Company: LBRX
Filing Date: 2025-09-08
Form Type: S-1/A
Source: 0001193125-25-197877
Chunk: 56

Company: LB PHARMACEUTICALS INC
Filing Date: 2025-09-08
Form: S-1/A
Chunk 56
---
 entities, and it may be difficult to integrate companies into our information technology environment and security
program.

In addition, our reliance on third parties could introduce new cybersecurity risks and vulnerabilities, including supply-chain
attacks, and other threats to our business operations.We rely on various third parties and technologies to operate critical business systems to process sensitive data in a variety of contexts, including, without limitation,
cloud-based infrastructure, data center facilities, encryption and authentication technology, personnel email, and other functions. We also rely on third parties to provide other products, services, parts, or otherwise to operate our business,
including with respect to our cybersecurity infrastructure. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the
third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if such third parties fail to satisfy their privacy or security-related obligations
to us, any award may be insufficient to cover our damages, or we may be unable to recover such award.In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’
infrastructure in our supply chain or that of the third parties with whom we work have not been compromised.

While we have implemented
security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We may not, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we may
experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized,
unlawful, or accidental acquisition, modification, destruction, loss, alteration,

36

encryption, disclosure of, or access to our sensitive data or our information technology systems, or those of the third parties with whom we work. A security incident or other interruption could
disrupt our ability (and that of third parties with whom we work) to provide our services.

We may expend significant resources or modify
our business activities (including our clinical trial activities) to try to protect against security incidents. Additionally, certain data privacy and security obligations may require us to implement and maintain specific security measures or
industry-standard or reasonable security measures to protect our information technology systems and sensitive data.

Applicable data
privacy and security obligations may require us