We and our retail distributors, tax preparation partners, network acceptance members, third-party processors and the merchants that accept our cards receive, transmit and store confidential customer and other information, including personal information, in connection with the sale and use of our products and services. Despite the encryption software and the other technologies and systems we use to provide security for storage, processing and transmission of confidential customer and other information these technologies or systems have been, and continue to be, vulnerable to cyber-attacks, incidents and data security breaches by third parties and we have experienced, and may in the future experience, successful attacks, incidents and breaches. The risk of unauthorized circumvention of our security measures has been heightened by advances in computer capabilities and the increasing sophistication of hackers, including state sponsored hackers. Our retail distributors, tax preparation partners, network acceptance members, other business partners, third-party processors and the merchants that accept our cards also may experience similar cyber-attacks, incidents or security breaches or discover securities vulnerabilities involving the receipt, transmission and storage of our confidential customer and other information. Improper access to our or these third parties' systems or databases could result in the theft, publication, deletion or modification of confidential customer and other information.
A data security breach of the systems on which sensitive accountholder or other customer or end-customer data and account information are stored have led, and could in the future lead, to fraudulent activity involving our products and services, reputational damage and claims, and could lead to regulatory actions, including penalties, against us. Further, a cyber-attack or other incident could go undetected and persist in our systems for extended periods. Regardless of whether or not we are sued or face regulatory actions, a breach will require us to carefully assess the materiality of a cyber-attack or other incident. Depending on the nature and magnitude of the accessed data, this effort may require substantial resources. If we are sued in connection with any data security breach, we could be involved in protracted and costly litigation and might be forced to pay damages and/or change our business practices, any of which could have a material adverse effect on our operating revenues and profitability. We would also likely have to pay (or indemnify the banks that issue our products and services which includes cards) fines, penalties and/or other assessments imposed by Visa or Mastercard as a result of any data security breach. Further, a significant data security breach could lead to additional regulation, which could impose new and costly compliance obligations. In addition, a data security breach or perceived security vulnerability at any of the third-party banks that issue our cards or at any of our retail distributors, tax preparation partners, network acceptance members, other business partners, third-party processors or the merchants that accept our cards could result in significant reputational harm to us and cause the use and acceptance of our cards or other products and services to decline, either of which could have a significant adverse impact on our operating revenues and future growth prospects. Moreover, it may require substantial financial resources to address and remediate any such breach, including additional costs for hiring an external party to conduct a forensic investigation, replacement cards, manufacturing, distribution, re-stocking fees, fraud monitoring, and other added security measures, among others, which could have a significant adverse impact on our operating results.
Additionally, we cannot be certain that our insurance coverage will be adequate for data security liabilities actually incurred, will cover any indemnification claims against us relating to any incident, that insurance will continue to be available to us on reasonable terms, or that any insurer will not deny coverage as to any future claim. The assertion of large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or large deductible or co-insurance requirements, could have a material adverse effect on our business, including our financial condition, operating results, and reputation.