Company: ALGN
Filing Date: 2025-05-08
Form Type: 10-Q
Source: 0001097149-25-000034
Chunk: 102

Company: ALIGN TECHNOLOGY INC
Filing Date: 2025-05-08
Form: 10-Q
Item: Item 1A
Chunk 102
---
 risk is exacerbated with the advancement of technologies like AI, which malicious third parties can use to create new, more sophisticated and more frequent or other attacks. There can be no assurance our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information or any other information we maintain or otherwise process. 

Further, the frequency and sophistication of third-party cybersecurity attacks are increasing. Significant service disruptions, breaches, incidents, interruptions or other disruptive events impacting our infrastructure and IT systems, or other cybersecurity incidents, or any belief or reporting that any of the foregoing has occurred, could expose us to regulatory investigations, or other proceedings, private claims, demands, and litigation, impair our reputation and competitive position, distract management and require significant time and resources to address. Legal or regulatory action against us could prevent us from resolving issues quickly or force us to resolve them in unanticipated ways, cause us to incur significant expense and damages, or result in orders forcing us to cease operations or modify our business practices in ways that materially limit or restrict our products and services. Concerns over our practices with respect to privacy, data protection, data governance, and cybersecurity could adversely affect our reputation and deter customers and consumers from using our products and services. In addition, patient care could suffer, and we could be liable if our products, services or IT systems fail to timely deliver accurate and complete information. We have cybersecurity and other forms of insurance coverage related to cyberattacks, breaches, and other incidents or security problems, but we cannot guarantee applicable insurance will be available to us in the future on economically reasonable terms or at all. Damages and claims arising from incidents may not be covered, may exceed coverage limits, and may not cover the time and effort we incur investigating and responding to any incidents, or other costs or liabilities, which may be material. The costs to eliminate, mitigate, or recover from security problems and cybersecurity attacks and incidents could be material and require us to implement additional or different security controls or other measures and, depending on the nature and extent of the problem and the products, services or IT systems impacted, such security problems and cybersecurity attacks and incidents may result in network, IT system interruptions or other disruptions, decreased product sales, data loss, damage, unavailability, or other liabilities, any of which may have a material impact on our operations, net revenues and operating results. The costs associated with cybersecurity tools and infrastructure and competition for scarce cybersecurity and IT resources could limit our ability to identify, eliminate