In the normal course of business we often collect, retain and transmit customer personal and credit card information, employee personal information, and other sensitive and confidential information. The protection of customer and employee information, and the Company's intellectual property, from potential threats is vitally important to the Company. Consumers and employees continue to have significant concerns about the security of personal information, especially when transmitted over the Internet, and the use, retention, disclosure, and privacy of such information. We continually evaluate and upgrade our information systems, security measures, and practices to combat the ever-evolving cyber risks and to comply with our legal and regulatory obligations, and we provide cybersecurity awareness training around phishing, social engineering, and other cyber risks to our employees, in an effort to elevate our cybersecurity posture and give our workforce the skills to both avoid and report cyber threats. Despite our risk management efforts, vendor due diligence, and security measures, our facilities and systems and those of our third-party service providers, are subject to increasingly complex cyber risks, including cyber extortion, data breaches, unauthorized access, denial of service, vendor or employee misconduct, ransomware and other malicious software, and data exfiltration. We and our employees and customers could suffer significant harm if any personal, financial, or credit card information was accessed or disclosed by an unauthorized third party, or our information technology systems or those of our third party providers were compromised or subject to data loss, exfiltration, corruption, or disruption. Any security incident or data breach could severely damage our reputation and our relationships with customers, business partners and employees, cause us to incur significant costs and expenses to investigate, remediate and notify affected individuals, and expose us to an increased risk of litigation, regulatory enforcement, fines and penalties, and other losses and liabilities. In addition, the media and public scrutiny of information security and privacy has become more intense and the regulatory environment has become more complex and uncertain due to recent high-profile privacy and security incidents and legislative efforts across the globe. As a result, we may incur significant costs to comply with laws regarding the use, retention, disclosure, security, and privacy of personal information.