Company: MBIO
Filing Date: 2025-04-01
Form Type: 424B3
Source: 0001104659-25-030657
Chunk: 111

Company: MUSTANG BIO, INC.
Filing Date: 2025-04-01
Form: 424B3
Chunk 111
---

to maintain compliance with Nasdaq’s continued listing rules in the future. If we are not able to maintain compliance, we may be
delisted from Nasdaq. In the event we are delisted from Nasdaq, there can be no assurance that our common stock will be eligible for trading
on another stock exchange or quotation on an over-the-counter market. If we are not able to obtain a listing on another stock exchange
or quotation service for our common stock, it may be extremely difficult or impossible for stockholders to sell their shares. Additionally,
if we are delisted from Nasdaq, but obtain a substitute listing or quotation service for our common stock, it will likely be on a market
with less liquidity and our common stock may therefore experience potentially more price volatility than it has historically experienced
on Nasdaq. Stockholders may not be able to sell their shares of common stock on any such substitute market in the quantities, at the times,
or at the prices that could potentially be available on a more liquid trading market. As a result of these factors, if our common stock
is delisted from Nasdaq, the value and liquidity of our common stock would likely be adversely affected. A delisting of our common stock
from Nasdaq could also adversely affect our ability to obtain financing for our operations and/or result in a loss of confidence by investors,
employees and/or business partners

​

<div align='center'>57</div>

​

Table of Contents

​

Item 1B. Unresolved Staff Comments

​

None.

​

Item 1C. Cybersecurity

​

Cybersecurity Risk Management and Strategy

We have established
certain processes for identifying, evaluating, and managing material risks from cybersecurity threats as a part of our overall technology
management strategy. These processes are designed and reassessed on a periodic basis to help protect our technology assets and operations
from internal and external security threats. We also engage with third parties, including consultants, to enhance our security processes.

​

We have previously
engaged and currently engage third parties to assess the effectiveness of our cybersecurity and technology management strategy and continue
to seek to implement new, and improve existing, processes regularly to adjust for changes in technology, internal or external threats,
business strategy, and regulatory requirements. We, and our third parties, have deployed managed detection and response services to monitor
our technology infrastructure and information systems for possible threats. Our technology management strategy also includes ongoing security
training and education for employees regarding threats, including their role and responsibility in detecting and responding to