Company: IMCR
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001671927-25-000006
Chunk: 187

Company: Immunocore Holdings plc
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 187
---
) to provide our goods and otherwise operate our business. For example, the loss of clinical trial data from completed or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Likewise, we may rely on third parties for the manufacturing of our product candidates and any future product candidates and to conduct clinical trials, and similar events relating to their computer systems could also have a material adverse effect on our business.

To the extent that any disruption or security breach were to occur (or be perceived to have occurred), we may experience adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits and inspections); additional reporting requirements and/or oversight; restrictions on processing data (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary expenditures; diversion of management attention; financial loss; harm to our competitive position; delays to the further development and commercialization of our product candidates or any future product candidates; and other similar harms. Security breaches and attendant consequences may cause customers to stop using our goods; limit our ability to conduct clinical trials; and otherwise negatively impact our business. If we were to experience a significant security breach, we may be required to provide notification of the breach (under applicable privacy and security obligations) to counterparties, data subjects, regulators or others. The failure to comply with such notification obligations could lead to adverse consequences.

The financial exposure from the events referenced above could either not be insured against or not be fully covered through any insurance that we maintain. There can be no assurance that the limitations of liability in our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages as a result of the events referenced above. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, sensitive information of the Company could be leaked, disclosed, or revealed as a result of or in connection with our employees,’ personnel’s, or