Blackbaud (BLKB) 10-Q2023 Q1 Quarterly report

This Quarterly Report on Form 10-Q, including the documents incorporated herein by reference, contains forward-looking statements that anticipate results based on our estimates, assumptions and plans that are subject to uncertainty. These "forward-looking statements" are made subject to the safe-harbor provisions of the Private Securities Litigation Reform Act of 1995, Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. Forward-looking statements consist of, among other things, trend analyses, statements regarding future events, future financial performance, our anticipated growth, the effect of general economic and market conditions, our business strategy and our plan to build and grow our business, our operating results, our ability to successfully integrate acquired businesses and technologies, the effect of foreign currency exchange rate and interest rate fluctuations on our financial results, the impact of expensing stock-based compensation, the sufficiency of our capital resources, our ability to meet our ongoing debt and obligations as they become due, cybersecurity and data protection risks and related liabilities, and current or potential legal proceedings involving us, all of which are based on current expectations, estimates, and forecasts, and the beliefs and assumptions of our management. Words such as “believes,” “seeks,” “expects,” “may,” “might,” “should,” “intends,” “could,” “would,” “likely,” “will,” “targets,” “plans,” “anticipates,” “aims,” “projects,” “estimates” or any variations of such words and similar expressions are also intended to identify such forward-looking statements. These forward-looking statements are subject to risks, uncertainties and assumptions that are difficult to predict. Accordingly, they should not be viewed as assurances of future performance, and actual results may differ materially and adversely from those expressed in any forward-looking statements.

Important factors that could cause actual results to differ materially from our expectations expressed in forward-looking statements include, but are not limited to, those summarized under “Part II, Item 1A. Risk factors” and elsewhere in this report, in our Annual Report on Form 10-K for the year ended December 31, 2022 and in our other filings made with the United States Securities & Exchange Commission ("SEC"). Forward-looking statements represent our management's beliefs and assumptions only as of the date of this Quarterly Report on Form 10-Q. We undertake no obligation to update or revise any forward-looking statements, or to update the reasons actual results could differ materially from those anticipated in any forward-looking statement, whether as a result of new information, future events or otherwise.

We are the leading software provider exclusively dedicated to powering social impact. Serving the nonprofit and education sectors, companies committed to social responsibility and individual change makers, our essential software is built to accelerate impact in fundraising, nonprofit financial management, digital giving, grantmaking, corporate social responsibility and education management. A remote-first company, we have operations in the United States, Australia, Canada, Costa Rica and the United Kingdom, supporting users in 100+ countries.

The accompanying condensed consolidated interim financial statements have been prepared pursuant to the rules and regulations of the United States Securities and Exchange Commission ("SEC") for interim financial reporting. These consolidated statements are unaudited and, in the opinion of management, include all adjustments (consisting of normal recurring adjustments and accruals) necessary to state fairly the consolidated balance sheets, consolidated statements of comprehensive income, consolidated statements of cash flows and consolidated statements of stockholders’ equity, for the periods presented in accordance with accounting principles generally accepted in the United States ("U.S.") ("GAAP"). The consolidated balance sheet at December 31, 2022 has been derived from the audited consolidated financial statements at that date. Operating results and cash flows for the three months ended March 31, 2023 are not necessarily indicative of the results that may be expected for the fiscal year ending December 31, 2023, or any other future period. Certain information and footnote disclosures normally included in annual financial statements prepared in accordance with GAAP have been omitted in accordance with the rules and regulations for interim reporting of the SEC. These condensed consolidated interim financial statements should be read in conjunction with the consolidated financial statements and notes thereto included in our Annual Report on Form 10-K for the year ended December 31, 2022, and other forms filed with the SEC from time to time.

The condensed consolidated financial statements include the accounts of Blackbaud, Inc. and its wholly owned subsidiaries. All intercompany balances and transactions have been eliminated in consolidation.

We report our operating results and financial information in one operating and reportable segment. Our chief operating decision maker uses consolidated financial information to make operating decisions, assess financial performance and allocate resources. Our chief operating decision maker is our chief executive officer.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities at the date of the financial statements, as well as the reported amounts of revenues and expenses during the reporting periods. On an ongoing basis, we reconsider and evaluate our estimates and assumptions, including those that impact revenue recognition, long-lived and intangible assets, income taxes, business combinations, stock-based compensation, capitalization of software and content development costs, our allowances for credit losses and sales returns, costs of obtaining contracts, valuation of derivative instruments, loss contingencies and insurance recoveries, among others. Changes in the facts or circumstances underlying these estimates could result in material changes and actual results could materially differ from these estimates.

There are no recently issued accounting pronouncements that we expect to have a material impact on our consolidated financial statements when adopted in the future.

There have been no material changes to our significant accounting policies described in our Annual Report on Form 10-K for the year ended December 31, 2022, filed with the SEC on February 24, 2023.

We compute basic loss per share by dividing net loss available to common stockholders by the weighted average number of common shares outstanding during the period. Diluted loss per share is computed by dividing net loss available to common stockholders by the weighted average number of common shares and dilutive potential common shares outstanding during the period. Diluted loss per share reflects the assumed exercise, settlement and vesting of all dilutive securities using the “treasury stock method” except when the effect is anti-dilutive. Potentially dilutive securities consist of shares issuable upon the exercise of stock options, settlement of stock appreciation rights and vesting of restricted stock awards and units. Diluted loss per share for the three months ended March 31, 2023 and 2022 was the same as basic loss per share as there were net losses in both periods and inclusion of potentially dilutive securities was anti-dilutive.

The following table sets forth the computation of basic and diluted loss per share:

We use a three-tier fair value hierarchy to measure fair value. This hierarchy prioritizes the inputs into three broad levels as follows:

Financial assets and liabilities that are measured at fair value on a recurring basis consisted of the following, as of the dates indicated below:

The fair value of our interest rate swaps and foreign currency forward contracts are based on model-driven valuations using Secured Overnight Financing Rate ("SOFR") rates and foreign currency forward rates, respectively, which are observable at commonly quoted intervals. Accordingly, our interest rate swaps and foreign currency forward contracts are classified within Level 2 of the fair value hierarchy. Our financial contracts that were indexed to LIBOR were modified to reference SOFR during the three months ended September 30, 2022. These modifications did not have a significant financial impact.

Contingent consideration obligations arise from business acquisitions. The fair values are based on discounted cash flow analyses reflecting a probability-weighted assessment approach derived from the likelihood of possible achievement of specified performance measures or events and captures the contractual nature of the contingencies, commercial risk, and the time value of money. As the fair value measurements for our contingent consideration obligations contain significant unobservable inputs, they are classified within Level 3 of the fair value hierarchy.

We believe the carrying amounts of our cash and cash equivalents, restricted cash, accounts receivable, trade accounts payable, accrued expenses and other current liabilities and due to customers approximate their fair values at March 31, 2023 and December 31, 2022, due to the immediate or short-term maturity of these instruments.

We believe the carrying amount of our debt approximates its fair value at March 31, 2023 and December 31, 2022, as the debt bears interest rates that approximate market value. As SOFR rates are observable at commonly quoted intervals, our debt under the 2020 Credit Facility (as defined below) is classified within Level 2 of the fair value hierarchy. Our fixed rate debt is also classified within Level 2 of the fair value hierarchy.

We did not transfer any assets or liabilities among the levels within the fair value hierarchy during the three months ended March 31, 2023.

Assets and liabilities that are measured at fair value on a non-recurring basis include long-lived assets, intangible assets, goodwill and operating lease right-of-use ("ROU") assets. These assets are recognized at fair value during the period in which an acquisition is completed or at lease commencement, from updated estimates and assumptions during the measurement period, or when they are considered to be impaired. These non-recurring fair value measurements, primarily for long-lived assets, intangible assets acquired and operating lease ROU assets, are based on Level 3 unobservable inputs. In the event of an impairment, we determine the fair value of these assets other than goodwill using a discounted cash flow approach, which contains significant unobservable inputs and, therefore, is considered a Level 3 fair value measurement. The unobservable inputs in the analysis generally include future cash flow projections and a discount rate. For goodwill impairment testing, we estimate fair value using market-based methods including the use of market capitalization and consideration of a control premium.

There were no material non-recurring fair value adjustments to our long-lived assets, intangible assets, goodwill and operating lease ROU assets during the three months ended March 31, 2023.

The following table summarizes our debt balances and the related weighted average effective interest rates, which includes the effect of interest rate swap agreements.

In October 2020, we entered into a five-year $900.0 million senior credit facility (the "2020 Credit Facility"). At March 31, 2023, we were in compliance with our debt covenants under the 2020 Credit Facility.

In August 2020, we completed the purchase of our global headquarters facility. As part of the purchase price, we assumed the seller’s obligations under two senior secured notes with a then-aggregate outstanding principal amount of $61.1 million (collectively, the “Real Estate Loans”). At March 31, 2023, we were in compliance with our debt covenants under the Real Estate Loans.

From time to time, we enter into third-party financing agreements for purchases of software and related services for our internal use. Generally, the agreements are non-interest-bearing notes requiring annual payments. Interest associated with the notes is imputed at the rate we would incur for amounts borrowed under our then-existing credit facility at the inception of the notes.

The following table summarizes our currently effective supplier financing agreements as of March 31, 2023:

The changes in supplier financing obligations during the three months ended March 31, 2023, consisted of the following:

We generally use derivative instruments to manage our interest rate and foreign currency exchange risk. We currently have derivatives classified as cash flow hedges and net investment hedges. We do not enter into any derivatives for trading or speculative purposes.

All of our derivative instruments are governed by International Swap Dealers Association, Inc. master agreements with our counterparties. As of March 31, 2023 and December 31, 2022, we have presented the fair value of our derivative instruments at the gross amounts in the condensed consolidated balance sheet as the gross fair values of our derivative instruments equaled their net fair values.

We have entered into interest rate swap agreements, which effectively convert portions of our variable rate debt under the 2020 Credit Facility to a fixed rate for the term of the swap agreements. We designated each of the interest rate swaps as cash flow hedges at the inception of the contracts. As of March 31, 2023 and December 31, 2022, the aggregate notional values of the interest rate swaps were $935.0 million and $435.0 million, respectively. All of the contracts have maturities on or before October 2028.

We have entered into foreign currency forward contracts to hedge revenues denominated in the Canadian Dollar ("CAD") against changes in the exchange rate with the United States Dollar ("USD"). We designated each of the forwards as cash flow hedges at the inception of the contracts. As of March 31, 2023 and December 31, 2022, the aggregate notional values of the foreign currency forward contracts designated as cash flow hedges that we held to buy USD in exchange for Canadian Dollars were $27.7 million CAD and $22.6 million CAD, respectively. All of the contracts have maturities of 12 months or less.

We have entered into foreign currency forward contracts to hedge a portion of the foreign currency exposure that arises on translation of our investments denominated in British Pounds ("GBP") into USD. We designated each of these foreign currency forward contracts as net investment hedges at the inception of the contracts. As of March 31, 2023 and December 31, 2022, we had £14.0 million and £11.2 million, respectively, of foreign currency forward contracts designated as net investment hedges to reduce the volatility of the U.S. dollar value of a portion of our GBP-denominated investments.

The fair values of our derivative instruments were as follows as of:

The effects of derivative instruments in cash flow and net investment hedging relationships were as follows:

Our policy requires that derivatives used for hedging purposes be designated and effective as a hedge of the identified risk exposure at the inception of the contract. Accumulated other comprehensive income (loss) includes unrealized gains or losses from the change in fair value measurement of our derivative instruments each reporting period and the related income tax expense or benefit. Excluding net investment hedges, changes in the fair value measurements of the derivative instruments and the related income tax expense or benefit are reflected as adjustments to accumulated other comprehensive income (loss) until the actual hedged expense is incurred or until the hedge is terminated at which point the unrealized gain (loss) and related tax effects are reclassified from accumulated other comprehensive income (loss) to current earnings. For net investment hedges, changes in the fair value measurements of the derivative instruments and the related income tax expense or benefit are reflected as adjustments to translation adjustment, a component of accumulated other comprehensive income (loss), and recognized in earnings only when the hedged GBP investment is liquidated. The estimated accumulated other comprehensive income as of March 31, 2023 that is expected to be reclassified into earnings within the next twelve months is

$18.6 million. There were no ineffective portions of our interest rate swap or foreign currency forward derivatives during the three months ended March 31, 2023 and 2022. See Note 10 to these condensed consolidated financial statements for a summary of the changes in accumulated other comprehensive income (loss) by component. We classify cash flows related to derivative instruments as operating activities in the condensed consolidated statements of cash flows.

We have operating leases for corporate offices, subleased offices and certain equipment and furniture. As of March 31, 2023, we did not have any operating leases that had not yet commenced.

The term loans under the 2020 Credit Facility require periodic principal payments. The balance of the term loans and any amounts drawn on the revolving credit loans are due upon maturity of the 2020 Credit Facility in October 2025. The Real Estate Loans also require periodic principal payments and the balance of the Real Estate Loans are due upon maturity in April 2038.

We have contractual obligations for third-party technology used in our solutions and for other services we purchase as part of our normal operations. In certain cases, these arrangements require a minimum annual purchase commitment by us. As of March 31, 2023, the remaining aggregate minimum purchase commitment under these arrangements was approximately $280.7 million through 2027.

In the ordinary course of business, we provide certain indemnifications of varying scope to customers against claims of intellectual property infringement made by third parties arising from the use of our solutions or services. We have not identified any losses that might be covered by these indemnifications.

We are subject to legal proceedings and claims that arise in the ordinary course of business, as well as certain other non-ordinary course proceedings, claims and investigations, as described below. We make a provision for a loss contingency when it is both probable that a material liability has been incurred and the amount of the loss can be reasonably estimated. If only a range of estimated losses can be determined, we accrue an amount within the range that, in our judgment, reflects the most likely outcome; if none of the estimates within that range is a better estimate than any other amount, we accrue the low end of the range. For proceedings in which an unfavorable outcome is reasonably possible but not probable and an estimate of the loss or range of losses arising from the proceeding can be made, we disclose such an estimate, if material. If such a loss or range of losses is not reasonably estimable, we disclose that fact. We review any such loss contingency provisions at least quarterly and adjust them to reflect the impacts of negotiations, settlements, rulings, advice of legal counsel and other information and events pertaining to a particular case. We recognize insurance recoveries, if any, when they are probable of receipt. All associated costs due to third-party service providers and consultants, including legal fees, are expensed as incurred.

Legal proceedings are inherently unpredictable. However, we believe that we have valid defenses with respect to the legal matters pending or threatened against us and intend to defend ourselves vigorously against all claims asserted. It is possible that our consolidated financial position, results of operations or cash flows could be materially negatively affected in any particular period by an unfavorable resolution of one or more of such legal proceedings.

As previously disclosed, we are subject to risks and uncertainties as a result of a ransomware attack against us in May 2020 in which a cybercriminal removed a copy of a subset of data from our self-hosted environment (the "Security Incident"). Based on the nature of the Security Incident, our research and third party (including law enforcement) investigation, we do not believe that any data went beyond the cybercriminal, has been misused, or has been disseminated or otherwise made available publicly. Our investigation into the Security Incident by our cybersecurity team and third-party forensic advisors remains ongoing.

We recorded expenses and offsetting probable insurance recoveries related to the Security Incident as follows:

The following summarizes our cumulative expenses, insurance recoveries recognized and insurance recoveries paid as of:

Recorded expenses have consisted primarily of payments to third-party service providers and consultants, including legal fees, as well as settlement of the previously disclosed SEC investigation (as discussed below), settlements of customer claims and accruals for certain loss contingencies. Not included in the expenses discussed above were costs associated with enhancements to our cybersecurity program. We present expenses and insurance recoveries related to the Security Incident in general and administrative expense on our consolidated statements of comprehensive loss and as operating activities on our consolidated statements of cash flows. Total costs related to the Security Incident exceeded the limit of our insurance coverage during the first quarter of 2022. We expect to continue to experience significant expenses related to our response to the Security Incident, resolution of legal proceedings, claims and investigations, including those discussed below, and our efforts to further enhance our cybersecurity measures. For the three months ended March 31, 2023, we incurred net pre-tax expense of $17.8 million related to the Security Incident, which included $7.6 million for ongoing legal fees and an additional accrual for loss contingencies of $10.2 million. During the three months ended March 31, 2023, we had net cash outlays of $9.2 million related to the Security Incident, which included ongoing legal fees and the $3.0 million civil penalty paid related to the SEC settlement (as discussed below). In line with our policy, legal fees are expensed as incurred. For full year 2023, we currently expect net pre-tax expense of approximately $20.0 million to $30.0 million and net cash outlays of approximately

$25.0 million to $35.0 million for ongoing legal fees related to the Security Incident. Not included in these ranges are our previous settlements or current accruals for loss contingencies related to the matters discussed below.

As of March 31, 2023, we have recorded approximately $30.2 million in aggregate liabilities for loss contingencies based primarily on recent negotiations with certain governmental agencies related to the Security Incident that we believe we can reasonably estimate in accordance with our loss contingency procedures described above. It is reasonably possible that our estimated or actual losses may change in the near term for those matters and be materially in excess of the amounts accrued, but we are unable at this time to reasonably estimate the possible additional loss.

There are other Security Incident-related matters, including customer claims, customer constituent class actions and governmental investigations, for which we have not recorded a liability for a loss contingency as of March 31, 2023 because we are unable at this time to reasonably estimate the possible loss or range of loss. Each of these matters could, separately or in the aggregate, result in an adverse judgment, settlement, fine, penalty or other resolution, the amount, scope and timing of which we are currently unable to predict, but could have a material adverse impact on our results of operations, cash flows or financial condition.

Lawsuits that are putative class actions require a plaintiff to satisfy a number of procedural requirements before proceeding to trial. These requirements include, among others, demonstration to a court that the law proscribes in some manner our activities, the making of factual allegations sufficient to suggest that our activities exceeded the limits of the law and a determination by the court—known as class certification—that the law permits a group of individuals to pursue the case together as a class. If these procedural requirements are not met, the lawsuit cannot proceed as a class action and the plaintiff may lose the financial incentive to proceed with the case. We are currently engaged in court proceedings to determine whether this will proceed as a class action. Frequently, a court’s determination as to these procedural requirements is subject to appeal to a higher court. As a result of these uncertainties, we may be unable to determine the probability of loss until, or after, a court has finally determined that a plaintiff has satisfied the applicable class action procedural requirements.

Furthermore, for putative class actions, it is often not possible to reasonably estimate the possible loss or a range of loss amounts, even where we have determined that a loss is reasonably possible. Generally, class actions involve a large number of people and raise complex legal and factual issues that result in uncertainty as to their outcome and, ultimately, making it difficult for us to estimate the amount of damages that a plaintiff might successfully prove. This analysis is further complicated by the fact that the plaintiffs lack contractual privity with us.

As previously disclosed, on March 9, 2023, the Company reached a settlement with the SEC in connection with the Security Incident. This settlement fully resolves the previously disclosed SEC investigation of the Security Incident and is further described in an SEC cease-and-desist order (the “SEC Order”). Under the terms of the SEC Order, the Company has agreed to cease-and-desist from committing or causing any violations or any future violations of Sections 17(a)(2) and (3) of the Securities Act of 1933, as amended (the “Securities Act”), and Section 13(a) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), and Rules 12b-20, 13a-13 and 13a-15(a) thereunder. No other violations of the securities laws are alleged in the SEC Order. As part of the SEC Order, the Company also agreed to pay, and has paid, a civil penalty in the amount of $3.0 million. The Company consented to the entry of the SEC Order without admitting or denying the findings of the SEC Order, other than with respect to the SEC’s jurisdiction over the Company and the subject matter of the SEC Order. The SEC Order describing the settlement was furnished as Exhibit 99.1 and the SEC’s press release announcing this resolution is furnished as Exhibit 99.2 to the Company’s Current Report on Form 8-K filed with the SEC on March 9, 2023.

On September 28, 2021, the Information Commissioner’s Office in the United Kingdom under the U.K. Data Protection Act 2018 (the "ICO") notified us that it has closed its investigation of the Security Incident. Based on its investigation and having considered our actions before, during and after the Security Incident, the ICO issued our European subsidiary a reprimand in accordance with Article 58(2)(b) of the U.K. General Data Protection Regulation ("U.K. GDPR") due to our non-compliance, in the ICO's view, with the requirements set out in Article 32 of the U.K. GDPR regarding the processing of personal data. The ICO did not impose a penalty related to the Security Incident, nor did it impose any requirements for further action by us.

On September 24, 2021, we received notice from the Spanish Data Protection Authority that it has concluded its investigation of the Security Incident, pursuant to which our European subsidiary paid a penalty of €60,000 in relation to the alleged late notification of two Spanish data controllers regarding the Security Incident.

On January 15, 2021, we were notified by the Data Protection Commission of Ireland that it has concluded its investigation of the Security Incident without taking any action against us.

We continue to cooperate with all ongoing investigations, which include various requests for documents, policies, narratives and communications, as well as requests to interview or depose various Company-related personnel. As noted above, each of these separate governmental investigations could result in adverse judgments, settlements, fines, penalties or other resolution, the amount, scope and timing of which we are currently unable to predict, but could have a material adverse impact on our results of operations, cash flows or financial condition.

Our income tax benefit and effective income tax rates, including the effects of period-specific events, were:

The increase in our effective income tax rate for the three months ended March 31, 2023 when compared to the same period in 2022 was primarily attributable to unfavorable impact of non-deductible Security Incident accruals, lower foreign-derived intangible income deduction and an increase to the UK corporate tax rate offset against benefit attributable to valuation allowance reduction.

The changes in accumulated other comprehensive income (loss) by component, consisted of the following:

We applied the practical expedient in ASC 606-10-50-14 and have excluded the value of unsatisfied performance obligations for (i) contracts with an original expected length of one year or less (one-time services); and (ii) contracts for which we recognize revenue at the amount to which we have the right to invoice for services performed (transactional revenue).

Our contract assets as of March 31, 2023 and December 31, 2022 were insignificant. Our closing balances of deferred revenue were as follows:

We sell our cloud solutions and related services in three primary geographical markets: to customers in the United States, to customers in the United Kingdom and to customers located in other countries. The following table presents our revenue by geographic area based on the address of our customers:

The following table presents our revenue by market group:

The following table presents our recurring revenue by type:

We are the leading software provider exclusively dedicated to powering social impact. Serving the nonprofit and education sectors, companies committed to social responsibility and individual change makers, our essential software is built to accelerate impact in fundraising, nonprofit financial management, digital giving, grantmaking, corporate social responsibility and education management. A remote-first company, we have operations in the United States, Australia, Canada, Costa Rica and the United Kingdom, supporting users in 100+ countries.

Total revenue increased by $4.6 million during the three months ended March 31, 2023, when compared to the same period in 2022, driven largely by the following:

We have a number of multi-year pricing initiatives underway, some to bring our pricing in line with the market while others are model changes that are expected to drive greater revenue for both us and our customers. As a result, we expect to see an acceleration in growth in the second half of 2023 when compared to the first half of the year as we begin to see the full-year effect of some of these pricing initiatives.

We expect that the one-time services and other revenue will continue to significantly decrease during 2023 compared to 2022 driven by our continued migration to the cloud in our core business.

Income from operations decreased by $4.0 million during the three months ended March 31, 2023, when compared to the same period in 2022, driven largely by the following:

We are continuing to make critical investments in the business in areas such as digital marketing, innovation, cybersecurity, customer success and our continued shift of cloud infrastructure to leading public cloud service providers. Our profitability during the first quarter reflects some of these incremental investments. In 2023, we expect our financial performance to improve with each successive quarter, starting with meaningful improvement in the second quarter as our pricing and cost initiatives take hold.

We continuously seek opportunities to optimize our portfolio of solutions to focus time and resources on innovation that will have the greatest impact for our customers and the markets we serve, and drive the highest return on investment. To that end, we will continue to simplify and rationalize our portfolio through product sunsets and divestitures of non-core businesses and technologies.

A key factor to our overall success is the renewal and expansion of our existing subscription agreements with our customers. Management uses gross dollar retention in analyzing our success at delighting our customers with innovative and cloud solutions. Gross dollar retention is defined as contracted annual recurring revenue ("CARR") divided by beginning CARR with a measurement period of twelve months. For the twelve months ended March 31, 2023, our gross dollar retention was approximately 90%. This gross dollar retention rate is relatively unchanged from our rate for the full year ended December 31, 2022. We are continually investing in innovation, which we believe will increase gross dollar retention over the long-term.

Although some customer attrition is normal, our new contract pricing and renewal model (as described above on page 24) does not appear to have impacted customer attrition to date.

During the three months ended March 31, 2023, we generated $21.8 million in cash from operations, had a net increase in borrowings of $17.2 million, and had aggregate cash outlays of $15.3 million for purchases of property and equipment and capitalized software and content development costs.

As of March 31, 2023, we have recorded approximately $30.2 million in aggregate liabilities for loss contingencies based primarily on recent negotiations with certain governmental agencies related to the Security Incident that we believe we can reasonably estimate in accordance with our loss contingency procedures described in Note 8. It is reasonably possible that our estimated or actual losses may change in the near term for those matters and be materially in excess of the amounts accrued, but we are unable at this time to reasonably estimate the possible additional loss.

There are other Security Incident-related matters, including customer claims, customer constituent class actions and governmental investigations, for which we have not recorded a liability for a loss contingency as of March 31, 2023 because we are unable at this time to reasonably estimate the possible loss or range of loss. Each of these matters could, separately or in the aggregate, result in an adverse judgment, settlement, fine, penalty or other resolution, the amount, scope and timing of which we are currently unable to predict, but could have a material adverse impact on our results of operations, cash flows or financial condition.

Cost of recurring revenue is primarily comprised of compensation costs for customer support and production IT personnel, hosting and data center costs, third-party contractor expenses, third-party royalty and data expenses, allocated depreciation, facilities and IT support costs, amortization of intangible assets from business combinations, amortization of software development costs, transaction-based costs related to payments services including remittances of amounts due to third-parties and other costs incurred in providing support and recurring services to our customers.

Our customers continue to prefer cloud subscription offerings with integrated analytics, training and payment services. Recurring subscription contracts are typically for a term of three years at contract inception. We have been for several years successfully shifting our legacy customer base away from annual renewals and moving them onto multi-year renewal contracts. We intend to continue focusing on innovation, quality and integration of our cloud solutions, which we believe will drive future revenue growth.

Recurring revenue increased by $8.1 million, or 3.3%, during the three months ended March 31, 2023, when compared to the same period in 2022, driven primarily by the following:

Cost of recurring revenue increased by $2.3 million, or 2.1%, during the three months ended March 31, 2023, when compared to the same period in 2022, driven primarily by the following:

Recurring gross margin increased by 50 basis points for the three months ended March 31, 2023, when compared to the same period in 2022, primarily due to the increase in recurring revenue outpacing the increase in cost of recurring revenue.