Company: ANTX
Filing Date: 2025-03-25
Form Type: 10-K
Source: 0000950170-25-044366
Chunk: 121

Company: AN2 Therapeutics, Inc.
Filing Date: 2025-03-25
Form: 10-K
Item: Item 1A
Chunk 121
---
 systems or other cybersecurity incidents, including those that cause loss, destruction, unavailability, alteration, dissemination of, or damage, or unauthorized access to, or processing of, our data, including personal information, assets, and other data processed or maintained on our behalf, that could have a material adverse effect upon our reputation, business, financial condition, results of operations and growth prospects.

While we have implemented security measures intended to protect our information technology systems and infrastructure, there can be no assurance that such measures will successfully prevent service interruptions or cybersecurity incidents or that our security measures and processes will be fully implemented, complied with or effective. Nor can we be certain that our third-party vendors or business partners have sufficient measures or processes in place to protect their information technology systems and infrastructure. We, our third-party vendors and business partners are, from time to time, subject to attacks and cybersecurity incidents. While we have not to our knowledge experienced an incident that has had a material impact on our operations or financial results, there is no way of knowing with certainty whether we have experienced any material cybersecurity incidents that have not been discovered. While we have no reason to believe this to be the case, attackers have become very sophisticated in the way they conceal access to systems, and many companies that have been attacked are not aware that their systems or information have been compromised. Any event that leads to unauthorized access, use, or disclosure of information, including personal information regarding our patients or employees, or other adverse impact to the availability, integrity or confidentiality of our information technology systems, infrastructure or information, could disrupt our business, harm our reputation, compel us to comply with applicable federal and state breach notification laws and foreign law and contractual equivalents, subject us to time-consuming, distracting, and expensive litigation (including class actions), regulatory investigation and oversight, mandatory corrective action, require us to verify the correctness of database contents, or otherwise subject us to liability under laws, regulations, and contractual obligations, including those that protect the privacy and security of personal information. It could also result in increased costs to us, including costs to investigate, mitigate and remediate vulnerabilities and incidents, and result in significant legal and financial exposure and reputational harm. In addition, any failure or perceived failure by us or our vendors or business partners to comply with our privacy, confidentiality, or data security-related legal or other obligations to third parties, or any further cybersecurity incidents, may result in governmental investigations, enforcement actions, regulatory fines, litigation, or public statements against us by advocacy groups or others, and could cause third parties,