Company: IMCR
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001671927-25-000006
Chunk: 185

Company: Immunocore Holdings plc
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 185
---
’ information security practices is limited and these third parties may not have adequate information security measures in place. If our third-party service providers experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised.

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services. We and the third parties upon whom we rely face a variety of evolving threats including but not limited to breakdown; breach; interruption or damage from computer viruses; malicious code (such as worms); social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks); personnel error or malfeasance; theft or misuse; denial-of-service attacks; malware (including as a result of advanced persistent threat intrusions); denial-of-service attacks; such as credential stuffing; ransomware attacks; software bugs; server malfunctions; attacks enhanced or facilitated by artificial intelligence; software and hardware failures; natural disasters; fires; floods; terrorism; war; telecommunication and electrical failures; and other compromise. Ransomware attacks, including those perpetrated by organized criminal