General risk factors
Our information technology systems, or those of any of our CROs, manufacturers, other contractors, consultants, third party vendors, collaborators, or potential future collaborators, may fail or suffer cybersecurity incidents, breaches or other unauthorized or improper access to, use of, or destruction of our proprietary or confidential data, employee data, or personal information, which could result in additional costs, loss of revenue, significant liabilities, harm to our brand and material disruption of our operations, or otherwise harm our business.
In the course of our business, we collect, store and transmit proprietary, confidential and sensitive information, including personal information. The information and data processed and stored in our technology systems, and those of our research collaborators, CROs, contractors, consultants, and other third parties on which we depend to operate our business, may be vulnerable to security breaches, loss, damage, corruption, unauthorized access, use or disclosure, or misappropriation. Such incidents may also result from errors or malfeasance by our personnel or the personnel of the third parties we work with, malware, viruses, software vulnerabilities, hacking, denial of service attacks, social engineering (including phishing), ransomware, credential stuffing or other cyberattacks, including attacks by state-sponsored organizations or sophisticated groups of hackers.
While we have developed systems and processes designed to protect the integrity, confidentiality and security of the confidential and personal information under our control, we cannot assure you that any security measures that we or our third party service providers have implemented will be effective in preventing cybersecurity incidents. There are many different cybercrime and hacking techniques and as such techniques continue to evolve, we may be unable to anticipate attempted security breaches, identify them before our information is exploited, or react in a timely manner.
Additionally, as a result of the ongoing COVID-19 pandemic, certain functional areas of our workforce remain in a remote work environment and outside of our corporate network security protection boundaries, which imposes additional risks to our business, including increased risk of industrial espionage, phishing and other cybersecurity attacks, and unauthorized dissemination of proprietary or confidential information, any of which could have a material adverse effect on our business.
Despite our efforts to strengthen security and authentication measures, we have experienced an overall increase in cybersecurity incidents, none of which have caused material disruption to our business, or to our knowledge, involved a material security breach. However, we or the third parties we rely on could experience a material system failure, security breach or other cybersecurity incident in the future, which could interrupt our operations disrupt our development programs and have a material adverse effect on our business, financial condition and results of operations. For example, the loss of clinical trial data from completed or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Likewise, we rely on third parties for the manufacture of our product candidates, to analyze clinical trial samples and to conduct clinical trials, and cybersecurity incidents experienced by these third parties could have a material adverse effect on our business. Security breaches and other cybersecurity incidents affecting us or the third parties we rely on could also result in substantial remediation costs and expose us to litigation, regulatory enforcement action, fines, penalties, and other liabilities.
We cannot be certain that our insurance coverage will be adequate for data security liabilities actually incurred, will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our reputation, business, financial condition and results of operations.
85