Company: HROW
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0001641172-25-000925
Chunk: 43

Company: HARROW, INC.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1
Chunk 43
---
 the incident in a timeframe management
believes minimized the financial, operation or reputational risk to the Company, and at no point was our ability to generate revenues
disrupted. However, if future attacks occur, there is no assurance we will be able to detect the incident in a timely manner or at all.

There
can be no assurance that our efforts to guard against the wide and growing variety of potential attack techniques will be successful.
Attacks such as those experienced by government entities (including those that approve and/or regulate our products) and other multi-national
companies, including some of our peers, could leave us unable to utilize key business systems or access or protect important data, and
could have a material adverse effect on our ability to operate our business, including developing, gaining regulatory approval for, manufacturing,
selling and/or distributing our products. For example, in 2017, a pharmaceutical company experienced a cyberattack involving virulent
malware that significantly disrupted its operations, including its research and sales operations and the production of some of its medicines
and vaccines. As a result of the cyberattack, its orders and sales for certain products were negatively affected. In late 2020, SolarWinds
Corporation, a leading provider of software for monitoring and managing information technology infrastructure, disclosed that it had
suffered a cybersecurity incident whereby attackers had inserted malicious code into legitimate software updates for its products that
were installed by myriad private and government customers, enabling the attackers to access a backdoor to such systems. In 2022, Okta,
Inc., a provider of software that helps companies manage user authentication, disclosed that several hundred of its corporate customers
were vulnerable to a security breach that allowed attackers to access Okta’s internal network. Although this breach did not have
a significant effect on our business, there can be no assurance that a similar future breach would not result in a material adverse effect
on our business or results of operations.

 27 

Our
systems contain and use a high volume of sensitive data, including intellectual property, trade secrets and other proprietary business
information, financial information, regulatory information, strategic plans, sales trends and forecasts, litigation materials and/or
personal identifiable information belonging to us, our staff, our patients, customers and/or other parties. In some cases, we utilize
third-party service providers to collect, process, store, manage or transmit such data, which have increased our risk. Intentional or
inadvertent data privacy or security breaches (including cyberattacks)