Company: SCLXW
Filing Date: 2025-05-14
Form Type: 424B3
Source: 0001193125-25-119822
Chunk: 80

Company: Scilex Holding Co
Filing Date: 2025-05-14
Form: 424B3
Chunk 80
---
 unauthorized access, cybersecurity attacks, and other security incidents, including as perpetrated by hackers, or as the result of natural disasters, terrorism, war, or telecommunications or
electrical failures. For example, there was a cyberattack on Change Healthcare in March 2024. We worked diligently with our co-pay savings card adjudicators to resolve the breakdown of processing of insurance
claims by Change Healthcare, and restored the co-pay savings card processing for ZTlido and ELYXYB, which has been restored to normal operations. This incident did not have a material impact on the Company as
a whole. A material system failure or security breach, if such an event were to occur, could result in a material disruption of our product development programs or a loss of our trade secrets or other proprietary information. For example, the loss
of clinical trial data from completed, ongoing, or planned clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce such data. To the extent that any disruption or
security breach were to result in the loss of or damage to our data or applications, or the unauthorized disclosure of confidential or proprietary information, including personal data, we could incur material legal liability or be the subject of
legal claims, suffer damage to our reputation, lose or harm our intellectual property rights, and delay the continued research, development and commercial efforts of ZTlido, GLOPERBA, ELYXYB and our product candidates, if approved. If we are held
liable for a claim against which we are not insured or for damages exceeding the limits of our insurance coverage, whether arising out of cybersecurity matters or some other matter, that claim could have a material adverse effect on our business,
financial condition, and results of operations.

Further, a security incident or privacy violation of the Company, those of our CROs and
other contractors and consultants that leads to the unauthorized acquisition, interruption, modification, loss, theft, corruption, interference, or other unauthorized disclosure of, or prevents access to, personal data, including patient data or
other protected health information, could harm our reputation, compel us to comply with federal or state breach notification laws and foreign equivalents, subject us to mandatory corrective action, require us to verify the correctness of database
contents, and otherwise subject us to liability under laws and regulations that protect personal data, resulting in increased costs or loss of revenue. Our ability, and the ability of our CROs and other contractors and consultants, to effectively
manage and maintain our