Note 13 – Contingencies

Ransomware Attack

In April 2023, the Company experienced a ransomware attack (the “ransomware attack”) that impacted certain critical information technology systems. In response, we promptly deployed containment measures, including disconnecting our systems from the internet, launching an investigation with assistance from third-party cybersecurity experts, and notifying law enforcement. We adhered to our disaster recovery plan, which enabled us to maintain operations throughout the incident response process. We are in the process of evaluating the full scope of the costs and related impacts of this incident. The Company’s facilities remained open, and we continued to provide services to patients and partners. We later became aware that certain data, including names, test information, and Social Security numbers, was accessed, and in some instances, exfiltrated from the Company’s information technology systems as part of this incident. The investigation identified unauthorized access to or acquisition of clinical test information of approximately 2,470,000 individuals. The Social Security numbers of approximately 600,000 of these individuals may also have been involved. Additionally, the Company has determined that some employees’ information may have been involved. The Company has provided notice to the individuals whose information may have been involved, as well as to regulatory authorities, in accordance with applicable law.

Enzo Biochem is currently subject to regulatory inquiry from the New York Attorney General, a joint inquiry from the Connecticut and New Jersey Attorneys General and an inquiry from the Utah Attorney General. All inquiries ask questions about the ransomware attack, as well as the corrective actions taken in response.  We are unable to evaluate the likelihood of an outcome, favorable or unfavorable, to the Company or to estimate the amount or range of any potential liability, if any, at this time.

Enzo Biochem is also subject to regulatory inquiries from the U.S. Department of Health and Human Services Office for Civil Rights (the “Office for Civil Rights”) regarding the ransomware attack. It is not known at this time whether the Office for Civil Rights will seek a penalty against the Company. We are unable to evaluate the likelihood of an outcome, favorable or unfavorable, to the Company or to estimate the amount or range of any potential liability, if any, at this time.

There is also pending Class Action litigation:

In re Enzo Biochem Data Breach Litigation, No. 2:23-cv-04282 (EDNY)

In the Eastern District of New York twenty putative class actions have been consolidated alleging various harms stemming from the April 2023 data incident. Interim lead counsel has been appointed and filed a Consolidated Amended Complaint on November 13, 2023. The complaint seeks to certify a federal class as well as several state subclasses. The Consolidated Amended Complaint brings various statutory and common law claims including negligence, negligence per se, breach of fiduciary duty, breach of implied contract, breach of the implied covenant of good faith and fair dealing, violation of the New York’s General Business Law § 349, Invasion of Privacy, violations of the Connecticut Unfair Trade Practices Act, and violations of the New Jersey Consumer Fraud Act. The Company filed its motion to dismiss on April 8, 2024. Plaintiffs filed their Opposition on May 23, 2024 and our Reply was filed on May 30, 2024. We are now awaiting the court’s decision.

Maria Sgambati et al., v. Enzo Biochem, Inc., et al., Index No. 619511/2023 (N.Y. Sup. Ct.)

This is a putative class action pending in state court alleging various harms stemming from the April 2023 data incident. The complaint seeks to certify a class of New York residents. The complaint brings claims of negligence; negligence per se; breach of implied covenant and good faith and fair dealing; breach of duty; breach of implied contract; and violations of New York’s Deceptive Acts and Practices § 349. This court granted our motion to stay the case pending the outcome of the federal action in the Eastern District of New York.

Louis v. Enzo Biochem, Inc. et al., Index No. 653281/2023 (N.Y. Sup. Ct.)

This is a putative class action pending in state court alleging various harms stemming from the April 2023 data incident. The complaint seeks to certify a class of New York citizens. The complaint brings claims of negligence; negligence per se; breach of duty, breach of implied contract; breach of implied covenant of good faith and fair dealing; and violations of New York’s Deceptive Acts and Practices § 349. We have filed a motion to stay this action pending the resolution of the federal action in the Eastern District of New York and the motion remains pending.

A provision was made in the financial statements as of July 31, 2023 for the above matters based on a reasonable estimate of loss; however, the actual exposure may differ.

Patent Matters

The Company (as plaintiff) has brought cases in the United States District Court for the District of Delaware (“the Court”), alleging patent infringement against various companies. At this time, the majority of such cases have been resolved.

There is currently one case that was originally brought by the Company that is still pending in the Court. In that case, Enzo alleges patent infringement of the ’197 patent against Becton Dickinson defendants. The claims in that case are stayed.

On September 2, 2021, the U.S. Patent and Trademark Office (“PTO”) issued a non-final office action in an ex parte reexamination concerning the ’197 Patent. In the office action, the PTO rejected certain claims of the ’197 Patent under 35 U.S.C. §§ 102 and 103, and for nonstatutory double-patenting. Enzo responded to the office action on January 3, 2022, and the proceeding remains pending. Becton Dickinson requested another ex parte reexamination concerning the ’197 patent on July 26, 2022. On September 16, 2022, the PTO ordered that ex parte reexamination as to certain claims of the ’197 patent and has not yet issued an office action. Enzo filed a petition to terminate that second reexamination proceeding on November 16, 2022.

Arbitration with former executives

The Company terminated the employment of Elazar Rabbani, Ph.D., the Company’s former Chief Executive Officer, effective April 21, 2022.  Dr. Rabbani was a board director of the Company until the Annual Meeting on January 31, 2024, when his term expired. Dr. Rabbani was a party to an employment agreement with the Company that entitled him to certain termination benefits, including severance pay, acceleration of vesting of share-based compensation, and continuation of benefits. Based on the terms of his employment agreement, the Company estimated and accrued a charge of $2,600 in fiscal year 2022. The charge was partially offset by the reversal of bonus accruals. In May 2022, the Company paid Dr. Rabbani $2,123 in severance (the payment constituted taxable income but the Company did not withhold taxes from the payment). In July 2022, the Company paid Dr. Rabbani’s income and other withholding taxes of $1,024 related to that payment on Dr. Rabbani’s behalf. Dr. Rabbani disputed, among other things, the Company’s decision to not award him a bonus for fiscal year 2021 and the amount of severance that was owed to him under his employment agreement.  On July 8, 2022, the Company filed a demand for arbitration with the American Arbitration Association (the “AAA”) seeking, among other things, a declaration that the Company has fully satisfied its contractual obligations to Dr. Rabbani and seeking the tax withholding reimbursement referenced above.  On August 4, 2022, Dr. Rabbani filed counterclaims in the arbitration seeking, among other things, a bonus for fiscal year 2021 and additional severance that he asserted was owed to him. At the parties’ joint request, the arbitration has been stayed while the parties work towards resolving the matter. A provision was made in the financial statements as of July 31, 2023 based on a reasonable estimate of loss; however, the actual exposure may differ.

On February 25, 2022, Barry Weiner, the Company’s co-founder and President, notified the Company that he was terminating his employment as President of the Company for “Good Reason” as defined in his employment agreement. The Company accepted Mr. Weiner’s termination, effective April 19, 2022, but disagreed with Mr. Weiner’s assertion regarding “Good Reason.” On October 24, 2023, the Company and Mr. Weiner reached an agreement resolving the dispute and a provision was made in the financial statements as of July 31, 2023 based on the settlement agreement. The Company paid Mr. Weiner $3,600, less applicable withholding taxes, related to the agreement in November 2023.

Other Matters

On or about March 2, 2023, a verified complaint was filed in the Supreme Court of the State of New York, New York County captioned Elazar Rabbani (as plaintiff) v. Mary Tagliaferri, et al. (as defendants), Index No. 651120/2023. The verified complaint purports to assert causes of action for breach of fiduciary duty and corporate waste under N.Y.B.C.L. § 720, and seeks an accounting and certain injunctive relief. Plaintiff served a copy of the verified complaint on Enzo’s agent for service in New York on or about March 13, 2023. On August 4, 2023, defendants moved to dismiss all the causes of action asserted in the verified complaint. Plaintiff filed an amended complaint on or about  October 4, 2023, adding, among other things, an additional cause of action for violation of N.Y.B.C.L. § 626. On October 23, 2023, Defendants filed a reply in further support of their motion to dismiss. On October 24, 2023, Plaintiff sought leave to file an opposition brief. Defendants filed an opposition to that request on October 26, 2023. On October 31, 2023, in response to a question from the Court’s law clerk, Defendants reiterated that they had elected to apply their original motion to dismiss to the amended pleading. On November 6, 2023, Plaintiff filed an opposition to Defendants’ motion to dismiss. On November 17, 2023, Defendants filed a reply brief in further support of their motion to dismiss the Amended Complaint. The Company cannot predict the outcome of this matter. Oral argument on Defendants’ motion to dismiss is scheduled for June 18, 2024.

On or about September 26, 2023, James G. Wolf, Individually and as the Trustee of the Wolf Family Charitable Foundation, Barbaranne R. Wolf, Stephen Paul Wolf, and Preston M. Wolf initiated an appraisal action against Enzo Biochem, Inc. in the New York Supreme Court for Suffolk County. Petitioners seek an appraisal of the value of their shares in the Company. The amount of damages sought by the Petitioners is unspecified. The Company will defend itself vigorously in the appraisal action.

In our discontinued Clinical Labs operations, third-party payers, including government programs, may decide to deny payment or recoup payments for testing that they contend was improperly billed or not medically necessary, against their coverage determinations, or for which they believe they have otherwise overpaid (including as a result of their own error), and we may be required to refund payments that we received. In April 2024, the Company engaged in settlement negotiations for a government payer and reached a verbal settlement. A provision is included in the financial statements based on a reasonable estimate of loss; however, the actual exposure may differ.