Company: RGNX
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0000950170-25-038770
Chunk: 164

Company: REGENXBIO Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1A
Chunk 164
---
 failures. Although we have experienced cybersecurity incidents from time to time in the past, we believe we have not experienced any incident that has had a material effect on our business. If such an incident were to occur in the future and cause a material interruption in our operations, it could result in a material disruption of our business or financial operations, including our licensing and development programs, and potentially subject us to liability. Unauthorized disclosure of sensitive or confidential patient or employee data, including personally identifiable information, whether through breach of information technology systems, systems failure, employee negligence, fraud or misappropriation, or otherwise, or unauthorized access to or through our information systems and networks, whether by our employees or third parties, could result in negative publicity, legal liability and damage to our reputation. Unauthorized disclosure of personally identifiable information could also expose us to sanctions for violations of data privacy laws and regulations around the world, especially since the regulatory environment surrounding data privacy laws are increasingly demanding, with frequent imposition of new and changing requirements. To the extent that any disruption or security breach results in a loss of, or damage to, our trade secrets, data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, our competitive position could be harmed 

51

and the further licensing of our NAV Technology Platform and development and commercialization of our product candidates could be delayed. For example, the loss of, or damage to, clinical trial data for any of our product candidates could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. 

Security breaches pose a risk that sensitive data, including intellectual property, trade secrets or personal information, may be exposed to unauthorized persons or to the public. Cyber-attacks are increasing in their frequency, sophistication and intensity, and have become increasingly difficult to detect. Cybersecurity attacks include, but are not limited to, malicious software (malware, ransomware and viruses), phishing and social engineering, attempts to gain unauthorized access to networks, computer systems and data, malicious or negligent actions of employees (including misuse of information they are entitled to access), cyber extortion, electronic or wire fraud, and other forms of electronic security breaches. These incidents may be caused by failures during routine operations, such as system upgrades, or by user errors, as well as network or hardware failures, malicious or disruptive software, unintentional or malicious actions of employees or contractors, cyberattacks by hackers, criminal groups or nation-state organizations (which may include social engineering, business email compromise, cyber extortion, denial of service, or