As part of our business, we collect, process, and retain personal, sensitive and confidential personal information about our customers, employees, and suppliers. Despite the security measures we have in place, our facilities and systems, and those of the retailers and other third party distributors with which we do business, may be vulnerable to security breaches, cyber-attacks, acts of vandalism, computer viruses, misplaced or lost data, programming and/or human errors, or other similar events. In fact, in late May 2023, we experienced a ransomware attack relating to certain systems on our network, as is more fully described on the preceding page, and some confidential personal information of our employees and selected dependents was accessed by the threat actor.
In addition, employees may intentionally or inadvertently cause the unauthorized access to or release of personal, sensitive, or confidential customer, employee, supplier or Company information. Because the techniques used to circumvent security systems can be highly sophisticated, change frequently, are often not recognized until launched against a target, and may originate from less regulated and remote areas around the world, we may be unable to proactively anticipate or address all possible techniques or implement adequate preventive measures for all situations.
Any security breach involving the misappropriation, loss, or other unauthorized disclosure of confidential customer, employee, supplier, or Company information, whether by us or by the retailers and other third party distributors and business partners with which we do business, could result in losses, severely damage our reputation, expose us to the risks of litigation and liability, disrupt our operations, and have a material adverse effect on our business, results of operations, and financial condition.
We anticipate that these threats will continue to grow in scope and complexity over time. Cybercrime and attacking techniques are constantly evolving, and we or our third party vendors and business partners may be unable to anticipate attempted security breaches, react in a timely manner, or implement adequate preventative measures, particularly given the increasing use of hacking techniques designed to circumvent controls, avoid detection, and remove or obfuscate forensic artifacts.
The regulatory environment related to information security, data collection, and privacy is increasingly rigorous, with new and constantly changing requirements applicable to our business, and compliance with those requirements could result in additional costs. As a result, our practices may not have complied in the past or may not comply now or in the future with all such laws, regulations, requirements and obligations. Our failure to take any steps perceived by the a regulatory body as appropriate to protect certain information may result in claims under various data privacy and security laws, which could severely impact our business.