Company: DARE
Filing Date: 2025-04-24
Form Type: ARS
Source: 0001401914-25-000018
Chunk: 210

Company: Dare Bioscience, Inc.
Filing Date: 2025-04-24
Form: ARS
Chunk 210
---
 alteration, encryption, disclosure of, or access to our sensitive or confidential information, or that of our employees, collaborators, service providers and participants in our clinical studies. A security incident or other interruption could disrupt our ability (or that of third parties upon which we rely) to conduct our business operations and could divert significant resources to remedy or mitigate the damage caused. For example, if clinical or nonclinical study data is lost or becomes compromised, it could result in delays in our product development and regulatory approval efforts and significantly increase our costs due to additional time and resources necessary to recover and verify, or potentially reproduce, the data. In addition, a security breach or privacy violation that leads to disclosure of personally identifiable information or protected health information could require us to make notifications to the public as well as regulatory authorities, harm our reputation, subject us to audit, investigation, steep fines and administrative penalties and mandatory corrective action. A data breach could also require us to verify the correctness of database contents and subject us to litigation, including class action lawsuits, or other liability under laws and regulations that protect personal data, consumer protection and other laws. Further, our information technology and other internal infrastructure systems, including firewalls, servers, leased lines and connection to the internet, face the risk of systemic failure, which could disrupt our operations. If any disruption or security breach results in a loss or damage to our data or applications, or inappropriate disclosure of confidential or proprietary information, we may incur resulting liability, our product development programs and competitive position may be adversely affected, the further development of our product candidates may be delayed, and the manufacture and sale of any approved products may be impaired. The costs related to significant security breaches or disruptions could be material, and, as was the case with the fraud discovered in March 2023, our insurance coverage may not cover all the losses arising from any such disruption in, or failure or security breach of, our systems or third-party systems where information important to our business operations and product development is stored or processed. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and could have high deductibles in any event, and defending a suit, regardless of its merit, could be costly and divert management attention. Moreover, if the information technology systems of our third-party 106

collaborators, service providers or vendors become subject to disruptions or security breaches, we may have insufficient recourse against such third parties and we may have to