Electronic Arts (EA) Risk Analysis

The integrity of our and our partners' information technology networks and systems is critical to our ongoing operations, products, and services. Our industry is prone to, and our systems and networks are subject to actions by malfeasant actors, which may include individuals or groups, including state-sponsored attackers. These actions include cyber-attacks, including ransomware, and other information security incidents that seek to exploit, disable, damage, and/or disrupt our networks, business operations, products and services and supporting technological infrastructure, or gain access to consumer and employee personal information, our intellectual property and other assets. Additionally, as artificial intelligence capabilities develop rapidly, individuals or groups of hackers and sophisticated organizations, may use these technologies to create new sophisticated attack methods that are increasingly automated, targeted and coordinated and more difficult to defend against. In addition, our systems and networks could be harmed or improperly accessed due to errors by employees or third parties that are authorized to access these networks and systems. We also rely on technological infrastructure provided by third-party business partners to support the online functionality of our products and services, who are also subject to these same cyber risks. Both our partners and we have expended, and expect to continue to expend, financial and operational resources to guard against cyber risks and to help protect our data and systems. However, the techniques used by malfeasant actors change frequently, continue to evolve in sophistication and volume, and often are not detected for long periods of time. Remote access to our networks and systems, and the networks and systems of our partners is substantial. While we and our partners have taken steps to secure our networks and systems, these networks and systems may be more vulnerable to a successful cyber-attack or information security incident in a hybrid working model. The costs to respond to, mitigate, and/or notify affected parties of cyber-attacks and other security vulnerabilities are significant. It may also be necessary for us to take additional extraordinary measures and make additional expenditures to take appropriate responsive and preventative steps. Consequences of such events, responsive measures and preventative measures have included, and could in the future include, the loss of proprietary and personal data and interruptions or delays in our business operations, exploitation of our data, as well as loss of player confidence and damage to our brand and reputation, financial expenses and financial loss. In addition, such events could cause us to be non-compliant with applicable regulations, and subject us to legal claims or penalties under laws protecting the privacy or security of personal information or proprietary material information. We have experienced such events in the past and expect future events to occur. In addition, the virtual economies that we have established in many of our games are subject to abuse, exploitation and other forms of fraudulent activity that can negatively impact our business. Virtual economies involve the use of virtual currency and/or virtual assets that can be used or redeemed by a player within a particular game or service. The abuse or exploitation of our virtual economies have included the illegitimate or unauthorized generation and sale of virtual items, including in black markets. Our online services have been impacted by in-game exploits and the use of automated or other fraudulent processes designed to generate virtual items or currency illegitimately or to execute account takeover attacks against our players. We anticipate such activity to continue. These abuses and exploits, and the steps that we take to address these abuses and exploits may result in a loss of anticipated revenue, increased costs to protect against or remediate these issues, interfere with players' enjoyment of a balanced game environment or cause harm to our reputation and brand.