Company: INGN
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000950170-25-029993
Chunk: 186

Company: Inogen Inc
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 186
---
communication failures, user errors or catastrophic events. Like other companies, we have experienced data security incidents before and have incurred remedial, legal and other costs in connection with these incidents. 

We have insurance coverage in place for certain potential liabilities and costs relating to service interruptions, data corruption, cybersecurity risks, data security incidents and/or network security breaches, but this insurance is limited in amount, subject to a deductible, and may not be adequate to cover us for all costs arising from these incidents.

If our information technology networks and systems or those provided by our third-party service providers and vendors suffer unauthorized access, severe damage, disruption or shutdown, and our business does not effectively identify or resolve the issues in a timely manner, our operations could be disrupted, we could be subject to regulatory and consumer lawsuits and other proceedings and our business could be negatively affected. For example, Change Healthcare, a division of UnitedHealthcare, experienced a cyberattack in late February 2024 that caused connection issues with our third-party service provider and a delay in rental revenue collections.  In addition, cybersecurity risks and data security incidents could lead to potential unauthorized access to or acquisition of confidential information (including personally identifiable information and protected health information), and data loss, corruption, unavailability, or other unauthorized processing. There is no assurance that we will not experience service interruptions, security breaches, cybersecurity risks and data security incidents, or other information technology failures, whether suffered by us or third parties on which we rely, in the future.

 38

We receive, collect, process, use and store a large amount of information from our customers, our patients and our own employees, including personal information, intellectual property, protected health and other sensitive and confidential information. This data is often accessed by us through transmissions over public and private networks, including the internet. The secure transmission of such information over the Internet and other mechanisms is essential to maintain confidence in our information technology systems yet is vulnerable to unauthorized access and disclosure. We have implemented security measures, technical controls and contractual precautions designed to identify, detect and prevent unauthorized access, alteration, use or disclosure of our customers’, patients’ and employees’ data. The techniques used in these attacks change frequently and may be difficult to detect for periods of time and we may face difficulties in anticipating and implementing adequate preventative measures. Due to the COVID-19 pandemic and related public health emergency, we allowed an increased number of employees to work remotely, and we continue to do so and expect that this hybrid model of work will continue. As a result, we may have increased