PROG Holdings (PRG) Risk Factors

The industries in which our Progressive Leasing, Vive and Four businesses operate are highly and increasingly competitive. Progressive Leasing and Vive face competition from national, regional and local operators of lease-to-own stores, virtual lease-to-own companies, traditional and e-commerce retailers (including many that offer layaway programs and title or installment lending), traditional and online sellers of used merchandise, and various types of consumer finance companies that may enable our customers to shop at traditional or online retailers, as well as with rental stores that do not offer their customers a purchase option. Similarly, Four faces competition from other companies who offer buy now, pay later products, many of whom are larger than Four, in addition to some of the competitors mentioned above. These competitors may have significantly greater financial and operating resources, greater name recognition in certain markets and more developed products and services, which may allow them to grow faster, including through acquisitions, and to offer more aggressive exclusivity, rebate and/or other incentive payments to existing and potential POS partners, some of whom may be our POS partners. This in turn may enable these competitors to enter new markets, which may decrease opportunities for us in those markets. Greater name recognition, or better public perception of a competitor's reputation, may help the competitor divert market share, even in established markets. Some competitors may be willing to offer competing products on an unprofitable basis (or may have looser decisioning standards or be willing to relax their decisioning standards) in an effort to gain market share, which could compel us to match their pricing and/or decisioning strategy or lose business. In addition, some of Progressive Leasing's competitors may be willing to lease certain types of products that we will not agree to lease, enter into customer leases that have services, as opposed to goods, as a significant portion of the lease value, or engage in other practices related to pricing, aggressive rebates and other incentive payments to POS partners, compliance, and other areas that we will not, in an effort to gain market share at our expense. Our business relies heavily on relationships with POS partners. An increase in competition may cause our POS partners to no longer offer our product and services in favor of our competitors, or to offer our product and services and the products of its competitors simultaneously at the same store locations, which may slow growth in our business and limit or reduce profitability. Furthermore, our virtual lease-to-own competitors may deploy different business models, such as direct-to-consumer strategies, that forego reliance on POS partner relationships that may prove to be more successful.

Progressive Leasing's relationship with its largest POS partners will have a significant impact on our operating revenues in future periods. The loss of any key POS partners would have a material adverse effect on our business. For example, during 2023, we derived 51.3% of our consolidated revenues from customers of Progressive Leasing's top three POS partners, and 78.6% of our consolidated revenues from customers of Progressive Leasing's top ten POS partners. Any extended discontinuance of Progressive Leasing's relationship with any of those POS partners or other high visibility retailers, including as a result of such partners going out of business or otherwise being unable or unwilling to continue their relationships with Progressive Leasing, would have a material adverse impact on several aspects of our performance. In addition, in the event that Progressive Leasing enters into new or amended business or contractual terms or conditions with any of its largest POS partners that are less favorable than its current arrangements with those POS partners, including with respect to the prices it pays those POS partners for merchandise that it leases to consumers and/or exclusivity, rebate or other incentive payments it may make to those POS partners, our business and prospects may be materially and adversely effected. Any publicity associated with the loss of any of Progressive Leasing's large POS partners may harm its reputation, making it more difficult to attract and retain consumers and other POS partners and could lessen its negotiating power with its remaining and prospective POS partners. Our operating revenues and operating results may also suffer if any of Progressive Leasing's POS partners experiences a significant decline in sales for any reason, including, for example, due to increased inflation and/or a prolonged recession reducing or eliminating many consumers' discretionary incomes, and/or supply chain interruptions unfavorably impacting the inventories of our POS partners. There can be no assurance that Progressive Leasing will be able to continue its relationships with its largest POS partners on the same or more favorable terms in future periods or that its relationships will continue beyond the terms of its existing contracts with them. Our operating revenues and operating results may suffer if, among other things, any of Progressive Leasing's POS partners renegotiate, terminate or fail to renew, or fail to renew on similar or favorable terms, their agreements or otherwise choose to modify the level of support they provide for Progressive Leasing's products and services.

In April 2020, our Progressive Leasing business entered into a settlement with the FTC (the "FTC Settlement") to resolve allegations by the FTC that certain of Progressive Leasing's advertising and marketing practices violated the FTC Act, even though Progressive Leasing believed it was in compliance with the FTC Act, and thus, did not admit any violations of that act or any other laws. Under the FTC Settlement, Progressive Leasing paid $175 million to the FTC and agreed to enhance certain of its compliance-related activities, including augmenting disclosures to its customers and expanding its POS partner monitoring programs. In recent years, federal regulatory authorities have increasingly focused on alternative consumer financial services products, including consumer protection within the subprime financial marketplace in which our Progressive Leasing, Vive and Four businesses operate. For example, the Consumer Financial Protection Bureau ("CFPB") has filed a lawsuit against one of our lease-to-own competitors and has threatened to take legal action against another one in connection with its investigation of that competitor. In addition, in 2022, the CFPB announced a review of the business practices of a number of companies that offer buy-now-pay-later ("BNPL") services, alleging several areas of perceived risk of consumer harm, including inconsistent consumer protections and the risk of borrowers becoming overextended. We believe the CFPB's review is illustrative of the greater focus federal regulatory authorities have put on alternative consumer financial services products, including within the industries in which our businesses operate, which may result in increased compliance costs and the possibility of significant monetary penalties, remediation expenses and costly changes to the manner in which we conduct our businesses. Any of these federal agencies may propose and adopt new regulations (or interpret existing regulations) that may result in significant adverse changes in the regulatory landscape for Progressive Leasing, Vive and Four. We expect federal regulatory agencies will continue their increased focus on alternative consumer financial services products, and, as a result, businesses transacting with subprime consumers, for example, may be held to higher standards of monitoring, disclosure and reporting, regardless of whether new laws or regulations governing our industry are adopted. This increased attention may increase Progressive Leasing's, Vive's and Four's compliance costs significantly, result in additional fines or monetary penalties or settlements due to future government investigations, and materially and adversely impact the manner in which they operate, which may be materially adverse to several aspects of our performance. In recent years, state regulatory authorities have also been increasingly focused on the subprime financial marketplace, including the lease-to-own industry. For example, in August 2022, a complaint was filed by the Pennsylvania Attorney General against the Company's Progressive Leasing business alleging, among other things, that Progressive Leasing had violated the Pennsylvania Rental Purchase Agreement Act by failing to disclose certain terms and conditions of rent-to-own ("RTO") transactions on "hang tags" physically attached to RTO merchandise. Although the Company believed the Pennsylvania Attorney General's claims were without merit, it entered into a settlement with the Pennsylvania Attorney General in January 2024, pursuant to which the Attorney General agreed to release its claims against Progressive Leasing. That settlement was approved by the court where the lawsuit was pending on January 26, 2024. Additionally, in early 2021, a number of lease-to-own companies, including the Company's Progressive Leasing business, received a subpoena from the California Department of Financial Protection and Innovation (the "DFPI"). The subpoena received by Progressive Leasing in January 2021 from the DFPI requested the production of documents regarding Progressive Leasing's operations and its compliance with state consumer protection laws, including new legislation that went into effect on January 1, 2021. Although the Company believes Progressive Leasing is in compliance with all applicable consumer financial laws and regulations in California, this inquiry may lead to an enforcement action and/or a consent order and substantial costs, including legal fees, fines, penalties, and remediation expenses. While the Company intends to preserve defenses surrounding the jurisdiction of DFPI in this matter, the Company has fully cooperated and anticipates that it will continue cooperating with the DFPI in responding to its inquiry. We are currently unable to predict the ultimate timing or outcome of the investigation undertaken by the DFPI. In addition, the FTC Settlement may lead to investigations and enforcement actions by, and/or consent orders with, state Attorneys General or other state regulatory agencies. Furthermore, in November 2021, Upbound Group, Inc. announced that its Acima division ("Acima"), which is a large virtual lease-to-own business that competes with Progressive Leasing, had received a letter from the Nebraska Attorney General's office stating that the Attorney General of Nebraska, along with a coalition of thirty-eight state Attorneys General, had initiated a multistate investigation into the business acts and practices of Acima. As of the date of this Annual Report on Form 10-K, we have not received a similar communication from the Nebraska Attorney General's office and are not aware of any intention by any state Attorneys General involved in the Acima matter to broaden their investigation to include Progressive Leasing in their investigation. However, there can be no assurance that Progressive Leasing will not be included in such matter and, if it is, that it would not lead to an enforcement action and/or a consent order, or substantial costs, including legal fees, fines, penalties, and remediation expenses. We cannot predict whether any state Attorneys General or state regulatory agencies will direct other investigations or regulatory investigations towards us or our industry in the future, or what the impact of any such future regulatory investigation may be. In addition, certain aspects of Progressive Leasing's, Vive's and Four's businesses, such as the content of their advertising and other disclosures to customers about transactions, their respective data collection practices, the manner in which they may contact their customers, the decisioning process regarding whether to enter into a transaction with a potential customer, their credit reporting practices, and the manner in which they process and store certain customer, employee and other information are subject to federal and state laws and regulatory oversight. For example, the California Consumer Privacy Act of 2018 (the "CCPA") gives residents of California expanded rights to access and delete their personal information, opt out of certain personal information sharing, and receive detailed information about how their personal information is used, and also provides for civil penalties for violations and private rights of action for data breaches. In addition, the California Privacy Rights Act ("CPRA"), which became effective on January 1, 2023, significantly modifies the CCPA, including by expanding consumers' rights with respect to certain personal information and creating a new state agency to oversee implementation and enforcement efforts. The CCPA, CPRA, and other applicable state and federal privacy laws now require Progressive Leasing, Vive and Four to design, implement and maintain different types of privacy-related compliance controls and programs simultaneously in multiple states, thereby further increasing the complexity and cost of compliance. In addition, certain states' laws limit the total cost that Progressive Leasing may charge a customer in order for the customer to achieve ownership of the leased merchandise at the end of the lease term. We have incurred and will continue to incur substantial costs to comply with federal, state and local laws and regulations, including rapidly evolving expected consumer protection standards. In addition to compliance costs, we may continue to incur substantial expenses to respond to regulatory and other third-party investigations and enforcement actions, proposed fines and penalties, criminal or civil sanctions, and private litigation, as well as potential "headline risks" that may negatively impact our business and may adversely affect our share price. Consumer complaints with respect to our industry have resulted in, and may in the future result in, state, federal and local regulatory and other investigations. In addition, while we are not aware of any whistleblower claims regarding Progressive Leasing's, Vive's or Four's specific business practices, such claims are on the rise generally. We believe these claims will likely continue, in part because of the provisions enacted by the Dodd-Frank Act that provide for cash awards to persons who report alleged wrongdoing to the U.S. Securities and Exchange Commission, and because competitors may use it as a method to weaken their competitors, and others, like former personnel or other constituencies, may use it as means to extract payment or otherwise retaliate. Additionally, as we execute on our strategic plans, we may continue to expand into complementary businesses that engage in financial, consumer credit transactions or lending services, or lease-to-own or rent-to-rent transactions involving products that we do not currently offer our customers, or implement the use of new technologies in our existing businesses and products, such as machine learning and artificial intelligence-based technologies, all of which may be subject to a variety of statutes, laws and regulatory requirements in addition to those regulations currently applicable to our operations, which may impose significant costs, limitations or prohibitions on the manner in which we currently conduct our businesses as well as those we may acquire in the future.

Progressive Leasing's, Vive's and Four's businesses involve the collection, storage, use, disclosure, processing, transfer, and other handling (collectively, "processing") of a wide variety of information, including personally identifiable information, for various purposes in their businesses, including to help ensure the integrity of their services and to provide features and functionality to their customers and POS partners. The processing of the information they acquire in connection with their customers' and POS partners' use of their services is subject to numerous privacy, data protection, cybersecurity, and other laws and regulations in the United States. The automated nature of their businesses and their reliance on digital technologies may make them an attractive target for, and potentially vulnerable to, cyber-attacks, computer malware, computer viruses, social engineering (including phishing and ransomware attacks), general hacking, physical or electronic break-ins, or similar disruptions. While they and their vendors have taken steps to protect the confidential, proprietary, and sensitive information to which they have access and to prevent data loss, their security measures or those of their vendors could be breached, including as a result of employee theft, exfiltration, misuse or malfeasance, their actions, omissions, or errors, third-party actions, omissions, or errors, unintentional events, or deliberate attacks by cyber criminals, any of which may result in the loss of, or unauthorized access to, their or their customers' data, their intellectual property, or other confidential, proprietary, or sensitive business information. Any accidental or willful security breaches or other unauthorized access to their platforms or servicing systems may cause confidential, proprietary, or sensitive information to be stolen and used for criminal or other unauthorized purposes. Security breaches or unauthorized access to confidential information may also expose Progressive Leasing, Vive, Four and us to liability related to the loss of the information, time-consuming and expensive litigation and government investigations, enforcement actions and negative publicity. If security measures are breached because of employee theft, exfiltration, misuse or malfeasance, Progressive Leasing's, Vive's or Four's own actions, omissions, or errors, third-party actions, omissions, or errors, unintentional events, deliberate attacks by cyber criminals or otherwise, or if design flaws in their software or systems are exposed and exploited, Progressive Leasing's, Vive's and Four's relationships with their customers may be damaged, and they and/or us may incur significant liability. Although we, Progressive Leasing, Vive and Four monitor our respective systems in order to detect security breaches or instances of unauthorized access to confidential information, there is no guarantee that our monitoring efforts will be effective. The techniques used to obtain unauthorized, improper, or illegal access to Progressive Leasing's, Vive's, or Four's systems, their or their customers' data, or to disable or degrade service or sabotage systems, are constantly evolving, may be difficult to detect quickly, and often are not recognized until after they have been launched against a target. They may be unable to anticipate these techniques, react in a timely manner, or implement adequate preventative or remedial measures. Unauthorized parties have in the past attempted and may in the future attempt to gain access to Progressive Leasing's, Vive's or Four's systems or facilities through various means, including, among others, hacking into our or their POS partners' or customers' systems or facilities, or attempting to fraudulently induce employees, POS partners, customers or others into disclosing usernames, passwords, or other sensitive information, which may in turn be used to access systems and gain access to confidential, proprietary, or sensitive information. Such efforts may be state-sponsored and supported by significant financial and technological resources, making them even more difficult to detect and prevent. As a result, there can be no assurance that the protections deployed by us, Progressive Leasing, Vive and Four will always be successful. For example, as the Company disclosed on September 21, 2023, Progressive Leasing experienced a cybersecurity incident affecting certain of its systems. While there was no major operational impact to any of Progressive Leasing's services as a result of the incident, and the Company's other subsidiaries were not impacted, this incident, as well as any other breach of our systems or facilities, or those of Progressive Leasing, Vive or Four, may continue to result in the risks discussed herein. Any actual or perceived failure to comply with legal and regulatory requirements applicable to us, Progressive Leasing, Vive or Four, including those relating to information security, or any failure to protect the information that they collect from their customers and POS partners, including personally identifiable information, from cyber-attacks, may result in, among other things, regulatory or governmental investigations, administrative enforcement actions, sanctions, criminal liability, private litigation, civil liability and constraints on our, Progressive Leasing's, Vive's or Four's ability to continue to operate. Furthermore, federal and state regulators and many federal and state laws and regulations require notice of any data security breaches that involve personal information. These mandatory disclosures regarding a security breach are costly to implement and often lead to widespread negative publicity, which may cause consumers to lose confidence in the effectiveness of our, Progressive Leasing's, Vive's or Four's data security measures. Any security breach suffered by us, Progressive Leasing, Vive, Four or our vendors, any unauthorized, accidental, or unlawful access or loss of data, or the perception that any such event has occurred, may result in a disruption to our, Progressive Leasing's, Vive's or Four's operations, litigation, an obligation to notify regulators and affected individuals, the triggering of indemnification and other contractual obligations, regulatory investigations, government fines and penalties, reputational damage, and loss of customers and ecosystem partners, and our business may be materially and adversely affected. In addition, we may incur significant costs and operational consequences in connection with investigating, mitigating, remediating, eliminating, and putting in place additional tools and devices designed to prevent future actual or perceived security incidents, as well as in connection with complying with any notification or other obligations resulting from any security incidents. Our insurance policies carry retention and coverage limits, which may not be adequate to reimburse us for losses caused by security breaches, and we may not be able to collect fully, if at all, under these insurance policies. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, may adversely affect our businesses. Furthermore, we cannot be certain that insurance coverage will continue to be available on acceptable terms or at all, or that the insurer will not deny coverage as to any future claim, including claims related to the most recent cybersecurity incident experienced by Progressive Leasing discussed above. Reduced confidence and participation in our platforms and our data security measures may also adversely affect a customer's willingness to make payments on his or her lease (in the case of Progressive Leasing) or loan (in the case of Vive or Four), which may result in reduced collections.

Progressive Leasing, Vive and Four are constantly striving to improve the user experience for their customers. Some of their changes may have the effect of reducing their short-term revenue or profitability if they believe that the benefits will ultimately improve their financial performance over the long-term. Any short-term reductions in revenue or profitability may be more severe than they (or we) anticipate or these decisions may not produce the long-term benefits that they (or we) expect, in which case several aspects of our performance may be materially and adversely affected.

In light of the uncertain macroeconomic environment, we have taken a number of steps to reduce our cost structure in order to drive efficiencies and right-size variable costs, while minimizing the negative impact on growth-related initiatives. These cost reduction initiatives have included, among others, reduction of our workforce and of other SG&A expenditures. For example, on January 25, 2024, we announced the continuation of such cost reduction initiatives, including a termination of certain independent sales agent agreements, a reduction in our workforce and office space reduction and consolidation. While we believe these initiatives have thus far benefited the Company, particularly as they relate to aligning our servicing costs with our expectations regarding GMV and revenue, such initiatives may ultimately prove to be inadequate or have unintended consequences disruptive to our businesses, including those relating to the implementation of a global workforce outsourcing strategy for certain of the Company's information technology functions. In addition, we may not be fully successful in realizing the efficiencies we are seeking, which are subject to many estimates and assumptions and other factors we may not be able to control. We may also be required to undertake additional cost reduction steps, including a further reduction of our workforce, which could also be disruptive to our businesses and potentially lower the anticipated benefits with respect to our future performance, including with respect to GMV and revenue.

Although Progressive Leasing, Vive and Four maintain business continuity and disaster recovery plans in the event of a disruption in service on their platforms, including a disruption in service from a required vendor to those platforms, they may not have sufficient capacity to recover all data and services in the event of an outage. For example, they may be unable to process transactions or post payments on their platforms, which could damage their brands and reputations, divert the attention of their employees, reduce our revenue, subject us and them to liability, and cause consumers or merchants to abandon their platforms. In addition, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we incur. The impact of any of these events may have a material and adverse effect on several aspects of our performance.