Our business relies heavily on computer systems, hardware, software, technology infrastructure and online websites, platforms and networks (collectively, "IT Systems") to support both internal and external, including franchisee-related, operations. We own and manage some of these IT Systems but also rely on third parties for a range of IT Systems and related products and services. In addition, we and other parties (such as vendors and franchisees), collect, transmit and/or maintain certain personal, financial and other information about our customers, employees, vendors and franchisees, as well as proprietary information pertaining to our business (collectively, "Confidential Information"). The security and availability of our IT Systems and Confidential Information is critical to our business and regulated by evolving and increasingly demanding laws and regulations in various jurisdictions, certain third-party contracts and industry standards.
The current cyber threat environment presents increased risk for all companies, including companies in our industry. The cybersecurity risks we face include cyber-attacks involving ransomware and malicious software, advanced persistent threats, social engineering, credential stuffing or distributed denial-of-service attacks and other attempts by malicious threat actors, including nation-state actors, ransomware groups, and others to access, acquire, use, disclose, misappropriate, shut down or manipulate our information, systems, databases, processes and people. In addition, the rapid evolution and increased adoption of AI and other emerging technologies also may heighten our cybersecurity risks by making cyber-attacks and social engineering more difficult to detect, contain and mitigate. Further, the cybersecurity risks we face have increased in recent years due to an increase in the use of and reliance on our digital commerce platforms and products. Moreover, remote working and personal device use further increases the risk of cyber incidents and the improper dissemination of personal or Confidential Information.
We are regularly the target of cyber-attacks and other attempts to breach, or gain unauthorized access to, our systems and databases. Moreover, given the current cyber threat environment, we expect the volume and intensity of cyber-attacks and attempted intrusions to continue to increase. Despite our security measures, we, and the third parties upon which we rely, have experienced security incidents from time to time and we and such third parties will continue to experience such incidents in the future. In particular, on January 18, 2023, we announced a ransomware attack that impacted certain IT Systems which resulted in the closure of fewer than 300 restaurants in one market for one day, temporarily disrupted certain of our affected systems and resulted in data being taken from our network. As disclosed under Part I, Item 1C of this Form10-K, we remain subject to risks and uncertainties as a result of the incident, including as a result of the data that was taken from the Company's network and putative class actions filed against us in connection with this incident.
There is no assurance that the security measures we take to reduce the risk of such incidents and protect our systems will be sufficient or that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our systems and information.
If our IT Systems or the information systems of any of our franchisees, or other third parties which we interact, such as suppliers, distributors or third-party delivery providers, are disrupted or compromised, in a manner which impacts us or our IT Systems, as a result of a cyber-attack, data or security breach, or other security incident, or if our employees, franchisees, suppliers or vendors fail to comply with applicable laws and regulations or fail to meet contractual and industry standards in connection therewith, any such developments could result in liabilities and penalties, have an adverse impact on our financial results and growth prospects, damage our brands and reputation, cause interruption of normal business operations, cause us to incur substantial costs, result in a loss of consumer confidence and sales and disrupt our supply chain, business and plans. Additionally, such events could result in the loss, misappropriation, corruption or unauthorized access, acquisition, use or disclosure of data or inability to access data, the release of Confidential Information about our operations and subject us to claims, litigation and government enforcement actions. Moreover, any significant cybersecurity event which impacts us or our IT Systems could require us to devote significant management time and resources to address such events, interfere with our pursuit of other important business strategies and initiatives, and cause us to incur additional expenditures, which could be material, including to investigate such events, remedy cybersecurity problems, recover lost data, prevent future compromises and adapt systems and practices in response to such events. There is no assurance that any remedial actions will meaningfully limit the success of future attempts to breach our IT Systems, particularly because malicious actors are increasingly sophisticated and utilize tools and techniques specifically designed to circumvent security measures, avoid detection and obfuscate forensic evidence, which means we may be unable to identify, investigate or remediate effectively or in a timely manner. ?Further, we are subject to an increasing number of cybersecurity reporting obligations in different jurisdictions that vary in their scope and application, which may create conflicting reporting obligations and inhibit our ability to quickly provide complete and reliable information about cybersecurity incidents to customers, counterparties, and regulators, as well as the public. Additionally, while we maintain insurance coverage designed to address certain aspects of cybersecurity risks, such insurance coverage may be insufficient to cover all losses or all types of claims that may arise. Further, our franchisees may not have insurance coverage (or may have insufficient insurance coverage) designed to cover business interruption losses and/or all types of claims that may arise from cybersecurity risks.
Further, the payment card industry sets controls standards used in the transmission and approval of electronic payment transactions. If we or our Concepts' franchisees fail to comply with the global Payment Card Industry Data Security Standards or fail to adequately control fraudulent credit card and debit card transactions, we or our Concepts' franchisees may face civil liability, diminished public perception of our security measures, fines and assessments from the card brands, and significantly higher credit card and debit card related costs, any of which could adversely affect us.