XML 49 R33.htm IDEA: XBRL DOCUMENT v3.25.4
Commitments and Contingencies
12 Months Ended
Dec. 31, 2025
Commitments and Contingencies Disclosure [Abstract]  
Commitments and Contingencies
25 — Commitments and Contingencies

Employee Compensation Agreements — In the ordinary course of conducting its business, the Company enters into certain employee compensation agreements from time to time which commit it to severance obligations in the event an employee terminates employment with the Company. If applicable, these obligations are recorded as accrued expenses on the Consolidated Balance Sheets.

Litigation — From time to time, the Company is involved in various claims and legal actions that arise in the ordinary course of business. Management is required to assess the likelihood of any adverse judgments or outcomes related to these legal contingencies, as well as potential ranges of probable or reasonably possible losses. The determination of the amount of any losses to be recorded or disclosed as a result of these contingencies is based on a careful analysis of each individual exposure with, in some cases, the assistance of outside legal counsel. The amount of losses recorded or disclosed for such contingencies may change in the future due to new developments in each matter or a change in legal or settlement strategy. While the impact of any one or more legal claims or proceedings could be material to the Company's operating results in any period, management does not believe that the outcome of any of these pending claims or proceedings (including the data security incident discussed below), individually or in the aggregate, will have a material adverse effect on the Company's consolidated financial condition or liquidity.

Data Security Incident — In 2021, the Company experienced an unauthorized access into its online insurance quote feature whereby attackers used personal information already in their possession to obtain additional consumer data, including driver's license numbers. The unauthorized access issue has been remediated; however, the incident became the subject of coordinated industry-wide regulatory investigations. In October 2025, the Company entered into consent orders with each of the New York Department of Financial Services (the "NY DFS") and the New York Attorney General (the "NY AG") to settle all claims related to these investigations. Pursuant to the consent orders, the Company agreed to pay $1.85 million to the NY DFS and $1.3 million to the NY AG, respectively and to perform certain assessments of its privacy and cybersecurity programs and develop action plans to implement recommended enhancements. These amounts, which were recorded as a liability in the Consolidated Financial Statements prior to the third quarter of 2025, were paid in the fourth quarter of 2025.