In the ordinary course of our business, we collect and store sensitive data, including our proprietary business information and that of our customers, suppliers and business partners, as well as personally identifiable information about our customers and employees. The secure processing, maintenance and transmission of this information is critical to our operations and business strategy. We, our customers, and other financial institutions with which we interact, are subject to ongoing, continuous attempts to penetrate key systems by individual hackers, organized criminals, and in some cases, state-sponsored organizations.
While we have established policies and procedures to prevent or limit the impact of cyber-attacks, there can be no assurance that such events will not occur or will be adequately addressed if they do. In addition, we also outsource certain cybersecurity functions, such as penetration testing, to third party service providers, and the failure of these service providers to adequately perform such functions could increase our exposure to security breaches and cybersecurity threats. Despite our security measures, our information technology and infrastructure may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other malicious code and cyber-attacks that could have an impact on information security. Any such breach or attacks could compromise our networks and the information stored there could be accessed, publicly disclosed, lost or stolen. Any such unauthorized access, disclosure or other loss of information could result in legal claims or proceedings, liability under laws that protect the privacy of personal information, and regulatory penalties; disrupt our operations and the services we provide to customers; damage our reputation; and cause a loss of confidence in our products and services, all of which could adversely affect our financial condition and results of operations.