Company: RCUS
Filing Date: 2025-08-06
Form Type: 10-Q
Source: 0001724521-25-000101
Chunk: 165

Company: Arcus Biosciences, Inc.
Filing Date: 2025-08-06
Form: 10-Q
Item: Part II, Item 1A
Chunk 165
---
 we rely, are subject to failure, security breaches and other disruptions, which could result in a material disruption of our investigational products’ development programs, jeopardize sensitive information, prevent us from accessing critical information or result in a loss of our assets, and potentially expose us to notification obligations, loss, liability or reputational damage and otherwise adversely affect our business. 

We are increasingly dependent upon information technology systems, infrastructure and data to operate our business. In the ordinary course of business, we collect, store and transmit confidential information, including but not limited to intellectual property, proprietary business information and personal information (collectively, "Sensitive Information"). 

We also have outsourced elements of our operations to third parties, and as a result we manage a number of third-party contractors and other parties who have access to our sensitive information. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties we rely on experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if these third parties fail to satisfy their privacy- or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such an award. In addition, supply chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised.

Despite the implementation of security measures, given the size and complexity and the increasing amounts of sensitive information that they maintain, our internal information technology systems and those of our third-party CROs and other third parties upon which we rely are vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our employees, contractors, consultants, business partners, and/or other third parties, or from cyberattacks by malicious third parties (including the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information and other assets), which may compromise our system infrastructure, lead to data leakage, impair key business processes or other critical business operations, delay our development programs, or result in the loss of assets or other liability. Our reliance on internet technology and the number of our employees who are working remotely has increased the opportunities for cybercriminals to exploit vulnerabilities.