Information technology systems are critical to our business. We use various technology systems to manage our customer relationships, general ledger, securities, deposits, and loans. Additionally, as part of our business, we collect, process, and retain personal, proprietary, and confidential information regarding our customers. The financial services industry has experienced an increase in both the number and severity of reported cyber-attacks aimed at gaining unauthorized access to bank systems as a way to misappropriate assets and sensitive information, corrupt and destroy data, or cause operational or business services disruptions. Any security breach, including security breaches that occur as a result of employee error or misconduct, could result in the misappropriation, loss, or unauthorized disclosure of sensitive customer information, severely damage our reputation, expose us to the risk of litigation and liability, disrupt our operations, and have a material adverse effect on our business.
We also rely on the integrity and security of a variety of third-party processors and payment, clearing, and settlement systems, as well as the various participants involved in these systems, many of which have no direct relationship with us. Failure by these participants, including their employees either as a result of employee error or misconduct, or their systems to protect our customers' transaction data may put us at risk for possible losses due to fraud or operational disruption. In addition, a number of our third-party service providers are large national entities with dominant market presence in their respective fields. Their services could prove difficult to replace in a timely manner if a failure or other service interruption were to occur. Failures of certain vendors to provide contracted services could adversely affect our ability to deliver products and services to our customers and cause us to incur significant expense.
Our customers are also the target of cyber-attacks and identity theft. Large scale identity theft could result in customers' accounts being compromised and fraudulent activities being performed in their name, which could negatively affect our reputation or result in litigation and, consequently, negatively affect our results of operation.
The occurrence of cybersecurity incidents across a range of industries has resulted in increased legislative and regulatory scrutiny over cybersecurity and calls for additional data privacy laws and regulations. These laws and regulations could result in increased operating expenses or increase our exposure to the risk of litigation.
The occurrence of a cybersecurity incident involving us, third-party service providers, or our customers, regardless of its origin, could damage our reputation and result in a loss of customers and business and subject us to additional regulatory scrutiny, and could expose us to litigation and possible financial liability. Furthermore, as technology, including the increasing use of artificial intelligence, machine learning, large language models, and other similar technologies, and cyberattacks change over time, we may be required to expend significant additional resources to modify our protective measures or to investigate and remediate vulnerabilities or other exposures arising from operational and security risks. Any of these events could have a material adverse effect on our financial condition and results of operations.