Company: BDRX
Filing Date: 2025-01-28
Form Type: 424B3
Source: 0001214659-25-001409
Chunk: 68

Company: Biodexa Pharmaceuticals Plc
Filing Date: 2025-01-28
Form: 424B3
Chunk 68
---
While we take steps to detect
and remediate vulnerabilities, we may not be able to detect and remediate all vulnerabilities because the threats and techniques used
to exploit such vulnerabilities change frequently and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited
but may not be detected until after a cybersecurity incident has occurred, if at all. Further, we may experience delays in developing
and deploying remedial measures designed to address any such identified vulnerabilities.

We rely on third-party service
providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including,
without limitation, cloud-based infrastructure, encryption and authentication technology, employee email, and other functions. We also
rely on third-party service providers to assist with our clinical trials, provide other products or services, or otherwise to operate
our business. Our ability to monitor these third parties’ information security practices is limited, and these third parties may
not have adequate information security measures in place. If our third-party service providers experience a cybersecurity incident or
other interruption, we could experience adverse consequences. While we may be entitled to damages if our third-party service providers
fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be
unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that
third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that
they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems,
including our services, or the third-party information technology systems that support us and our services.

Any of the previously identified
or similar threats could cause a cybersecurity incident or other interruption that could result in unauthorized, unlawful, or accidental
acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive data or our information
technology systems, or those of the third parties upon whom we rely. A cybersecurity incident or other interruption could disrupt our
ability, and that of third parties upon whom we rely, to provide our products and services and conduct clinical trials.

The costs related to significant
cybersecurity incidents or disruptions could be material and cause us to incur significant expenses. If the information technology systems
of our CROs, clinical sites, and other contractors and consultants become subject to disruptions or cybersecurity incidents, we may have
insufficient recourse against such third parties