We have been and we expect we will in the future be subject to third party attempts to gain unauthorized access to our systems in order to disrupt operations, corrupt data or steal confidential information, including information regarding our residents, prospective tenants, and employees. Information security risks have generally increased in recent years due to the rise in new technologies and the increased sophistication and activities of perpetrators of cyber-attacks. In the ordinary course of our business we acquire and store sensitive data, including intellectual property, our proprietary business information and personally identifiable information of our prospective and current tenants, our employees and third-party service providers in our branch offices and on our networks and website. The secure processing and maintenance of this information is critical to our operations and business strategy. Notwithstanding our security measures, our information technology and infrastructure may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other disruptions.
Despite protective measures we have taken, our systems and systems maintained by third-party vendors with which we do business are vulnerable to damage from any number of sources. We face cybersecurity threats, including system, network or Internet failures, cyber-attacks, ransomware and other forms of malware, computer viruses, attachment to emails, phishing attempts or other scams. These attacks may also originate from persons inside our organization and persons/vendors with access to our systems. Our information technology networks and related systems are essential to the operation of our business and our ability to perform day-to-day operations. Even the most well-protected information systems remain potentially vulnerable because the techniques used in such attempted security breaches evolve and generally are not recognized until launched against a target, and in some cases are designed not to be detected, and, in fact, may not be detected. Accordingly, we may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures and thus it is impossible for us to entirely mitigate this risk.
Although we have implemented a variety of security measures intended to protect the confidentiality and security of this information (refer to Item 1C. "Cybersecurity" in this report for more information about our cybersecurity risk management and governance) and also maintain cyber risk insurance to provide some coverage for certain risks arising out of data and network breaches, there can be no assurance that these measures will prevent a cybersecurity incident or that our cyber risk insurance coverage will be sufficient in the event of a cyber-attack. Any such cybersecurity incident could compromise our networks and the information stored there could be accessed, publicly disclosed, lost or stolen. Any such access, disclosure or other loss of information could result in legal claims or proceedings, liability under laws that protect the privacy of personal information, regulatory penalties, the loss of our residents, disruption to our operations and the services we provide to residents or damage our reputation, any of which could adversely affect our financial condition and operating results.
Furthermore, increased regulation of data collection, use and retention practices, including self-regulation and industry standards, changes in existing laws and regulations, enactment of new laws and regulations, increased enforcement activity, and changes in interpretation of laws, could increase our cost of compliance and operation, limit our ability to grow our business or otherwise harm us.
Although none of the cyber-attacks and incidents we have identified to date has had a material impact on our business or operations, we expect to continue to identify cyber-attacks and cybersecurity incidents on our systems and those of third parties, and we cannot predict the potential impact of future cyber-attacks and cybersecurity incidents on our business. The occurrence of any substantial future cyber-attacks and cybersecurity incidents could materially impact our business, which could adversely affect our financial condition and operating results.