We collect, store and otherwise process personal data and certain other sensitive and proprietary information in the operation of our business, including creator and user information, and other confidential data. While we have implemented measures designed to prevent unauthorized access to, or loss of, personal, sensitive, confidential or proprietary information, mobile malware, viruses, hacking, social engineering, spam and phishing attacks have occurred and may occur on our systems in the future. Cybersecurity risks have increased in recent years in part because of the proliferation of new technologies, including artificial intelligence, and the increased sophistication and activities of organized crime, hackers, terrorists, nation-states, state-sponsored actors and other external parties. Cybersecurity risks also may derive from fraud or malice on the part of our employees or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. Because of the popularity of our platform, we may be an attractive target for these sorts of cyberattacks and other security incidents.
Further, the techniques used to obtain unauthorized access to, or to disrupt, systems or networks, are constantly evolving, may see their effectiveness enhanced by threat actors' use of artificial intelligence and generally are not recognized until launched against a target. Consequently, we may be unable to anticipate these techniques, react in a timely manner or implement preventive measures, which could result in delays in our detection or remediation of, or other responses to, cyberattacks, security breaches and other security-related incidents. The wide availability of open-source software used in our solutions could also expose us to security vulnerabilities.
If any unauthorized access to our network, systems or data, including our sensitive and proprietary information, personal data from our users or creators, or other data, or any other security breach occurs, or is believed to have occurred, whether as a result of third-party action, employee negligence, error or malfeasance, defects, viruses, worms, malware, ransomware, denial of service attacks, credential stuffing, social engineering techniques, phishing or otherwise, our reputation, brands and competitive position could be damaged, our and our users' and creators' data and intellectual property could potentially be lost, disclosed, accessed or compromised, and we could be required to spend capital and other resources to alleviate problems caused by such actual or perceived breaches and remediate our systems, we could be exposed to a risk of loss, litigation, investigations or regulatory action and possible liability, and our ability to efficiently operate our business may be impaired. In the past, we have experienced cyberattacks and, if similar attacks occur and are successful, this could adversely affect our business or result in unfavorable publicity. For example, in July 2020, before Wattpad was acquired by NAVER in May 2021, Wattpad's database was accessed by unauthorized, malicious actors and approximately 270 million personal records were affected. As a result, Wattpad has been subject to claims, including a class action claim, and in July 2023, received a notice of intent to impose a £985,000 fine from the United Kingdom Information Commissioner's Office (the "ICO"). The ICO in December 2023 subsequently dismissed its claims against Wattpad regarding the incident and eliminated the fine. Additionally, we contract with certain third parties to store and process certain data for us, including our distribution channels, and these third parties face similar risks of actual and potential security breaches, which could present similar risks to our reputation, business, financial condition and results of operations. Our ability to monitor our third-party service providers' data security is limited. Some of our third-party service providers may store or have access to our data and, despite such contractual provisions, may not have effective controls, processes or practices to protect our information from loss, unauthorized disclosure, unauthorized use or misappropriation or other cyberattacks or security incidents. A vulnerability in our third-party service providers' software or systems, a failure of our third-party service providers' safeguards, policies or procedures, or a cyberattack or other security incident affecting any of these third parties could harm our business.
The economic costs to us to reduce or alleviate cyber or other security problems such as spammers, errors, bugs, flaws, "cheating" programs, defects or corrupted data, could be significant and may be difficult to anticipate or measure. These issues may cause creators and users to use our platform less or stop using it altogether, and the costs could divert our attention and resources, any of which could result in claims, demands and legal liability to us, regulatory investigations and other proceedings, harm our reputation and brands, and otherwise adversely affect our business, financial condition or results of operations. There could also be regulatory fines imposed for certain data breaches that take place around the world. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), also allows for a private right of action for certain data breaches that relate to a specified set of personal information.
Although we maintain cyber, privacy and network security liability insurance, subject to applicable deductibles and policy limits, such coverage may not extend to all types of privacy, data protection and cybersecurity incidents, and it may be insufficient to cover all costs and expenses associated with such incidents. We cannot ensure that such insurance will continue to be available to us on commercially reasonable terms, or at all, or that our insurers will not deny coverage with respect to any particular incident.