Company: INGN
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000950170-25-029993
Chunk: 187

Company: Inogen Inc
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 187
---
 cybersecurity or data security risks, due to increased use of home wi-fi networks and virtual private networks, as well as increased disbursement of physical machines. While we implement information technology controls to reduce the risk of a cybersecurity and data security breach, there is no guarantee that these measures will be adequate to safeguard all systems with an increased number of employees working remotely.

The methods used to obtain unauthorized access, disable or degrade service or sabotage systems are constantly evolving and may be difficult to anticipate or to detect for long periods of time. Cyberattacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. A material cyberattack or security incident could cause interruptions in our operations and could result in a material disruption of our business operations, damage to our reputation, financial condition, results of operations, cash flows and prospects. As a result of these types of risks and attacks, we have implemented and periodically review and update systems, processes, and procedures to protect against unauthorized access to or use of data and to prevent data loss. For example, we have increased the security of our systems by requiring all email users to change their passwords following our recent data security incident and sooner than they would have otherwise been required to. We also implemented multi-factor authentication for remote email access and have taken additional steps to further limit access to our systems. However, the ever-evolving threats mean we and our third-party service providers and vendors must continually evaluate and adapt our respective systems and processes and overall security environment. There is no guarantee that these measures will be adequate to safeguard against all data security breaches, system compromises or misuses of data. 

The compromise of our technology systems resulting in the loss, disclosure, misappropriation of, or access to, customers’, employees’ or business partners’ information or failure to comply with regulatory or contractual obligations with respect to such information, or the perception that any of these has occurred, could result in legal claims and proceedings, initiated by private parties, investigations or other proceedings by regulatory authorities, and liability or regulatory penalties, disruption to our operations and damage to our reputation, any or all of which could adversely affect our business. The costs to remediate breaches and similar system compromises that do occur could adversely affect our results of operations. We also face risks associated with security breaches affecting third party vendors or customers and others who interact with our data. While we maintain insurance that covers certain security incidents, we may not carry enough insurance or maintain sufficient coverage to