We have access to certain "personally identifiable" information of customers, which customers expect will be maintained confidentially. It is possible that hackers, customers, or employees acting unlawfully or contrary to our policies or other individuals, could improperly access our or our vendors' systems and obtain or disclose data about customers. Further, because customer data may also be collected, stored, or processed by third-party vendors, it is possible that these vendors could intentionally or negligently disclose data about our clients or customers. Data breaches could also occur at our Partner Banks, Higher Education institution clients, or at our BaaS partner, which could negatively affect our reputation, relationships with end users, and could harm the Company, our clients, or our customers. Any such breaches or loss of data could negatively affect our business, growth prospects, financial condition, and results of operations.
We rely to a large extent on sophisticated information technology systems, databases, and infrastructure, and take reasonable steps to protect them. However, due to their size, complexity, content, and integration with or reliance on third-party systems, they are potentially vulnerable to breakdown, malicious intrusion, natural disaster, and random attack, all which pose a risk that sensitive data may be exposed to unauthorized persons or to the public. A breach of our information systems could lead to fraudulent activity, including but not limited to, identity theft, losses on the part of banking customers, additional security costs, negative publicity, and damage to our reputation and brand.
There have been several cyberattacks on websites of large financial services companies. Even if not directed at us specifically, attacks on other entities with whom we do business, or on whom we otherwise rely, or attacks on financial or other institutions important to the overall functioning of the financial system could adversely affect, directly or indirectly, aspects of our business.
Cyberattacks on third-party retailers or other business establishments that widely accept debit card or check payments could compromise sensitive customer information, such as debit card and account numbers. Such an attack could result in significant costs to the Company or our partners, such as costs to reimburse customers, reissue debit cards, and open new customer accounts.
In addition, our customers could be subject to scams that may result in the release of sufficient information concerning the customer or our accounts to allow others unauthorized access to our accounts or our systems (e.g., "phishing" and "smishing"). The ability of customers to bank remotely, including online and through mobile devices, requires secure transmission of confidential information and increases the risk of data security breaches. Because the techniques used to attack financial services company communications and information systems change frequently (and generally increase in sophistication), attacks are often not recognized until launched against a target and we may be unable to address these techniques in advance of attacks, including by implementing adequate preventative measures. We may also be unable to prevent attacks that are supported by foreign governments or other well-financed entities and that may originate from less regulated and remote areas of the world. Claims for compensatory or other damages may be brought against us as a result of a breach of our systems or fraudulent activity. If we are unsuccessful in defending against any resulting claims, we may be forced to pay damages, which could materially and adversely affect our profitability.
In addition, a significant incident of fraud, or an increase in fraud levels generally involving our products, such as our debit cards, could result in reputational damage, which could reduce the use of our products and services. Such incidents of fraud could also lead to regulatory intervention, which could increase our compliance costs. Accordingly, account data breaches and related fraudulent activity could have a material adverse effect on our future growth prospects, business, financial condition, and results of operations.