Company: DARE
Filing Date: 2025-04-24
Form Type: ARS
Source: 0001401914-25-000018
Chunk: 208

Company: Dare Bioscience, Inc.
Filing Date: 2025-04-24
Form: ARS
Chunk 208
---
 business is found to be not in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded health care programs. If regulatory authorities challenge our activities, or those of a commercial collaborator or other third party on which we rely, under these laws, any such challenge could have a material adverse effect on our reputation, business, results of operations and financial condition. Any investigation of us or the third parties with whom we contract, including a commercial collaborator, regardless of the outcome, would be costly and time consuming, and may negatively affect our results of operations and financial condition. Cyber-attacks, security breaches, loss of data and other disruptions to our information technology systems or those of our collaborators or third-party service providers could compromise sensitive information related to our business, delay or prevent us from accessing critical information, subject us to significant financial loss, and expose us to liability, any of which could adversely affect our business and our reputation. We utilize information technology systems and networks in the ordinary course of our business to process, transmit and store sensitive data, including confidential information, intellectual property, and personally identifiable information of our employees, consultants and others. As the use of digital technologies has increased, cyber incidents, including deliberate attacks (such as the deployment of harmful malware and other malicious code, ransomware, denial of service, social engineering, and other attempts to gain unauthorized access to computer systems and networks), have increased in frequency and sophistication, and have become increasingly difficult to detect. These threats pose a risk to the security of our systems and networks and those of our collaborators and third- party service providers, including our CMOs and CROs for our clinical studies, which store sensitive or confidential data of ours, and could compromise the confidentiality, availability and integrity of such information which may be vital 105

to our operations and business strategy. A successful cyber-attack could cause serious negative consequences for us, including, without limitation, the disruption of our operations, the misappropriation or destruction of our confidential information and sensitive data, including clinical trial data, corporate strategic plans and financial information, and the misappropriation of other assets, including our cash. Organizations and governmental bodies with far greater resources than ours dedicated to cybersecurity have proven vulnerable to cyber-attacks. There can be no assurance we will succeed in preventing cybersecurity breaches or successfully mitigate their effects. In March 2023, we became aware that we had been subject to a criminal fraud commonly referred to as “business email compromise fraud.” The incident involved