Company: TXG
Filing Date: 2025-05-09
Form Type: 10-Q
Source: 0001770787-25-000032
Chunk: 131

Company: 10x Genomics, Inc.
Filing Date: 2025-05-09
Form: 10-Q
Item: Part I, Item 8
Chunk 131
---
 described above.

We have not always been able in the past and may be unable in the future to anticipate or prevent techniques used to obtain unauthorized access or to compromise our systems because the techniques used change frequently and are generally not detected until after an incident has occurred. We may also face increased cybersecurity risks due to our reliance on internet technology when our employees are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Cyberattacks and other malicious internet-based activity continue to increase and cloud-based platform providers of services have been and are expected to continue to be targeted and threat actors are increasingly utilizing tools and techniques designed to evade controls, to avoid detection and even to obfuscate or remove forensic evidence.

We have experienced cyberattacks and other security incidents and expect to continue to experience such events. The cost of investigating, mitigating, responding to and remediating potential data security breaches and complying with applicable breach notification obligations to individuals, regulators, partners and others could be significant. Our insurance policies may not be adequate to compensate us for the potential costs and other losses arising from cybersecurity-related disruptions, failures, attacks or breaches. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, defending a suit, regardless of its merit, could be costly, divert management attention and harm our reputation.

Threats involving the misuse or access of our network, systems, and information by our current or former employees, contractors, vendors, or partners, whether intentional or unintentional, also pose a risk to the security of our network, systems, information and data. For example, we are subject to the risk that employees may inadvertently share Confidential Information with unintended third parties, or that departing employees may take, or create their own information based on, our Confidential Information upon leaving the company. In addition, any such insiders may be the victims of social engineering attacks that enable third parties to access our network, systems, and information using an authorized person’s credentials. We and our network, systems, and information are also vulnerable to malicious acts by insiders, including leaking, modifying, or deleting Confidential Information, or performing other acts that could materially interfere with our operations and business. While we provide regular training to our employees regarding cybersecurity threats and best practices, we cannot ensure that such training or other efforts will prevent unauthorized access to or sabotage of our network, systems, and information.

While we implement security measures designed to reduce these risks, there is no guarantee these measures will be adequate to safeguard all systems and networks.