We rely heavily on communications and information systems, including those provided by third-party service providers, to conduct our business. Any failure, interruption, or security breach of these systems could result in failures or disruptions which could impact our ability to serve our customers, operate our business and affect our customers' privacy and could damage our reputation, result in a loss of business, subject us to additional regulatory scrutiny or enforcement or expose us to civil litigation and possible financial liability. Our systems and networks, as well as those of our third-party service providers, are subject to security risks and could be susceptible to cyberattacks by third parties, including through coordinated attacks sponsored by foreign nations and criminal organizations to disrupt business operations and other compromises to data and systems for political or criminal purposes. Cyber threats are rapidly evolving and we may not be able to anticipate or prevent all such attacks and could be held liable for any security breach or loss. These risks have increased with the implementation of remote and/or hybrid work protocols and may continue to increase in the future as the use of mobile banking and other internet-based products and services continues to grow.
For example, in August 2022 and November 2023, we were notified by different third-party vendors that they had experienced potential cybersecurity incidents. On both occasions, we activated our incident response plan and the vendors completed forensic analyses to determine whether information from the Bank's customers was accessed and exfiltrated in an unauthorized manner. Once the forensic analyses were completed, we worked with the vendors and outside advisors to determine the appropriate course of action, including having the vendors provide notice to our affected customers and offer free credit monitoring services when appropriate. Our business, financial condition, or results of operations were not materially adversely affected by these cybersecurity incidents. We are not aware of any continuing cybersecurity threats or breaches involving these vendors, however, we, as well as our customers, regulators, and service providers, have experienced and will likely continue to experience a significant increase in information security and cybersecurity threats and attacks, see Item 1C. Cybersecurity for an additional discussion on our information security program.
Despite our cybersecurity policies and procedures and our efforts to monitor and ensure the integrity of our and our service providers' systems, we may not be able to anticipate all types of security threats, nor may we be able to implement preventive measures effective against all such security threats. In addition, the impact and severity of a particular cyberattack may not be immediately clear, and it may take a significant amount of time before such determination can be made. While the investigation of a cyberattack is ongoing, we may not be fully aware of the extent of the harm caused by the cyberattack and it may not be clear how to contain and remediate such harm and any damage may continue to spread.
Security breaches or failures may have serious adverse financial and other consequences, including significant legal and remediation costs, disruption of operations, misappropriation of confidential information, damage to systems operated by us or our third-party service providers, as well as damaging our customers and our counterparties. Such losses and claims may not be covered by our insurance. In addition to the immediate costs of any failure, interruption or security breach, including those at our third-party service providers, these events could damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny, or expose us to civil litigation and possible financial liability, any of which could adversely affect on business, financial condition, results of operations, or cash flows.