Company: IMRX
Filing Date: 2025-08-13
Form Type: 10-Q
Source: 0001790340-25-000104
Chunk: 99

Company: Immuneering Corp
Filing Date: 2025-08-13
Form: 10-Q
Item: Part I, Item 3
Chunk 99
---
 parties pursuant to data privacy and security laws. Notifications and follow-up actions related to a security breach could impact our reputation and cause us to incur significant costs, including legal expenses and remediation costs. For example, the loss of clinical trial data from past, present or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the lost data. We also rely on third parties to manufacture our product candidates, and similar events relating to their computer systems could also have a material adverse effect on our business. To the extent that any disruption or security breach were to result in a loss of, or damage to, our data, or inappropriate disclosure of confidential or proprietary information, we could be exposed to litigation and governmental investigations, the further development and potential commercialization of our product candidates could be delayed or halted, and we could be subject to significant fines or penalties for any noncompliance with certain state, federal, local and/or international privacy and security laws.

Our insurance policies may not be adequate to compensate us for the potential losses arising from any such disruption, failure or security breach. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and could have high deductibles in any event, and defending a suit, regardless of its merit or ultimate disposition, could be costly and divert management attention.

Additionally, there can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and 

90

information. See Part I. Item 1C. "Cybersecurity" contained in our Annual Report on Form 10-K for the fiscal year ended December 31, 2024 for additional information.

Our operations are vulnerable to interruption by fire, severe weather conditions, power loss, telecommunications failure, terrorist activity, military conflict, future pandemics and other events beyond our control, which could harm our business.

Our facilities are located in regions which experience severe weather from time to time. We have not undertaken a systematic analysis of the potential consequences to our business and financial results from a major tornado, flood, fire, earthquake, power loss, terrorist activity, geopolitical conflicts, military conflict, future pandemics, public health crises or other disasters and do not have a recovery plan for such disasters. In addition, we do not carry sufficient insurance to compensate us for actual losses from interruption of our business that may