Company: IMRX
Filing Date: 2025-11-12
Form Type: 10-Q
Source: 0001790340-25-000135
Chunk: 205

Company: Immuneering Corp
Filing Date: 2025-11-12
Form: 10-Q
Item: Part I, Item 4
Chunk 205
---
 of or access to our trade secrets, health-related or other personal information or other proprietary or sensitive information, it could result in a material disruption of our drug discovery and development programs and our business operations, whether due to a loss of our trade secrets or other similar disruptions, and it may be necessary to notify individuals, governmental authorities, supervisory bodies, the media and other parties pursuant to data privacy and security laws. Notifications and follow-up actions related to a security breach could impact our reputation and cause us to incur significant costs, including legal expenses and remediation costs. For example, the loss of clinical trial data from past, present or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the lost data. We also rely on third parties to manufacture our product candidates, and similar events relating to their computer systems could also have a material adverse effect on our business. To the extent that any disruption or security breach were to result in a loss of, or damage to, our data, or inappropriate disclosure of confidential or proprietary information, we could be exposed to litigation and governmental investigations, the further development and potential commercialization of our product candidates could be 

95

Table of Contents

delayed or halted, and we could be subject to significant fines or penalties for any noncompliance with certain state, federal, local and/or international privacy and security laws.

Our insurance policies may not be adequate to compensate us for the potential losses arising from any such disruption, failure or security breach. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and could have high deductibles in any event, and defending a suit, regardless of its merit or ultimate disposition, could be costly and divert management attention.

Additionally, there can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information. See Part I. Item 1C. "Cybersecurity" contained in our Annual Report on Form 10-K for the fiscal year ended December 31, 2024 for additional information.

Our operations are vulnerable to interruption by fire, severe weather conditions, power loss, telecommunications failure, terrorist activity, military conflict, future pandemics and other events beyond our control, which could harm our business.

Our facilities are located in regions which experience severe weather from time to time. We have not undertaken