In the normal course of business, we collect, process, use and retain sensitive and confidential information regarding our clients and prospective clients, including data provided by and related to clients and their transactions, as well as other data of the counterparties to their payments. We also have arrangements in place with certain third-party service providers that require us to share client information. Although we devote resources and management focus to ensuring the integrity of our systems through information security and business continuity programs, our facilities and systems, and those of third-party service providers, are vulnerable to actual or threatened external or internal security breaches, acts of vandalism, theft, fraud or misconduct on the part of employees, other internal sources or third parties, computer viruses, phishing attacks, internet interruptions, disruptions or losses, misplaced or lost data, ransomware, unauthorized encryption, denial-of-service attacks, social engineering, unauthorized access, spam or other attacks, natural disasters, fires, terrorism, war, telecommunications or electrical interruptions or failures, programming or human errors or malfeasance and other similar malicious or inadvertent disruptions or events. We and our third-party service providers from time to time have experienced and may in the future continue to experience such instances. In some cases, the bad actors facilitated unauthorized financial transactions. We also face security threats from malicious third parties that could obtain unauthorized access to our systems and networks, which threats we anticipate will continue to grow in scope and complexity over time. These events could interrupt our business or operations, result in legal claims or proceedings, result in significant legal and financial exposure, supervisory liability under U.S. federal or state, or non-U.S. laws regarding the privacy and protection of information, including personal information, damage to our reputation and a loss of confidence in the security of our systems, products and services. Although the impact to date from these events has not had a material adverse effect on us, no assurance is given that this will be the case in the future.
Information security risks in the financial services industry have increased recently, in part because of new technologies, the use of the internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions and the increased sophistication and activities of organized criminals, perpetrators of fraud, hackers, terrorists and other malicious third parties. In addition to cyberattacks and other security breaches involving the theft of sensitive and confidential information, hackers, terrorists, sophisticated nation-state and nation-state supported actors and other malicious third parties recently have engaged in attacks that are designed to disrupt key business services, such as consumer-facing websites. We and our third-party service providers may not be able to anticipate or implement effective preventive measures against all security breaches of these types, especially because the techniques used to sabotage or to obtain unauthorized access to our or our third-party service providers' technology, systems, networks and/or physical facilities in which data is stored or through which data is transmitted change frequently and because attacks can originate from a wide variety of sources. We employ detection and response mechanisms designed to contain and mitigate security incidents. Nonetheless, early detection efforts may be thwarted by sophisticated attacks and malware designed to avoid detection. We also may fail to detect the existence of a security breach related to the information of our clients and to prevent or detect service interruption, system failure or data loss. Further, as a significant number of people work from home, these cybersecurity risks may be heightened by an increased attack surface across our business and those of our clients and third-party service providers. We cannot guarantee that our efforts, or the efforts of those upon whom we rely and partner with, will be successful in preventing any such information security incidents.
The access by unauthorized persons to, or the improper disclosure by us of, confidential information regarding our clients or our proprietary information, software, methodologies and business secrets could interrupt our business or operations, result in significant legal and financial exposure, supervisory liability, damage to our reputation or a loss of confidence in the security of our systems, products and services, all of which could have a material adverse impact on our business. In addition, there recently have been a number of well-publicized attacks or breaches affecting companies in the financial services industry that have heightened concern by clients, which could also intensify regulatory focus, cause clients to lose trust in the security of the industry in general and result in reduced use of our services and increased costs, all of which could also have a material adverse effect on our business.
Most jurisdictions (including all 50 states) have enacted laws requiring companies to notify individuals, regulatory authorities and/or others of security breaches involving certain types of data. In addition, our agreements with certain partners and service providers may require us to notify them in the event of a security breach. Such mandatory disclosures are costly, could lead to negative publicity, may cause our clients, partners and service providers to lose confidence in the effectiveness of our security measures and require us to expend significant capital and other resources to respond to and/or alleviate problems caused by the actual or perceived security breach. A security breach of any of our vendors that processes personal information of our clients may pose similar risks.
A security breach may also cause us to breach client contracts. Our agreements with certain partners and service providers may require us to use industry-standard or reasonable measures to safeguard personal information. We also may be subject to laws that require us to use industry-standard or reasonable security measures to safeguard personal information. A security breach could lead to claims by our clients or other relevant stakeholders that we have failed to comply with such legal or contractual obligations. As a result, we could be subject to legal action or our clients could end their relationships with us. There can be no assurance that the limitations of liability in our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages, and in some cases our client agreements may not limit our remediation costs or liability with respect to data breaches.
Litigation resulting from security breaches may adversely affect our business. Unauthorized access to our technology, systems, networks or physical facilities, or those of our third-party service providers, could result in litigation with our clients or other relevant stakeholders. These proceedings could force us to spend money in defense or settlement, divert management's time and attention, increase our costs of doing business or adversely affect our reputation. We could be required to fundamentally change our business activities and practices or modify our products and/or technology capabilities in response to such litigation, which could have an adverse effect on our business. If a security breach were to occur, and the confidentiality, integrity or availability of personal information was disrupted, we could incur significant liability, or our technology, systems or networks may be perceived as less desirable, which could negatively affect our business and damage our reputation.
We may not have adequate insurance coverage with respect to liabilities that result from any cyberattacks or other security breaches or disruptions suffered by us or third parties upon which we rely. The successful assertion of one or more large claims against us that exceeds our available insurance coverage, or results in changes to our insurance policies (including premium increases or the imposition of large deductible or co-insurance requirements), could have an adverse effect on our business. In addition, we cannot be sure that our existing insurance coverage and coverage for errors and omissions will continue to be available on acceptable terms or that our insurers will not deny coverage as to any future claim.
While we take precautions to prevent consumer identity fraud, it is possible that identity fraud may still occur or has occurred, which may adversely affect the performance of our products and services or subject us to scrutiny or penalties.