25 — Commitments and Contingencies

Employee Compensation Agreements — In the ordinary course of conducting its business, the Company enters into certain employee compensation agreements from time to time which commit it to severance obligations in the event an employee terminates employment with the Company. If applicable, these obligations are recorded as accrued expenses on the Consolidated Balance Sheets.

Litigation — From time to time, the Company is involved in various claims and legal actions that arise in the ordinary course of business. Management is required to assess the likelihood of any adverse judgments or outcomes related to these legal contingencies, as well as potential ranges of probable or reasonably possible losses. The determination of the amount of any losses to be recorded or disclosed as a result of these contingencies is based on a careful analysis of each individual exposure with, in some cases, the assistance of outside legal counsel. The amount of losses recorded or disclosed for such contingencies may change in the future due to new developments in each matter or a change in legal or settlement strategy. While the impact of any one or more legal claims or proceedings could be material to the Company's operating results in any period, management does not believe that the outcome of any of these pending claims or proceedings (including the data security incident discussed below), individually or in the aggregate, will have a material adverse effect on the Company's consolidated financial condition or liquidity.

Data Security Incident — In 2021, the Company experienced an unauthorized access into its online insurance quote feature whereby attackers used personal information already in their possession to obtain additional consumer data, including driver's license numbers. The unauthorized access issue has been remediated; however, the incident became the subject of coordinated industry-wide regulatory investigations. In October 2025, the Company entered into consent orders with each of the New York Department of Financial Services (the "NY DFS") and the New York Attorney General (the "NY AG") to settle all claims related to these investigations. Pursuant to the consent orders, the Company agreed to pay $1.85 million to the NY DFS and $1.3 million to the NY AG, respectively and to perform certain assessments of its privacy and cybersecurity programs and develop action plans to implement recommended enhancements. These amounts, which were recorded as a liability in the Consolidated Financial Statements prior to the third quarter of 2025, were paid in the fourth quarter of 2025.

About Commitments Disclosures

Commitments and contingencies disclosures catalog a company's off-balance-sheet obligations and legal exposures — purchase commitments, guarantee arrangements, pending litigation, and regulatory proceedings. These items represent potential future cash outflows that may not appear as liabilities on the balance sheet until they become probable and estimable.

Key signals: litigation reserves and disclosed loss ranges quantify management's estimate of legal exposure, but unquantified "reasonably possible" losses often represent the larger risk. Watch for changes in language around pending cases — shifts from "remote" to "reasonably possible" or increases in estimated loss ranges signal deteriorating outcomes. Unconditional purchase obligations and take-or-pay contracts create fixed cost structures that reduce operational flexibility. Guarantee arrangements for subsidiaries or joint ventures can create cascading obligations. Compare the total commitment schedule against projected free cash flow to assess whether the company can meet its obligations without additional financing.