Information security risks have generally increased in recent years due to the rise in new technologies and the increased sophistication and activities of perpetrators of cyberattacks. We rely on the reasonable secure processing of personal, confidential and other sensitive information in our computer systems, hardware, software, technology infrastructure and online sites and networks as well as those provided by third parties (collectively, "IT Systems"). Our IT Systems are essential to the operation of our business and our ability to perform day-to-day operations, and, in some cases, may be critical to the operations of certain of our tenants. We and our third-party providers face risks associated with security breaches, whether through cyberattacks or cyber-intrusions over the internet, bugs, malware, computer viruses, attachments to e-mails and/or employees or third-parties with access to our IT Systems, all of which create an ever-evolving landscape of cybersecurity risks that threaten the confidentiality, integrity and availability of our IT Systems and data that we and our providers process. We face the risk of ransomware or other cyberattacks aimed at disrupting the availability of systems, applications, networks or data important to our business operations. Threat actors use increasingly sophisticated techniques and tools – including artificial intelligence – that circumvent security controls, evade detection and remove forensic evidence. Further, we offer the flexibility to work remotely in certain limited circumstances, which introduces heightened cybersecurity risks as remote working environments can be less secure and more susceptible to cyberattacks due to cybersecurity risks associated with managing remote computing assets and security vulnerabilities that are present in many non-corporate and home networks.
We mitigate the risk of disruptions, breaches or disclosure of this personal, confidential personally and other sensitive information by implementing a variety of security measures including (among others) engaging reputable, recognized firms to help us design and maintain our information technology and data security systems, and to test and verify their proper and secure operations on a periodic basis. However, we cannot guarantee that we or our providers will not suffer successful security breaches, cyberattacks, acts of vandalism, computer viruses, malware, ransomware, denial-of-service attacks, human error issues or other similar events. Like many companies, we have experienced and will continue to experience incidents. Although none of these actual or attempted cyberattacks has had a material adverse impact on our operations or financial condition, we cannot guarantee that any such incidents will not have such an impact in the future.
There can be no assurance that our efforts to maintain the confidentiality, integrity, and availability and controls of our (or our third-party service providers') IT networks and related data and systems will be effective or that attempted security breaches or disruptions would not be successful or damaging. A security breach or other significant disruption involving our (or our third-party service providers') IT networks and related systems could materially and adversely impact our income, cash flow, results of operations, financial condition, liquidity, the ability to service our debt obligations, the market price of our common stock, our ability to pay dividends and/or other distributions to our shareholders and unitholders. A security breach could additionally cause the disclosure or misuse of confidential or proprietary information (including personal information of our residents and/or employees), resulting in litigation (including class actions) and potential liability, paying damages, regulatory inquiries, investigations or actions, and damage to our reputation. Although we maintain errors or omissions and cyber liability insurance, the costs related to an incident or other security threats or disruptions may not be fully insured or indemnified by other means and insurance and other safeguards might only partially reimburse us for our losses, if at all. We also cannot guarantee that applicable insurance will be available to us in the future on economically reasonable terms or at all.
Additionally, as part of our normal business activities,we collect and hold personal information of our residents and prospective residents in connection with our leasing activities at our multifamily locations. We also collect and hold personal information of our employees in connection with their employment. As such, we are subject to various federal, state and local laws, regulations and industry standards. The regulatory environment surrounding information security and privacy is increasingly demanding, with frequent imposition of new and changing requirements that are subject to differing interpretations. In the United States, there are numerous federal and state data privacy and security laws, rules and regulations governing the collection, use, storage, sharing, transmission and other processing of personal information, including federal and state data privacy laws, data breach notification laws and consumer protection laws. Any failure or perceived failure by us to comply with laws, regulations, policies or regulatory guidance relating to privacy or data security may result in governmental investigations and enforcement actions, litigation, fines and penalties or adverse publicity, and could cause our customers and consumers to lose trust in us, which could have an adverse effect on our reputation and business.