Company: TVRD
Filing Date: 2025-05-30
Form Type: S-1
Source: 0001104659-25-054853
Chunk: 117

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-05-30
Form: S-1
Chunk 117
---
 security risks will increase, and the Company will need to expend additional resources to protect its technology and information systems.

<div align='center'>63</div>

In addition, there can be no assurance that the Company’s internal information technology systems or those of the third-parties with whom it works, or its consultants’ efforts to implement adequate security and control measures, will be sufficient to protect the Company against breakdowns, service disruption, data deterioration or loss in the event of a system malfunction, or prevent data from being stolen or corrupted in the event of a cyberattack, security breach, industrial espionage attacks or insider threat attacks, which could result in financial, legal, business or reputational harm. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position.

Any of the previously identified or similar threats have in the past and may in the future cause a security incident or other interruption that have in the past and may in the future result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties with whom we work. For example, we have been the target of unsuccessful phishing attempts in the past, and expect such attempts will continue in the future. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to operate our business.

Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. In addition, while the Company maintains insurance policies that may cover certain liabilities in connection with a cybersecurity incident, it cannot be certain that the insurance coverage will be adequate for liabilities actually incurred, that insurance will continue to be available to the Company on commercially reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims that exceed available insurance coverage, or the occurrence of changes in insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on its business, including its financial condition, results of operations and reputation.

Unfavorable global economic conditions could adversely affect the