Item 8.01 Other Events.

On April 6, 2023, Enzo Biochem, Inc. (the “Company”) experienced a ransomware attack that impacted certain information technology systems. In response, the Company promptly deployed containment measures, including disconnecting its systems from the internet, and launched an investigation with assistance from third-party cybersecurity experts. The Company has activated its disaster recovery plan, which allows it to continue operations while it brings its systems back online.

On April 11, 2023, the Company became aware that certain data was extracted from the Company’s information technology systems as part of this incident. The investigation of this incident and the assessment of its impact is ongoing.

The Company’s facilities remain open, and it continues to provide services to its patients and partners using established back-up processes and other downtime procedures. However, these back-up procedures can create operational challenges and have caused delays in the processing of laboratory specimens. The Company is actively engaged in fully restoring or replacing affected systems, which is expected to be largely complete in the coming days.

The Company is also evaluating the extent of the incident and working diligently to mitigate its effects. The Company has incurred, and may continue to incur, certain expenses related to this attack, including expenses to respond to, remediate and investigate this matter. Further, the Company remains subject to risks and uncertainties as a result of the incident, including as a result of the data that was extracted from the Company’s network as noted above.

Forward-Looking Statements

This Current Report on Form 8-K includes statements which may constitute forward-looking statements made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995, the accuracy of which are necessarily subject to risks, uncertainties, and assumptions as to future events that may not prove to be accurate. These statements include, but are not limited to, express or implied forward-looking statements relating to our expectations regarding our ability to contain and assess the ransomware attack and the impact of the ransomware attack on our operations and financial results. These statements are neither promises nor guarantees, but are subject to a variety of risks and uncertainties, many of which are beyond our control, which could cause actual results to differ materially from those contemplated in these forward-looking statements. Factors that could cause actual results to differ materially from those expressed or implied include the ongoing assessment of the ransomware attack, legal, reputational and financial risks resulting from cyberattacks, including the ransomware attack, the effectiveness of business continuity plans during the ransomware attack, and the other factors discussed in our most recent Annual Report on Form 10-K and other filings with the Securities and Exchange Commission. The Company undertakes no obligation to update or revise any forward-looking statements, whether as a result of new information, future events, or otherwise, except as may be required under applicable securities law.