Many financial institutions and companies engaged in data processing have reported significant breaches in the security of their websites or other systems, some of which have involved sophisticated and targeted attacks intended to obtain unauthorized access to confidential information, destroy data, disable or degrade service, or sabotage systems, often through the introduction of computer viruses or malware, cyber-attacks and other means. We are subject to such cyber-attacks or other information security breaches, which could result in losses. Additionally, our risk exposure to security matters may remain elevated or increase in the future due to, among other things, the increasing size and prominence of the Company in the financial services industry, our expansion of Internet and mobile banking tools and products based on customer needs and an increased level of employees working remotely. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. Disruptions or failures in the physical infrastructure or operating systems that support our businesses, customers or third parties, or cyber-attacks or security breaches of the networks, systems or devices that our customers or third parties use to access our products and services could result in customer attrition, financial losses, the inability of our customers or vendors to transact business with us, violations of applicable privacy and other laws, regulatory fines, penalties or intervention, reputational damage, reimbursement or other costs, and/or additional compliance costs, any of which could materially adversely affect our results of operations or financial condition.
Although we take protective measures to maintain the confidentiality, integrity and availability of information, our computer systems, software and networks may be vulnerable to unauthorized access, loss or destruction of data (including confidential client information), account takeovers, unavailability of service, computer viruses or other malicious code, cyber-attacks and other events that could have an adverse security impact. Furthermore, we may not be able to ensure that all of our clients, suppliers, counterparties and other third parties have appropriate controls in place to protect themselves from cyber-attacks or to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. Although we have developed, and continue to invest in, systems and processes that are designed to detect and prevent security breaches and cyber-attacks, a breach of our systems and global payments infrastructure of those of our fintech partners and processors could result in: losses to us and our customers; loss of business and/or customers; damage to its reputation; the incurrence of additional expenses (including the cost of investigation and remediation and the cost of notification to consumers, credit monitoring and forensics, and fees and fines imposed by the card networks); disruption to our business; an inability to grow our online services or other businesses; additional regulatory scrutiny, investigation or penalties; and/or exposure to civil litigation and possible financial liability - any of which could have a material adverse effect on our reputation, business, financial condition and results of operations. Although the impact to date for these types of events has not had a material impact on us, we cannot be sure this will be the case in the future.