In the ordinary course of our business, we maintain sensitive data, including our proprietary business information and the information of our tenants and business partners, in our data centers and on our networks. The risk of a security breach or disruption, mainly through cyber-attack or cyber intrusion, including by computer hackers, foreign governments and cyber terrorists, has generally increased in number, intensity and sophistication. Notwithstanding the security measures undertaken, our information technology may be vulnerable to attacks or breaches resulting in proprietary information being publicly disclosed, lost or stolen. There can be no assurance that our security efforts and measures will be effective or that attempted security breaches or disruptions would not be successful or damaging. Protected information, networks, systems and facilities remain vulnerable because the techniques used in such attempted security breaches evolve and may not be recognized or detected until launched against a target. Accordingly, we may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures.
Data and security breaches could:
- disrupt the proper functioning of our networks and systems and therefore our operations and/or those of our client tenants;- result in misstated financial reports, violations of loan covenants, missed reporting deadlines, and/or missed permitting deadlines;- result in our inability to properly monitor our compliance with the rules and regulations regarding our qualification as a REIT;- result in the unauthorized access to, and destruction, loss, theft, misappropriation, or release of proprietary, confidential, sensitive, or otherwise valuable information of ours or others, which others could use to compete against us or for disruptive, destructive, or otherwise harmful purposes and outcomes;- result in our inability to maintain the building systems relied upon by our client tenants for the efficient use of their leased space;- require significant management attention and resources to remedy any damages that result;- subject us to claims and lawsuits for breach of contract, damages, credits, penalties, or termination of leases or other agreements; and/or - damage our reputation among our client tenants and investors generally.
While we maintain insurance coverage that may, subject to policy terms and conditions including deductibles, cover specific aspects of cyber risks, such insurance coverage may be insufficient to cover all losses.
Third parties to whom we outsource certain of our functions are also subject to the risks outlined above. We review and assess the cybersecurity controls of our third party service providers and vendors, as appropriate, and make changes to our business processes to manage these risks. Data breaches and/or the insolvency of such third parties and vendors may result in us incurring costs and may have other negative consequences.