Company: ARVN
Filing Date: 2025-02-11
Form Type: 10-K
Source: 0001655759-25-000016
Chunk: 274

Company: ARVINAS, INC.
Filing Date: 2025-02-11
Form: 10-K
Item: Item 1A
Chunk 274
---
 computer systems and those of our collaborators, contractors, consultants and other third parties are vulnerable to cyber attacks, cyber intrusions and security breaches, which could not only materially disrupt our business operations and result in the loss of confidential information, but could also damage the integrity of our clinical trials, impact our regulatory filings, compromise our ability to protect our intellectual property, and subject us to regulatory actions that could result in significant fines or other penalties. 

Our internal computer systems and those of any collaborators, contractors, consultants or other third parties that we work with, are vulnerable to damage from computer viruses, unauthorized access, natural disasters, terrorism, war and telecommunication and electrical failures. Such systems are also vulnerable to service interruptions or to security breaches from inadvertent or intentional actions by our employees, third-party vendors and/or collaborators and other business partners, or from cyber-attacks by malicious third parties. In recent years, cyber-attacks have increased in their frequency, sophistication and intensity, and have become increasingly difficult, time consuming and costly to detect and we have experienced certain attacks, though minor, related to third-party vendors. Cyber-attacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, unauthorized access to or deletion of files, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. Cyber-attacks also could include phishing attempts or e-mail fraud to cause payments or information to be transmitted to an unintended recipient. These types of incidents continue to be prevalent and pervasive across industries, including in our industry. In addition, we expect information security risks to continue to increase due to the proliferation of new technologies, including artificial intelligence, and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties, including foreign state actors.

We are increasingly dependent on information technology systems and infrastructure, including mobile technologies, to operate our business. In the ordinary course of our business, we collect, process, store and transmit large amounts of confidential information, including intellectual property, proprietary business information and personal information. It is critical that we do so in a secure manner to maintain the confidentiality and integrity of such information. The size and complexity of our information technology systems, and those of third-party vendors with whom we contract, and the volume of data we retain, make such systems potentially vulnerable to breakdown, malicious intrusion, security breaches, ransomware, phishing, and other cyber-attacks.

While we have not experienced any material system failure, accident or security breach to date, if such an event were to occur,