In the normal course of business, we collect, process, use and retain sensitive and confidential information regarding our customers and prospective customers, including data provided by and related to consumers and their transactions, as well as other data of the counterparties to their payments. We also have arrangements in place with certain third-party service providers that require us to share customer information. Although we devote significant resources and management focus to ensuring the integrity of our systems through information security and business continuity programs, our facilities and systems, and those of third-party service providers, are vulnerable to actual or threatened external or internal security breaches; acts of vandalism, theft, fraud or misconduct on the part of employees, other internal sources or third parties; computer viruses or malware; phishing attacks; internet interruptions; disruptions or losses; misplaced or lost data; ransomware; unauthorized encryption; denial-of-service attacks; social engineering; unauthorized access; spam or other attacks; natural disasters; fires; terrorism; war; telecommunications or electrical interruptions or failures; programming or human errors or malfeasance; and other similar malicious or inadvertent disruptions or events. We and our third-party service providers from time to time have experienced and may in the future continue to experience such instances, and we may experience heightened risks of cyberattacks and other security breaches or disruptions as a result of the ongoing unification efforts to integrate certain legacy IT infrastructure and systems of MALKA and Even Financial Inc. (now Engine by MoneyLion). The scale and effectiveness of such attacks or attempts may be further enhanced by the use of AI. The access by unauthorized persons to, or the improper disclosure by us of, confidential information regarding our customers or our proprietary information, software, methodologies and business secrets could interrupt our business or operations, result in legal claims or proceedings, significant legal and financial exposure, supervisory liability under U.S. federal or state or non-U.S. laws regarding the privacy and protection of information, including PII, damage to our reputation or a loss of confidence in the security of our systems, products and services, all of which could have a material adverse impact on our business. Although the impact to date from these events has not had a material adverse effect on us, no assurance is given that this will be the case in the future.
In addition to cyberattacks, data security breaches and other similar incidents involving the theft of sensitive and confidential information, ransomware, hackers, terrorists, sophisticated nation-state and nation-state supported actors and other malicious third parties recently have engaged in attacks that are designed to disrupt key business services, such as consumer-facing websites, which attacks we have faced in the past and anticipate will continue to grow in scope and complexity over time. We and our third-party partners, service providers or vendors may not be able to anticipate or implement effective preventive measures against all security breaches of these types, especially because the techniques used to sabotage or to obtain unauthorized access to our or our third-party partners', service providers' or vendors' technology, systems, networks and/or physical facilities in which data is stored or through which data is transmitted change frequently and because attacks can originate from a wide variety of sources. We employ detection and response mechanisms designed to contain and mitigate security incidents. Nonetheless, early detection efforts may be thwarted by sophisticated attacks and malware designed to avoid detection, and we may fail to detect the existence of a security breach related to the information of our customers and to prevent or detect service interruptions, system failure or data loss. Further, as many of our employees continue to work remotely, these cybersecurity risks may be heightened by an increased attack surface across our business and those of our customers and third-party partners, service providers and vendors. We cannot guarantee that our efforts, or the efforts of those upon whom we rely and with whom we partner, will be successful in preventing any such information security incidents.
Information security risks in the financial services industry in particular are significant, in part because of new technologies, the use of the internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions and the increased sophistication and activities of organized criminals, perpetrators of fraud, hackers, terrorists and other malicious third parties. In addition, there have been a number of well-publicized attacks or breaches affecting companies in the financial services industry that have heightened concern by customers, which could also intensify regulatory focus, cause customers to lose trust in the security of the industry in general and result in reduced use of our services and increased costs, all of which could also have a material adverse effect on our business. The digital nature of our platform may also make it an attractive target for hacking and potentially vulnerable to security breaches and similar disruptions.
Most jurisdictions (including all 50 states) have enacted laws requiring companies to notify individuals, regulatory authorities and/or others of security breaches involving certain types of data. In addition, our agreements with certain partners and service providers may require us to notify them in the event of a security breach. Such mandatory disclosures are costly, could lead to negative publicity, may cause our customers, partners and service providers to lose confidence in the effectiveness of our security measures and require us to expend significant capital and other resources to respond to and/or alleviate problems caused by the actual or perceived security breach. A security breach of any of our vendors that processes PII may pose similar risks.
A cyberattack, data security breach or other similar incident may also cause us to breach customer contracts. Our agreements with certain partners and service providers may require us to use industry-standard or reasonable measures to safeguard PII. We also may be subject to laws that require us to use industry-standard or reasonable security measures to safeguard PII. A cyberattack, data security breach or other similar incident could lead to claims by our customers or other relevant stakeholders that we have failed to comply with such legal or contractual obligations. As a result, we could be subject to legal action, and our customers could end their relationships with us. There can be no assurance that the limitations of liability in our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages, and in some cases, our customer agreements may not limit our remediation costs or liability with respect to data breaches.
Litigation resulting from cyberattacks, data security breaches or other similar incidents may adversely affect our business. Unauthorized access to our technology, systems, networks or physical facilities, or those of our third-party partners, service providers or vendors, could result in litigation with our customers or other relevant stakeholders. These proceedings could force us to spend money in defense or settlement, divert management's time and attention, increase our costs of doing business or adversely affect our reputation. We could be required to fundamentally change our business activities and practices or modify our products and/or technology capabilities in response to such litigation, which could have an adverse effect on our business. If a cyberattack, data security breach or other similar incident were to occur, and the confidentiality, integrity or availability of PII was disrupted, we could incur significant liability, or our technology, systems or networks may be perceived as less desirable, which could negatively affect our business and damage our reputation.
While we maintain cybersecurity insurance, we may not have adequate insurance coverage with respect to liabilities that result from any cyberattacks, data security breaches or other similar incidents or disruptions suffered by us or third parties upon which we rely. The successful assertion of one or more large claims against us that exceeds our available insurance coverage, or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements), could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or at all, or that our insurers will not deny coverage as to any future claim.