Compare peers

Cybersecurity threats and incidents, such as those involving software bugs, server malfunctions, software or hardware failure, telecommunications failures, error or misconduct, ransomware, covertly introduced malware, denial-of-service attacks, impersonation of authorized users or other social engineering schemes (including phishing …

… For more information about applicable data privacy and cybersecurity laws and regulations, see “Government Regulation - United States Healthcare Regulation, Licensing and Enforcement - Data Privacy and Cybersecurity” for a discussion of U.S. data privacy and cybersecurity laws and regulations and …

United States regulators have also increased their focus on cyber security vulnerabilities and risks. Compliance with laws and regulations concerning cyber security, such as SEC rules requiring disclosure of material cybersecurity incidents, data governance, and data protection could result in …

… We maintain cyber liability insurance; however, this insurance may not be sufficient to cover the financial, legal, business, or reputational losses that may result from an interruption or breach of our systems. In connection with our flexible work arrangements, a …

In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our

payments due to, for example, applicable laws or regulations prohibiting such payments. Ransomware and similar attacks that

Cybersecurity incidents and cybersecurity threats affecting our or our operators’ or other third party providers’ information systems, including those caused by physical or electronic break-ins, computer viruses, malware, worms, attacks by hackers or foreign governments, ransomware attacks, disruptions from …

Cybersecurity threat actors may utilize AI tools to automate and enhance cybersecurity attacks against us. We utilize software and platforms designed to detect such cybersecurity threats, including AI-based tools, but these threats could become more sophisticated and harder to …

… Recent developments in the cyber threat landscape include use of AI and machine learning, as well as an increased number of cyber extortion and ransomware attacks, with the potential for higher financial ransom demand amounts and increasing sophistication and variety …

computer systems, loss or destruction of data, computer viruses, ransomware, malware, distributed denial-of-service attacks or other malicious activities, and the impact of such events in the future may be material. A cyber attack may originate from either an …

… Despite our security measures, we face cybersecurity threats, including system, network, or Internet failures; cyberattacks, ransomware, and other malware; social engineering; and phishing schemes. In these cases, our information technology and infrastructure could be vulnerable and our or our customers …

Further information relating to cybersecurity risk management is discussed in Item 1C. “Cybersecurity” in this report.

… We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of our IT Systems and Confidential Information. The risk of a cyber incident has generally increased as the number, intensity and sophistication of attempted attacks have …

We face risks associated with security breaches through cyber-attacks, cyber intrusions or otherwise, as well as other significant disruptions of our computer systems, hardware, technology infrastructure, online sites and related systems.

… theft, use, manipulation, destruction or other compromises of our confidential information stored in such systems, including through cyber-attacks such as ransomware, denial of service or other methods, such a breach may cause us to lose tenants and employees, result …

… Despite the implementation of training of our employees and security measures for our disaster recovery and business continuity plans, our information systems may be vulnerable to damage or other adverse impact from multiple sources other than cybersecurity risks, including computer …

Numerous and evolving cybersecurity risks, including from diverse threat actors, such as state-sponsored organizations, opportunistic hackers and hacktivists, as well as through diverse attack vectors, such as advanced cyberattacks, phishing, social engineering schemes, malware (including ransomware), malfeasance by insiders …

… It is increasingly difficult to detect, investigate, and remediate cyber-attacks, and attacks often are not recognized or detected until after they have been launched against a target. We expect that unauthorized parties will continue to attempt to gain access …

… Such cyber-attacks could be in the form of espionage, phishing campaigns and otherwise. Additionally, the use of AI technologies has led to increased exposure to cybersecurity threats globally. AI systems may be used by threat actors to exploit vulnerabilities …

… We are vulnerable to physical or cybersecurity breaches, attacks, computer viruses, ransomware, malware, fraud, worms, adverse impacts of artificial intelligence, social engineering, denial-of-service attacks, malicious software programs, insider threats, unauthorized access and other cybersecurity incidents that could disrupt …

• We face risks associated with security breaches, incidents and compromises through cyber attacks, cyber intrusions or otherwise, as well as other significant disruptions of our information technology (IT) networks and related systems.

We face risks associated with security breaches, incidents and compromises through cyber-attacks, cyber intrusions or otherwise, as well as other significant disruptions of our information technology (IT) networks and related systems.

We are also subject to an increasing number of reporting obligations in respect of material cybersecurity incidents. These reporting requirements have been proposed or implemented by a number of regulators in different jurisdictions, may vary in their scope and application …

Our business is subject to complex and evolving United States and international laws and regulations regarding privacy, data protection, and cybersecurity. Many of these laws and regulations are subject to change and uncertain interpretation and could result in claims, increased cost of operations or otherwise harm our business.

Regulators around the world are increasingly focusing on, and investigating, cybersecurity matters. For example, as we most recently disclosed in our Quarterly Report on Form 10-Q filed on October 31, 2025, we cooperated with the Division of Enforcement of …

… In addition, transitioning to new or upgraded Information Systems, and integrating acquired Information Systems and data, creates challenges, causes disruption to current processes, governance and structures, and can increase our cybersecurity vulnerabilities and costs to mitigate and remediate such vulnerabilities …

… numerous and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of systems and information such as system, network or internet failures; computer hacking or operational disruption (e.g., due to ransomware or data extortion); cyber-terrorism; viruses, worms …

… as the SEC and other regulators have increased their focus on companies' cybersecurity vulnerabilities and risks, and increase the costs of compliance and remediation. We currently maintain cyber insurance, which includes coverage for third-party liability (damages and settlements to …

Information technology disruptions, including as a result of cybersecurity breaches, could compromise our information, which would cause our business and reputation to suffer.

… Our computer systems, or those of our cloud or Internet-based providers, could fail on their own accord and are subject to interruption or damage from power outages, computer and telecommunications failures, computer viruses, security breaches (including through cyber-attack …

… While we maintain cyber risk insurance to provide some coverage for certain risks arising out of cybersecurity breaches, there is no assurance that such insurance would cover all or a significant portion of the costs or consequences associated with a …

… Any failure to prevent cybersecurity breaches and maintain the proper function, security and availability of our or our third party vendors’ and other third parties’ information technology systems could interrupt our operations, damage our reputation and brand, damage our competitive …

… Recent developments in the cybersecurity threat landscape include the use of AI and machine learning, as well as an increased number of cyber extortion and ransomware attacks. As techniques used to breach security change frequently and are generally not recognized …

We and our customers are subject to numerous laws and regulations relating to data privacy and cybersecurity. These regulations are complex, change frequently and have tended to become more stringent over time. In addition, a growing number of regulatory bodies …

… These and future cybersecurity incidents or other disruptions may be caused by individuals within our organization, individuals outside our organization with authorized access, or by unauthorized individuals from outside our organization. The risk of such incidents, particularly through cyber attacks …

We maintain cybersecurity insurance coverage, although there may be exceptions to our insurance coverage that result in our insurance policies not covering some or all aspects of a cybersecurity incident. Even where a cybersecurity incident is covered by our insurance …

… computer hackers, foreign governments and cyber terrorists; malicious code (such as malware, viruses and ransomware); an intentional or unintentional personnel action; a natural disaster; a hardware or software corruption, failure or error; a telecommunications system failure or disruption; a service …

Although we have, on occasion, experienced cybersecurity threats to our data and IT systems, including phishing attacks, to date no events of this nature have had a material adverse effect on our business or otherwise caused material harm to the …

… Additionally, any integration of artificial intelligence in our or any third party’s operations, products or services is expected to pose new or unknown cybersecurity risks and challenges. Furthermore, remote and hybrid working arrangements at our company (and at many …

… Cybersecurity threat actors may also utilize AI tools to automate and enhance cybersecurity attacks against us and could lead to data breaches, loss of confidential or sensitive information, and financial or reputational harm.

We have experienced cybersecurity incidents that to date have not resulted in, and are not expected to result in, a material impact on the Company’s business operations or financial results. For example, we are regularly subject to phishing attempts …

A cyber incident could materially affect our operations and financial condition by:

… This risk of a data breach or security failure, particularly through cyber-attacks or cyber-intrusion, has generally increased due to the rise in new technologies, such as ransomware and generative artificial intelligence, and the increased sophistication and activities of …

… The rapid evolution and increased adoption of artificial intelligence technologies, by us and our third-party service providers, may also heighten our cybersecurity risks by making cyber attacks more difficult to detect, contain and mitigate. In addition, third-party information …

… We maintain cyber risk insurance, but this may be an insufficient type or amount to cover us against claims related to a cybersecurity incident, and we cannot be certain that such insurance will continue to be available to us on …

Finally, in the future, the Company may expend additional resources to continue to enhance the Company’s cybersecurity measures to investigate and remediate any cybersecurity vulnerabilities and/or to further ensure compliance with privacy and cybersecurity laws. Despite these steps …

… through distributed denial-of-service or ransomware attacks, data extortion attempts, state-sponsored cybersecurity attacks, insider threats, incidents related to our increased receipt and use of data from multiple sources and other cybersecurity incidents within our environment or our business …

• our reliance on data and technology systems and the increasing risks of cybersecurity incidents;

… Cyberattacks are malicious cyber activity and a security incident is a successful cyberattack that has the potential to expose sensitive data, internal systems or otherwise disrupt business operations. Those cyberattacks and security incidents may be due to intentional or unintentional …

The risk of a cybersecurity breach or operational disruption, including by computer hackers, foreign governments and cyber terrorists, has generally increased as the number, intensity and sophistication of attempted attacks (including through the use of artificial intelligence) and intrusions from …

… Cyber-attacks can include third parties gaining unauthorized access to our data, including sensitive information about our residents, as well as our vendors' data or information technology systems. These attacks may occur through stolen credentials, computer malware, phishing attacks, ransomware …

… and identify cybersecurity risks associated with our operations, we may become increasingly vulnerable to such risks and may be liable for consequential litigation and remediation costs. Additionally, the measures we have implemented to prevent security breaches and cyber incidents may …

The occurrence of cyber incidents, or a deficiency in our cybersecurity, could negatively impact our business by causing a disruption to our operations, a compromise or corruption of our confidential information, and/or damage to our reputation and business relationships, all of which could negatively impact our financial results.

… We face risks associated with security breaches, whether through cyber attacks or cyber intrusions over the Internet, malware, computer viruses, attachments to emails, phishing attempts, social engineering, ransomware or other scams, persons inside our organization or persons/vendors with access …

Despite existing security measures, certain of our information technology and communications infrastructure may be subject to damage, disruptions, or shutdowns due to unauthorized access, computer viruses, ransomware or other malicious software, cyber-attacks and other security breaches. In addition, integration and adoption of artificial intelligence and machine learning ("AI") into our business may pose new information security risks and challenges. The increased prevalence of AI may

… our cybersecurity or information technology, or that of our cloud- or internet-based service providers, occurs, the market perception of the effectiveness of our security measures could be harmed, and we could lose tenants. Further, the perpetrators of cyber-attacks …

… A cyber attack could compromise the confidential information of our employees, tenants, and vendors. A successful attack could adversely affect our business operations, results of operations, or financial condition by, among other things, disrupting our collection of revenue, interfering with …

We face risks relating to cyber threats that could cause loss of confidential information and other business disruptions.

… number of sources, including energy blackouts, natural disasters, terrorism, war, adverse impacts of AI, telecommunication failures and cybersecurity attacks, such as malware, ransomware, or unauthorized access. Any system failure or accident that causes interruptions in our operations could result in …

Our business and operations could suffer in the event of system failures, cybersecurity attacks or risks associated with AI.