Company: RNAC
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0001453687-25-000060
Chunk: 139

Company: Cartesian Therapeutics, Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1A
Chunk 139
---
, including a material disruption of our development programs. Unauthorized disclosure of sensitive or confidential patient or employee data, including personally identifiable information, whether through breach of computer systems, systems failure, employee negligence, fraud or misappropriation, or otherwise, or unauthorized access to or through our information systems and networks, whether by our employees or third-parties, could result in negative publicity, legal liability and damage to our reputation. Unauthorized disclosure of personally identifiable information could also expose us to sanctions for violations of data privacy laws and regulations around the world. To the extent that any disruption or security breach resulted in a loss of or damage to our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability and the further development of our product candidates could be delayed. For example, the loss of or damage to clinical trial data, such as from completed or ongoing clinical trials, for any of our product candidates would likely result in delays in our marketing approval efforts and significantly increased costs in an effort to recover or reproduce the data.

We have previously been, and expect to remain, the target of cyber-attacks. As we become more dependent on information technologies to conduct our operations, cyber incidents, including deliberate attacks, such as ransomware attacks, and attempts to gain unauthorized access to computer systems and networks, may increase in frequency and sophistication. These incidents pose a risk to the security of our systems and networks, the confidentiality and the availability and integrity of our data and these risks apply both to us, and to third-parties on whose systems we rely for the conduct of our business. While we do not believe the effect of these incidents has historically been material to our results of operations, financial condition or prospects, cyber threats are persistent and constantly evolving. Such threats have increased in frequency, scope and potential impact in recent years, which increases the difficulty of detecting and successfully defending against them. As cyber threats continue to evolve, we may be required to incur additional expenses in order to enhance our protective measures or to remediate any information security vulnerability. There can be no assurance that we or our third-party providers will be successful in preventing cyber-attacks or mitigating their effects. Similarly, there can be no assurance that our collaborators, CROs, third-party logistics providers, distributors and other contractors and consultants will be successful in protecting our clinical and other data that is stored on their systems. Any cyber-attack or destruction or loss of data could have a material adverse effect on our business and prospects. In addition, we may suffer reputational harm or face litigation or