Company: INRE
Filing Date: 2025-03-05
Form Type: 10-K
Source: 0000950170-25-033568
Chunk: 129

Company: Inland Real Estate Income Trust, Inc.
Filing Date: 2025-03-05
Form: 10-K
Item: Item 1A
Chunk 129
---
 providers (including our transfer agent), tenants, or other third parties. We may also utilize software and other digital products and services that store, retrieve, manipulate, and manage our information and data, external data, personal data of our Business Manager, service providers (including our transfer agent), tenants, stockholders or other third parties, and our own information and data.

Our digital technologies, as well as third-party products, services and technologies that we rely on, are subject to the risk of cyberattacks and, given the nature of such attacks, some incidents can remain undetected for a period of time despite efforts to detect and respond to them in a timely manner. Cyberattacks are expected to accelerate on a global basis in both frequency and magnitude as threat actors are becoming increasingly sophisticated in using techniques and tools (including artificial intelligence) that circumvent controls, evade detection and even remove forensic evidence of the infiltration. There can be no assurance that the systems we have designed to prevent or limit the effects of cyber incidents or attacks will be sufficient to prevent or detect material consequences arising from such incidents or attacks, or to avoid a material adverse impact on our systems after such incidents or attacks do occur. We have experienced and will continue to experience varying degrees of cyber events in the normal conduct of our business, including defending against attacks from social engineering such as phishing. Even if we successfully defend our own digital technologies and internal digital infrastructure, we also rely on providers of third-party products, services, and networks, with whom we may share data, and who may be unable to effectively defend their digital technologies, services and internal digital infrastructure against attack.

Unauthorized access to or modification of, or actions disabling our ability to obtain authorized access to data of our Business Manager, service providers (including our transfer agent), tenants, stockholders or other third parties, other external data, personal data, or our own data, as a result of a cyber incident, attack or exploitation of a security vulnerability, or loss of control of our operations could result in significant damage to our reputation or disruption to our business and to our Business Manager, service providers (including our transfer agent), tenants, or other third parties. In addition, allegations, reports, or concerns regarding vulnerabilities affecting our digital products or services could damage our reputation. This could lead to fewer using our services, which could have a material adverse impact on our financial condition, results of operations, cash flows, and future prospects.

In addition, if our systems or third-party products, services, and network systems for protecting against cybersecurity risks prove to