Company: AMWL
Filing Date: 2025-02-12
Form Type: 10-K
Source: 0000950170-25-019024
Chunk: 105

Company: American Well Corp
Filing Date: 2025-02-12
Form: 10-K
Item: Item 1A
Chunk 105
---
 incidents and similar disruptive problems, fire, flood and natural disasters. Any such failure or event could adversely affect our relationships with our clients and damage our reputation. This could materially and adversely impact our business, financial condition and operating results. 

If our or our vendors’ security measures fail or are breached and unauthorized access to a client’s data or information systems is obtained, our services may be perceived as insecure, we may incur significant liabilities, our reputation may be harmed, and we could lose sales and clients. 

Our services involve the storage and transmission of clients’ and our consumers’ proprietary information, sensitive or confidential data, including valuable intellectual property and personal information of employees, clients, consumers and others, as well as the protected health information (“PHI”), of our consumers. We are subject to laws and regulations relating to the collection, use, retention, security and transfer of this information. Because of the extreme sensitivity of the 

33

information we store and transmit, the security features of our and our third-party vendors’ computer, network, and communications systems infrastructure are critical to the success of our business. A breach or failure of our or our third-party vendors’ network, hosted service providers or vendor systems could result from a variety of circumstances and events, including third-party action, employee negligence or error, malfeasance, computer viruses, ransomware, cyber-attacks by computer hackers such as denial-of-service and phishing attacks, failures during the process of upgrading or replacing software and databases, power outages, hardware failures, telecommunication failures, user errors, or catastrophic events. Information security risks have generally increased in recent years because of the proliferation of new technologies and the increased sophistication and activities of perpetrators of cyber-attacks. Hackers and data thieves are increasingly sophisticated and operating large-scale and complex automated attacks, including on companies within the healthcare industry. As cyber threats continue to evolve, we may be required to expend additional resources to further enhance our information security measures and/or to investigate and remediate any information security vulnerabilities. If our or our third-party vendors’ security measures fail or are breached, it could result in unauthorized persons accessing sensitive patient or member data (including PHI), a loss of or damage to our data, an inability to access data sources, or process data or provide our services to our clients. Such failures or breaches of our or our third-party vendors’ security measures, or our or our third-party vendors’ inability to effectively resolve such failures or breaches in a timely manner, could severely damage our reputation, adversely affect client, patient, member