Company: DNLI
Filing Date: 2025-05-06
Form Type: 10-Q
Source: 0001714899-25-000105
Chunk: 288

Company: Denali Therapeutics Inc.
Filing Date: 2025-05-06
Form: 10-Q
Item: Part I, Item 4
Chunk 288
---
 or other contractors or consultants. 

86

As the cyber-threat landscape evolves, cyber-attacks have become more prevalent, intense, sophisticated, and much harder to detect and defend against. Such attacks could include the use of key loggers or other harmful and virulent malware, including ransomware or other denials of service, and can be deployed through malicious websites, the use of social engineering and/or other means. We and our collaborators, CROs, or other contractors and consultants may not be able to anticipate all types of security threats, and we may not be able to implement preventive measures effective against all such security threats. The techniques used by cyber criminals change frequently, may not be recognized until launched, and can originate from a wide variety of sources. Although to our knowledge we have not experienced any such material system failure or security breach or incident to date, if a breakdown, cyberattack or other information security breach or incident were to occur and cause interruptions in our operations, it could result in a material disruption of our development programs and our business operations, whether due to loss or misappropriation of trade secrets or loss of, or unauthorized modification, unavailability, disclosure, or other unauthorized processing of other proprietary information or other similar disruption and we could incur liability and reputational damage. For example, any corruption, loss, or other unavailability of clinical trial data from completed, ongoing or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Likewise, we rely on our third-party research institution collaborators for research and development of our product candidates and other third parties for the manufacture of our product candidates and to conduct clinical trials, and similar events relating to their computer systems could also have a material adverse effect on our business.

Cyber-attacks, breaches, interruptions, or other data security incidents could result in legal claims or proceedings by private parties or governmental authorities, liability under federal or state laws that protect the privacy of personal information, regulatory penalties, significant remediation costs, disrupt key business operations, and divert attention of management and key information technology resources. In the United States, notice of breaches must be made to affected individuals, the U.S. Secretary of the Department of Health and Human Services ("HHS"), and for extensive breaches, notice may need to be made to the media or U.S. state attorneys general. Such a notice could harm our reputation and our ability to compete. In addition, U.S. state attorneys general are authorized to bring civil actions seeking either injunctions or damages