Company: BLLN
Filing Date: 2025-10-07
Form Type: S-1
Source: 0001193125-25-233697
Chunk: 52

Company: BillionToOne, Inc.
Filing Date: 2025-10-07
Form: S-1
Chunk 52
---
 products will meet
their expectations. Furthermore, if our competitors’ products do not perform to expectations, it may result in lower confidence in our tests as well. As a result, the failure of our products to perform as expected could significantly impair
our operating results and our reputation. In addition, we may be subject to legal claims arising from any defects or errors in our products. Confidence in us, as well as the strength of our brand and reputation, could also be eroded by perceived
failures by us or our competitors, even absent any evidence of failure or wrongdoing.

If our information technology systems or those third parties with whom we work or our data, are or were compromised, we could experience adverse consequences resulting from such compromise, including regulatory investigations or actions, litigation, fines and penalties, disruptions of our business operations, reputational harm, loss of revenue or profits, loss of customers or sales, and other adverse consequences.

In the ordinary course of our business, we and
the third parties with whom we work, process, collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, process) proprietary, confidential, and sensitive
data, including protected health information (PHI) and other personally identifiable information, credit card and other financial information, intellectual property and proprietary business information owned or controlled by us or other parties such
as customers and payors. We manage and maintain our applications and data utilizing a combination of on-site

31

systems and cloud-based data centers. We utilize external security and infrastructure vendors to manage parts of our data centers. Our information technology systems store a wide variety of
information critical to our business, including research and development information, patient data, commercial information and business and financial information. We face a number of risks related to protecting this critical information, including
loss of access, inappropriate use or disclosure, unauthorized access, inappropriate modification and our being unable to adequately monitor, audit or modify our controls over such critical information. This risk extends to the third-party providers,
strategic partners and other contractors, subcontractors or consultants we use to manage this sensitive data or otherwise process it on our behalf.

Cyberattacks,
security breaches, computer viruses, malicious internet-based activity, online and offline fraud, ransomware attacks, phishing, structured query language injections, social engineering schemes, distributed denial-of-service attacks, supply chain attacks, malware and other incidents, as well as employee theft or misuse, human error, fraud