Company: MBIO
Filing Date: 2025-04-01
Form Type: 424B3
Source: 0001104659-25-030657
Chunk: 112

Company: MUSTANG BIO, INC.
Filing Date: 2025-04-01
Form: 424B3
Chunk 112
---
 such threats.

​

We review the processes
of our third-party vendors and consider their ability to adhere to relevant industry practices and maintain adequate technology risk programs.
In addition, we maintain cyber and cyber-related crime insurance coverage policies as part of our overall risk management strategy, however,
our policies may not be sufficient to cover against all potential future claims, if any.

​

In the last two fiscal
years, we have not identified cybersecurity threats that have materially affected, or are reasonably likely to materially affect, our
business, results of operations, or financial condition. Although we proactively attempt to prevent all threats, we are unable to eliminate
all risk from cybersecurity threats or provide assurance that we have not experienced an undetected cybersecurity incident. For more information
about these risks, please see Item 1A. Risk Factors “Our business and operations would suffer in the event of computer system failures,
cyber-attacks, or deficiencies in our or third parties’ cybersecurity.”

​

Cybersecurity Governance

While our board of
directors is responsible for oversight and risk management in general, our Audit Committee provides oversight of our technology management
strategy to ensure that cybersecurity threats and risks are identified, evaluated, and managed. The Audit Committee receives periodic
updates from our management team regarding the overall state of our technology management strategy and any relevant risks from cybersecurity
threats and cybersecurity incidents.

​

Our management team
is responsible for assessing and managing the material risks from cybersecurity threats. Our management team members have expertise in
information systems, compliance and corporate governance, which we believe are disciplines that are effective in the management of the
Company’s cybersecurity risk. Our management team is informed of and monitors the prevention, detection, and mitigation of cybersecurity
threats and incidents.

Item 2. Properties

​

Our corporate and executive office is located
at 95 Sawyer Road, Waltham, MA 02453.

On October 27, 2017, we entered into a lease
agreement with WCS - 377 Plantation Street, Inc., a Massachusetts nonprofit corporation (“Landlord”). Pursuant to
the terms of the lease agreement, we agreed to lease 27,043 sf from the Landlord, located at 377 Plantation Street in Worcester, MA (the
“Plantation Street Facility”), through November 2026, subject to additional extensions at our option. Base rent, net
of abatements of $0.6 million over the lease term, totals approximately $3.6 million, on a triple-net basis.