Company: PCRX
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001396814-25-000041
Chunk: 235

Company: Pacira BioSciences, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 235
---
 be a target of malicious attackers who attempt to gain 

Pacira BioSciences, Inc.  |  2024 Annual Report on Form 10-K  |  Page 65

access to our network or data centers; steal proprietary information related to our business, products, employees, suppliers and customers; interrupt our systems and services or those of our suppliers, customers, or others; or demand a ransom to return control of such systems and services. Such attempts—including but not limited to—social engineering or “phishing” attempts, denial of service attacks and malware (including viruses, trojans and keyloggers) are increasing in number, intensity and in technical sophistication, and are increasingly difficult to detect for periods of time, especially as they relate to attacks on third-party vendors, and, if successful, expose us and any affected parties to risk of loss or misuse of proprietary or confidential information or disruptions of our business operations, including our manufacturing operations. These attacks are often carried out by motivated and highly skilled actors, who are increasingly well-resourced. Our IT infrastructure also includes services provided by third parties, and these service providers can experience breaches of their systems and products that impact the security of our systems and our proprietary or confidential information. In addition, certain factors, such as growth through acquisitions, rapid technology evolution, including increased adoption of artificial intelligence, and geopolitical events, have increased cybersecurity risks. A substantial breach of our or one of our service providers’ systems could result in the loss of revenues, the misuse of confidential data, manufacturing challenges or disruption, diversion of management attention, litigation, regulatory action and damage to our relationships with vendors, business partners and customers, and we may incur significant expenses to resolve such issues.

Finally, the SEC has adopted rules that require us to provide greater disclosures around cybersecurity risk management, strategy and governance, as well as disclose the occurrence of material cybersecurity incidents. We cannot yet predict or estimate the amount of additional costs we will incur in order to comply with these rules or the timing of such costs. These rules and regulations may also require us to report a cybersecurity incident before we have been able to fully assess its impact or remediate the underlying issue. Efforts to comply with such reporting requirements could divert management’s attention from our incident response and could potentially reveal system vulnerabilities to threat actors. Failure to timely report incidents under these or other similar rules could also result in monetary fines, sanctions or subject us to other forms of liability. This regulatory environment is increasingly challenging and may present material obligations and risks to our business