Company: DVAX
Filing Date: 2025-11-05
Form Type: 10-Q
Source: 0001628280-25-049536
Chunk: 64

Company: DYNAVAX TECHNOLOGIES CORP
Filing Date: 2025-11-05
Form: 10-Q
Item: Part I, Item 3
Chunk 64
---
 Because we do not carry earthquake insurance for earthquake-related losses and significant recovery time could be required to resume operations, our financial condition and operating results could be materially adversely affected in the event of a major earthquake or catastrophic event. We carry only limited business interruption insurance that would compensate us for actual losses from interruption of our business that may occur, and any losses or damages incurred by us in excess of insured amounts could adversely affect our business and operations.

If our information technology systems or those of third parties upon which we rely, or our data are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to 

71

regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; and other adverse consequences.

Our business is increasingly dependent on critical, complex and interdependent information technology systems, including internet-based systems, to support business processes as well as internal and external communications. In addition, our dependence on information technology systems has intensified because many of our critical business activities are now being conducted remotely in our remote-first work environment. The size and complexity of our computer systems make them potentially vulnerable to breakdown, malicious intrusion and computer viruses that may result in the impairment of key business processes.

In addition, our systems, along with those of our customers, suppliers, or third-party service providers which operate critical business systems to process sensitive information in a variety of contexts are potentially vulnerable to a variety of evolving threats and data security breaches—whether by employees or others—that may expose sensitive data to unauthorized persons. Such threats could include, but not be limited to social-engineering attacks (including through phishing attacks), online and offline fraud, malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, access attacks (such as credential stuffing or credential harvesting), personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. 

Ransomware attacks, including by organized criminal threat actors, nation-states, and