Company: TYRA
Filing Date: 2025-03-27
Form Type: 10-K
Source: 0000950170-25-046124
Chunk: 123

Company: Tyra Biosciences, Inc.
Filing Date: 2025-03-27
Form: 10-K
Item: Item 1A
Chunk 123
---
 certain privacy laws such as GDPR), it could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other similar disruptions. Some of the federal, state and foreign government requirements include obligations of companies to notify individuals, governmental authorities, supervisory bodies, 

76

the media and other parties of security breaches involving particular personally identifiable information, which could result from breaches experienced by us or by our vendors, contractors, or organizations with which we have formed strategic relationships. Also, due to the continued hybrid working environment, many of our employees are working remotely. As a result, we may have increased cyber security and data security risks, due to increased use of home wi-fi networks and virtual private networks, as well as increased disbursement of physical machines. While we implement information technology controls to reduce the risk of a cyber security or data security breach, there is no guarantee that these measures will be adequate to safeguard all systems, especially with an increased number of employees working remotely.

Any security breach or other incident, whether real or perceived, could impact our reputation, impact the integrity of our data, cause us to incur significant costs, including legal expenses, harm customer confidence, hurt our expansion into new markets, cause us to incur remediation costs, or cause us to lose existing customers. For example, the loss of clinical trial data from clinical trials could result in delays in our marketing approval efforts and significantly increase our costs to recover or reproduce the data. We also rely on third parties to manufacture our product candidates, and similar events relating to their computer systems could also have a material adverse effect on our business. To the extent that any real or perceived disruption or security breach affects our systems (or those of our third-party collaborators, service providers, contractors or consultants) or were to result in a loss of or accidental, unlawful or unauthorized access to, use of, release of, or other processing of Confidential Information, or damage to, our data or applications, or inappropriate disclosure of Confidential Information, we could incur liability, the further development and commercialization of our product candidates could be delayed, and we could be subject to significant incident response, system restoration or remediation and future compliance costs, as well as significant fines, penalties or liabilities for any noncompliance to certain privacy and security laws. We maintain cyber liability insurance; however, this insurance may not be sufficient to cover the financial, legal, business or reputational losses that may result from an interruption or breach of our systems.

Our business could be affected by