Company: DVAX
Filing Date: 2025-11-05
Form Type: 10-Q
Source: 0001628280-25-049536
Chunk: 474

Company: DYNAVAX TECHNOLOGIES CORP
Filing Date: 2025-11-05
Form: 10-Q
Item: Part I, Item 2
Chunk 474
---
 or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to 

71

regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse consequences.

Our business is increasingly dependent on critical, complex and interdependent information technology systems, including internet-based systems, to support business processes as well as internal and external communications. In addition, our dependence on information technology systems has intensified because many of our critical business activities are now being conducted remotely in our remote-first work environment. The size and complexity of our computer systems make them potentially vulnerable to breakdown, malicious intrusion and computer viruses that may result in the impairment of key business processes.

In addition, our systems, along with those of our customers, suppliers, or third-party service providers which operate critical business systems to process sensitive information in a variety of contexts are potentially vulnerable to a variety of evolving threats and data security breaches—whether by employees or others—that may expose sensitive data to unauthorized persons. Such threats could include, but not be limited to social-engineering attacks (including through phishing attacks), online and offline fraud, malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, access attacks (such as credential stuffing or credential harvesting), personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. 

Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third