Company: ICUI
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000883984-25-000007
Chunk: 124

Company: ICU MEDICAL INC/DE
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1
Chunk 124
---
 measures. We may also experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence. There can also be no assurance that our and our third-party service providers’, strategic partners’, contractors’, consultants’, CROs’ and collaborators’ cybersecurity risk management program and processes, including policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems, networks and Confidential Information.  

We and certain of our service providers have been in the past and may from time to time in the future be subject to cyberattacks and security incidents. Data security breaches and other cybersecurity incidents may result from, for example, non-technical means (e.g., actions by employees or contractors), system failure, accident or unauthorized access. Any such security breach may compromise information stored on our networks or those of third parties on which we rely and may result in significant data losses or theft of personally identifiable information. Any compromise of our security could result in a violation of applicable security, privacy or data protection, consumer and other laws, legal claims and proceedings (such as class actions), regulatory or other governmental investigations, enforcement actions, disruption of our internal operations, and financial exposure, including potential contractual liability, fines and penalties, negative reputational impacts that cause us to lose existing or future customers, and/or significant incident response, system restoration or remediation and future compliance costs. A number of proposed and enacted federal, state and international laws and regulations obligate companies to notify individuals of security breaches involving particular personally identifiable information, which could result from breaches experienced by us or by third parties, including collaborators, vendors, contractors or other organizations with which we expect to form strategic relationships. Any such compromise could also result in damage to our reputation and a loss of confidence in our security and privacy or data protection measures. Any of these effects could materially and adversely affect our business, financial condition and results of operations. Our cyber liability insurance may not be sufficient to cover the financial, legal, business or reputational losses that may result from such an interruption or breach. Furthermore, there can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information. 

Our business could suffer if we lose the services of key personnel.

We are