Company: ATRA
Filing Date: 2025-03-07
Form Type: 10-K
Source: 0000950170-25-035507
Chunk: 152

Company: Atara Biotherapeutics, Inc.
Filing Date: 2025-03-07
Form: 10-K
Item: Item 1A
Chunk 152
---
 accidental actions or omissions by trusted insiders, cyber-attacks or cyber intrusions, including by computer hackers, viruses, foreign governments, and cyber terrorists, has generally increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. Additionally, the increased usage of computers operated on home networks due to the shelter-in-place or similar restrictions related to the COVID-19 pandemic may make our systems more susceptible to security breaches. For example, in March 2021, MSK provided notice that MSK was one of many customers impacted by a data breach at Accellion, Inc., which provides a document-sharing system. MSK subsequently notified us that certain documents related to one of our discontinued programs were subject to the breach, which compromise we deemed immaterial. Although we take measures to protect sensitive data from unauthorized access, use or disclosure, we and our third party service providers frequently defend against and respond to cyber-attacks, and our information technology and infrastructure may be vulnerable to attacks by hackers or viruses or breached due to personnel error, malfeasance, or other malicious or inadvertent disruptions. Any such breach or interruption could compromise our networks and the information stored there could be accessed by unauthorized parties, manipulated, publicly disclosed, lost, or stolen. 

Failures or significant downtime of our information technology or telecommunication systems or those used by our third party service providers could cause significant interruptions to our operations, including preventing us from conducting tests or research and development activities and preventing us from managing the administrative aspects of our business. For example, the loss of clinical study data from completed, ongoing or planned clinical studies could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. In addition, sophisticated operating system software and applications that we procure from third parties may contain defects in design or manufacture, including vulnerabilities, “bugs” and other problems that could unexpectedly interfere with the operation of our networks, system, or our processing of personal information or other data. To the extent that any disruption or security breach results in a loss of or damage to our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability, the further development of our product candidates could be delayed, and our business could be otherwise adversely affected.

76

We may not be able to anticipate all types of security threats, and we may not be able to implement preventative measures effective against all such security threats. We also may not be effective in responding to, containing or mitigating the risks of an attack