← All companies

BFH · CIK 0001101215

What Bread Financial Holdings, Inc. told the SEC could break it.

2 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.

A limited set so far, we surface every cited disclosure we’ve extracted for BFH. More may follow as additional filings are processed.

In its own words

What could break it.

Customer concentration

  • Five largest credit card programs = ~49% of revenue (44% of end-of-period loans); depends on a limited number of large brand-partner relationshipshigh

    Bread Financial's private-label/co-brand card business depends on a limited number of large brand-partner program relationships: its five largest credit card programs accounted for approximately 49% of total net interest and non-interest income (excluding gain on sale) and 44% of end-of-period credit card and other loans for 2025. Its largest named programs include Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. (captured as edges). Because the business is also heavily concentrated in U.S. consumer credit, the loss or non-renewal of, or a downturn at, any of these major brand partners — or a competitive loss of a marquee program — would cause a significant drop in revenue. A high brand-partner / end-market concentration.

    our five largest credit card programs (based on Total net interest and non-interest income) accounted for approximately 49% of our Total net interest and non-interest income excluding the gain on sale and 44% of our End-of-period credit card and other loans.

    SEC filing →As of 2026

Regulatory & policy

  • State interest-rate-cap laws (DIDMCA opt-out) — 10th Circuit ruling lets Colorado cap rates on out-of-state bank loans to its borrowers; other states proposing similar lawsmedium

    Bread Financial's lending model relies on exporting interest rates from its bank charters (Utah/Delaware) to consumers nationwide. That model is threatened by state interest-rate-cap laws: in November 2025 the U.S. Court of Appeals for the Tenth Circuit reversed a preliminary injunction, concluding that 'made in' encompasses loans where either the lender or the borrower is located in Colorado — meaning Colorado could impose interest-rate caps on loans made by out-of-state banks to Colorado borrowers (a DIDMCA opt-out). Other state legislatures have proposed similar laws. If upheld and replicated, such caps would constrain the yields Bread can charge on a meaningful slice of its national card portfolio. A specific, active regulatory exposure to consumer-credit rate regulation.

    Colorado could impose interest-rate caps on loans made by out-of-state banks to Colorado borrowers.

    SEC filing →As of 2026

The hidden graph

Who it depends on, and who depends on it.

Relationships surfaced from filings, including ones disclosed by the other side, which is how the non-obvious ones come to light.

Its customers

  • Victoria's Secret & Co.

    our programs with (alphabetically) Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. and its retail affiliates

    Cited →
  • Signet Jewelers Limited

    our programs with (alphabetically) Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. and its retail affiliates

    Cited →
  • Ulta Beauty, Inc.

    our programs with (alphabetically) Signet Jewelers, Ulta Beauty and Victoria's Secret & Co. and its retail affiliates

    Cited →

Its suppliers

  • Microsoft Corporation

    these relationships include (but are not limited to): Amazon Web Services and Microsoft for our cloud infrastructure, and Fiserv for our credit card processing services

    Cited →
  • Amazon Web Services (AWS)

    these relationships include (but are not limited to): Amazon Web Services and Microsoft for our cloud infrastructure, and Fiserv for our credit card processing services

    Cited →
  • Fiserv, Inc.

    these relationships include (but are not limited to): Amazon Web Services and Microsoft for our cloud infrastructure, and Fiserv for our credit card processing services

    Cited →

In the MyPRIA app, this is checked against the companies you actually own.

← World Watch