Ethos Technologies Inc.LIFE

Ethos Technologies lists AI agents among sources of cybersecurity threats.

“Cyber-attacks, data breaches, malicious internet-based activity, online and offline fraud, and other similar activities and/or cybersecurity incidents threaten the confidentiality, integrity, and availability of our and our customers’ personal information (including sensitive data) and information technology systems, and those of the third parties with whom we work. Any such incidents may also compromise confidential business information, result in intellectual property or other confidential or proprietary information being accessed, disclosed, misused, lost, or stolen, including customer, employee or company data (including personal information and other sensitive or regulated data), which could harm our reputation, competitive position or otherwise adversely affect our business. Such threats are prevalent and continue to rise and evolve, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), AI agents, sophisticated nation states, and nation-state-supported actors.”

Ethos Technologies uses generative and agentic AI in business functions and lists associated risks.

“We utilize artificial intelligence, machine learning, and similar tools and technologies, including generative AI and agentic AI (collectively, “AI”) that collect, aggregate, analyze or generate data or other materials or content in connection with our business, including customer-facing, operational and back-office functions, such as customer support, lead targeting, agent fraud detection, and development tooling. The use of AI technologies involves inherent risks. For example: AI tools may be flawed, insufficient, of poor quality, reflect unwanted forms of bias, or contain other errors or inadequacies, any of which may not be easily detectable; AI has been known to produce false or “hallucinatory” inferences or outputs; AI may subject us to new or heightened legal, regulatory, ethical, or other challenges; and negative public opinion or distrust of AI could impair the acceptance of AI solutions, including those incorporated in our products and services. If the AI tools that we use are deficient, inaccurate or controversial, we could incur operational inefficiencies, competitive harm, legal liability, brand or reputation harm, or other adverse impacts on our business and financial results. If we do not have sufficient rights to use the data, content, or other material we input into such AI tools, or the output of such AI tools, or if the data we are using as inputs for AI is not permitted to be further disclosed under state laws or contractual arrangements on which the AI to”

Ethos Technologies relies on third-party generative and agentic AI technologies that may introduce risks.

“Many of the AI technologies we currently, or may in the future, use are developed and maintained by third parties, and such technologies may not be designed, tested, or validated for deployment in complex enterprise environments such as ours. Though we perform due diligence into third-party providers of AI technologies and, where appropriate, impose contractual requirements regarding their information security practices, we are not able to control the way third-party products or services are developed, trained or maintained. Due to the rapid evolution of AI technologies (including generative AI and agentic AI), such technologies may perform unexpectedly in our enterprise environment, such as by experiencing downtime or introducing cybersecurity vulnerabilities.”

AI agents are listed among sources of cybersecurity threats that could compromise Ethos data and systems.

“Cyber-attacks, data breaches, malicious internet-based activity, online and offline fraud, and other similar activities and/or cybersecurity incidents threaten the confidentiality, integrity, and availability of our and our customers’ personal information (including sensitive data) and information technology systems, and those of the third parties with whom we work. Any such incidents may also compromise confidential business information, result in intellectual property or other confidential or proprietary information being accessed, disclosed, misused, lost, or stolen, including customer, employee or company data (including personal information and other sensitive or regulated data), which could harm our reputation, competitive position or otherwise adversely affect our business. Such threats are prevalent and continue to rise and evolve, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), AI agents, sophisticated nation states, and nation-state-supported actors.”

Ethos uses generative AI and agentic AI in customer support, fraud detection and other functions, carrying multiple risks.

“We utilize artificial intelligence, machine learning, and similar tools and technologies, including generative AI and agentic AI (collectively, “AI”) that collect, aggregate, analyze or generate data or other materials or content in connection with our business, including customer-facing, operational and back-office functions, such as customer support, lead targeting, agent fraud detection, and development tooling. The use of AI technologies involves inherent risks. For example: AI tools may be flawed, insufficient, of poor quality, reflect unwanted forms of bias, or contain other errors or inadequacies, any of which may not be easily detectable; AI has been known to produce false or “hallucinatory” inferences or outputs; AI may subject us to new or heightened legal, regulatory, ethical, or other challenges; and negative public opinion or distrust of AI could impair the acceptance of AI solutions, including those incorporated in our products and services. If the AI tools that we use are deficient, inaccurate or controversial, we could incur operational inefficiencies, competitive harm, legal liability, brand or reputation harm, or other adverse impacts on our business and financial results. If we do not have sufficient rights to use the data, content, or other material we input into such AI tools, or the output of such AI tools, or if the data we are using as inputs for AI is not permitted to be further disclosed under state laws or contractual arrangements on which the AI to”

Ethos relies on third-party AI technologies including agentic AI that may introduce cybersecurity vulnerabilities.

“Many of the AI technologies we currently, or may in the future, use are developed and maintained by third parties, and such technologies may not be designed, tested, or validated for deployment in complex enterprise environments such as ours. Though we perform due diligence into third-party providers of AI technologies and, where appropriate, impose contractual requirements regarding their information security practices, we are not able to control the way third-party products or services are developed, trained or maintained. Due to the rapid evolution of AI technologies (including generative AI and agentic AI), such technologies may perform unexpectedly in our enterprise environment, such as by experiencing downtime or introducing cybersecurity vulnerabilities.”

Ethos lists AI agents among potential threat actors in its risk disclosure.

“actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), AI agents, sophisticated nation states, and nation-state-supported actors.”

Cyber threats include AI agents that may compromise data and systems.

“Cyber-attacks, data breaches, malicious internet-based activity, online and offline fraud, and other similar activities and/or cybersecurity incidents threaten the confidentiality, integrity, and availability of our and our customers’ personal information (including sensitive data) and information technology systems, and those of the third parties with whom we work. Any such incidents may also compromise confidential business information, result in intellectual property or other confidential or proprietary information being accessed, disclosed, misused, lost, or stolen, including customer, employee or company data (including personal information and other sensitive or regulated data), which could harm our reputation, competitive position or otherwise adversely affect our business. Such threats are prevalent and continue to rise and evolve, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), AI agents, sophisticated nation states, and nation-state-supported actors.”

Ethos lists AI agents among sources of cybersecurity threats that could compromise proprietary information.

“proprietary information being accessed, disclosed, misused, lost, or stolen, including customer, employee or company data (including personal information and other sensitive or regulated data), which could harm our reputation, competitive position or otherwise adversely affect our business. Such threats are prevalent and continue to rise and evolve, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), AI agents, sophisticated nation states, and nation-state-supported actors.”

Cyber threats from various actors including AI agents could compromise proprietary or sensitive data.

“proprietary information being accessed, disclosed, misused, lost, or stolen, including customer, employee or company data (including personal information and other sensitive or regulated data), which could harm our reputation, competitive position or otherwise adversely affect our business. Such threats are prevalent and continue to rise and evolve, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), AI agents, sophisticated nation states, and nation-state-supported actors.”