Company: MYGN
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0000899923-25-000019
Chunk: 73

Company: MYRIAD GENETICS INC
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 73
---
 our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems, including our services, or the third-party information technology systems that support us and our products and services.

Any of the previously identified or similar threats could cause a cybersecurity incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive data or our information technology systems, or those of the third parties upon whom we rely. A cybersecurity incident or other interruption could disrupt our ability, and that of third parties upon whom we rely, to provide our products and services and otherwise disrupt our business.

The costs related to significant cybersecurity incidents or disruptions could be material and cause us to incur significant expenses. If the information technology systems of our collaborators, and other contractors, consultants, or third parties become subject to disruptions or cybersecurity incidents, we may have insufficient recourse against such third parties and we may have to expend significant resources to mitigate the impact of such an event, and to develop and implement protections to prevent future events of this nature from occurring.

If such an event were to occur and cause interruptions in our operations, it could result in a disruption of our development programs and our business operations, financial loss, a loss of our trade secrets or other proprietary information and damage to our reputation and otherwise negatively impact us. To the extent that any disruption or cybersecurity incident were to result in a loss of, or damage to, our data or applications, or inappropriate disclosure of confidential, sensitive, or proprietary information, we could incur liability, our competitive position could be harmed and the further development and commercialization of our products and services could be delayed. Applicable data privacy and security obligations may require us to notify relevant stakeholders, regulatory authorities, and other individuals of cybersecurity incidents, and take other remedial measures. Such disclosures and measures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. Any such event could also result in legal claims or proceedings, liability under laws that protect the privacy of personal information and significant regulatory penalties, and damage to our reputation and a loss of confidence in us.

If we experience a significant disruption in our information technology systems, or those of third-parties upon which we rely, including cloud-based services, our business operations and financial condition could be adversely affected. 

Information technology (IT) and communication systems are an important part of our business operations