction, which we may not meet on our established timeline or at all.
While we have established ESG practices, including climate-related targets and goals, these targets and goals, including our GHG emission reduction goals, are based on certain assumptions, estimates, calculation methodologies and third-party data, and we may not meet such targets or goals on our established timeline or at all, including due to a variety of factors that may be in or out of our control.
On July 27, 2022, the CFPB’s Enforcement 27 Division advised us that it had obtained authority to pursue an enforcement action jointly with the FTC. We are currently engaged in active settlement discussions with the CFPB and the FTC regarding this matter.
On July 27, 2022, the CFPB’s Enforcement Division advised us that it had obtained authority to pursue an enforcement action jointly with the FTC.
Furthermore, we cannot provide assurance that we will be able to obtain data from alternative sources if our current sources become unavailable. 25 If we fail to maintain and improve our systems, our data matching technology, and our interfaces with data sources and customers, demand for our services could be adversely affected.
If we fail to maintain and improve our systems, our data matching technology, and our interfaces with data sources and customers, demand for our services could be adversely affected.
For example, during the first week of September 2020, TransUnion experienced a series of Distributed Denial of Service (DDoS) attacks . While these attacks did not result in any unauthorized access to data or systems, there was disruption to TransUnion’s normal operations including degraded customer response time, intermittent timeouts and degraded internal information technology services utilized by TransUnion associates.
While these attacks did not result in any unauthorized access to data or systems, there was disruption to TransUnion’s normal operations including degraded customer response time, intermittent timeouts and degraded internal information technology services utilized by TransUnion associates. TransUnion deploys a number of defensive measures to mitigate DDoS attacks, but persistent attackers can challenge these protections.
The original California Consumer Privacy Act became effective in 2020, with amendments in the California Privacy Rights Act effective in 2023. Similar laws in Colorado, Connecticut, Utah and Virginia are effective over the course of 2023.
The original California Consumer Privacy Act became effective in 2020, with amendments in the California Privacy Rights Act effective in 2023. Similar laws in Colorado, Connecticut, Utah and Virginia became effective over the course of 2023. Similar laws in Delaware, Indiana, Iowa, Montana, Oregon, New Jersey, Tennessee, and Texas take effect over the course of 2024 to 2026.
In the past, companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We may be the target of this type of litigation in the future. Securities litigation against us could result in substantial costs and divert our management’s attention from other business concerns, which could seriously harm our business.
In the past, companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We may be the target of this type of litigation in the future.
Acquisitions may not be completed on favorable terms and acquired assets, data or businesses may not be successfully integrated into our operations.
We have acquired and may continue to acquire or make investments in businesses that offer complementary services and technologies. Acquisitions may not be completed on favorable terms and acquired assets, data or businesses may not be successfully integrated into our operations.
In the United States, we are subject to federal and state laws that provide for more than 50 disparate notification regimes. In the event of unauthorized access, our failure to comply with the complexities of these various regulations could subject us to regulatory scrutiny and additional liability.
In the event of unauthorized access, our failure to comply with the complexities of these various regulations could subject us to regulatory scrutiny and additional liability.
Markets segment are terminable upon advance written notice (typically ranging from 30 days to six months) by either us or the customer, which provides our customers with the opportunity to renegotiate their contracts with us or to award more business to our competitors. 22 We also provide our services to business partners who may combine them with their own or other branded services to be offered as a bundle to consumers, governmental agencies and businesses in support of fraud or credit protection, credit monitoring, identity authentication, insurance or credit underwriting, and collections.
We also provide our services to business partners who may combine them with their own or other branded services to be offered as a bundle to consumers, governmental agencies and businesses in support of fraud or credit protection, credit monitoring, identity authentication, insurance or credit underwriting, and collections.
Risks Related to Intellectual Property We may be unable to protect our intellectual property adequately or cost-effectively, which may cause us to lose market share or force us to reduce our prices. We also rely on trade secrets and other forms of unpatented intellectual property that may be difficult to protect.
Any of these factors could adversely affect our business, financial position, and results of operations. Risks Related to Intellectual Property We may be unable to protect our intellectual property adequately or cost-effectively, which may cause us to lose market share or force us to reduce our prices.
Moreover, actions or statements that we may take based on expectations, assumptions, or third-party information that we currently believe to be reasonable may subsequently be determined to be erroneous or be subject to misinterpretation. Even if this is not the case, our current actions may subsequently be determined to be insufficient or not aligned to best practices by various stakeholders.
Moreover, actions or statements that we may make based on expectations, assumptions, calculation methodologies or third-party information that we currently believe to be reasonable may subsequently be determined to be erroneous or be subject to misinterpretation.
We reconcile the fair value of our reporting units to our market capitalization during our annual goodwill impairment test. A further decrease in our market capitalization could be an indicator that one or more of our reporting units has a goodwill impairment.
We reconcile the fair value of our reporting units to our market capitalization during our annual goodwill impairment test, which we conduct more frequently if events or circumstances indicate that the carrying value of goodwill may be impaired.
Our failure to comply with those covenants could result in an event of default which, if not cured or waived, could result in the acceleration of substantially all of our debt. Despite our current level of indebtedness, we may still be able to incur additional indebtedness. This could further the risks associated with our substantial indebtedness.
Despite our current level of indebtedness, we may still be able to incur additional indebtedness. This could further the risks associated with our substantial indebtedness. We and our subsidiaries may be able to incur substantial additional indebtedness in the future.
As a precautionary measure, TransUnion South Africa temporarily to ok certain elements of our services offline, all of which have been resumed. We continue to work with law enforcement and regulators related to this matter. The security and protection of non-public consumer information is TransUnion’s top priority.
As a precautionary measure, TransUnion South Africa temporarily took certain elements of our services offline, all of which have been resumed. The security and protection of non-public consumer information is TransUnion’s top priority. However, there can be no assurance that our cybersecurity risk management program and processes, including our controls, will be fully implemented, complied with or effective.