In the normal course of our business, we obtain, are provided and have access to large amounts of personal data, including but not limited to credit and debit card information, personally identifiable information and other data from and about our guests, Team Members, and suppliers. A compromise or a breach in our systems, or another data security or privacy incident that results in the loss, unauthorized release, disclosure or acquisition of such data or information, or other sensitive data or information, or other internal or external cyber or data security threats, including but not limited to viruses, denial-of-service attacks, phishing attacks, ransomware attacks and other intentional or unintentional disruptions, could occur and have a material adverse effect on our operations and ability to operate, reputation, operating results and financial condition. In addition, similar events at vendors, third-party service providers or other market participants, whether or not we are directly impacted, could negatively affect our business and supply chain or lead to a general loss of guest confidence, which could result in reduced guest traffic and sales.
A data security or privacy incident of any kind could expose us to risk in terms of the loss, unauthorized release, disclosure or acquisition of sensitive guest, Team Member or supplier data, and could result in litigation or other regulatory action being brought against us and damages, monetary and other claims made by or on behalf of the payment card brands, guests, Team Members, shareholders, financial institutions and governmental agencies, or monetary demands or other extortion attempts from cybercriminals. Such events could give rise to substantial monetary damages and/or losses which are not covered, or in some instances fully covered, by our insurance policies and which could adversely affect our reputation, results of operations, financial condition and liquidity. Moreover, a data security or privacy incident could require that we expend significant additional resources on mitigation efforts and to further upgrade the security and other measures that we employ to guard against, and respond to, such incidents.