Company: BDRX
Filing Date: 2025-01-17
Form Type: F-1
Source: 0001214659-25-000922
Chunk: 69

Company: Biodexa Pharmaceuticals Plc
Filing Date: 2025-01-17
Form: F-1
Chunk 69
---
 error, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or
other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Any steps
we take to deter, identify, and mitigate these risks may not be successful and may cause us to incur increasing costs.

Such threats are prevalent
and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,”
threat actors, “hacktivists,” organized criminal threat actors, personnel, such as through theft or misuse, sophisticated
nation states, and nation-state-supported actors. In particular, ransomware attacks, including those from organized criminal threat actors,
nation-states and nation-state supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions,
delays, or outages in our operations, loss of data, including sensitive customer information, loss of income, significant extra expenses
to restore data or systems, reputational loss and the diversion of funds.

Some threat actors also now
engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors, for geopolitical reasons
and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we, the third parties
upon which we rely, and our customers may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that
could materially disrupt our systems and operations, supply chain and ability to produce, sell and distribute our goods and services.

| 35 |

While we take steps to detect
and remediate vulnerabilities, we may not be able to detect and remediate all vulnerabilities because the threats and techniques used
to exploit such vulnerabilities change frequently and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited
but may not be detected until after a cybersecurity incident has occurred, if at all. Further, we may experience delays in developing
and deploying remedial measures designed to address any such identified vulnerabilities.

We rely on third-party service
providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including,
without limitation, cloud-based infrastructure, encryption and authentication technology, employee email, and other functions. We also
rely on third-party service providers to assist with our clinical trials, provide other products or services, or otherwise to operate
our business. Our ability to monitor these third parties’ information security practices is limited, and these third parties