Company: AGIO
Filing Date: 2025-10-30
Form Type: 10-Q
Source: 0001439222-25-000116
Chunk: 17

Company: AGIOS PHARMACEUTICALS, INC.
Filing Date: 2025-10-30
Form: 10-Q
Item: Part I, Item 4
Chunk 17
---
 revenue.

Although we maintain product liability insurance coverage, it may not be adequate to cover all liabilities that we may incur. 

Our internal information technology systems, or those of any third parties with which we contract, may fail or suffer security breaches, loss of data or other disruptions which could result in a material disruption of our product development programs, compromise sensitive information related to our business or prevent us from accessing critical information, trigger legal obligations, potentially exposing us to liability, competitive or reputational harm or otherwise adversely affecting our business and financial results.

Despite the implementation of security measures, our internal information technology systems and those of third parties with which we contract are vulnerable to damage from computer viruses, worms and other destructive or disruptive software, unauthorized access, natural disasters, terrorism, war and telecommunication and electrical failures. Such systems are also vulnerable to service interruptions or to security breaches from inadvertent or intentional actions by our employees, third-party vendors or business partners, or from cyber incidents by malicious third parties. Cybersecurity incidents are increasing in their frequency, sophistication and intensity, and have become increasingly difficult to detect. Cybersecurity incidents could include the deployment of harmful malware, ransomware, denial-of-service attacks, unauthorized access to or deletion of files, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. Cybersecurity incidents also could include phishing attempts or e-mail fraud to cause payments or information to be transmitted to an unintended recipient. Attackers may use artificial intelligence and machine learning to launch more automated, targeted and coordinated attacks against targets. We could be subject to risks caused by misappropriation, misuse, leakage, falsification or intentional or accidental release or loss of information maintained in the information systems and networks of our company, including personal information of our employees. We may not be able to anticipate all types of 

40

security threats, and we may not be able to implement preventive measures effective against all such security threats. The techniques used by cyber criminals change frequently, may not be recognized until launched, and can originate from a wide variety of sources, including outside groups such as external service providers, organized crime affiliates, terrorist organizations or hostile foreign governments or agencies.

System failures, accidents, cybersecurity incidents or security breaches could cause interruptions in our operations, and could result in a material disruption of our clinical and commercialization activities and business operations, whether due to a loss of our trade secrets or other proprietary information or other similar disruptions, in addition to possibly requiring substantial expenditures of resources to remedy. For example, the loss of clinical trial