Company: TVRD
Filing Date: 2025-02-14
Form Type: S-4/A
Source: 0001104659-25-013053
Chunk: 236

Company: Tvardi Therapeutics, Inc.
Filing Date: 2025-02-14
Form: S-4/A
Chunk 236
---
, outside parties may attempt to penetrate Tvardi’s systems or those of its vendors or fraudulently induce its personnel or the personnel of its vendors to disclose sensitive information in order to gain access to Tvardi’s data and/or systems. Tvardi may experience threats to its data and systems, including malicious code and viruses, supply chain attacks, phishing and other cyberattacks. The number and complexity of these threats continue to increase over time. While Tvardi has not experienced, to date, a cybersecurity threat, including as a result of any previous cybersecurity incidents, that has materially affected or is reasonably likely to materially affect Tvardi, including its business strategy, results of operations or financial condition, it cannot guarantee that it will not experience such a threat or incident in the future. If a material breach of, or accidental or intentional loss of data from, Tvardi’s information technology systems or those of its vendors occurs, the market perception of the effectiveness of its security measures could be harmed and Tvardi’s reputation and credibility could be damaged, and Tvardi could be subject to adverse legal and regulatory consequences. Tvardi could be required to expend significant amounts of money and other resources to repair or replace information systems or networks.

In addition, Tvardi could be subject to regulatory actions and/or claims made by individuals and groups in private litigation involving privacy issues related to data collection and use practices and other data privacy laws and regulations, including claims for misuse or inappropriate disclosure of data, as well as unfair or deceptive practices. Although Tvardi develops and maintains systems and controls designed to prevent these events from occurring, and Tvardi has a process to identify and mitigate threats, the development and maintenance of these systems, controls and processes is costly and requires ongoing monitoring and updating as technologies change and efforts to overcome security measures become increasingly sophisticated. Moreover, despite Tvardi’s efforts, the possibility of these events occurring cannot be eliminated entirely. As Tvardi outsources more of its information systems to vendors, engage in more electronic transactions with payors and patients and rely more on cloud-based information systems, the related security risks will increase, and Tvardi will need to expend additional resources to protect its technology and information systems.

In addition, there can be no assurance that Tvardi’s internal information technology systems or those of its third-party contractors, or its consultants’ efforts to implement adequate security and control measures, will be sufficient to protect Tvardi against breakdowns, service disruption, data deterioration or loss in the event of