Company: CNTB
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001835268-25-000014
Chunk: 147

Company: Connect Biopharma Holdings Ltd
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1A
Chunk 147
---
 experience cybersecurity breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence.

We and some of our Third Parties are from time to time subject to cyberattacks and cybersecurity incidents. If such an event were to occur again and cause interruptions in our operations or result in the unauthorized use, disclosure of or access to Confidential Information, it could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other similar disruptions cause us to breach our contractual obligations, subject us to mandatory corrective action, and otherwise subject us to liability under laws, regulations and 

56

contracts that protect the privacy and security of Confidential Information, which could result in significant legal and financial exposure and reputational damages. 

Despite our contractual protections with such Third Parties, notifications and follow-up actions related to a cybersecurity breach could impact our brand and reputation, cause us to incur significant costs, including legal expenses, harm customer confidence and trust, hurt our expansion into new markets, cause us to incur remediation costs, or cause us to lose existing customers. We also rely on Third Parties to manufacture our Product Candidates, and similar events relating to their IT Systems could also have a material adverse effect on our business. To the extent that any disruption or security breach were to result in a loss of, or damage to, our Confidential Information or applications, or inappropriate disclosure or use of Confidential Information, we could incur liability, the further development and commercialization of our Product Candidates could be delayed, and we could be subject to significant fines, penalties or liabilities for any noncompliance with privacy and security laws. Any of the foregoing could have a material adverse effect on our business, financial condition, results of operations or prospects.

Further, the costs of attempting to protect our IT Systems against the foregoing risks and the costs of responding to a cyberattack are significant. In addition, data breaches of our and/or our Third Parties’ security measures and the unauthorized dissemination of Confidential Information could expose us to the risk of financial or medical identity theft, or expose us or other third parties to a risk of loss or misuse of this information, and result in investigations, regulatory enforcement actions, material fines and penalties, loss of business, litigation or other actions which could have a material adverse effect on our business, prospects, reputation, results of operations