We and our tenants face risks associated with security breaches, whether through cyber-attacks or cyber intrusions over the Internet, malware, computer viruses, attachments to emails, company insiders, or persons with access to our and our tenants' systems, and other significant disruptions of our and our tenants' information technology ("IT") networks and related systems. Also, remote work arrangements may increase the risk of cybersecurity incidents, data breaches or cyber-attacks. The risk of a security breach or disruption, particularly through cyber-attack or cyber-intrusion, including by computer hackers, foreign governments and cyber-terrorists, has generally increased as the number, intensity, and sophistication of attempted attacks and intrusions from around the world have increased. Our and our tenants' IT networks and related systems are essential to the operation of each of our businesses and our and our tenants' ability to perform day-to-day operations (including maintaining confidential patient data). Although we make efforts to maintain the security and integrity of our IT networks and related systems, and we have implemented various measures to manage the risk of a security breach or disruption, there can be no assurance that these security measures will be effective or that attempted security breaches or disruptions would not be successful or damaging. Additionally, our tenants may not have enough risk mitigation measures in place or, even if they do, such measures may not be effective. Even the most well protected information, networks, systems, and facilities remain potentially vulnerable because the techniques used in such attempted security breaches evolve and generally are not recognized until launched against a target, and in some cases are designed not to be detected and may not be detected. Accordingly, we and our tenants may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures, and it is therefore impossible to entirely mitigate the risk.
A security breach or other significant disruption involving our or our tenants' IT networks and related systems could:
- Disrupt the proper functioning of our or our tenants' networks and systems and therefore our operations and/or those of our tenants;- Result in the unauthorized access to, and destruction, loss, theft, misappropriation or release of proprietary, confidential, sensitive, or otherwise valuable information about us, our tenants or our tenants' patients, which others could use to compete against us or our tenants or which could expose us or our tenants to regulatory action or damage claims by third-parties;- Result in misstated financial reports, violations of loan covenants, missed reporting deadlines, and/or missed permitting deadlines;- Result in our inability to properly monitor our compliance with the rules and regulations regarding our qualification as a REIT;- Jeopardize the building systems relied upon by our tenants for the efficient use of their leased space;- Require significant management attention and resources to remedy any damages that result;- Subject us or our tenants to claims for breach of contract, damages, credits, penalties, or termination of leases or other agreements; or - Damage our and our tenants' reputations.
Any or all the foregoing could have a material adverse effect on our business, financial condition and results of operations, our ability to pay distributions to our stockholders and the trading price of our common and preferred stock.
New technologies also continue to develop, including tools that harness generative artificial intelligence and other machine learning techniques (collectively, "AI"). AI is developing at a rapid pace and becoming more accessible. As a result, the use of such new technologies by us or our tenants can present additional known and unknown risks, including, among others, the risk that confidential information may be stolen, misappropriated or disclosed and the risk that we and/or our tenants may rely on incorrect, unclear or biased outputs generated by such technologies, any of which could have an adverse impact on us and our business. See "-Artificial intelligence and other machine learning techniques could increase competitive, operational, legal and regulatory risks to our business in ways that we cannot predict."