Company: ALGN
Filing Date: 2025-08-06
Form Type: 10-Q
Source: 0001097149-25-000064
Chunk: 72

Company: ALIGN TECHNOLOGY INC
Filing Date: 2025-08-06
Form: 10-Q
Item: Item 4
Chunk 72
---
 been significant and wide-ranging reforms to federal policy and the federal government including significant workforce reductions across federal agencies. We may be impacted by inadequate funding for government agencies, including from government shutdowns, or other disruptions to or reductions in federal agencies including obtaining and maintaining clearances and approvals of our products and services. The rapid increase in new or changed government regulations could result in significant costs and expenses, including those related to compliance, and require modifications in the way we and our customers conduct business. If we are unable to respond to changing regulations in a timely and effective manner, our business, financial condition and results of operations could materially adversely be impacted.

Security breaches, data breaches, cybersecurity attacks, other cybersecurity incidents, or the failure to comply with privacy, security and data protection laws could materially adversely impact our operations and patient care, and we could be liable for damages, and our reputation, business, financial condition and results of operations could be harmed.

We retain confidential employee, applicant and customer personal, health and financial, and our own proprietary information and data essential to our operations. We rely on the effectiveness of our IT systems, policies and contracts and the policies of our third-party vendors, and their IT systems to safeguard information and data. Additionally, our cybersecurity controls depend on our customers, many of whom are individual or small healthcare providers with limited IT experience and inadequate or untested security protocols, to successfully manage data privacy and security requirements. It is critical that the 

47 

facilities, infrastructure and IT systems on which we depend and the products and services we develop remain secure and be perceived as secure. Despite the implementation of security features in our products and services and security measures in our IT systems, we and our service providers, third-party vendors and other third parties could be targeted by or subject to physical break-ins, computer viruses and other malicious code, unauthorized or fraudulent access, programming errors or other technical malfunctions, hacking attacks, phishing, vishing, deepfakes, and other social engineering attacks, malware, ransomware, employee noncompliance, error or malfeasance, cybersecurity attacks, malicious code, and other breaches of, or incidents impacting, IT systems or similar malicious or otherwise disruptive actions, including by organized groups and nation-state actors, which may disrupt or limit the availability of, or result in damage to, our IT systems and result in loss or unavailability of, damage to, or the unauthorized acquisition, use, disclosure, or other processing of confidential information. For example, we have experienced, and may again experience in the future,