Company: BOLT
Filing Date: 2025-03-24
Form Type: 10-K
Source: 0000950170-25-043873
Chunk: 114

Company: Bolt Biotherapeutics, Inc.
Filing Date: 2025-03-24
Form: 10-K
Item: Item 1A
Chunk 114
---
 and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited but may not be detected until after a security incident has occurred. These vulnerabilities may pose material risks to our business. In particular, the risk of a security breach or disruption, particularly through cyber-attacks or cyber-intrusions, including by computer hackers, foreign governments and cyber terrorists, has generally increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased. While we have not experienced any such material system failure or security breach to our knowledge to date, if such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our development programs and our business operations. For example, the loss of clinical trial data from completed, ongoing or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Likewise, we rely on third parties for the manufacture of our product candidates and to conduct clinical trials, and similar incidents relating to their computer systems could also have a material adverse effect on our business. 

Actual or alleged unauthorized disclosure of sensitive or confidential data, including personally identifiable information, whether through a breach of computer systems, systems failure, employee negligence, fraud or misappropriation, or otherwise, or unauthorized access to or through our information systems and networks, whether by our employees or third parties, could result in negative publicity, legal liability and damage to our reputation. Unauthorized disclosure of personally identifiable information could also expose us to sanctions for violations of data privacy laws and regulations around the world. To the extent that any disruption or security breach resulted in a loss of or damage to our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability and the further development of our product candidates could be delayed. Further, we do not have any control over the operations of the facilities or technology of our cloud and service providers, including any third-party vendors that collect, process and store personal data on our behalf. 

Our systems, servers and platforms and those of our service providers may be vulnerable to computer viruses or physical or electronic break-ins that our or their security measures may not detect. Individuals able to circumvent such security measures may misappropriate our confidential or proprietary information, disrupt our operations, damage our computers or otherwise impair our reputation and business. Threat actors, nation-states, and nation-state-supported actors now engage, and are expected to continue to engage, in cyber-attacks, including for geopolitical reasons and in connection with military conflicts and operations.