Company: AGIO
Filing Date: 2025-10-30
Form Type: 10-Q
Source: 0001439222-25-000116
Chunk: 18

Company: AGIOS PHARMACEUTICALS, INC.
Filing Date: 2025-10-30
Form: 10-Q
Item: Part I, Item 4
Chunk 18
---
 data from completed or future trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. To the extent that any disruption or security breach were to result in a loss of, or damage to, our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, our competitive position could be harmed and our product research, development and commercialization efforts could be delayed. In addition, we may not have adequate insurance coverage to provide compensation for any losses associated with such events.

If a material breach of our security or that of our vendors occurs, the market perception of the effectiveness of our security measures could be harmed, and, as a result, we could lose business and our reputation and credibility could be damaged. We could be required to expend significant amounts of money and other resources to repair or replace information systems or networks. Although we develop and maintain processes, systems and controls designed to prevent these events from occurring, and we have a process to assess, identify and manage threats, the development and maintenance of these systems, controls and processes is costly and requires ongoing monitoring and updating as technologies change and efforts to overcome security measures become more sophisticated. Moreover, despite our efforts, the possibility of these events occurring cannot be eliminated entirely. We cannot guarantee that the measures we have taken to date, and actions we may take in the future, will be sufficient to prevent any cyber-attacks or security breaches.

We are subject to stringent privacy laws, information security laws, regulations, policies and contractual obligations related to data privacy and security and changes in such laws, regulations, policies, contractual obligations and failure to comply with such requirements could subject us to significant fines and penalties, which may have a material adverse effect on our business, financial condition or results of operations.

We are subject to data privacy and protection laws and regulations that apply to the collection, transmission, storage and use of personally-identifying information, which among other things, impose certain requirements relating to the privacy, security and transmission of personal information, including comprehensive regulatory systems in the United States and the EU. The legislative and regulatory landscape for privacy and data protection continues to evolve in jurisdictions worldwide, and we must devote significant resources and funds to understanding and complying with this changing landscape. Our efforts to comply with the evolving data protection rules may be unsuccessful. It is possible that these laws may be interpreted, enforced and applied in a manner that is inconsistent with our practices. 

There are numerous U.S. federal and state laws and regulations related to the privacy and security