Company: CORT
Filing Date: 2025-07-31
Form Type: 10-Q
Source: 0001628280-25-037005
Chunk: 204

Company: CORCEPT THERAPEUTICS INC
Filing Date: 2025-07-31
Form: 10-Q
Item: Part I, Item 4
Chunk 204
---
 place additional compliance mechanisms, may interrupt or delay our development, regulatory and commercialization activities and increase our cost of doing business, and could lead to government enforcement actions, private litigation and significant fines and penalties against us and could have a material adverse effect on our business, financial condition or results of operations. Similarly, failure to comply with federal and state laws regarding privacy and security of personal data could expose us to fines and penalties under such laws. Even if we are not determined to have violated these laws, government investigations into these issues typically require the expenditure of significant resources and generate negative publicity, which could harm our reputation and our business.

We rely on information technology to conduct our business. A breakdown or breach of our information technology systems or our failure to protect confidential information concerning our business, patients or employees could interrupt the operation of our business and subject us to liability.

We store valuable confidential information relating to our business, patients and employees on our computer networks and on the networks of our vendors. In addition, we rely heavily on internet technology, including video conference, teleconference and file-sharing services, to conduct business. Despite our security measures, our networks and the networks of our vendors are at risk of break-ins, installation of malware or ransomware, denial-of-service attacks, data theft and other forms of malfeasance by persons seeking to commit fraud or theft, which could result in unauthorized access to, and/or misuse of, our clinical data or other confidential information, including confidential information relating to our patients or employees. We may continue to increase our cybersecurity risks, due to our reliance on internet technology and the number of our employees that are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities.

39

We and our vendors have experienced data breaches, theft, “phishing” attacks and other unauthorized access to confidential data and information. There can be no assurance that our cybersecurity systems and processes will prevent unauthorized access in the future that causes serious harm to us, our patients or employees. We may also experience security breaches that remain undetected for an extended period.

Disruptions or security breaches that result in the disclosure of confidential or proprietary information could cause us to incur liability and delay or otherwise harm our research, development and commercialization efforts. We may be liable for losses suffered by patients or employees or other individuals whose confidential information is stolen as a result of a breach of the security of the systems that we or third parties and our vendors store this information on, and any such liability could be material. Even if we are not liable for such