Sabra Healthcare REIT (SBRA) Risk Factors

We have investments in Canada, and from time to time may seek to acquire other properties in Canada or otherwise outside the U.S. International development, investment, ownership and operating activities involve risks that are different from those we face with respect to our U.S. properties and operations. These risks include, but are not limited to, any gain recognized with respect to changes in exchange rates may not qualify under the income tests that we must satisfy annually in order to qualify and maintain our status as a REIT and fluctuations in the exchange rates between USD and the Canadian Dollar, which we may be unable to protect against through hedging. Although we have pursued hedging alternatives, by borrowing in Canadian dollar denominated debt and entering into cross currency swaps, to protect against foreign currency fluctuations, no amount of hedging activity can fully insulate us from the risks associated with changes in foreign currency exchange rates, and the failure to hedge effectively against foreign currency exchange rate risk could materially adversely affect our business, financial position or results of operations. In addition, changes in Canadian political, regulatory, and economic conditions; challenges in managing Canadian operations; challenges of complying with a variety of Canadian laws and regulations, including those relating to real estate, healthcare operations, taxes, employment and legal proceedings, and lending practices; Canadian-specific business cycles and economic instability; and changes in applicable laws and regulations in the U.S. that affect our foreign operations could have a material adverse effect on our business, financial position or results of operations. A future pandemic or epidemic, may also subject our investments and operations in Canada to different or greater risks than those faced in the U.S., which may depend on factors including the duration and severity of outbreaks in Canada, the impact of new variants, the distribution of vaccines and boosters, and governmental or private actions taken in response to the pandemic or epidemic.

We operate in a highly competitive industry and face competition from other REITs, investment companies, private equity and hedge fund investors, sovereign funds, healthcare operators, lenders and other investors, some of whom are significantly larger than us and have greater resources and lower costs of capital than we do. This competition makes it more challenging to identify and successfully capitalize on acquisition opportunities that meet our investment objectives. Similarly, our properties face competition for patients and residents from other properties in the same market, which may affect our ability to attract and retain tenants or may reduce the rents we are able to charge. If we cannot identify and purchase a sufficient quantity of healthcare properties at favorable prices, finance acquisitions on commercially favorable terms, or attract and retain profitable tenants, our business, financial position or results of operations could be materially adversely affected.

We concentrate our investments in the healthcare property sector. As a result, we are subject to risks inherent to investments in a single industry, in real estate, and specifically in healthcare properties. A downturn or slowdown in the healthcare property sector would have a greater adverse impact on our business than if we had investments in multiple industries. Specifically, a downturn in the healthcare property sector could negatively impact the ability of our tenants and borrowers to meet their obligations to us, as well as the ability to maintain rental and occupancy rates. This could adversely affect our business, financial condition and results of operations. In addition, a downturn in the healthcare property sector could adversely affect the value of our properties and our ability to sell properties at prices or on terms acceptable to us.

We and our tenants, borrowers and operators rely on information technology networks and systems, including the Internet, to process, transmit and store electronic information, and to manage or support a variety of business processes, including financial transactions and records, personal identifying information, tenant and lease data. While we and our tenants, borrowers and operators maintain various physical, cyber and data security controls, incidents or breaches resulting from technical failures, natural hazards, theft and unintentional or deliberate acts by third parties or insiders attempting to obtain unauthorized access to information, destroy or manipulate data, or disrupt or sabotage information systems do occur and they may have a material impact on our business. The risk of security incidents has generally increased as the number, intensity and sophistication of attacks and intrusions have increased, and we have seen a significant increase in cyber phishing attacks over the past few years. Additionally, cyber threats and the techniques used in cyberattacks change, develop and evolve rapidly, including from emerging technologies, such as advanced forms of artificial intelligence and quantum computing. We have engaged a third-party cybersecurity firm who serves as our dedicated information technology ("IT") team and helps us oversee, implement and manage our processes and controls to assess, identify and manage risks from cybersecurity threats. It is possible that our processes and controls will not detect or protect against all cybersecurity threats or incidents. In addition, any failure on the part of our outsourced IT team to effectively monitor and protect our information systems could make us more vulnerable to cybersecurity incidents. Although, to our knowledge, no cybersecurity incident has been material to our business to date, we have been, and expect to continue to be, subject to cybersecurity threats and attacks of varying degrees, and there can be no assurance that we will not experience a material incident. A data security incident or breach occurring at or involving us could have a material adverse impact on our company. A data security incident or breach occurring at or involving a tenant, borrower or operator could jeopardize the tenant's or operators' ability to fulfill its obligations to us and could adversely impact our financial position and results of operations. Furthermore, we purchase some of our information technology from vendors, on whom our systems depend. We rely on commercially available systems, software, tools and monitoring to provide security for processing, transmission and storage of confidential tenant, borrower and operator information, some of which may include individually identifiable information, including information relating to financial accounts. Although we have taken steps to protect the security of our information systems and the data maintained in those systems, it is possible that our safety and security measures will not be able to prevent the systems' improper functioning or damage, or the improper access or disclosure of personally identifiable information such as in the event of a cyber-attack. Security breaches (including physical or electronic break-ins, computer viruses, phishing attacks, computer denial-of-service attacks, worms, covert introduction of malware to computers and networks, impersonation of authorized users, and efforts to discover and exploit any design flaws, bugs, security vulnerabilities or security weaknesses, as well as intentional or unintentional acts by our teammates or other insiders with access privileges, intentional acts of vandalism by third parties and sabotage) can create system disruptions, shutdowns or unauthorized disclosure of confidential information. Any failure to maintain proper function, security and availability of our information systems could interrupt our operations, damage our reputation, subject us to liability claims or regulatory penalties and could have a material adverse effect on our business, financial condition and results of operations.