이번 보고서
2026.06 분기보고서
10-Q · 기간 말 2026. 6. 30. · 제출 2026. 7. 30.
비교 기준
2026.03 분기보고서
10-Q · 기간 말 2026. 3. 31.
0
새 리스크 항목
0
신규 문단
18
수정 문단
1
삭제
+1%
분량 변화
AI 한국어 요약
한 줄 요약
AI 인프라 투자를 위한 부채·계약 의무 증가를 처음 명시했고, 데이터센터 반대 여론·규제, AI 법규 시행과 프런티어 모델 공개 제한, 청소년 SNS 금지 확산을 새 리스크로 추가했습니다.
주목할 변화
- 신규투자 재원으로서의 부채 증가 명시인프라 투자를 위해 상당한 부채와 리스 등 계약 의무를 졌고 앞으로도 늘어날 것이라는 문장이 처음 들어갔습니다("We have incurred significant indebtedness... and expect to continue to incur additional obligations"). 같은 분기 해지 불가능한 계약 약정도 2,376.7억 달러에서 3,493.1억 달러로 크게 늘었습니다.
- 신규데이터센터 반대 여론과 지역 규제·세금미국 내 데이터센터 개발에 대한 여론 변화("shifting public sentiment toward data center development")와 주·지방 차원의 입법 움직임을 새로 언급했습니다. 데이터센터 관련 세금이 오르면 설비투자나 운영비가 늘 수 있다는 내용도 추가됐습니다.
- 강화AI 규제: '검토 중'에서 '시행됨'으로AI 법 체계를 "considering or have enacted"로 바꾸고, EU AI Act에 더해 "various U.S. state AI laws"를 명시했습니다. 규제가 막을 수 있는 대상에 "release of frontier AI models"가 추가되어, 최첨단 모델을 공개·배포하는 것 자체가 제한될 수 있다는 점을 인정했습니다. EU AI Act는 주요 규제 준수 목록에도 새로 들어갔습니다.
- 강화AI 고유 보안 위협 구체화AI 관련 리스크에 "model extraction or theft"(모델 추출·탈취)가 추가됐습니다. AI 에이전트 위험에는 "circumvention of AI safety controls"(안전장치 우회)와 "agents acting beyond their intended scope"(에이전트의 권한 밖 행동)가 새로 들어갔습니다. 사이버보안 규제 목록에는 미 법무부의 "Bulk Data Rule"도 추가됐습니다.
- 강화청소년 SNS 금지의 국제 확산호주에 이어 "an increasing number of other countries have passed or are considering youth social media bans"라는 표현이 추가됐습니다. 또 연령 확인 기술의 한계("limitations of age verification technologies") 때문에 규정 준수가 어려울 수 있다는 점도 새로 인정했습니다.
- 완화2021년 4분기 실적 공시 관련 소송 삭제집단소송 목록과 증권소송 목록 모두에서 "the disclosure of our earnings results for the fourth quarter of 2021" 관련 소송이 빠졌습니다. 삭제 사유는 변경 내역에 나와 있지 않습니다.
읽는 법
이번 분기 변화의 중심은 AI 인프라 확장에 따르는 재무 부담과 물리적 제약입니다. 이 리스크가 부채와 지역 여론·세금이라는 구체적 형태로 문서에 처음 등장했다는 점이 의미가 있습니다. 동시에 AI 규제와 청소년 보호 규제가 '논의 단계'에서 '시행 단계'로 넘어가고 있다고 회사가 인식하고 있으므로, 다음 공시에서 관련 비용이나 제품 공개 방식에 실제 영향이 나타나는지 살펴볼 필요가 있습니다.
원문 비교
- Our ability to retain, increase, and engage our user base and to increase our revenue depends heavily on our ability to continue to evolve our existing products and to create successful new products, both independently and in conjunction with developers or other third parties. We may introduce significant changes to our existing products or acquire or introduce new and unproven products, including using technologies with which we have little or no prior development or operating experience. For example, we have relatively limited experience with consumer hardware products and virtual and augmented reality technology, which may adversely affect our ability to successfully develop and market these evolving products and technologies. We are also making significant investments in artificial intelligence (AI) initiatives across our business. For example, we have previously launched, and continue to
launchlaunch, new AI features on our products, including support for new modalities, conversational AIs, AI profiles, stickers, photos, videos, and editing tools. We continue to incur substantial costs, and we may not be successful in generating profits, in connection with these efforts. - There are significant risks involved in developing and deploying AI and there can be no assurance that the usage of AI will enhance our products or services or be beneficial to our business, including our efficiency or profitability. For example, our AI-related efforts, particularly those related to generative AI and superintelligence, subject us to risks related to harmful or illegal content, accuracy, misinformation and deepfakes (including related to elections), bias, discrimination, toxicity, consumer protection, products liability, intellectual property infringement or misappropriation, model extraction or theft, defamation, data privacy, cybersecurity, and sanctions and export controls, among others. It is also uncertain how various laws related to online services, intermediary liability, and other issues will apply to content generated by AI. In addition, we are subject to the risks of new or enhanced governmental or regulatory scrutiny and enforcement, litigation, or other legal liability, ethical concerns, negative consumer perceptions as to automation and AI, activities that threaten people's safety or well-being on- or offline, including with respect to younger users, or other societal harms or complications that could adversely affect our business, reputation, or financial results. For example, we have been the subject of media and government scrutiny relating to AI and AI chatbots, including inquiries and investigations by the FTC, members of Congress and state attorneys general.
- As a result of the complexity and rapid development of AI, it is also the subject of evolving review and investigation by various governmental and regulatory agencies in jurisdictions around the world, which are applying, or are considering applying, platform moderation, intellectual property, products liability, cybersecurity, export controls, consumer protection, and data protection laws to AI and/or are considering or have enacted general legal frameworks on AI (such as the EU AI
Act).Act and various U.S. state AI laws). We may not always be able to anticipate how courts and regulators will apply existing laws to AI, predict how new legal frameworks will develop to address AI, or otherwise respond to these frameworks as they are still rapidly evolving. We may also have to expend resources to adapt to new legal frameworks, and adjust our offerings in certain jurisdictions if the legal frameworks on AI are not consistent across jurisdictions. - It is not possible to predict all of the risks related to the use of AI.
It is not possible to predict all of the risks related to the use of AI and changesChanges in laws, rules, directives, and regulations or other regulatory developments regarding the use of AI, including restrictions around the collection and use ofdata,data or the release of frontier AI models, may adversely affect our ability todevelop anddevelop, deploy, release to the public, or use AI or subject us to legal liability. In addition, AI may not develop in accordance with our expectations, and market acceptance of features, products, or services we build is uncertain. We regularly evaluate our product roadmaps and make significant changes as our understanding of the technological challenges and market landscape of AI, as well as our product ideas and designs, continue to evolve. As a result of these or other factors, our AI strategy and investments may not be successful in the foreseeable future, or at all, which could adversely affect our business, reputation, or financial results. - We frequently make product and investment decisions that may not prioritize short-term financial results if we believe that the decisions are consistent with our mission and benefit the aggregate user experience and will thereby improve our financial performance over the long term. For example, we have implemented, and we will continue to implement, changes to our user data practices. Some of these changes reduce our ability to effectively target ads, which has to some extent adversely affected, and will continue to adversely affect, our advertising business. For example, our "Your Activity
off-Meta Technologies"from Other Businesses" tool enables users to place limits on ourstorage anduse of information about their interactions with advertisers' apps and websites, which reduces our ability to deliver the most relevant and effective ads to our users. Similarly, from time to time we update our Feed display and ranking algorithms or other product features to improve the user experience, and these changes have had, and may in the future have, the effect of reducing time spent and some measures of user engagement with our products, which could adversely affect our financial results. From time to time, we also change the size, frequency, or relative prominence of ads as part of our product and monetization strategies. In addition, we have made, and we expect to continue to make, other changes to our products which may adversely affect the distribution of content of publishers, marketers, and developers, and could reduce their incentive to invest in their efforts on our products. We also may introduce new features or other changes to existing products, or introduce new stand-alone products, that attract users away from properties, formats, or use cases where we have more proven means of monetization, such as our Feed products. In addition, as we focus on growing users and engagement across our family of products, from time to time these efforts have reduced, and may in the future reduce, engagement with one or more products and services in favor of other products or services that we monetize less successfully or that are not growing as quickly. For example, we plan to continue to promote Reels, which we expect will continue to monetize at a lower rate than our Feed and Stories products for the foreseeable future. These decisions may adversely affect our business and results of operations and may not produce the long-term benefits that we expect. - We have made significant investments in AI initiatives, including investments in infrastructure and headcount, including specialized technical personnel, to support our efforts to enhance our products, features, and advertising tools, as well as to develop and train our AI models, and expect to continue to increase these investments. We are also continuing to increase our investments in new platforms and technologies, including as part of our VR, Horizon, and wearables efforts. We have incurred significant indebtedness and other contractual commitments, including lease obligations, to finance these investments and expect to continue to incur additional obligations. Some of these investments have generated only limited revenue and reduced our cash flows, operating margin, and profitability, and we expect the adverse financial impact of such investments to continue for the foreseeable future. For example, our investments in Reality Labs reduced our 2025 overall operating profit by approximately $19.19 billion, and we expect our full-year 2026 Reality Labs operating losses to remain similar to 2025. If our investments are not successful longer-term, our business and financial performance will be harmed.
- A substantial portion of our technical infrastructure is provided by third parties. Any disruption or failure in the services we receive from these providers could harm our ability to handle existing or increased traffic and could significantly harm our business. Any financial or other difficulties these providers face may adversely affect our business, and we exercise little control over these providers, which increases our vulnerability to problems with the services they provide. We have experienced, and expect to continue to experience, various challenges with the supply chain related to supporting our technical infrastructure. As a result, we have adjusted, and may continue to adjust in the future, our procurement practices to adapt to the evolving landscape. We may not be able to secure sufficient components, equipment, or services from third parties to satisfy our needs, or we may be required to procure such components, equipment, or services on unfavorable terms. For example, we are party to a number of partnerships and other third-party arrangements relating to these initiatives, some of which include multi-year purchase commitments. As of
March 31,June 30, 2026, we had$237.67$349.31 billion of non-cancelable contractual commitments, comprising both short-term and long-term arrangements, most of which are related to third-party cloud capacity arrangements and other investments in technical infrastructure, and we continue to enter into additional significant contractual arrangements. - We have designed and built our own data centers and key portions of our technical infrastructure through which we serve our products, and we plan to continue to significantly expand the size of our infrastructure primarily through data centers, subsea and terrestrial fiber optic cable systems, and other projects. The infrastructure expansion we are undertaking is complex and involves projects in multiple locations around the world, including in developing regions that expose us to increased risks relating to anti-corruption compliance, trade compliance, environmental, health, and safety compliance, and political challenges, among others. We have changed, suspended, and terminated certain of these projects as a result of various factors, and may continue to do so in the future. Additional unanticipated delays or disruptions in the completion of these projects, including due to the availability of components, power or network capacity, or any shortage of labor necessary in building portions of such projects, challenges in obtaining required government or regulatory approvals, or other geopolitical challenges or actions by governments, including trade disputes or other developments, may lead to increased project costs, operational inefficiencies, interruptions in the delivery or degradation of the quality or reliability of our products and services, or impairment of assets on our balance sheet. For example, in the United States, our industry has experienced shifting public sentiment toward data center development, as well as related legislative developments, particularly at the state and local levels. Any changes in law that increase taxes related to our data center operations could also increase our capital expenditures or operating costs.
For example,In addition, like others in our industry, we rely on certain third-party equipment and components for our technical infrastructure that are manufactured by a small number of third parties, often with significant operations in a single region such as Asia. Any of the foregoing delays or disruptions, including actions by governments or geopolitical events such as international conflicts, tariffs, sanctions, export or import controls, and other measures that restrict international trade, could reduce or eliminate the ability of our suppliers, manufacturers, or other third-party providers to continue their operations to manufacture, or limit or eliminate our ability to purchase, key components of our technical infrastructure. - To calculate our estimates of DAP, we currently use a series of machine learning models that are developed based on internal reviews of limited samples of user accounts and calibrated against user survey data. We apply significant judgment in designing these models and calculating these estimates. For example, to match user accounts within individual products and across multiple products, we use data signals such as similar device information, IP addresses, and user names. We also calibrate our models against data from periodic user surveys of varying sizes and frequency across our products, which survey questions are based on monthly usage, and which are inherently subject to error. From time to time, the results of such surveys may be impacted by product changes or other factors, and we may update such survey questions. The timing and results of such user surveys have in the past contributed, and may in the future contribute, to changes in our reported Family metrics from period to period. In addition, our data limitations may affect our understanding of certain details of our business and increase the risk of error for our Family metrics estimates. Our techniques and models rely on a variety of data signals from different products, and we rely on more limited data signals for some products compared to others. For example, as a result of limited visibility into encrypted products, we have fewer data signals from WhatsApp user accounts and primarily rely on phone numbers and device information to match WhatsApp user accounts with accounts on our other products. Any loss of access to data signals we use in our process for calculating Family metrics, whether as a result of our own product decisions, actions by third-party browser or mobile platforms, regulatory or legislative requirements, or other factors, also may impact the stability or accuracy of our reported Family metrics, as well as our ability to report these metrics at all. Our estimates of Family metrics also may change as our methodologies evolve, including through the application of new data signals or technologies, product changes, or other improvements in our user surveys, algorithms, or machine learning that may improve our ability to match accounts within and across our products or otherwise evaluate the broad population of our users. In addition, such evolution may allow us to identify previously undetected violating accounts (as defined below).
- The scale and complexity of our business have increased significantly over time. The scale of our business and breadth of our products create significant challenges for our management, operational, and financial resources, including managing multiple relationships with users, marketers, developers, and other third parties, and maintaining information technology systems and internal controls and procedures that support the scale and complexity of our business, including our AI initiatives. To effectively manage our scale, we must maintain, and continue to adapt, our operational, financial, and management processes and systems, manage our headcount and facilities, and effectively train and manage our personnel. Many of our personnel work remotely, which may lead to challenges in productivity and collaboration. In addition, from time to time, we implement organizational changes to pursue greater efficiency and realign our business and strategic
priorities.priorities, including restructurings, employee layoffs, and measures to scale down our office facilities. These efforts also subject us to risks such as greater than anticipated costs, adverse effects on employee retention, and increased difficulty managing the scale and complexity of our business. For example, we could face delays or challenges with product development, enforcement of our policies, other business and strategic initiatives, or legal and regulatory compliance, as well as other disruptions to our operations. As our organization continues to evolve, and we are required to implement and adapt complex organizational management structures, we may find it difficult to maintain the benefits of our corporate culture, including our ability to quickly develop and launch new and innovative products. Any of these developments could negatively affect our business, reputation, or financial results. - We are involved in numerous lawsuits, including stockholder derivative lawsuits and putative class action lawsuits, many of which claim statutory damages and/or seek significant changes to our business operations, and we anticipate that we will continue to be a target for numerous lawsuits in the future. Because of the scale of our user, advertiser, and developer base, the plaintiffs in class action cases filed against us typically claim enormous monetary damages even if the alleged per-user or entity harm is small or non-existent. In addition, we have faced, currently face, and will continue to face additional class action and other lawsuits based on claims related to advertising, antitrust, privacy, security, biometrics, content, algorithms, copyright, user well-being, younger users, employment, contingent workers, activities on our platform, consumer protection, unfair and deceptive trade practices, or product performance or other claims related to the use of consumer hardware and software, including virtual reality technology and products, which are new and unproven. For example, we are currently the subject of multiple putative class action suits in connection with
our platform and user data practices and the misuse of certain data by a developer that shared such data with third parties in violation of our terms and policies;the disclosure of our earnings results for the second quarter of 2018; our acquisitions of Instagram and WhatsApp, as well as other alleged anticompetitive conduct; a former employee's allegations and release of internal company documents beginning in September 2021;the disclosure of our earnings results for the fourth quarter of 2021;and allegations that we inflated our estimates of the potential audience size for advertisements, resulting in artificially increased demand and higher prices. We are also the subject of multiple lawsuits related to our platform and user data practices, our alleged use of biometric technology, our alleged recommendation of and/or failure to remove harmful content, information from third-party websites or apps via our business tools, our alleged use of copyright-protected content, or data that we allegedly improperly scraped or acquired, to train our AI models, and allegations that Facebook and Instagram cause "social media addiction" in users and allegations of violations of the Children's Online Privacy Protection Act (COPPA). We have seen an increase in litigation and threatened claims related to the provision of our services to younger users, and expect to face similar litigation in the future, including as global youth-related regulation continues to evolve. The results of any such lawsuits and claims cannot be predicted with certainty, and any negative outcome from any such lawsuits could result in payments of substantial monetary damages or fines, or undesirable changes to our products or business practices, and accordingly our business, financial condition, or results of operations could be materially and adversely affected. - Similarly, there are a number of legislative proposals or recently enacted laws in the European Union, the United States, at both the federal and state level, as well as other jurisdictions that could impose new obligations or limitations in areas affecting our business. For example, the DMA in the European Union imposes restrictions and requirements on companies like ours, including in areas such as the combination of data across services and product design. The DMA also includes significant penalties for non-compliance. The DMA has caused, and may in the future cause, us to incur significant compliance costs and make changes to our products or business practices. The requirements under the DMA will likely be subject to further interpretation and regulatory engagement. Pending or future proposals to modify competition laws in a number of jurisdictions could have similar effects. Further, the DSA, which started to apply to our business as of August 2023, imposes certain restrictions and requirements for our products and services, subjects us to increased compliance costs, and includes significant penalties for non-compliance. In the UK, the OSA establishes similar types of obligations. The interpretation and enforcement of the DMA, DSA, and OSA, as well as the imposition and amount of penalties for non-compliance, are subject to significant uncertainty. In addition, some countries, such as the UK, India, and Turkey, are considering or have passed legislation implementing data protection requirements, new competition requirements, or requiring local storage and processing of data or similar requirements that could require substantial changes to our products, increase the cost and complexity of delivering our services, cause us to cease the offering of our products and services in certain countries, and/or result in fines or other penalties. We are also subject to new legislation or regulatory decisions that restrict our ability to collect and use information about minors or also limit our advertising services or our ability to offer products and services to minors in certain jurisdictions. For example, several U.S. states, including Arkansas, California, Colorado, Florida, Nebraska, New York, Texas, and Utah, among others, have passed laws restricting our ability to offer services to minors without parental consent or otherwise limiting the services that we can provide to minors. While enforcement of a number of these statutes (or parts of them) has been enjoined or stayed as a result of legal challenges to them, it is possible that the decisions to enjoin these statutes may be overturned, the injunctive orders may expire, and certain statutes are coming into effect that may not be subject to injunctions. Should enforcement of one or more of these statutes not be enjoined, we may not be able to comply with certain of these statutes by their respective effective dates. We are facing similar challenges in other jurisdictions, including Europe, Latin America, and Asia-Pacific. For example, various EU member states are currently considering a range of legislation from mandatory age verification requirements to banning minor access to social media services. In addition, recent legislation in Australia imposes a social media ban for users under 16 years old, requiring certain social media companies to take reasonable steps to ensure under 16 year olds do not hold user
accounts.accounts, and an increasing number of other countries have passed or are considering youth social media bans. Our ability to comply with any such requirements may also be impacted by data limitations, limitations of age verification technologies, or other factors. As a result of legislative proposals, new laws, and evolving interpretation of existing laws in Europe, Asia-Pacific, Latin America, and other jurisdictions, we are also, and expect to continue to be, subject to new requirements relating to allegedly fraudulent or illegal activities by third parties on our platform, which could continue to cause us to incur significant compliance costs or make changes to our products or business practices, and could subject us to additional fines and penalties or liability for losses to users or other third parties in such transactions. In addition, the Province of British Columbia has considered, and may in the future consider, a bill that would permit the government to recover public health-related costs potentially associated with providing goods and services in British Columbia, including potentially social media services. - Compliance with our FTC consent order, the GDPR, U.S. state privacy laws, youth social media laws, the ePrivacy Directive, the DMA, the DSA, the OSA, the EU AI Act, and other regulatory and legislative privacy requirements require significant operational resources and modifications to our business practices, and any compliance failures may have a material adverse effect on our business, reputation, and financial results.
- In addition, we are subject to a variety of additional risks as a result of Payments transactions, including: increased costs and diversion of management time and attention and other resources to address bad transactions or customer disputes; potential fraudulent or otherwise illegal activity by users, developers, employees, or third parties; restrictions on the investment of consumer funds used to transact Payments; and additional disclosure and reporting requirements. We have also launched payments functionality on certain of our applications and as part of our metaverse efforts, and may in the future undertake additional payments initiatives,
including as part of our metaverse efforts,which may subject us to many of the foregoing risks and additional licensing requirements. - Our industry is prone to cyber-attacks by parties seeking unauthorized access to our data or users' data or to disrupt our ability to provide service or otherwise harm us. Our products and services involve the collection, storage, processing, and transmission of a large amount of data. Any failure to prevent or mitigate security breaches and improper access to or disclosure of our data or user data, including personal information, content, or payment information from users, information from marketers, and other intellectual property or content on our systems, could result in the loss, modification, disclosure, destruction, or other misuse of such data, which could harm our business and reputation and diminish our competitive position. In addition, computer malware, viruses, social engineering (such as spear phishing attacks), scraping, and general hacking continue to be prevalent in our industry, have occurred on our systems, and will occur on our systems in the future. We also regularly encounter attempts to create false or undesirable user accounts, purchase ads, or take other actions on our platform for purposes such as spamming, spreading misinformation, or other illegal, illicit, or otherwise objectionable ends. As a result of our prominence, the size of our user base, the types and volume of personal data and content on our systems, and the evolving nature of our products and services (including our efforts involving new and emerging technologies), we believe that we are a particularly attractive target for such breaches and attacks, including from nation states and highly sophisticated, state-sponsored, or otherwise well-funded actors, and we experience heightened risk from time to time as a result of geopolitical events. Our efforts to address undesirable activity on our platform also increase the risk of retaliatory attacks. Such breaches and attacks may cause interruptions to the services we provide, degrade the user experience or otherwise adversely affect users, cause users or marketers to lose confidence and trust in our products, impair our internal systems or product development, or result in financial harm to us. Our efforts to protect our company data or the information we receive, and to prevent or disable undesirable activities on our platform, may also be unsuccessful due to software bugs, misconfigurations, vulnerabilities, single points of failure, or other technical malfunctions; employee, contractor, AI agent, or vendor error or malfeasance; social engineering or other cyber-attacks directed towards our personnel or their access; misuse of company data or systems by our personnel; defects or vulnerabilities in our vendors' information technology systems or offerings or third-party tools, applications, or services used by our personnel; government exploitation or surveillance; breaches of physical security of our facilities, technical infrastructure, or other equipment; or other threats that evolve. In addition, other parties may attempt to fraudulently or maliciously induce employees, contractors, vendors, AI agents, or users to disclose information in order to gain access to our data or systems, our users' data, or other services or systems. Our AI initiatives and other efforts to develop and launch new features, products, and services in a timely manner have introduced additional risks and vulnerabilities that are not fully mitigated. In particular, our efforts to develop and deploy AI models, internal and third-party AI tools, and other AI applications and agents expose us and users of AI agents to increased and novel risks and vulnerabilities, including prompt injection, circumvention of AI safety controls to generate harmful or otherwise unauthorized outputs, errors, agents acting beyond their intended scope, and other issues related to AI agents, as well as compromise of data, systems, or valuable intellectual property including source code, model weights, and other assets. There are similar emerging supply chain vulnerabilities across the industry. Cyber-attacks continue to evolve in sophistication and volume, including as a result of threat actors exploiting the use of generative and agentic AI technologies, and inherently may be difficult to detect for long periods of time. In particular, rapid advances in AI technologies have enabled the discovery of security vulnerabilities at unprecedented speed and scale across the industry, which is expected to continue and may outpace our or other parties' abilities to remediate any such vulnerabilities. As a result, we are exposed to heightened risks of cyber-attacks or other security incidents. Although we have developed systems and processes that are designed to protect our data and user data, to reduce the risk of data loss or misuse, to disable undesirable accounts and activities on our platform, and to reduce the risk of or detect security breaches, such measures will not provide absolute security, and we cannot assure you that we will be able to react in a timely manner to any cyber-attacks or other security incidents, or that our remediation efforts will be successful. Our business and operations span numerous geographies around the world and involve thousands of employees, contractors, vendors, developers, partners, and other third parties, including AI and cloud services. At any given time, we face known and unknown cybersecurity risks and threats that are not fully mitigated, and we discover vulnerabilities in our products, systems, and security efforts.
- We regularly experience such cyber-attacks and other security incidents of varying degrees, and we incur significant costs in protecting against or remediating such incidents. In addition, we are subject to a variety of laws and regulations in the United States and abroad relating to cybersecurity and data protection, including the GDPR and EU member state laws implementing the
EU CybersecurityEuropean Union's Network and Information Security Directive(NIS2),(NIS2) and the Department of Justice's Bulk Data Rule, as well as obligations under our modified consent order with the FTC. As a result, government authorities, affected users, or other parties could initiate legal or regulatory actions against us in connection with any actual or perceived security breaches, improper access to or disclosure of data, or other cybersecurity issues, which has occurred in the past and which could cause us to incur significant expense and liability or result in orders or consent decrees forcing us to modify our business practices. Such incidents or our efforts to remediate such incidents may also result in a decline in our active user base or engagement levels. Any of these events could have a material and adverse effect on our business, reputation, or financial results. - The trading price of our Class A common stock has been, and is likely to continue to be, volatile. Since shares of our Class A common stock were sold in our initial public offering in May 2012 at a price of $38.00 per share, our stock price has ranged from $17.55 to $796.25 through
March 31,June 30, 2026. In addition to the factors discussed in this Quarterly Report on Form 10-Q, the trading price of our Class A common stock has in the past fluctuated and may in the future fluctuate significantly in response to numerous factors, many of which are beyond our control, including: - In addition, the stock markets have experienced extreme price and volume fluctuations that have affected and continue to affect the market prices of equity securities of many technology companies. We are currently subject to securities litigation in connection with our platform and user data practices and the misuse of certain data by a developer that shared such data with third parties in violation of our terms and policies; the disclosure of our earnings results for the second quarter of 2018; and a former employee's allegations and release of internal company documents beginning in September
2021; and the disclosure of our earnings results for the fourth quarter of2021. We may experience more such litigation following future periods of volatility. Any securities litigation could subject us to substantial costs, divert resources and the attention of management from our business, and adversely affect our business. - For example, in 2022 and 2023, we announced several initiatives, including restructurings, employee layoffs, and measures to scale down our office facilities.
- If we are unable to successfully implement and comply with the mandates of the FTC consent order (including any future modifications to the order), GDPR and UK GDPR, U.S. state privacy laws, youth social media laws, ePrivacy Directive, DMA, DSA, EU AI Act, or other regulatory or legislative requirements, or if any relevant authority believes that we are in violation of the consent order or other applicable requirements, we may be subject to regulatory or governmental investigations or lawsuits, which may result in significant monetary fines or damages (including for loss of control of data without other damage), judgments, penalties, or other remedies, and we may also be required to make additional changes to our business practices. Any of these events could have a material adverse effect on our business, reputation, and financial results.