Company: MIRM
Filing Date: 2025-05-07
Form Type: 10-Q
Source: 0001759425-25-000032
Chunk: 632

Company: Mirum Pharmaceuticals, Inc.
Filing Date: 2025-05-07
Form: 10-Q
Item: Part I, Item 2
Chunk 632
---
 strength of the economies in which we, our manufacturers and our suppliers operate. A weak or declining global economy could also strain our suppliers and manufacturers, possibly resulting in supply disruption. Any of the foregoing could harm our business and we cannot anticipate all of the ways in which the current economic climate and financial market conditions could adversely impact our business.

If our information technology systems, or those used by our CMOs, CROs, commercial vendors or other contractors, consultants or third parties with whom we work, or our data are or were compromised, we could experience material adverse consequences, including but not limited to regulatory investigation, actions, litigation, fines and penalties, disruptions of our business operations, reputation harm, loss of revenue or profits, and other adverse consequences.

In the course of our business, we and the third parties with whom we work, process proprietary, confidential and sensitive information, including personal data (such as health-related data), intellectual property and trade secrets (collectively, sensitive information). 

The sensitive information processed and stored in our technology systems, and those of our research collaborators, CROs, contractors, consultants and other third parties with whom we work, may be vulnerable to cyberattacks, malicious internet-based activity, online and offline fraud and other similar activities. These threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work may be vulnerable to a heightened risk of these attacks, including cyberattacks that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services. We and the third parties with whom we work may be subject to a variety of threats, including but not limited to errors or malfeasance by our personnel or the personnel of the third parties, malware (including as a result of advanced persistent threat intrusions), malicious code (such as viruses and worms), software vulnerabilities, hacking, denial of service attacks, credential stuffing, social engineering (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), ransomware, supply-chain