Company: ICUI
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000883984-25-000007
Chunk: 123

Company: ICU MEDICAL INC/DE
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1
Chunk 123
---
 our business, we collect, store and transmit large amounts of confidential information, including intellectual property, proprietary business information, preclinical and clinical trial data, and personal information (collectively, “Confidential Information”) of customers 

19

and our employees and contractors. It is critical that we do so in a secure manner to maintain the confidentiality and integrity of such Confidential Information. Any incident that impairs or compromises this infrastructure, including security breaches, malicious attacks or more general service interruptions, could impede our ability to process orders, manufacture and ship product in a timely manner, protect sensitive data and otherwise carry on business in the normal course. Any such events could result in the loss of customers, revenue, or both, and could require us to incur significant expense to remediate, including legal claims or proceedings. Further, as cybersecurity related incidents continue to evolve, and regulatory focus on these issues continues to expand, additional investment in protective measures, and vulnerability remediation, may be required.

Our ability to execute our business strategy depends, in part, on the continued and uninterrupted performance of our information technology systems and those of our third-party service providers, strategic partners and other contractors or consultants, which support our operations. Despite the implementation of security measures, our information technology systems, and those of third parties on which we rely, are vulnerable to attack, interruption and damage from, among others, computer viruses, malware (e.g. ransomware), misconfigurations, “bugs” or other vulnerabilities, malicious code, natural disasters, terrorism, war, telecommunication and electrical failures, hacking, cyber-attacks or cyber-intrusions over the Internet, phishing and other social engineering schemes, human error, theft or misuse by persons inside our organization, or persons with access to systems inside our organization, fraud, denial or degradation of service attacks and sophisticated nation-state and nation-state-supported actors or similar disruptive problems. We have also outsourced elements of our information technology infrastructure, and as a result a number of third-party vendors may or could have access to our confidential information. The risk of a security breach or disruption, particularly through cyber-attacks or cyber-intrusion, including by computer hackers, foreign governments, and cyber terrorists, has generally increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and often are not foreseeable or recognized until launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative