We are increasingly dependent on digital technology to process and record financial and operating data and communicate with our employees and business partners. During the normal course of business we receive, retain and transmit certain confidential information that our customers provide to purchase products or services or to otherwise communicate with us, as well as certain potentially sensitive information about our employees and other persons and entities.
Our technologies, systems, networks and data and information processes (and those of our business partners) have been, and may in the future be, the target of cyber-attacks and/or information security incidents that may have resulted in, or may in the future result in, the unauthorized release, misuse, loss or destruction of proprietary, personal and other information, or other disruption of our business operations, including compromise of our email systems. For example, in February 2022, Lawson became aware that its computer network was the subject of a cyber incident potentially involving unlawful access (the "Cyber Incident"). Because of the nature of the information that may have been potentially compromised, which may have included personal identifiable information and protected health information, we were required to notify the parties whose information was potentially compromised of the incident as well as various governmental agencies and have taken other actions, such as offering credit monitoring services. After this incident, we also reviewed our overall systems and processes, and implemented certain changes, including employee training, designed to improve our overall cybersecurity program, but we cannot assure you that these changes will be effective to prevent future incidents. In addition, from time to time our email systems (and those of our business partners communicating with us) have been subjected to malicious attacks, including phishing attacks.
Such attacks or incidents could have a material adverse effect on our business strategy, results of operations or financial condition and subject us to additional legal costs. For example, a putative class action lawsuit was filed against DSG in April 2023 asserting a variety of claims seeking monetary damages, injunctive relief and other related relief in connection with the Cyber Incident, which could result in additional legal and other costs.
The techniques used by criminals to obtain unauthorized access to sensitive data change frequently and often are not recognizable until launched against a target or until a breach has already occurred. Accordingly, we may be unable to anticipate these techniques or implement adequate preventative measures. In addition, we are exposed to growing and evolving risks arising from the use of Artificial Intelligence technologies by bad actors to commit fraud, misappropriate funds and facilitate cyberattacks. As cyber threats continue to evolve, we may be required to expend additional resources to continue to modify or enhance our protective measures or to investigate and fix any information security vulnerabilities.
We maintain and have access to data and information that is subject to privacy and security laws, data protection laws and applicable regulations. The interpretation and application of such laws, including federal, state and international laws, relating to the collection, use, retention, disclosure, security and transfer of personally identifiable data in the United States (including but not limited to the California Consumer Privacy Act and the California Privacy Rights Act), Europe (including but not limited to the European Union's General Data Protection Regulation) and elsewhere, are uncertain and evolving. Despite our efforts to protect such information, cyber, privacy or security incidents, or misplaced or lost data could have a materially adverse impact on our business strategy, results of operations or financial condition and may divert management and employee attention from other business and growth initiatives.