In the normal course of its business, the Bank collects, processes and retains sensitive and confidential customer and consumer information. Despite the security measures we have in place, our facilities may be vulnerable to cyber-attacks, security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming or human errors, and other similar events.
Information security risks for financial institutions such as the Bank have increased recently in part because of new technologies, the use of the Internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions and the increased sophistication and activities of organized crime, perpetrators of fraud, hackers, terrorists and others. In addition to cyber attacks or other security breaches involving the theft of sensitive and confidential information, hackers have engaged in attacks against financial institutions designed to disrupt key business services such as customer-facing web sites. National and international economic and geopolitical conditions may also have a negative impact in the number of cyber security threats the Bank may face. We are not able to anticipate or implement effective preventative measures against all security breaches of these types. Although the Bank employs detection and response mechanisms designed to contain and mitigate security incidents, early detection may be thwarted by sophisticated attacks and malware designed to avoid detection, which continue to evolve.
Additionally, the Bank faces the risk of operational disruption, failure, termination or capacity constraints of any of the third parties that facilitate its business activities, including third-party service providers, exchanges, clearing agents, clearing houses or other financial intermediaries. Such parties could also be the source of an attack on, or breach of, the Bank's operational systems.
Any failures, interruptions or security breaches in our information systems could damage our reputation, result in a loss of customer business, result in a violation of privacy or other laws, or expose us to civil litigation, regulatory fines or losses not covered by insurance.
See "Item 1C. Cybersecurity" for additional information regarding our efforts to detect, identify, assess, manage, and respond to material risks from cybersecurity threats.