Company: INVH
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0001687229-25-000008
Chunk: 102

Company: Invitation Homes Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1A
Chunk 102
---
 in our operations over time. The ever-increasing use and evolution of technology, including cloud-based computing and generative AI, creates opportunities for the potential loss or misuse of personal data that we use in our business operations. Unintentional dissemination or intentional destruction of confidential information stored in our or our third-party providers' systems, portable media, or storage devices may result in significantly increased business and security costs, a damaged reputation, administrative penalties, or costs related to defending legal claims. Generative AI programs may be costly and require significant expertise to develop, may be difficult to set up and manage, and require periodic upgrades. Our competitors or other third parties may incorporate generative AI into their information systems and operations more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. 

Security breaches and other disruptions could compromise our information systems and expose us to liability, which would cause our business and reputation to suffer.

Information security risks have generally increased in recent years due to the rise in new technologies and the increased sophistication and activities of perpetrators of cyberattacks. In the ordinary course of our business, we acquire and store sensitive data, including intellectual property, our proprietary business information, and personally identifiable information of our prospective and current residents, associates, and third-party service providers. The secure processing and maintenance of such information is critical to our operations and business strategy. Despite our security measures, our information technology and infrastructure are subject to ongoing threats and attacks and may be vulnerable to attacks by malicious third parties or breached due to employee error, malfeasance, or other disruptions. Due to the nature of some of the attacks, there is a risk that they may remain undetected for a period of time. Since the techniques used to obtain unauthorized access to systems, or to otherwise sabotage them, change frequently and are often not recognized until launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. While we have invested in the protection of data and information technology and implemented processes, procedures, and internal controls that are designed to mitigate cybersecurity risks and cyber intrusions, there can be no assurance that our efforts will prevent cyber incidents or security breaches. Any such breach could compromise our networks and the information stored therein could be accessed, publicly disclosed, misused, lost, or stolen. Any such access, disclosure or other loss of information could result in legal claims or proceedings, misstated or unreliable financial data, liability under laws that protect the privacy of personal information, regulatory penalties, disruption