Company: LBRX
Filing Date: 2025-08-22
Form Type: S-1
Source: 0001193125-25-186467
Chunk: 55

Company: LB PHARMACEUTICALS INC
Filing Date: 2025-08-22
Form: S-1
Chunk 55
---
 similar threats could cause a security incident or other interruption that could result in unauthorized,
unlawful, or accidental acquisition, modification, destruction, loss, alteration,

35

encryption, disclosure of, or access to our sensitive data or our information technology systems, or those of the third parties with whom we work. A security incident or other interruption could
disrupt our ability (and that of third parties with whom we work) to provide our services.

We may expend significant resources or modify
our business activities (including our clinical trial activities) to try to protect against security incidents. Additionally, certain data privacy and security obligations may require us to implement and maintain specific security measures or
industry-standard or reasonable security measures to protect our information technology systems and sensitive data.

Applicable data
privacy and security obligations may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, regulators, and investors, of security incidents, or take other actions, such as providing credit
monitoring and identity theft protection services. Such disclosures and related actions can be costly, and the disclosure or the failure to comply with such applicable requirements could lead to adverse consequences.

If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may
experience material adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive data
(including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability
of data); financial loss; and other similar harms. Security incidents and attendant material consequences may negatively impact our ability to grow and operate our business.

Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our
contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage, if any, will be adequate or sufficient to protect us from or to mitigate
liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive data about us from public sources, data
brokers, or other means