PART II – OTHER INFORMATION
Item 1. | Legal Proceedings. |
We are not party to any material pending legal proceedings. From time to time, we may be involved in legal proceedings arising in the ordinary course of business.
Except as set forth below, there have been no material changes to the risk factors included in detail in the “Risk Factors” sections appearing in Part I, Item 1A of our Annual Report on Form 10-K for the year ended December 31, 2022, filed with the SEC on February 23, 2023 and in Part II, Item 1A of our Quarterly Report on Form 10-Q for the quarter ended June 30, 2023, filed with the SEC on August 8, 2023.
Our internal computer systems, or those of our third-party collaborators, service providers, contractors or consultants, may fail or suffer security incidents, which could result in a material disruption of our operations or development programs and could have a material adverse effect on our reputation, business, financial condition or results of operations.
Our internal computer systems and those of our current or future third-party collaborators, service providers, contractors and consultants are vulnerable to damage from computer viruses, unauthorized access, natural disasters, terrorism, war and telecommunication and electrical failures. Attacks on information technology systems are increasing in their frequency, levels of persistence, sophistication and intensity, and they are being conducted by increasingly sophisticated and organized groups and individuals with a wide range of motives and expertise. In addition to extracting sensitive information, such attacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering and other means, including ransom demands, to affect service reliability and/or threaten the confidentiality, integrity and availability of information. The prevalent use of mobile devices also increases the risk of data security incidents. If such a material event were to occur and cause interruptions in our operations or the operations of third-party collaborators, service providers, contractors and consultants, it could result in a material disruption of our operations or development programs and/or produce significant reputational, financial, legal, regulatory, business or operational harm. For example, any loss of clinical trial data for our product candidates could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. To the extent that any disruption or security breach results in a loss of or damage to our data or applications or other data or applications relating to our technology or product candidates, or inappropriate disclosure of confidential or proprietary information, we could incur liabilities and the further development of our product candidates could be delayed. For example, on September 26, 2023, we became aware of unauthorized access to part of our information technology network. As part of our investigation into this incident, we engaged and consulted with outside cyber-security professionals and notified relevant law enforcement authorities. We believe, based on our assessment as of the date of this Form 10-Q filing, that: there has been no interruption to our operations or business; there is no evidence that the exfiltrated data was publicly released or is at further risk; and this event had no material adverse effect on the Company. Although we have taken steps after this event, and will take further steps, to further enhance our cybersecurity protections and minimize the impact of any future event, we cannot provide any assurances that future cyber events will not occur, that these security safeguards will be successful, and that future cyber events, to the extent they occur, will not impact our operations or have any material adverse impact on our business. As a result, we may not in the future successfully prevent service interruptions, exfiltrations or data security incidents that could materially adversely affect our business including the events and potential ramifications described in the succeeding paragraph. In addition, our insurance may not cover or be sufficient in type or amount to cover us against claims related to this data exfiltration or any security breaches, cyberattacks and other related breaches, including the costs of responding to and remediating this incident or any other incidents or any other liability that may arise from this incident or any such incident.
Any failure or perceived failure by us or any third-party collaborators, service providers, contractors or consultants to comply with our privacy, confidentiality, data security or similar obligations to third parties, or any data security incidents or other security breaches that result in the unauthorized access, release or transfer of sensitive information, including personally identifiable information, may result in governmental investigations, litigation, regulatory enforcement actions, fines, sanctions or other penalties, injunctive relief requiring costly compliance measures, required notification and credit monitoring, public statements against us, third parties to lose trust in us, or claims by third parties asserting that we have breached our privacy, confidentiality, data security or similar obligations, any of which could have a material adverse effect on our reputation, business, financial condition or results of operations. Moreover, data security incidents and other security breaches can be difficult to detect, and any delay in identifying them may lead to increased harm.
Item 2. | Unregistered Sales of Equity Securities and Use of Proceeds. |
In September of 2023, in accordance with the terms of its Loan and Security Agreement, as amended, (the “Loan Facility”) with Hercules Capital, Inc. (“Hercules”) the Company issued Hercules and affiliates warrants to purchase 1,051 shares of its common stock at an exercise price of $285.31 per share. The warrants had a Black-Scholes value of $0.1 million, and were issued as consideration in connection with the Company’s borrowing of $15.0 million under the second tranche of the Loan Facility (as described in “Note 6 – Long Term Debt” to the condensed consolidated financial statements included in this Quarterly Report on Form 10-Q).
29