While the extent of the impact of the COVID-19 pandemic on our business and financial results is uncertain, a continued and prolonged public health crisis such as the COVID-19 pandemic could have a material negative impact on our business, financial condition and operating results.
To the extent the COVID-19 pandemic adversely affects our business and financial results, it may also have the effect of heightening many of the other risks described in this section and in this “Risk Factors” section.
Our internal computer systems, and those used by our third-party research institution collaborators, other contractors, and consultants, may fail or suffer other breakdowns, cyberattacks or information security breaches and incidents that could compromise the confidentiality, integrity and availability of such systems and data, result in material disruptions of our development programs and business operations, risk disclosure of confidential, financial or proprietary information, and affect our reputation.
Despite the implementation of security measures, our internal computer systems, and those used by our third-party research institution collaborators and other contractors or consultants, may be vulnerable to damage, compromise, disruption and unauthorized access owing to a variety of causes, including system malfunction, natural disasters, terrorism, war and telecommunication and electrical failure, cyberattacks by malicious third parties, and inadvertent or intentional actions by our employees, our third-party research institution collaborators, other contractors and consultants, and/or other third parties. As the cyber-threat landscape evolves, attacks are growing in frequency, sophistication, and intensity, and are becoming increasingly difficult to detect. These risks are increased given several of our personnel and those of our collaborators, contractors and consultants work remotely, and threats of cyberattacks by Russia and affiliated actors in response to the war in Ukraine. Such attacks could include the use of key loggers or other harmful and virulent malware, including ransomware or other means of effecting denials of service or unavailability of systems or data, and can be deployed through malicious websites, the use of social engineering, and/or other means. If a breakdown, cyberattack, or other information security breach or incident were to occur and cause interruptions in our operations or any loss, corruption, or unavailability of data, it could result in loss or misappropriation of confidential information, including trade secrets, other intellectual property, or financial information, and a material disruption of our development programs and our business operations, any of which could lead to significant delays or setbacks in our research and other further development and commercialization of our product candidates. For example, the loss of clinical trial data from completed, ongoing, or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data.
Likewise, we rely on our third-party research institution collaborators for research and development of our product candidates and other third parties for the manufacture of our product candidates and to conduct clinical trials, and similar events relating to their computer systems could also have a material adverse effect on our business. Any disruption or security breach or incident that we or our collaborators and other contractors and consultants suffer, including any such disruption, breach or incident resulting in a loss of, or damage to, data or systems, or inappropriate disclosure, access, loss, or other processing of confidential, financial, proprietary or personal information, including data related to our personnel, could result in loss, disclosure or other unauthorized processing of confidential, financial, proprietary, and personal information, could delay further development and commercialization of our product candidates, and any such event, or the perception any such event has occurred, could harm our reputation directly, compel us to comply with federal and/or state breach notification laws and foreign law equivalents, subject us to mandatory corrective action, and otherwise subject us to liability under laws and regulations that protect the privacy and security of personal information, which could result in significant legal and financial exposure and reputational damages that could potentially have an adverse effect on our business. There can be no assurance that we or our collaborators, other contractors and consultants, or other business counterparties will be successful in efforts to detect, prevent, or otherwise respond to security breaches or incidents, or fully recover systems or data from all breakdowns, service interruptions, attacks, or other security breaches or incidents.
Further, notification and follow-up actions related to a security incident could impact our reputation and cause us to incur significant costs, including legal expenses and remediation costs. We expect to incur significant costs in an effort to detect and prevent security breaches and incidents, and we may face increased costs and requirements to expend substantial resources in the event of an actual or perceived disruption or security breach or other security incident.
57