Company: TVRD
Filing Date: 2025-11-13
Form Type: 424B3
Source: 0001104659-25-111336
Chunk: 192

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-11-13
Form: 424B3
Chunk 192
---
, credential harvesting, ransomware attacks, software
bugs, software or hardware failures, personnel error or malfeasance, loss of data or other information technology assets, adware, earthquakes,
fires, floods, attacks enhanced or facilitated by AI, malicious code (such as computer viruses and worms), unauthorized access, natural
disasters, terrorism, war and telecommunication, electrical failures, and other similar threats. Such threats are prevalent and continue
to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,”
threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated
nation states, and nation-state-supported actors. We may expend significant resources or modify our business activities (including our
clinical trial activities) to try

<div align='center'>112</div>

Table of Contents

to protect against security incidents. Certain data privacy and security
obligations have required us to implement and maintain specific security measures or industry-standard or reasonable security measures
to protect our information technology systems and sensitive information.

​

Tvardi exercises little or no direct control over
how the third parties with whom it works operate their information systems, which increases its vulnerability to problems with their systems.
If Tvardi or third parties with whom it works have in the past or were in the future to experience any material system failure, accident,
or security breach, it could result in a disruption of its development programs and its business operations, whether due to a loss of
Tvardi’s trade secrets or other proprietary information or other similar disruptions, as well as reputational harm and adverse legal
and regulatory consequences. For example, the loss of clinical trial data from future clinical trials could result in delays in Tvardi’s
regulatory approval efforts and significantly increase its costs to recover or reproduce the data. To the extent that any disruption or
security breach were to result in a loss of, or damage to, Tvardi’s data or applications, or inappropriate disclosure of confidential
or proprietary information, it could incur liability, its competitive position could be harmed, and the further development and commercialization
of its product candidates could be delayed.

​

Tvardi and the third
parties with whom it works are also subject to cybersecurity risks caused by misappropriation, misuse, leakage, falsification or intentional
or accidental release, exposure or loss of information maintained in the information systems and networks of Tvardi and the third parties
with