Company: MIRM
Filing Date: 2025-11-04
Form Type: 10-Q
Source: 0001759425-25-000054
Chunk: 324

Company: Mirum Pharmaceuticals, Inc.
Filing Date: 2025-11-04
Form: 10-Q
Item: Part II, Item 1A
Chunk 324
---
, monetary fund diversions, interruptions in our operations (including availability of data), financial loss, and other similar harms. Security incidents and attendant consequences may negatively impact our ability to grow and operate our business. More specifically, for example, the loss of clinical trial data from completed, ongoing or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. Security incidents and any unauthorized access or disclosure of our sensitive information could also compromise our intellectual property and patent portfolio, expose sensitive business information, expose the personal data of our employees, require us to incur significant remediation costs, disrupt key business operations and divert attention of management and key information technology resources.

We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and cybersecurity practices, that such coverage will continue to be available to us on 

87

commercially reasonable terms, or at all, or that such coverage will pay future claims. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our reputation, business, financial condition and results of operations. Additionally, our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations.

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position.

We are subject to U.S. and certain foreign export and import controls, sanctions, embargoes, anti-corruption laws and anti-money laundering laws and regulations. Compliance with these legal standards could impair our ability to compete in domestic and international markets. We can face criminal liability and other serious consequences for violations, which can harm our business.

We are subject to export control and import laws and regulations, including the U.S. Export Administration Regulations, U.S. Customs regulations, and various economic and trade sanctions regulations administered by the U.S. Treasury Department’s Office of Foreign Assets Controls, and anti-corruption and anti-money laundering laws and regulations, including the FCPA, the U.S. domestic bribery statute contained in 18 U.S.C