We necessarily collect, use and hold personal and financial information concerning individuals and businesses with which we have a banking relationship. This information includes non-public, personally identifiable information that is protected under applicable federal and state laws and regulations. As such, we rely heavily on communications and information systems to conduct our business. Any failure, interruption or breach in security of these systems could result in failures or disruptions in our customer relationship management, deposit, loan and other systems. While we have policies and procedures designed to prevent or limit the effect of the failure, interruption or security breach of our information systems, there can be no assurance that we can prevent any such failures, interruptions, cyber security breaches or other security breaches or, if they do occur, that they will be adequately addressed. We have been, and likely will continue to be, subject to various forms of external security breaches, which may include computer hacking, acts of vandalism or theft, malware, computer viruses or other malicious codes, phishing, employee error or malfeasance, catastrophes, unforeseen events or other cyber-attacks. To date, we have seen no material impact on our business or operations from these attacks or events. Any future significant compromise or breach of our data security, whether external or internal, or misuse of customer, associate, supplier or Company data could damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny, or expose us to civil litigation and possible financial liability, any of which could have a material adverse effect on our financial condition and results of operations. In addition, as the regulatory environment related to information security, data collection and use, and privacy becomes increasingly rigorous, with new and constantly changing requirements applicable to our business, compliance with those requirements could also result in additional costs.
It is difficult or impossible to defend against every risk being posed by changing technologies or criminals intent on committing cyber-crime. In the last few years, there have been an increasing number of cyber incidents and cyber criminals continue to increase their sophistication, including several well-publicized cyber-attacks that targeted other companies in the United States, including financial services companies much larger than us. These cyber incidents have been initiated from a variety of sources, including terrorist organizations and hostile foreign governments. As technology advances, the ability to initiate transactions and access data has also become more widely distributed amount mobile devices, personal computers, automated teller machines, remote deposit capture sites and similar access points, some of which are not controlled or secured by us. It is possible that we could have exposure to liability and suffer losses as a result of a security breach or cyber-attack that occurred through no fault of our own. Further, the probability of a successful cyber-attack against us or one of our third-party services providers cannot be predicted, and in some cases, prevented.