Company: TYRA
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0000950170-25-046124
Chunk: 122

Company: Tyra Biosciences, Inc.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1A
Chunk 122
---
 programs, harm our reputation, significant fines, penalties and liability and loss of customers or sales.

In the ordinary course of business, we collect, store, transmit and otherwise process large amounts of confidential information including, without limitation, intellectual property, proprietary business information, preclinical and clinical trial data, health-related information and personal information (collectively, Confidential Information). Despite the implementation of security measures, our information technology systems (including infrastructure) and those of our current and any future CROs and other contractors, consultants and collaborators are vulnerable to attack, damage or interruption from computer viruses and malware (e.g. ransomware), malicious code, cybersecurity threats (such as denial-of-service attacks, cyberattacks or cyber-intrusions over the Internet, hacking, phishing and other social engineering attacks), misconfigurations, “bugs” or other vulnerabilities, fraud, sophisticated nation-state and nation-state-supported actors, unauthorized access or use, natural disasters, terrorism, war, and telecommunication and electrical failures. Our systems are also subject to compromise from internal threats, such as theft, misuse, unauthorized access or other improper or accidental actions by employees, vendors and other third parties with otherwise legitimate access to our systems. Third parties may also attempt to fraudulently induce our employees and contractors into disclosing sensitive information such as usernames, passwords or other information, or otherwise compromise the security of our electronic systems, networks, and/ or physical facilities in order to gain access to our data.

Given the unpredictability of the timing, nature and scope of information technology disruptions, there can be no assurance that any security procedures and controls that we or our third-party partners and service providers have implemented will be sufficient to prevent cyberattacks from occurring. The latency of a compromise is often measured in months, but could be years, and we may not be able to detect a compromise in a timely manner. New techniques may not be identified until they are launched against a target, and we may be unable to anticipate these techniques or detect an incident, assess its severity or impact, react or appropriately respond in a timely manner or implement adequate preventative measures, resulting in potential data loss or other damage to our information technology systems.

We and certain of our service providers are from time to time subject to cyberattacks and security incidents.  While we do not believe that we have experienced any significant system failure, accident or security breach to date, if such an event were to occur and cause interruptions in our or our third party service provider’s operations or result in the unauthorized disclosure of or access to Confidential Information (violating