Company: BLLN
Filing Date: 2025-10-07
Form Type: S-1
Source: 0001193125-25-233697
Chunk: 53

Company: BillionToOne, Inc.
Filing Date: 2025-10-07
Form: S-1
Chunk 53
---
, denial or degradation of service attacks, unauthorized access or use by
persons inside our organization or persons with access to systems inside our organization, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and
those of the third parties with whom we work. Misappropriation, exposure, loss or other unauthorized disclosure of confidential data, personal information, materials or information, as well as interruptions, delays or cessation of service often
result from these events. Increasingly complex methods have been used in cyberattacks, and the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased and come from a variety of sources,
including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Because
the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative
measures. We may experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches.

The costs of attempting to protect against the foregoing risks and responding to a cyberattack are significant. Breaches of our and/or our vendors’ security
measures and the unauthorized dissemination of sensitive personal information or proprietary or confidential information about us, our customers or other third-parties, could result in investigations, regulatory enforcement actions, notices to
affected individuals, regulators and the media, material fines and penalties, loss of customers, litigation or other actions which could have a material adverse effect on our business, prospects, reputation, results of operations and financial
condition. Breaches and incidents also cause operational harm such as by preventing us from performing our laboratory operations, preparing and providing reports to customers, billing payors, processing reimbursement appeals, handling patient or
physician inquiries, conducting research and development activities and managing the administrative aspects of our business.

We and certain of our service providers
are from time to time subject to cyberattacks and security incidents. Although we have implemented security measures and an enterprise security program to prevent unauthorized access to our systems, information and patient data, there is no
assurance that these measures will be effective. As cyber threats evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate