KALA BIO, Inc.

In a 10-K Item 1C cybersecurity disclosure, the registrant states it has not experienced any material losses relating to cyber-attacks but was the subject of a successful phishing attempt in 2019. The filing describes governance via the Audit Committee, a Chief Business Officer, an outside IT/cybersecurity consultant, a managed security services provider, a cross-functional Cybersecurity Committee, employee training, and cyber insurance. No affected-individual count, data types, or threat actor are disclosed.