Company: NOTV
Filing Date: 2025-12-05
Form Type: 10-K
Source: 0001628280-25-055483
Chunk: 244

Company: Inotiv, Inc.
Filing Date: 2025-12-05
Form: 10-K
Item: Item 1
Chunk 244
---
 expose us to liability, which in turn could negatively impact our business and the value of our common shares. For example, on August 8, 2025, we became aware of a cybersecurity incident affecting certain of our systems and data (the “2025 Cybersecurity Incident”). The forensic investigation of the 2025 Cybersecurity Incident determined that between approximately August 5-8, 2025, a threat actor gained unauthorized access to the Company’s systems and may have acquired certain data. The Company is in the process of providing notifications regarding the 2025 Cybersecurity Incident in accordance with applicable legal obligations. While we have identified the likely scope of the incident, the full operational and financial impacts are still being evaluated. Accordingly, we have not yet determined whether the 2025 Cybersecurity Incident is reasonably likely to have a material impact on the Company. There can be no assurance that the 2025 Cybersecurity Incident will not have adverse financial, client-related, employee-related and reputational impacts which may expose us to additional liability. 

As a routine element of our business, we collect, analyze, and retain substantial amounts of data pertaining to the clinical and non-clinical studies we conduct for our clients. We also maintain other sensitive client information, information regarding intellectual property related to certain of our products and other business-critical information, including personally identifiable information of our employees. Our employees, some of whom have access to such information, have and will likely continue to receive “phishing” e-mails intended to trick recipients into surrendering their usernames and passwords and/or inadvertently installing malicious software onto their computers or networks they are connected to. We cannot completely protect against the possibility that sensitive information may be accessed, publicly disclosed, lost or stolen, via phishing attempts or other circumstances. In addition, cybersecurity threats continue to evolve and become more sophisticated, including through the use of artificial intelligence driven social-engineering and ransomware techniques, which may increase the likelihood or severity of future incidents.

We utilize cybersecurity technologies, processes and practices which are designed to protect our networks, computers, programs and data from attack, damage or unauthorized access, but they may not be effective or work as designed, as was the case with the 2025 Cybersecurity Incident. Our contracts with our clients typically contain provisions that require us to keep confidential the information generated from our studies. A cyber-attack could result in a breach of those provisions or other negative outcomes, including legal claims or proceedings, investigations, potential liabilities under laws that protect the privacy of personal information, delays and