Bank First Corp

Previous wording

We are operating in an uncertain economic environment. Our business and financial performance are vulnerable to weak economic conditions in the financial markets generally and specifically in the state of Wisconsin, the principal market in which we conduct business. A deterioration in economic conditions in the global and financial markets as well as our primary market areas caused by inflation, recession, pandemics, outbreaks of hostilities or other international or domestic occurrences, unemployment, plant or business closings or downsizing, changes in securities markets or other factors could result in the following consequences, any of which could materially and adversely affect our business: increased loan delinquencies; problem assets and foreclosures; significant write-downs of asset values; lower demand for our products and services; reduced low cost or noninterest-bearing deposits; intangible asset impairment; and collateral for loans made by us, especially real estate, may decline in value, in turn reducing our customers’ ability to repay outstanding loans, and reducing the value of assets and collateral associated with our existing loans. In addition, regulatory scrutiny of the industry has increased and could continue to increase, leading to increased regulation of the industry that could lead to a higher cost of compliance, limit our ability to pursue business opportunities and increase our exposure to litigation or fines.

Current wording

We are operating in an uncertain economic environment. Our business and financial performance are vulnerable to weak economic conditions in the financial markets generally and specifically in the state of Wisconsin, the principal market in which we conduct business. A deterioration in economic conditions in the global and financial markets as well as our primary market areas caused by inflation, recession, pandemics, outbreaks of hostilities or other international or domestic occurrences, unemployment, trade policies and tariffs, plant or business closings or downsizing, changes in securities markets or other factors could result in the following consequences, any of which could materially and adversely affect our business: increased loan delinquencies; problem assets and foreclosures; significant write-downs of asset values; lower demand for our products and services; reduced low cost or noninterest-bearing deposits; intangible asset impairment; and collateral for loans made by us, especially real estate, may decline in value, in turn reducing our customers’ ability to repay outstanding loans, and reducing the value of assets and collateral associated with our existing loans. In addition, regulatory scrutiny of the industry has increased and could continue to increase, leading to increased regulation of the industry that could lead to a higher cost of compliance, limit our ability to pursue business opportunities and increase our exposure to litigation or fines.

Previous wording

Additionally, we conduct our banking operations primarily in Wisconsin. As of December 31, 2023, approximately 95.74% of our loans and approximately 97.81% of our deposits were made to borrowers or received from depositors who live and/or primarily conduct business in Wisconsin. Therefore, our success will depend in large part upon the general economic conditions in this area, which we cannot predict with certainty. This geographic concentration imposes risks from lack of geographic diversification, as adverse economic developments in Wisconsin, among other things, could affect the volume of loan originations, increase the level of nonperforming assets, increase the rate of foreclosure losses on loans and reduce the value of our loans and loan servicing portfolio. Any regional or local economic downturn that affects Wisconsin or existing or prospective borrowers or property values in such areas may affect us and our profitability more significantly and adversely than our competitors whose operations are less geographically concentrated.

Current wording

Additionally, all of our operating locations are within the state of Wisconsin, and a significant majority of our loans and deposits are made to borrowers or received from depositors who live and/or primarily conduct business in Wisconsin. Therefore, our success will depend in large part upon the general economic conditions in this area, which we cannot predict with certainty. This geographic concentration imposes risks from lack of geographic diversification, as adverse economic developments in Wisconsin, among other things, could affect the volume of loan originations, increase the level of nonperforming assets, increase the rate of foreclosure losses on loans and reduce the value of our loans and loan servicing portfolio. Any regional or local economic downturn that affects Wisconsin or existing or prospective borrowers or property values in such areas may affect us and our profitability more significantly and adversely than our competitors whose operations are less geographically concentrated.

Previous wording

increasing volatility in commodity and energy prices, creating supply chain issues and causing instability in financial markets. Sanctions imposed by the United States and other countries in response to such conflict could further adversely impact the financial markets and the global economy, and any economic countermeasures by the affected countries or others could exacerbate market and economic instability.

Current wording

Moreover, the financial markets and the global economy may also be adversely affected by the current or anticipated impact of military conflict or trade wars. Sanctions or tariffs imposed by the United States and other countries in response to such conflict could further adversely impact the financial markets and the global economy, and any economic countermeasures by the affected countries or others could exacerbate market and economic instability.

Previous wording

Beginning in early 2022, in response to growing signs of inflation, the FRB increased interest rates rapidly and made a number of adjustments to monetary policy and liquidity, including quantitative tightening and other balance sheet actions. Further, the FRB has increased the benchmark rapidly and has announced an intention to take further actions to mitigate rising inflationary pressures. Rising interest rates can have a negative impact on our business by reducing the amount of money our clients borrow or by adversely affecting their ability to repay outstanding loan balances that may increase due to adjustments in their variable rates. In addition, as interest rates rise, we may have to offer more attractive interest rates to depositors to compete for deposits, or pursue other sources of liquidity, such as wholesale funds.

Current wording

Beginning in early 2022, in response to growing signs of inflation, the FRB increased interest rates rapidly and made a number of adjustments to monetary policy and liquidity, including quantitative tightening and other balance sheet actions. Beginning in the third quarter of 2024, the FRB began slowly decreasing interest rates, with future interest rate changes, either increases or decreases uncertain, and dependent on the Federal Reserve's assessment of economic conditions and inflation. Further, the FRB has increased the benchmark rapidly and has announced an intention to take further actions to mitigate rising inflationary pressures. Rising interest rates can have a negative impact on our business by reducing the amount of money our clients borrow or by adversely affecting their ability to repay outstanding loan balances that may increase due to adjustments in their variable rates. In addition, as interest rates rise, we may have to offer more attractive interest rates to depositors to compete for deposits, or pursue other sources of liquidity, such as wholesale funds.

Previous wording

Although the FRB increased the target federal funds rate in 2023 to combat inflationary trends, the FRB held the federal funds rate steady in December 2023 for the third consecutive quarter and indicated that the rate is likely to be decreased in 2024 and beyond. We are unable to predict changes in interest rates, which are affected by factors beyond our control, including inflation, deflation, recession, unemployment, money supply, and other changes in financial markets. We have ongoing policies and procedures designed to manage the risks associated with changes in market interest rates and actively manage these risks through hedging and other risk mitigation strategies. However, if our assumptions are wrong or overall economic conditions are significantly different than anticipated, our risk mitigation techniques may be ineffective or costly.

Current wording

We are unable to predict changes in interest rates, which are affected by factors beyond our control, including inflation, deflation, recession, unemployment, money supply, and other changes in financial markets. We have ongoing policies and procedures designed to manage the risks associated with changes in market interest rates and actively manage these risks through hedging and other risk mitigation strategies. However, if our assumptions are wrong or overall economic conditions are significantly different than anticipated, our risk mitigation techniques may be ineffective or costly.

Previous wording

Inflation continued rising in 2023, and inflationary pressures may remain elevated into 2024. Prolonged periods of inflation may impact our profitability by negatively impacting our fixed costs and expenses, including increasing funding costs and expense related to talent acquisition and retention, and negatively impacting the demand for our products and services. Additionally, inflation may lead to a decrease in consumer and clients’ purchasing power and negatively affect the need or demand for our products and services. If significant inflation continues, our business could be negatively affected by, among other things, increased default rates leading to credit losses which could decrease our appetite for new credit extensions. These inflationary pressures could result in missed earnings and budgetary projections causing our stock price to suffer.

Current wording

Inflation continued rising in the fourth quarter of 2024, and inflationary pressures may remain elevated into 2025. Prolonged periods of inflation may impact our profitability by negatively impacting our fixed costs and expenses, including increasing funding costs and expense related to talent acquisition and retention, and negatively impacting the demand for our products and services. Additionally, inflation may lead to a decrease in consumer and clients’ purchasing power and negatively affect the need or demand for our products and services. If significant inflation continues, our business could be negatively affected by, among other things, increased default rates leading to credit losses which could decrease our appetite for new credit

Previous wording

The Bank competes with banks and other financial services companies for deposits. As a result of monetary policy and the broader market for interest rates and funding, we were required to raise rates on our deposits to keep pace with our competition. Furthermore, if the Bank were to lose deposits, it must rely on more expensive sources of funding. This could result in a failure to maintain adequate liquidity and higher funding costs, reducing our net interest margin and net interest income. In addition, our access to deposits may be affected by the liquidity needs of our depositors. In particular, a substantial majority of our liabilities in 2023 were checking accounts and other liquid deposits, which are payable on demand or upon several days' notice, while by comparison, a substantial majority of our assets were loans, which cannot be called

Current wording

The Bank competes with banks and other financial services companies for deposits. As a result of monetary policy and the broader market for interest rates and funding, we were required to raise rates on our deposits to keep pace with our competition. Furthermore, if the Bank were to lose deposits, it must rely on more expensive sources of funding. This could result in a failure to maintain adequate liquidity and higher funding costs, reducing our net interest margin and net interest income. In addition, our access to deposits may be affected by the liquidity needs of our depositors. In particular, a substantial majority of our liabilities in 2024 were checking accounts and other liquid deposits, which are payable on demand or upon several days' notice, while by comparison, a substantial majority of our assets were loans, which cannot be called or sold in the same time frame. Moreover, our clients could withdraw their deposits in favor of alternative investments. While we have historically been able to replace maturing deposits and advances as necessary, we may not be able to replace such funds in the future, especially if a large number of our depositors seek to withdraw their accounts, regardless of the reason.

Previous wording

We conduct our banking operations primarily in Wisconsin. Many of our competitors offer the same, or a wider variety of, banking services within our market areas, and we compete with them for the same customers. These competitors include banks with nationwide operations, regional banks and community banks. In many instances these national and regional banks have greater resources than we do, and the smaller community banks may have stronger ties in local markets than we do, which may put us at a competitive disadvantage. We also face competition from many other types of financial institutions, including fintech companies, thrift institutions, finance companies, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. In addition, a number of out-of-state financial institutions have opened offices and solicit deposits in our market areas. Increased competition in our markets may result in reduced loans

Current wording

We conduct our banking operations primarily in Wisconsin. Many of our competitors offer the same, or a wider variety of, banking services within our market areas, and we compete with them for the same customers. These competitors include banks with nationwide operations, regional banks and community banks. In many instances these national and regional banks have greater resources than we do, and the smaller community banks may have stronger ties in local markets than we do, which may put us at a competitive disadvantage. We also face competition from many other types of financial institutions, including fintech companies, thrift institutions, finance companies, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. In addition, a number of out-of-state financial institutions have opened offices and solicit deposits in our market areas. Increased competition in our markets may result in reduced loans and deposits, as well as reduced net interest margin and profitability. We compete with many forms of payments offered by both bank and non-bank providers, including a variety of new and evolving alternative payment mechanisms, systems and products, such as aggregators and web-based and wireless payment platforms or technologies, digital or “crypto” currencies, prepaid systems and payment services targeting users of social networks, communications platforms and online gaming. Our future success may depend, in part, on our ability to use technology competitively to offer products and services

Previous wording

and deposits, as well as reduced net interest margin and profitability. We compete with many forms of payments offered by both bank and non-bank providers, including a variety of new and evolving alternative payment mechanisms, systems and products, such as aggregators and web-based and wireless payment platforms or technologies, digital or “crypto” currencies, prepaid systems and payment services targeting users of social networks, communications platforms and online gaming. Our future success may depend, in part, on our ability to use technology competitively to offer products and services that provide convenience to customers and create additional efficiencies in our operations. If we are unable to attract and retain banking clients, we may be unable to continue to grow our loan and deposit portfolios, and our business, financial condition and results of operations may be adversely affected. Furthermore, the financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation.

Current wording

that provide convenience to customers and create additional efficiencies in our operations. If we are unable to attract and retain banking clients, we may be unable to continue to grow our loan and deposit portfolios, and our business, financial condition and results of operations may be adversely affected. Furthermore, the financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Finally, our credit union competitors benefit from competitive advantages, including the credit union exemption from paying federal income tax and can, therefore, more aggressively price many products and services. The impact of the existing regulatory framework and any future changes to it could negatively affect our ability to compete with these institutions, which could have a material adverse effect on our results of operations and prospects.

Previous wording

As of December 31, 2023, approximately 77.4% of our loan portfolio was comprised of loans with real estate as a primary or secondary component of collateral. This includes collateral consisting of income producing and residential construction properties, which properties tend to be more sensitive to general economic conditions and downturns in real estate markets. As a result, adverse developments affecting real estate values in our market areas could increase the credit risk associated with our real estate loan portfolio. The market value of real estate can fluctuate significantly in a short period of time as a result of market conditions in the area in which the real estate is located. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio, and could result in losses that would adversely affect credit quality, financial condition, and results of operation. Negative changes in the economy affecting real estate values and liquidity in our market areas could significantly impair the value of property pledged as collateral on loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses. Collateral may have to be sold for less than the outstanding balance of the loan, which could result in losses on such loans. Such declines and losses could have a material adverse impact on our business, results of operations and growth prospects. If real estate values decline, it is also more likely that we would be required to increase our ACL-Loans, which could adversely affect our financial condition, results of operations and cash flows.

Current wording

As of December 31, 2024, approximately 75.8% of our loan portfolio was comprised of loans with real estate as a primary or secondary component of collateral. This includes collateral consisting of income producing and residential construction properties, which properties tend to be more sensitive to general economic conditions and downturns in real estate markets. As a result, adverse developments affecting real estate values in our market areas could increase the credit risk associated with our real estate loan portfolio. The market value of real estate can fluctuate significantly in a short period of time as a result of market conditions in the area in which the real estate is located. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio, and could result in losses that would adversely affect credit quality, financial condition, and results of operation. Negative changes in the economy affecting real estate values and liquidity in our market areas could significantly impair the value of property pledged as collateral on loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses. Collateral may have to be sold for less than the outstanding balance of the loan, which could result in losses on such loans. Such declines and losses could have a material adverse impact on our business, results of operations and growth prospects. If real estate values decline, it is also more likely that we would be required to increase our ACL-Loans, which could adversely affect our financial condition, results of operations and cash flows.

Previous wording

Failure to achieve these strategic goals could adversely affect our ability to successfully implement our business strategies and could negatively impact our business, growth prospects, financial condition and results of operations. Further, if we do not manage our growth effectively, our business, financial condition, results of operations and future prospects could be negatively affected, and we may not be able to continue to implement our business strategy and successfully conduct our operations. Furthermore, our strategic initiatives may result in an increase in expense, divert management attention, take away from other opportunities that may have proved more successful, negatively impact operational effectiveness or impact

Current wording

Failure to achieve these strategic goals could adversely affect our ability to successfully implement our business strategies and could negatively impact our business, growth prospects, financial condition and results of operations. Further, if we do not manage our growth effectively, our business, financial condition, results of operations and future prospects could be negatively affected, and we may not be able to continue to implement our business strategy and successfully conduct our operations. Furthermore, our strategic initiatives may result in an increase in expense, divert management attention, take away from other opportunities that may have proved more successful, negatively impact operational effectiveness or impact employee morale. Additionally, there can be no assurance that we will ultimately realize the anticipated benefits of these strategic initiatives, or that these strategic initiatives will positively impact our organization.

Previous wording

incurring time and expense associated with identifying and evaluating potential acquisitions and negotiating potential transactions, resulting in our attention being diverted from the operating of our existing business; using inaccurate estimates and judgments to evaluate credit, operations, management, and market risks with respect to the target company or the assets and liabilities that we seek to acquire; exposure to potential asset quality issues of the target company; intense competition from other banking organizations and other potential acquirers, many of which have substantially greater resources than we do; potential exposure to unknown or contingent liabilities of banks and businesses we acquire, including, without limitation, liabilities for regulatory and compliance issues; inability to realize the expected revenue increases, cost savings, increases in geographic or product presence, and other projected benefits of the acquisition; incurring time and expense required to integrate the operations and personnel of the combined businesses; inconsistencies in standards, procedures, and policies that would adversely affect our ability to maintain relationships with customers and employees;

Current wording

incurring time and expense associated with identifying and evaluating potential acquisitions and negotiating potential transactions, resulting in our attention being diverted from the operating of our existing business; using inaccurate estimates and judgments to evaluate credit, operations, management, and market risks with respect to the target company or the assets and liabilities that we seek to acquire; exposure to potential asset quality issues of the target company; intense competition from other banking organizations and other potential acquirers, many of which have substantially greater resources than we do; potential exposure to unknown or contingent liabilities of banks and businesses we acquire, including, without limitation, liabilities for regulatory and compliance issues; inability to realize the expected revenue increases, cost savings, increases in geographic or product presence, and other projected benefits of the acquisition; incurring time and expense required to integrate the operations and personnel of the combined businesses; inconsistencies in standards, procedures, and policies that would adversely affect our ability to maintain relationships with customers and employees; experiencing higher operating expenses relative to operating income from the new operations; creating an adverse short-term effect on our results of operations; losing key employees and customers; significant problems related to the conversion of the financial and customer data of the entity; integration of acquired customers into our financial and customer product

Previous wording

experiencing higher operating expenses relative to operating income from the new operations; creating an adverse short-term effect on our results of operations; losing key employees and customers; significant problems related to the conversion of the financial and customer data of the entity; integration of acquired customers into our financial and customer product systems; potential changes in banking or tax laws or regulations that may affect the target company; or risks of impairment to goodwill or litigation risk.

Current wording

systems; potential changes in banking or tax laws or regulations that may affect the target company; or risks of impairment to goodwill or litigation risk.

Previous wording

As of December 31, 2023, the fair value of our available for sale securities portfolio was approximately $142.2 million. Factors beyond our control can significantly influence the fair value of our securities and can cause adverse changes to the fair value of these securities. These factors include rating agency actions, defaults by or other adverse events affecting the issuer, lack of liquidity, changes in market interest rates, and continued instability in the capital markets. A prolonged decline in the fair value of our securities could result in an established allowance for credit losses, which would affect our results of operations.

Current wording

As of December 31, 2024, the fair value of our available for sale securities portfolio was approximately $223.1 million. Factors beyond our control can significantly influence the fair value of our securities and can cause adverse changes to the fair value of these securities. These factors include rating agency actions, defaults by or other adverse events affecting the issuer, lack of liquidity, changes in market interest rates, and continued instability in the capital markets. A prolonged decline in the fair value of our securities could result in an established allowance for credit losses, which would affect our results of operations.

Previous wording

We continue to invest significant resources in our core information technology systems in order to provide functionality and security at an appropriate level, and to improve our operating efficiency and to streamline our client experience. These initiatives significantly increase the complexity of our relationships with third-party service providers and such relationships may be difficult to unwind. We may not be able to successfully implement and integrate such system enhancements and initiatives, which could adversely impact our ability to comply with a number of legal and regulatory requirements, which could result in sanctions from regulatory authorities. In addition, these projects could have higher than expected costs and/or result in operating inefficiencies, which could increase the costs associated with the implementation as well as ongoing operations. Failure to properly utilize system enhancements that are implemented in the future could result in impairment charges that adversely impact our financial condition and results of operations, could

Current wording

We continue to invest significant resources in our core information technology systems in order to provide functionality and security at an appropriate level, and to improve our operating efficiency and to streamline our client experience. These initiatives significantly increase the complexity of our relationships with third-party service providers and such relationships may be difficult to unwind. We may not be able to successfully implement and integrate such system enhancements and initiatives, which could adversely impact our ability to comply with a number of legal and regulatory requirements, which could result in sanctions from regulatory authorities. In addition, these projects could have higher than expected costs and/or result in operating inefficiencies, which could increase the costs associated with the implementation as well as ongoing operations. Failure to properly utilize system enhancements that are implemented in the future could result in impairment charges that adversely impact our financial condition and results of operations, could result in significant costs to remediate or replace the defective components, and could impact our ability to compete. In addition, we may incur significant training, licensing, maintenance, consulting, and amortization expense during and after implementation, and any such costs may

Previous wording

result in significant costs to remediate or replace the defective components, and could impact our ability to compete. In addition, we may incur significant training, licensing, maintenance, consulting, and amortization expense during and after implementation, and any such costs may continue for an extended period of time. As such, we cannot guarantee that the anticipated long-term benefits of these system enhancements and operational initiatives will be realized.

Current wording

continue for an extended period of time. As such, we cannot guarantee that the anticipated long-term benefits of these system enhancements and operational initiatives will be realized.

Previous wording

System failure or breaches of our network security, or the security of our third-party data processing partner, including as a result of cyberattacks or data security breaches, could subject us to increased operating costs as well as litigation and other liabilities.

Current wording

System failure or breaches of our network security, or the security of our third-party data processing partner, including as a result of cyberattacks, could subject us to increased operating costs as well as litigation and other liabilities.

Previous wording

The computer systems and network infrastructure we use may be vulnerable to physical theft, fire, power loss, telecommunications failure or a similar catastrophic event, as well as security breaches, denial of service attacks, viruses, worms and other disruptive problems caused by hackers. Any damage or failure that causes breakdowns or disruptions in our client relationship management, general ledger, deposit, loan and other systems could damage our reputation, result in a loss of client business, subject us to additional regulatory scrutiny, or expose us to civil litigation and possible financial liability, any of which could have a material adverse effect on us.

Current wording

The computer systems and network infrastructure we use, including those we maintain with our service providers and vendors may be vulnerable to physical theft, fire, power loss, telecommunications failure or a similar catastrophic event, as well as cyberattacks, including through, for example, phishing attempts, brute force attacks, denial of service attacks, viruses or other malicious code, exploiting software vulnerabilities (including “zero-day attacks”), ransomware or other malware and supply chain attacks, and other disruptive problems caused by criminal threat actors. Any damage or failure that causes breakdowns or disruptions in our client relationship management, general ledger, deposit, loan and other systems could

Previous wording

Computer break-ins, phishing and other disruptions could also jeopardize the security of information stored in and transmitted through our computer systems and network infrastructure. Information security risks have generally increased in recent years in part because of the proliferation of new technologies, the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists, and other external parties. Our operations rely on the secure processing, transmission and storage of confidential information in our computer systems and networks. Although we believe we have robust information security procedures and controls, our technologies, systems, networks, and our clients’ devices may become the target of cyberattacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of our or our clients’ confidential, proprietary and other information, or otherwise disrupt our or our clients’ business operations. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. In addition, as the regulatory environment related to information security, data collection and use, and privacy becomes increasingly rigorous, with new and constantly changing requirements applicable to our business, compliance with those requirements could also result in additional costs.

Current wording

Cyberattacks and other technology disruptions could also jeopardize the security of information stored in and transmitted through our computer systems and network infrastructure, and those we maintain with our services providers and vendors. Information security risks have generally increased in recent years in part because of the proliferation of new technologies, the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists, and other external parties. Our operations rely on the secure processing, transmission and storage of confidential information in our computer systems and networks. Although we believe we have appropriate information security procedures and controls in place, our technologies, systems, networks, and our clients’ devices may become the target of cyberattacks that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of our or our clients’ confidential, proprietary and other information, or otherwise disrupt our or our clients’ business operations. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. In addition, as the regulatory environment related to information security, data collection and use, and privacy becomes increasingly rigorous, with new and constantly changing requirements applicable to our business, compliance with those requirements could also result in additional costs.

Previous wording

We are under continuous threat of loss due to hacking and cyberattacks especially as we continue to expand client capabilities to utilize internet and other remote channels to transact business. While we are not aware of any successful hacking or cyberattacks into our computer or other information technology systems, there can be no assurance that we will not be the victim of successful hacking or cyberattacks in the future that could cause us to suffer material losses. The occurrence of any cyberattack or information security breach could result in potential liability to clients, reputational damage,

Current wording

We are under continuous threat of loss due to hacking and cyberattacks especially as we continue to expand client capabilities to utilize internet and other remote channels to transact business. While we are not aware of any material cybersecurity incidents on our computer or other information technology systems, there can be no assurance that we will not be the victim of successful cyberattacks in the future that could cause us to suffer material losses. The occurrence of any cyberattack could result in potential liability to clients, reputational damage, disclosure obligations, the disruption of our operations, and regulatory concerns, all of which could adversely affect our business, financial condition or results of operations.

Previous wording

In recent years, fraud risk increased significantly for us and for all banks. Deposit fraud (check kiting, wire fraud, etc.) and card fraud continue to be significant sources of fraud attempts and losses in our consumer banking business. Moreover, our commercial clients have experienced increased levels of financial fraud risk as well, often requiring our involvement and assistance because of our banking relationship with these clients. The methods used to perpetrate and combat fraud continue to evolve as technology changes and more tools for access to financial services emerge, such as real-time payments. In addition to cybersecurity risks, new techniques have made it easier for bad actors to obtain and use client personal information, mimic signatures, and otherwise create false documents that look genuine. Fraud schemes are broad and can include debit card/credit card fraud, check fraud, NSF fraud, mechanical devices attached to ATM machines, social engineering and phishing attacks to obtain personal information, impersonation of our clients through the use of falsified or stolen credentials, employee fraud, information fraud, and other malfeasance. Criminals are turning to new sources to steal personally identifiable information in order to impersonate our clients to commit fraud. Our anti-fraud actions are both preventative (anticipating lines of attack, educating employees and clients, making operational changes) and responsive (remediating actual attacks). We have established policies, processes, and procedures to identify, measure, monitor, mitigate, report, and analyze these risks. We continue to invest in systems, resources, and controls to detect and prevent fraud. There are inherent limitations, however, to our risk management strategies, systems, and controls as they may exist, or develop in the future. We may not appropriately anticipate, monitor, or identify these risks. If our risk management framework proves ineffective, we could suffer unexpected losses, we may have to expend resources detecting and correcting the failure in our systems, and we may be subject to potential claims from third parties and government agencies. We may also suffer reputational damage. Any of these consequences could adversely affect our business, financial condition, or results of operations.

Current wording

and can include debit card/credit card fraud, check fraud, NSF fraud, mechanical devices attached to ATM machines, social engineering and phishing attacks to obtain personal information, impersonation of our clients through the use of falsified or stolen credentials, employee fraud, information fraud, and other malfeasance. Criminals are turning to new sources to steal personally identifiable information in order to impersonate our clients to commit fraud. Our anti-fraud actions are both preventative (anticipating lines of attack, educating employees and clients, making operational changes) and responsive (remediating actual attacks). We have established policies, processes, and procedures to identify, measure, monitor, mitigate, report, and analyze these risks. We continue to invest in systems, resources, and controls to detect and prevent fraud. There are inherent limitations, however, to our risk management strategies, systems, and controls as they may exist, or develop in the future. We may not appropriately anticipate, monitor, or identify these risks. If our risk management framework proves ineffective, we could suffer unexpected losses, we may have to expend resources detecting and correcting the failure in our systems, and we may be subject to potential claims from third parties and government agencies. We may also suffer reputational damage. Any of these consequences could adversely affect our business, financial condition, or results of operations.

Previous wording

monitor, report, and analyze the types of risk to which we are subject, including strategic, market, credit, liquidity, capital, cybersecurity, operational, regulatory compliance, litigation, and reputational. However, as with any risk management framework, there are inherent limitations to our risk management strategies as there may exist, or develop in the future, risks that we have not appropriately anticipated or identified. For example, the financial and credit crisis and resulting regulatory reform highlighted both the importance and some of the limitations of managing unanticipated risks. If our risk management framework proves ineffective, we could suffer unexpected losses and our business and results of operations could be materially adversely affected.

Current wording

Our enterprise risk management framework seeks to achieve an appropriate balance between risk and return, which is critical to optimizing shareholder value. We have established processes and procedures intended to identify, measure, monitor, report, and analyze the types of risk to which we are subject, including strategic, market, credit, liquidity, capital, cybersecurity, operational, regulatory compliance, litigation, and reputational. However, as with any risk management framework, there are inherent limitations to our risk management strategies as there may exist, or develop in the future, risks that we have not appropriately anticipated or identified. For example, the financial and credit crisis and resulting regulatory reform highlighted both the importance and some of the limitations of managing unanticipated risks. If our risk management framework proves ineffective, we could suffer unexpected losses and our business and results of operations could be materially adversely affected.

Previous wording

Third parties provide key components of our business operations such as our core technology infrastructure, cloud-based operations, data processing, recording and monitoring transactions, online banking interfaces and services, internet connections, and network access. We have selected these third-party vendors carefully and have conducted the due diligence consistent with regulatory guidance and best practices. While we have ongoing programs to review third party vendors and assess risk, we do not control their actions. Any problems caused by these third parties, including those resulting from disruptions in communication services provided by a vendor, issues at a third-party vendor of a vendor, failure of a vendor to handle current or higher volumes, cyber-attacks and security breaches at a vendor, failure of a vendor to provide services for any reason, or poor performance of services, could adversely affect our ability to deliver products and services to our clients and otherwise conduct our business. Financial or operational difficulties of a third-party vendor could also hurt our operations if those difficulties interfere with the vendor's ability to serve us. Furthermore, our vendors could also be sources of operational and information security risk to us, including from breakdowns or failures of their own systems or capacity constraints. Replacing these third-party vendors could also create significant delay and expense. Accordingly, use of such third parties creates an unavoidable inherent risk to our business operations. Our digital services growth initiatives, core technology upgrades, and digital asset initiatives constitute specific increases in third-party risk as such initiatives are distinctly dependent on the performance of our third-party partners.

Current wording

Third parties provide key components of our business operations such as our core technology infrastructure, cloud-based operations, data processing, recording and monitoring transactions, online banking interfaces and services, internet connections, and network access. We have selected these third-party vendors carefully and have conducted the due diligence consistent with regulatory guidance and best practices. While we have ongoing programs to review third party vendors and assess risk, we do not control their actions. Any problems caused by these third parties, including those resulting from disruptions in communication services provided by a vendor, issues at a third-party vendor of a vendor, failure of a vendor to handle current or higher volumes, cyber-attacks and security breaches at a vendor, failure of a vendor to provide services for any reason, or poor performance of services, could adversely affect our ability to deliver products and

Previous wording

We may be involved from time to time in a variety of litigation, investigations, inquiries, or similar matters arising out of our business. Furthermore, litigation against banks tend to increase during economic downturns and periods of credit deterioration, which may occur or worsen as a result of current economic uncertainty. Most recently there has been an increase in class action lawsuits filed claiming deceptive practices or violations of account terms in connection with non-sufficient fees or overdraft charges. We manage these risks through internal controls, personnel training, insurance, litigation management, our compliance and ethics processes, and other means. However, the commencement, outcome, and magnitude of litigation cannot be predicted or controlled with any certainty.

Current wording

We may be involved from time to time in a variety of litigation, investigations, inquiries, or similar matters arising out of our business. Furthermore, litigation against banks tend to increase during economic downturns and periods of credit deterioration, which may occur or worsen as a result of current economic uncertainty. Most recently there has been an increase in class action lawsuits filed claiming deceptive practices or violations of account terms in connection with non-sufficient fees or overdraft charges and violations of the Fair Labor Standards Act (FLSA). We manage these risks through internal controls, personnel training, insurance, litigation management, our compliance and ethics processes, and other means. However, the commencement, outcome, and magnitude of litigation cannot be predicted or controlled with any certainty.

Previous wording

Further, bank failures, such as the ones occurring in 2023, have and may in the future diminish public confidence in small and regional banks’ abilities to safeguard deposits in excess of federally insured limits, which could prompt customers to maintain their deposits with larger financial institutions. Concerns over rapid, large-scale deposit movement have and could in the future heighten regulatory scrutiny surrounding liquidity and increase competition for deposits and the resulting cost of funding, which could create pressure on net interest margin and results of operations. In addition, bank failures have and could in the future prompt the FDIC to increase deposit insurance costs. Increases in funding, deposit insurance or other costs as a result of these types of events have and could in the future materially adversely affect our financial condition and results of operations. Further, the disruption following these types of events have and could in the future generate significant market trading volatility among publicly traded bank holding companies and, in particular, regional banks like the Company.

Current wording

Further, bank failures, such as the ones occurring in 2023, have and may in the future diminish public confidence in small and regional banks’ abilities to safeguard deposits in excess of federally insured limits, which could prompt customers to maintain their deposits with larger financial institutions. Concerns over rapid, large-scale deposit movement have and could in the future heighten regulatory scrutiny surrounding liquidity and increase competition for deposits and the resulting cost of funding, which could create pressure on net interest margin and results of operations. In addition, bank failures have and could in the future prompt the FDIC to increase deposit insurance costs. Increases in funding, deposit insurance or other

Previous wording

Commercial real estate (“CRE”) is cyclical and poses risks of loss to us due to our concentration levels and risk of the asset, especially during a difficult economy, including the current stressed economy. As of December 31, 2023, 50.8% of our loan portfolio was comprised of loans secured by commercial real estate. The banking regulators continue to give CRE lending greater scrutiny, and banks with higher levels of CRE loans are expected to implement improved underwriting, internal controls, risk management policies and portfolio stress testing, as well as higher levels of allowances for possible losses and capital levels as a result of CRE lending growth and exposures.

Current wording

Commercial real estate (“CRE”) is cyclical and poses risks of loss to us due to our concentration levels and risk of the asset, especially during a difficult economy, including the current stressed economy. As of December 31, 2024, 49.9% of our loan portfolio was comprised of loans secured by commercial real estate. The banking regulators continue to give CRE lending greater scrutiny, and banks with higher levels of CRE loans are expected to implement improved underwriting, internal controls, risk management policies and portfolio stress testing, as well as higher levels of allowances for possible losses and capital levels as a result of CRE lending growth and exposures.

Previous wording

concerned about our CRE loan concentrations, and they could limit our ability to grow by, among other things, restricting their approvals for the establishment or acquisition of branches, or approvals of mergers or other acquisition opportunities. Our loan portfolio contains several industry and collateral concentrations including, but not limited to, commercial and residential real estate. Due to the exposure in these concentrations, disruptions in markets, economic conditions, changes in laws or regulations or other events could cause a significant impact on the ability of borrowers to repay and may have a material adverse effect on our business, financial condition and results of operations.

Current wording

Although we are actively working to manage our CRE concentration and believe that our underwriting policies, management information systems, independent credit administration process, and monitoring of real estate loan concentrations are currently sufficient to address the CRE Concentration Guidance, the OCC or other federal regulators could become concerned about our CRE loan concentrations, and they could limit our ability to grow by, among other things, restricting their approvals for the establishment or acquisition of branches, or approvals of mergers or other acquisition opportunities. Our loan portfolio contains several industry and collateral concentrations including, but not limited to, commercial and residential real estate. Due to the exposure in these concentrations, disruptions in markets, economic conditions, changes in laws or regulations or other events could cause a significant impact on the ability of borrowers to repay and may have a material adverse effect on our business, financial condition and results of operations.

Previous wording

The Bank is subject to capital adequacy guidelines and other regulatory requirements specifying minimum amounts and types of capital which the Bank must maintain. From time to time, the regulators implement changes to these regulatory capital adequacy guidelines. If the Bank fails to meet these minimum capital guidelines and other regulatory requirements, our financial condition would be materially and adversely affected. We may also be required to satisfy additional capital adequacy standards as determined by the Federal Reserve. These requirements, and any other new regulations, could adversely affect our ability to pay dividends, or could require us to reduce business levels or to raise capital, including in ways that may adversely affect our financial condition or results of operations.

Current wording

The Bank is subject to capital adequacy guidelines and other regulatory requirements specifying minimum amounts and types of capital which the Bank must maintain. From time to time, the regulators implement changes to these regulatory capital adequacy guidelines. If the Bank fails to meet these minimum capital guidelines and other regulatory requirements, our financial condition would be materially and adversely affected. We may also be required to satisfy additional capital

Previous wording

ESG risks could adversely affect our reputation and shareholder, employee, client and third-party relationships and may negatively affect our stock price**.**

Current wording

ESG, anti-ESG, DEI, and anti-DEI risks could adversely affect our reputation and shareholder, employee, client and third-party relationships and may negatively affect our stock price**.**

Previous wording

Our business faces increasing public scrutiny related to environmental, social and governance (“ESG”) activities. We risk damage to our brand and reputation if we fail to act responsibly in a number of areas, such as diversity, equity, inclusion, environmental stewardship, human capital management, support for our local communities, corporate governance and transparency, or fail to consider ESG factors in our business operations.

Current wording

Our business faces increasing public scrutiny related to ESG and DEI activities. We risk damage to our brand and reputation if we fail to act responsibly in a number of areas, such as diversity, equity, inclusion, environmental stewardship, human capital management, support for our local communities, corporate governance and transparency, or fail to consider ESG factors in our business operations.

Previous wording

Furthermore, as a result of our diverse base of clients and business partners, we may face potential negative publicity based on the identity of our clients or business partners and the public’s (or certain segments of the public’s) view of those entities. Such publicity may arise from traditional media sources or from social media and may increase rapidly in size and scope. If our client or business partner relationships were to become intertwined in such negative publicity, our ability to attract and retain clients, business partners, and employees may be negatively impacted, and our stock price may also be negatively impacted. Additionally, we may face pressure to not do business in certain industries that are viewed as harmful to the environment or are otherwise negatively perceived, which could impact our growth. Additionally, investors and shareholder advocates are placing ever increasing emphasis on how corporations address ESG issues in their business strategy when making investment decisions and when developing their investment theses and proxy recommendations. We may incur meaningful costs with respect to our ESG efforts and if such efforts are negatively perceived, our reputation and stock price may suffer. In addition, ongoing legislative or regulatory uncertainties and changes regarding climate risk management and practices may result in higher regulatory, compliance, credit and reputational risks and costs.

Current wording

Furthermore, as a result of our diverse base of clients and business partners, we may face potential negative publicity based on the identity of our clients or business partners and the public’s (or certain segments of the public’s) view of those entities. Such publicity may arise from traditional media sources or from social media and may increase rapidly in size and scope. If our client or business partner relationships were to become intertwined in such negative publicity, our ability to attract and retain clients, business partners, and employees may be negatively impacted, and our stock price may also be negatively impacted. Additionally, we may face pressure to not do business in certain industries that are viewed as harmful to the environment or are otherwise negatively perceived, which could impact our growth. Additionally, investors and shareholder advocates are placing ever increasing emphasis on how corporations address ESG issues in their business strategy when making investment decisions and when developing their investment theses and proxy recommendations. In response to ESG developments (including, in particular DEI initiatives), there are increasing instances of “anti-ESG” legislation and anti-DEI executive orders, adverse media coverage, regulation, and litigation that could have unintended impacts on ordinary banking operations and increase litigation or reputational risk related to actions we choose to take and impact the results of our operations. We may incur meaningful costs with respect to our ESG efforts and if such efforts are negatively perceived, our reputation and stock price may suffer.

Previous wording

The Bank Secrecy Act of 1970, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain effective anti-money laundering programs and file suspicious activity and currency transaction reports as appropriate. FinCEN, established by the U.S. Department of the Treasury to administer the Bank Secrecy Act, is authorized to impose significant civil money penalties for violations of those requirements and engages in coordinated enforcement efforts with the individual federal banking regulators, as well as the U.S. Department of Justice, Drug Enforcement Administration and IRS. There is also increased scrutiny of compliance with the rules enforced by OFAC related to U.S. sanctions regimes. If our policies, procedures and systems are deemed deficient or the policies, procedures and systems of the financial institutions that we have already acquired or may acquire in the future are deficient, we would be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain aspects of our business plan, including our acquisition

Current wording

The Bank Secrecy Act of 1970, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain effective anti-money laundering programs and file suspicious activity and currency transaction reports as appropriate. FinCEN, established by the U.S. Department of the Treasury to administer the Bank Secrecy Act, is authorized to impose significant civil money penalties for violations of those requirements and engages in coordinated enforcement efforts with the individual federal banking regulators, as well as the U.S. Department of Justice, Drug Enforcement Administration and IRS. There is also increased scrutiny of compliance with the rules enforced by OFAC related to U.S. sanctions regimes. If our policies, procedures and systems are deemed deficient or the policies, procedures and systems of the financial institutions that we have already acquired or may acquire in the future are deficient, we would be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain aspects of our business plan, including our acquisition plans, which would negatively impact our business, financial condition and results of operations. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us.See “Business-Supervision and Regulation.”