BFH · CIK 0001101215
What Bread Financial Holdings, Inc. told the SEC could break it.
2 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.
A limited set so far — we surface every cited disclosure we’ve extracted for BFH. More may follow as additional filings are processed.
In its own words
What could break it.
Customer concentration
- Five largest credit card programs = ~49% of revenue (44% of end-of-period loans); depends on a limited number of large brand-partner relationshipshigh
Bread Financial's private-label/co-brand card business depends on a limited number of large brand-partner program relationships: its five largest credit card programs accounted for approximately 49% of total net interest and non-interest income (excluding gain on sale) and 44% of end-of-period credit card and other loans for 2025. Its largest named programs include Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. (captured as edges). Because the business is also heavily concentrated in U.S. consumer credit, the loss or non-renewal of, or a downturn at, any of these major brand partners — or a competitive loss of a marquee program — would cause a significant drop in revenue. A high brand-partner / end-market concentration.
“our five largest credit card programs (based on Total net interest and non-interest income) accounted for approximately 49% of our Total net interest and non-interest income excluding the gain on sale and 44% of our End-of-period credit card and other loans.”
SEC filing →As of 2026
Regulatory & policy
- State interest-rate-cap laws (DIDMCA opt-out) — 10th Circuit ruling lets Colorado cap rates on out-of-state bank loans to its borrowers; other states proposing similar lawsmedium
Bread Financial's lending model relies on exporting interest rates from its bank charters (Utah/Delaware) to consumers nationwide. That model is threatened by state interest-rate-cap laws: in November 2025 the U.S. Court of Appeals for the Tenth Circuit reversed a preliminary injunction, concluding that 'made in' encompasses loans where either the lender or the borrower is located in Colorado — meaning Colorado could impose interest-rate caps on loans made by out-of-state banks to Colorado borrowers (a DIDMCA opt-out). Other state legislatures have proposed similar laws. If upheld and replicated, such caps would constrain the yields Bread can charge on a meaningful slice of its national card portfolio. A specific, active regulatory exposure to consumer-credit rate regulation.
“Colorado could impose interest-rate caps on loans made by out-of-state banks to Colorado borrowers.”
SEC filing →As of 2026
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings — including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its customers
“our programs with (alphabetically) Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. and its retail affiliates”
Cited →“our programs with (alphabetically) Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. and its retail affiliates”
Cited →“our programs with (alphabetically) Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. and its retail affiliates”
Cited →
Its suppliers
“these relationships include (but are not limited to): Amazon Web Services and Microsoft for our cloud infrastructure, and Fiserv for our credit card processing services”
Cited →“these relationships include (but are not limited to): Amazon Web Services and Microsoft for our cloud infrastructure, and Fiserv for our credit card processing services”
Cited →“these relationships include (but are not limited to): Amazon Web Services and Microsoft for our cloud infrastructure, and Fiserv for our credit card processing services”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch