Company: INRE
Filing Date: 2025-03-05
Form Type: 10-K
Source: 0000950170-25-033568
Chunk: 131

Company: Inland Real Estate Income Trust, Inc.
Filing Date: 2025-03-05
Form: 10-K
Item: Item 1A
Chunk 131
---
 requires us to expend resources. However, we may not anticipate or combat all types of future attacks until after they have been launched. If any of these breaches of security occur or are anticipated in the future, we could be required to expend additional capital and other resources, including costs to deploy additional personnel and protection technologies, and engage third-party experts and consultants. Our response to attacks, and our investments in our technology and our controls, processes and practices, may not be sufficient to shield us from significant losses or liability. Further, given the increasing sophistication of bad actors and complexity of the techniques used to obtain unauthorized access or disable systems, a breach or attack could potentially persist for an extended period of time before being detected. As a result, we may not be able to anticipate the attack or respond adequately or timely, and the extent of a particular incident, and the steps that we may need to take to investigate the incident, may not be immediately clear. It could take a significant amount of time before an investigation can be completed and full, reliable information about the incident becomes known. During an investigation, it is possible we may not necessarily know the extent of the harm or how to remediate it, which could further adversely impact us, and new regulations could result in us being required to disclose information about a material cybersecurity incident before it has been mitigated or resolved, or even fully investigated. We also face cybersecurity risks due to our reliance on internet technology, which could strain our technology resources or create additional opportunities for cybercriminals to exploit vulnerabilities.

We may become subject to greater liability due to changing regulations and laws regarding cybersecurity, which could materially adversely affect our business, operations, results of operations and profitability.

Because our systems sometimes retain information about our Business Manager, service providers (including our transfer agent), tenants, stockholders or other third parties, our failure to appropriately maintain the security of the data we hold, whether as a result of our own error or the malfeasance or errors of others, could in the future lead, to disruptions in our services or other data systems, and could lead to unauthorized release of confidential or otherwise protected information or corruption of data. Our failure to appropriately maintain the security of the data we hold could also violate applicable privacy, data security and other laws and subject us to lawsuits, fines and other means of regulatory enforcement. Regulators have been imposing new data privacy and security requirements, including new and greater monetary fines for privacy violations. These laws and regulations may be broad in scope and subject to evolving interpretations and increasing enforcement, and we may