In connection with our business, we and our service providers collect, use and store large volumes of certain types of personal and proprietary information pertaining to guests, franchisees, stockholders and employees. Such information includes, but is not limited to, large volumes of guest credit and payment card information. We are at risk of attack by cybercriminals operating on a global basis attempting to gain access to such information. In connection with data security incidents involving a group of Wyndham brand hotels that occurred between 2008 and 2010, one of our subsidiaries is subject to a stipulated order with the U.S. Federal Trade Commission (the "FTC"), pursuant to which, among other things, it must meet certain requirements for reasonable data security as outlined in the stipulated order.
While we maintain what we believe are reasonable security controls over personal and proprietary information as part of our risk assessment program in an effort to protect, detect, respond to, and minimize or prevent risks and to enhance the resiliency of our information technology systems, a breach of or breakdown in our systems could result in operating failures, unauthorized access, service interruptions or failures, security breaches, malicious intrusions, theft, exfiltration, ransomware, cyber-attacks, or other compromises of our systems that result in the unauthorized release of personal or proprietary information. Such breach could have a material adverse effect on our hotel brands, reputation, business, financial condition and results of operations, as well as subject us to significant fines, litigation, losses, third-party damages and other liabilities, or our subsidiary could fail to comply with the stipulated order with the FTC. We may face increased cybersecurity risks due to our increasing reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Cybercriminal "hacker" activity has increased in sophistication, duration and frequency since 2020 and poses additional risks.
Data breaches, viruses, ransomware, worms, malicious software, and other serious cyber incidents have increased globally, along with the methods, techniques and complexity of attacks, including efforts to discover and exploit any design flows, bugs or other security vulnerabilities. Additionally, continued geopolitical turmoil, including the ongoing conflicts between Russia and Ukraine and Israel and Hamas, respectively, has heightened the risk of cyber-attacks. We have been, and likely will continue to be, subject to such cyber-attacks. Also, the same cyber security issues exist for the third parties with whom we interact and share information, and cyber-attacks on third parties which possess or use our guest, personnel and other information could adversely impact us in the same way as would a direct cyber-attack on us. Although we do not believe we have incurred any ongoing material adverse impact on our business strategy, results of operations or financial condition as a result of any present or recent cyber-attack, there is no guarantee that cyber-attacks have not gone generally undetected or without general recognition of magnitude or will not occur in the future, any of which could materially adversely affect our brands, reputation, consumer confidence in us, costs and profitability. In addition, the security measures we deploy are not perfect or impenetrable, and we may be unable to anticipate or prevent all unauthorized access attempts made on our systems or those of our third-party service providers.
Additionally, the legal and regulatory environment surrounding information security and privacy in the U.S. and international jurisdictions is constantly evolving, including recent developments and complexities with regard to requirements for the cross-border transfer of personal information due to emerging laws, regulations and judicial decisions (such as cross-border data transfer regulations issued by the People's Republic of China authorities). Other jurisdictions may impose additional restrictions or requirements on cross-border transfers including limitations on transferring data beyond the originating country. Violation or non-compliance with any of these laws or regulations, contractual requirements relating to data security and privacy, or with our own privacy and security policies or processes, either intentionally or unintentionally, or through the acts of intermediaries could have a material adverse effect on our hotel brands, reputation, business, financial condition and results of operations, as well as subject us to significant fines, litigation, losses, third-party damages and other liabilities. While we maintain cyber risk insurance, in the event of a significant security or data breach, this insurance may not cover all of the losses (including but not limited to financial, operational, legal, business or reputational losses) that we may suffer and may result in increased cost or impact the future availability of coverage.