Our technology systems contain personal, financial and other information that is entrusted to us by our guests and team members, as well as financial, proprietary and other confidential information related to our business. In addition, a significant portion of our restaurant sales are by credit or debit cards. If our technology systems, or those of third-party services providers we rely upon, are compromised as a result of a cyber-attack (including whether from circumvention of security systems, denial-of-service attacks, hacking, use of artificial intelligence, "phishing" attacks, computer viruses, ransomware, malware, or social engineering) or other external or internal method, it could result in an adverse and material impact on our reputation, operations, and financial condition. The cyber risks we face range from cyber-attacks common to most industries, to attacks that target us due to the confidential consumer information we obtain through our electronic processing of credit and debit card transactions. The rapid evolution and increased adoption of artificial intelligence technologies may also heighten our cybersecurity risks by making cyber-attacks more difficult to detect, contain, and mitigate. Such security breaches could also result in litigation or governmental investigation against us, as well as the imposition of penalties. These impacts could also occur if we are perceived either to have had an attack or to have failed to properly respond to an incident.
To conduct our operations, we regularly move data across national borders, and consequently are subject to a variety of continuously evolving and developing laws and regulations regarding privacy, data protection, and data security, including those related to the collection, storage, handling, use, disclosure, transfer, and security of personal data. The use and disclosure of such information is regulated and enforced at the federal, state and international levels, and these laws, rules and regulations are subject to change.
As privacy and information security laws and regulations change, or cyber risks evolve pertaining to data, we may incur significant additional costs in technology, third-party services and personnel to maintain systems designed to anticipate and prevent cyber-attacks. For example, the Company experienced a cybersecurity incident at some Chili's locations in fiscal 2018. As with many public companies, our defenses are under attack regularly. There have been, and will be, minor intrusions from time-to-time. As a result of the incident, we have taken certain additional preventative measures to reduce cyber risks. However, we cannot provide assurance that our security frameworks and measures will be successful in preventing future significant cyber-attacks or data loss.