Company: IMRX
Filing Date: 2025-11-12
Form Type: 10-Q
Source: 0001790340-25-000135
Chunk: 536

Company: Immuneering Corp
Filing Date: 2025-11-12
Form: 10-Q
Item: Part I, Item 8
Chunk 536
---
 our reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Furthermore, because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence. If we or our third-party vendors were to experience a significant security breach of our or their information systems or data, the costs associated with the investigation, remediation and potential notification of the breach to counter-parties and data subjects could be material. In addition, our remediation efforts may not be successful. If we do not allocate and effectively manage the resources necessary to build and sustain the proper technology and cybersecurity infrastructure, we could suffer significant business disruption, including transaction errors, supply chain or manufacturing interruptions, processing inefficiencies, data loss or the loss of or damage to intellectual property or other proprietary information.

We and our service providers are from time to time subject to cyberattacks and security incidents. While we do not believe that we have experienced any significant system failure, accident or security breach to date, if such an event were to occur and cause interruptions in our operations or result in the unauthorized acquisition of or access to our trade secrets, health-related or other personal information or other proprietary or sensitive information, it could result in a material disruption of our drug discovery and development programs and our business operations, whether due to a loss of our trade secrets or other similar disruptions, and it may be necessary to notify individuals, governmental authorities, supervisory bodies, the media and other parties pursuant to data privacy and security laws. Notifications and follow-up actions related to a security breach could impact our reputation and cause us to incur significant costs, including legal expenses and remediation costs. For example, the loss of clinical trial data from past, present or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the lost data. We also rely on third parties to manufacture our product candidates, and similar events relating to their computer systems could also have a material adverse effect on our business. To the extent that any disruption or security breach were to result in a