Company: MDXG
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001376339-25-000009
Chunk: 84

Company: MIMEDX GROUP, INC.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 84
---
 day-to-day operations as well as positioning to enhance our stance in the market. We generate intellectual property that is central to the future success of the business and transmit large amounts of confidential information. Additionally, we collect, store and transmit confidential information of customers, patients, employees and third parties. We also have outsourced significant elements of our operations to third parties, including significant elements of our information technology infrastructure, and, as a result, we are managing many independent vendor relationships with third parties who may or could have access to our confidential information. The continually changing threat landscape of cybersecurity today makes our systems potentially vulnerable to service interruptions or to security breaches from inadvertent or intentional actions by our employees, partners, and vendors, and from attacks by malicious third parties, including supply chain attacks originating at our third-party partners. Such attacks are of ever-increasing levels of sophistication. Attacks are made by individuals or groups that have varying levels of expertise, some of which are technologically advanced and well-funded including, without limitation, nation states, organized criminal groups and hacktivists organizations.

24

To ensure protection of our information, we have invested in cybersecurity and have implemented processes and procedural controls to maintain the confidentiality and integrity of such information. We measure these controls and their success through a cybersecurity framework that is based on industry standards. While we have invested in the protection of our data and technology, there can be no guarantees that our efforts will prevent all service interruptions or security breaches. Any such interruption or breach of our systems could adversely affect our business operations and result in the loss of critical or sensitive confidential information or intellectual property, and could result in financial, legal and reputational harm to our business, including legal claims and proceedings, liability under laws that protect the privacy of personal information, government enforcement actions and regulatory penalties, as well as remediation costs. We also maintain cyber liability insurance. However, this insurance may not be sufficient to cover the financial, legal or reputational losses that may result from an interruption or breach of our systems.

We may expand or contract our business through acquisitions, divestitures, licenses, investments, and other commercial arrangements with other companies or technologies, which may adversely affect our business, results of operations and financial condition.

We periodically evaluate opportunities to acquire companies or divest divisions, technologies, products, and rights through licenses, distribution agreements, investments, and outright acquisitions to grow our business, although we may not successfully identify or negotiate any such transaction. In connection with one or more of those transactions, we may, subject to the requirements and