Company: APM
Filing Date: 2025-12-05
Form Type: 424B5
Source: 0001213900-25-118752
Chunk: 159

Company: Aptorum Group Ltd
Filing Date: 2025-12-05
Form: 424B5
Chunk 159
---
 be compromised or misappropriated and its reputation may be adversely affected. If these systems
or their functionality do not operate as DiamiR or the Combined Company expect them to, they may be required to expend significant resources
to make corrections or find alternative sources for performing these functions.

A cyber security incident could cause a violation of the Health Insurance Portability and Accountability Act (HIPAA) and/or state consumer privacy laws, breach of customer and patient privacy, or other negative impacts.

DiamiR relies on its IT systems to manage scheduling and financial
data, communicate with biopharma companies, including existing and prospective customers of DiamiR’s testing services, vendors,
and other third parties, and summarize and analyze operating results. In addition, DiamiR has made investments in technology, including
the engagement of a third-party IT provider. A cyber-attack that bypasses DiamiR’s IT security systems could cause an IT security
breach, a loss of protected health information, or other data subject to privacy laws, a loss of proprietary business information, or
a material disruption of DiamiR’s IT business systems. This in turn could have a material adverse impact on DiamiR’s business
and result of operations. In addition, DiamiR’s future results of operations, as well as its reputation, could be adversely impacted
by theft, destruction, loss, or misappropriation of public health information, other confidential data, or proprietary business information.

Computer malware, viruses, and hacking and phishing attacks by third
parties have become more prevalent in our industry and may occur on DiamiR’s systems in the future. Because techniques used to obtain
unauthorized access to or sabotage systems change frequently and generally are not recognized until successfully launched against a target,
DiamiR or the Combined Company may be unable to anticipate these techniques or to implement adequate preventative measures. As cyber-security
threats develop and grow, it may be necessary to make significant further investments to protect data and infrastructure. If an actual
or perceived breach of security occurs, (i) DiamiR could suffer severe reputational damage adversely affecting customer or investor confidence,
(ii) the market perception of the effectiveness of DiamiR’s security measures could be harmed, (iii) DiamiR could lose potential
sales and existing customers, its ability to deliver its services or operate its business may be impaired, (iv) DiamiR may be subject
to litigation or regulatory investigations or orders, and (v) DiamiR may incur significant