Company: DAWN
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0000950170-25-026654
Chunk: 198

Company: Day One Biopharmaceuticals, Inc.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1A
Chunk 198
---
 property, proprietary business information and personal information), which could result in financial, legal, business and reputational harm to us. If the information technology systems of our CROs, CMOs, vendors, contractors, consultants and other third-party partners become subject to disruptions or security incidents, we may have insufficient recourse against such third parties and we may have to expend significant resources to mitigate the impact of such an event, and to develop and implement protections to prevent future events of this nature from occurring.

Any event that leads to unauthorized access, use or disclosure of personal information, including personal information regarding our clinical trial subjects or personnel, could harm our reputation directly, compel us to comply with federal and/or state breach notification laws and foreign law equivalents, subject us to mandatory corrective action and otherwise subject us to liability under laws and regulations that protect the privacy and security of personal information, which could result in significant legal and financial exposure and reputational damages that could potentially have an adverse effect on our business. 

We may have contractual and other legal obligations to notify relevant stakeholders of security breaches. Most jurisdictions have enacted laws requiring companies to notify individuals, regulatory authorities and others of security breaches involving certain types of data. Such mandatory disclosures are costly, could lead to negative publicity, may cause our customers to lose confidence in the effectiveness of our security measures and require us to expend significant capital and other resources to respond to and/or alleviate problems caused by the actual or perceived security breach. 

The costs to respond to a security breach and/or to mitigate any security vulnerabilities that may be identified could be significant, our efforts to address these issues may not be successful and these issues could result in interruptions, 

79

delays, negative publicity, loss of customer trust or diminished use of our products, as well as other harms to our business and our competitive position. Remediation of any potential security breach may involve significant time, resources and expenses. Any security breach may result in regulatory inquiries, litigation or other investigations, and can affect our financial and operational condition. 

Unauthorized access to our systems, networks or physical facilities could result in litigation with our customers or other relevant stakeholders. These proceedings could force us to spend money in defense or settlement, divert management’s time and attention, increase our costs of doing business or adversely affect our reputation. 

While we maintain cybersecurity insurance coverage, we may not have adequate insurance coverage for security incidents or breaches, including fines, judgments, settlements, penalties, costs, attorney fees and other impacts that arise out of incidents or breaches. The successful assertion of one or