Company: RGNX
Filing Date: 2025-03-13
Form Type: 10-K
Source: 0000950170-25-038770
Chunk: 165

Company: REGENXBIO Inc.
Filing Date: 2025-03-13
Form: 10-K
Item: Item 1A
Chunk 165
---
 attempts to exploit vulnerabilities), geopolitical events, natural disasters, failures or impairments of telecommunications networks, or other catastrophic events. Our business partners face similar risks, and a security breach of their systems could adversely affect our security posture. While we have procedures in place for selecting and managing our relationships with third-party service providers and other business partners, we do not have control over their business operations or governance and compliance systems, practices and procedures, and our management of multiple third-party service providers and business partners increases our operational complexity. If we fail to adequately monitor our third-party service providers’ and business partners’ performance, including for compliance with our agreements and regulatory and legal requirements, we may have to incur additional costs to correct errors, our reputation could be harmed or we could be subject to litigation, claims, legal or regulatory proceedings, inquiries or investigations. Third-party service providers and business partners may experience cybersecurity incidents that may involve data we share with them or rely on them to provide to us, and the need to coordinate with such third-parties and business partners, including with respect to timely notification and access to personnel and information concerning an incident, may complicate our efforts to resolve any issues that arise. As a result, we are subject to the risk that the activities associated with our third-party service providers and business partners will adversely affect our business, even if the cyber incident does not directly impact our systems or information. While we continue to invest in data protection and information technology, including providing an information security training and compliance program to our employees, there can be no assurance that our efforts will prevent service interruptions or identify breaches in our systems that could adversely affect our business and operations and/or result in the loss of critical or sensitive information, which could result in financial, legal, business or reputational harm.

Although we have general liability and cybersecurity insurance coverage, our insurance may not cover all claims, continue to be available on reasonable terms or be sufficient in amount to cover one or more large claims; additionally, the insurer may disclaim coverage as to any claim. The successful assertion of one or more large claims against us that exceed or are not covered by our insurance coverage or changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could materially harm our business, financial condition, results of operations and prospects.

Our customers are concentrated and therefore the loss of a significant customer may harm our business.

Our current revenues are derived from a concentrated customer base. Our revenues for the years ended December 31, 2024 and 2023