Company: TVRD
Filing Date: 2025-05-30
Form Type: S-1
Source: 0001104659-25-054853
Chunk: 115

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-05-30
Form: S-1
Chunk 115
---
 works have in the past or were in the future to experience any material system failure, accident, or security breach, it could result in a disruption of its development programs and its business operations, whether due to a loss of the Company’s trade secrets or other proprietary information or other similar disruptions, as well as reputational harm and adverse legal and regulatory consequences. For example, the loss of clinical trial data from future clinical trials could result in delays in the Company’s regulatory approval efforts and significantly increase its costs to recover or reproduce the data. To the extent that any disruption or security breach were to result in a loss of, or damage to, the Company’s data or applications, or inappropriate disclosure of confidential or proprietary information, it could incur liability, its competitive position could be harmed and the further development and commercialization of its product candidates could be delayed.

The Company and the third parties with whom it works are also subject to cybersecurity risks caused by misappropriation, misuse, leakage, falsification or intentional or accidental release, exposure or loss of information maintained in the information systems and networks of the Company and the third parties with whom it works , including personal information of the Company’s employees and clinical trial subjects, and the Company’s confidential data. In addition, outside parties may attempt to penetrate the Company’s systems or those of the third parties with whom it works or fraudulently induce its personnel or the personnel of the third parties with whom it works to disclose sensitive information in order to gain access to the Company’s data and/or systems (or those of the third parties with whom it works). The Company may experience threats to its data and systems, including malicious code and viruses, supply chain attacks, phishing and other cyberattacks. The number and complexity of these threats continue to increase over time. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but the Company may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Remote work has increased risks to our information technology systems and data, as our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could