Company: HROW
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0001641172-25-000925
Chunk: 223

Company: HARROW, INC.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1A
Chunk 223
---
 important data, and
could have a material adverse effect on our ability to operate our business, including developing, gaining regulatory approval for, manufacturing,
selling and/or distributing our products. For example, in 2017, a pharmaceutical company experienced a cyberattack involving virulent
malware that significantly disrupted its operations, including its research and sales operations and the production of some of its medicines
and vaccines. As a result of the cyberattack, its orders and sales for certain products were negatively affected. In late 2020, SolarWinds
Corporation, a leading provider of software for monitoring and managing information technology infrastructure, disclosed that it had
suffered a cybersecurity incident whereby attackers had inserted malicious code into legitimate software updates for its products that
were installed by myriad private and government customers, enabling the attackers to access a backdoor to such systems. In 2022, Okta,
Inc., a provider of software that helps companies manage user authentication, disclosed that several hundred of its corporate customers
were vulnerable to a security breach that allowed attackers to access Okta’s internal network. Although this breach did not have
a significant effect on our business, there can be no assurance that a similar future breach would not result in a material adverse effect
on our business or results of operations.

 27 

Our
systems contain and use a high volume of sensitive data, including intellectual property, trade secrets and other proprietary business
information, financial information, regulatory information, strategic plans, sales trends and forecasts, litigation materials and/or
personal identifiable information belonging to us, our staff, our patients, customers and/or other parties. In some cases, we utilize
third-party service providers to collect, process, store, manage or transmit such data, which have increased our risk. Intentional or
inadvertent data privacy or security breaches (including cyberattacks) resulting from attacks or lapses by employees, service providers
(including providers of information technology-specific services), business partners, nation states (including groups associated with
or supported by foreign intelligence agencies), organized crime organizations, “hacktivists” or others, create risks that
our sensitive data may be exposed to unauthorized persons, our competitors or the public. System vulnerabilities and/or cybersecurity
breaches experienced by our third-party service providers constitute a substantial share of the information security risks to our business.
There can be no assurance that a cybersecurity incident would not result in a material adverse effect on our business or results of operations.
Further, the timeliness of our awareness of