Company: SCYX
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0000950170-25-038044
Chunk: 93

Company: SCYNEXIS INC
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1A
Chunk 93
---
 no assurance that these measures will be effective.  We take steps to detect and remediate vulnerabilities, in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not detect and remediate all such vulnerabilities including in a timely manner. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Applicable data privacy and security obligations may require us to notify relevant stakeholders, such as governmental authorities, partners, and affected individuals, of security incidents.  Such disclosures may involve inconsistent requirements and are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. 

If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing confidential, proprietary, and sensitive data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management’s attention;  interruptions in our operations (including availability of data); financial loss; and other similar harms.  Security 

41

incidents and attendant consequences may cause customers to stop using our services, deter new customers from using our services, and negatively impact our ability to grow and operate our business. 

Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations.  We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position.

Risks Relating to Owning Our Common Stock

The market price of our common stock may be highly volatile.

The trading price of our common stock may be volatile. The following factors, in addition to other factors