Business Context and Reporting Period
This Form 8-K Current Report was filed by Affirm Holdings, Inc. on June 25, 2024, covering events occurring on June 25 and June 26, 2024. The filing details a material amendment to the company's revolving credit facility and a cybersecurity incident involving a third-party banking partner.
Key Financial Metrics and Agreements
- Credit Facility Expansion: The aggregate commitment under the Revolving Credit Agreement was increased from $205 million to $330 million.
- Maturity Extension: The maturity date was extended to June 26, 2027, subject to conditions regarding outstanding convertible notes.
- Utilization: No amounts had been drawn under the credit agreement at the time of closing.
- Interest Rates: Borrowings bear interest at SOFR plus 1.75% or Base Rate plus 0.75%.
- Commitment Fee: A fee of 0.20% per annum applies to unused commitments.
- Covenants: The agreement includes financial maintenance covenants regarding leverage ratios and tangible net worth, as well as restrictions on additional debt, liens, and dividends.
Material Changes and Events
Cybersecurity Incident
On June 25, 2024, Evolve Bank & Trust, the issuer of the Affirm Card, notified Affirm of a cybersecurity incident where a third party gained unauthorized access to personal and financial information of Evolve customers. Affirm believes Affirm Card user data was compromised due to data sharing for card issuance and servicing. However, Affirm's own information systems were not compromised, and card functionality remains intact.
Financial Impact Assessment
As of the filing date, the Company does not expect the cybersecurity incident to have a material impact on its financial condition or results of operations. The full scope and nature of the incident remain unknown as investigations are ongoing.
Guidance, Outlook, and Risks
- Investigation Status: Affirm is conducting an independent investigation into the data breach alongside remediation efforts. Law enforcement and all Affirm Card users have been notified.
- Operational Continuity: Affirm Card users can continue to transact, and the Company has heightened fraud monitoring.
- Risks: Forward-looking statements highlight risks regarding the extent of unauthorized access, potential disruption to business operations, and reputational impact. The credit agreement contains events of default related to delinquency ratios and change of control.
Key Facts for Investor Verification
- Verify the final scope of the Evolve Bank & Trust data breach and the specific number of Affirm Card users affected.
- Monitor the Company's compliance with the new financial maintenance covenants (leverage ratio and tangible net worth) under the amended credit agreement.
- Track any future draws on the $330 million credit facility and the associated interest expense.
- Watch for updates on the independent investigation and any potential regulatory penalties or litigation arising from the cybersecurity incident.