Company: TVRD
Filing Date: 2025-10-20
Form Type: S-1/A
Source: 0001104659-25-100896
Chunk: 116

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-10-20
Form: S-1/A
Chunk 116
---
 worms), unauthorized access, natural disasters, terrorism, war and telecommunication, electrical failures, and other similar threats. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. We may expend significant resources or modify our business activities (including our clinical trial activities) to try to protect against security incidents. Certain data privacy and security obligations have required us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information.

The Company exercises little or no direct control over how the third parties with whom it works operate their information systems, which increases its vulnerability to problems with their systems. If the Company or third parties with whom it works have in the past or were in the future to experience any material system failure, accident, or security breach, it could result in a disruption of its development programs and its business operations, whether due to a loss of the Company’s trade secrets or other proprietary information or other similar disruptions, as well as reputational harm and adverse legal and regulatory consequences. For example, the loss of clinical trial data from future clinical trials could result in delays in the Company’s regulatory approval efforts and significantly increase its costs to recover or reproduce the data. To the extent that any disruption or security breach were to result in a loss of, or damage to, the Company’s data or applications, or inappropriate disclosure of confidential or proprietary information, it could incur liability, its competitive position could be harmed, and the further development and commercialization of its product candidates could be delayed.

The Company and the third parties with whom it works are also subject to cybersecurity risks caused by misappropriation, misuse, leakage, falsification or intentional or accidental release, exposure or loss of information maintained in the information systems and networks of the Company and the third parties with whom it works , including personal information of the Company’s employees and clinical trial subjects, and the Company’s confidential data. In addition, outside parties may attempt to penetrate the Company’s systems or those of the third parties with whom it works or fraudulently induce its personnel or the personnel of the third parties with whom it works to disclose sensitive information in order to gain access to the Company’s data and/or systems (or those of the third parties with whom it works). The Company may experience threats to its data