Company: PFSA
Filing Date: 2025-11-19
Form Type: 10-Q
Source: 0001213900-25-112723
Chunk: 399

Company: Profusa, Inc.
Filing Date: 2025-11-19
Form: 10-Q
Item: Part I, Item 4
Chunk 399
---
 disclosure of data and violations of applicable data
privacy and other laws; or

●significant regulatory scrutiny, investigations, fines, penalties,
and other legal, regulatory, contractual and financial exposure.

56

Further, any actual or perceived data security breach or cybersecurity
attack directed at other companies with digital assets or companies that operate digital asset networks, regardless of whether we are
directly impacted, could lead to a general loss of confidence in the broader bitcoin blockchain ecosystem or in the use of the bitcoin
network to conduct financial transactions, which could negatively impact us.

Attacks upon systems across a variety of industries, including industries
related to bitcoin, are increasing in frequency, persistence, and sophistication, and, in many cases, are being conducted by sophisticated,
well-funded and organized groups and individuals, including state actors. The techniques used to obtain unauthorized, improper or illegal
access to systems and information (including personal data and digital assets), disable or degrade services, or sabotage systems are constantly
evolving, may be difficult to detect quickly, and often are not recognized or detected until after they have been launched against a target.
These attacks may occur on our systems or those of our third-party service providers or partners. We may experience breaches of our security
measures due to human error, malfeasance, insider threats, system errors or vulnerabilities or other irregularities. In particular, we
expect that unauthorized parties will attempt, to gain access to our systems and facilities, as well as those of our partners and third-party
service providers, through various means, such as hacking, social engineering, phishing and fraud. Threats can come from a variety of
sources, including criminal hackers, hacktivists, state-sponsored intrusions, industrial espionage, and insiders. In addition, certain
types of attacks could harm us even if our systems are left undisturbed. For example, certain threats are designed to remain dormant or
undetectable, sometimes for extended periods of time, or until launched against a target and we may not be able to implement adequate
preventative measures. Further, there has been an increase in such activities due to the increase in work-from-home arrangements. The
risk of cyberattacks could also be increased by cyberwarfare in connection with the ongoing Russia-Ukraine and Israel-Hamas conflicts,
or other future conflicts, including potential proliferation of malware into systems unrelated to such conflicts. Any future breach of
our operations or those of others in the bitcoin industry, including third-party services on which we rely, could materially and