Company: ARWR
Filing Date: 2025-11-25
Form Type: 10-K
Source: 0000879407-25-000029
Chunk: 109

Company: ARROWHEAD PHARMACEUTICALS, INC.
Filing Date: 2025-11-25
Form: 10-K
Item: Item 1A
Chunk 109
---
, we expect that we will need to manage additional relationships with various collaborators, suppliers, and other organizations. Our ability to manage our operations and future growth will require us to continue to improve our operational, financial, information technology and management controls, reporting systems and procedures. We may not be able to effectively manage the expansion of our operations or implement improvements to our management information and control systems in an efficient or timely manner and may discover deficiencies in existing systems and controls.

Our business and operations could suffer in the event of a cybersecurity incident or other information technology system failures.

Our internal computer systems and those of our contractors and consultants are vulnerable to damage from computer viruses, unauthorized access, ransomware and other cyber-attacks, human error, natural disasters, terrorism, war, and telecommunication and electrical failures. Such events could cause interruption of our operations and loss of intellectual property. For example, the loss of preclinical trial data or data from completed or ongoing clinical trials for our product candidates could result in delays in our regulatory filings and development efforts and significantly increase our costs. Further, cybersecurity breaches or other cybersecurity incidents may allow hackers access to our preclinical compounds, strategies, discoveries, trade secrets, and/or other confidential information. Additionally, sensitive data could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, vendors’ or partners’ use of generative AI technologies. To the extent that any disruption or cybersecurity incident were to result in a loss of or damage to our data, or inappropriate disclosure of confidential, proprietary or private information, we could incur liability or regulatory penalties, including under laws and regulations governing the protection of protected health information and other personal data, we could be subject to litigation (including class-action claims), we could lose valuable trade secret rights, the development of our product candidates could be delayed, and we could suffer reputational damage and damage to key business relationships. The risk of a cybersecurity incident or other informational technology disruption, particularly through cyber-attacks, has generally increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased. We, and certain of the third parties for which we depend on to operate our business, have experienced cyber-security attacks in the past, which to date have not had a material impact on our operations or development programs; however; there is no assurance that such impacts will not be material in the future.

Because we use biological materials, hazardous materials, chemicals and radioactive compounds, if we do not comply with laws regulating the protection of the environment and