Our security structure is subject to cybersecurity failures, including cyber-attacks, which may include intrusion into platforms and IT systems (which includes, inter alia, servers, databases, networks, applications, software, services, partners' services and anything considered a digital asset (e.g. which has bits and bytes) by malicious third parties, malware infiltration (such as computer viruses), contamination (whether intentional or accidental) of networks and systems by third parties with whom we exchange data, cyber-attacks designed to access, change, corrupt or destroy systems, computer networks, stored information or transmitted information, as well as unauthorized access to or breach of sensitive and or private data of clients by our employees, third parties or others. For example, in 2018, certain information relating to our clients in the year was published without our authorization. The unauthorized publication of this information resulted in certain legal proceedings against us, including a public civil action. In 2019, we settled this public civil action.
We have strategic partners in infrastructure and systems, which also process information and operate critical services. These suppliers are subject to risks similar to those described above and may have a direct impact on us and our clients. We may be jointly and severally liable for any damage caused by third-party service providers involved in our operations. Also as of the date of this annual report, some of our subsidiaries have chosen not to use the same controls procedures and cybersecurity systems as Banco Inter. Therefore, the risk is higher in such subsidiaries.
Successful cyber-attacks may paralyze or make our services or systems unavailable for uncertain periods of time, resulting in losses, contamination, corruption or loss of client data and other sensitive stored information, a breach of secured data, dissemination of unauthorized information or loss of significant levels of liquid assets (including cash).
Cyber-attacks are constantly changing and being reinvented. Failure to effectively protect our systems and platforms (including systems and platforms from our third-party service providers) against cyber-attacks may result in losses, disputes with clients, damage to our reputation, lawsuits, regulatory fines, sanctions, regulatory intervention and other damages, each of which could materially adversely affect us.
We may not be able to upgrade our systems quickly enough to keep up with changes in cyber-attacks, or we may be required to allocate additional funds above the amounts originally earmarked to stop such attacks.
We are also subject to cyber-risk-management regulation. Failure to manage cybernetic risks or to comply with these regulatory requirements may adversely affect us.