Company: ALGN
Filing Date: 2025-11-05
Form Type: 10-Q
Source: 0001097149-25-000079
Chunk: 79

Company: ALIGN TECHNOLOGY INC
Filing Date: 2025-11-05
Form: 10-Q
Item: Item 4
Chunk 79
---
 deliver accurate and complete information. We have cybersecurity and other forms of insurance coverage related to cyberattacks, breaches, and other incidents or security problems, but we cannot guarantee applicable insurance will be available to us in the future on economically reasonable terms or at all. Damages and claims arising from incidents may not be covered, may exceed coverage limits, and may not cover the time and effort we incur investigating and responding to any incidents, or other costs or liabilities, which may be material. The costs to eliminate, mitigate, or recover from security problems and cybersecurity attacks and incidents 

49 

could be material and require us to implement additional or different security controls or other measures and, depending on the nature and extent of the problem and the products, services or IT systems impacted, such security problems and cybersecurity attacks and incidents may result in network, IT system interruptions or other disruptions, decreased product sales, data loss, damage, unavailability, or other liabilities, any of which may have a material impact on our operations, net revenues and operating results. The costs associated with cybersecurity tools and infrastructure and competition for scarce cybersecurity and IT resources could limit our ability to identify, eliminate or remediate cybersecurity or other security vulnerabilities or problems or enact changes to minimize the attack surface of our network.

Additionally, our iTero intraoral scanners may be independently or collectively the target of cybersecurity incidents or attacks or subject to security vulnerabilities, bugs, errors, defects, or viruses or other malicious code. Due to the large and growing number of these decentralized devices, we may be unable, or not have the capacity, knowledge or infrastructure, to respond to or remedy a cybersecurity incident in a timely manner. Any such cybersecurity incident may cause loss or damage to us, our customers or strategic business partners or may cause further malfunctions in, or damage to, our products, services, or IT systems, damage to, or loss, unavailability, or unauthorized acquisition, use, or other processing of our data, or disruption, interruption or temporary cessation of our operations. Further, any such security breach or incident, or other cybersecurity incident, or any belief or reporting that any of the foregoing has occurred, may otherwise have a negative impact upon our business or reputation.

We also are or may become, or alleged to be or become, subject to certain federal, state, and foreign laws and regulations respecting the security and privacy of patient healthcare information applicable to healthcare providers and their business associates, such as the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), the HIPAA Standards for Privacy of