HAWTHORN BANCSHARES, INC.

Previous wording

Because We Primarily Serve Central and West Central Missouri, a Decline in the Local Economic Conditions Could Lower the Company's Profitability. The profitability of the Company is dependent on the profitability of the Bank, which operates out of central and west-central Missouri. The financial condition of the Bank is affected by slowing or recessionary economic conditions and business activity prevailing in the portion of Missouri in which its operations are located. Although our customers' business and financial interests may extend well beyond our market areas, the financial conditions of both the Company and the Bank would be adversely affected by deterioration in the general economic and real estate climate in Missouri.

Current wording

Because We Primarily Serve Central, West Central Missouri, and Eastern Kansas, a Decline in the Local Economic Conditions Could Lower the Company's Profitability. The profitability of the Company is dependent on the profitability of the Bank, which operates out of central and west-central Missouri, and extends into eastern Kansas as part of the Kansas City metro. The financial condition of the Bank is affected by slowing or recessionary economic conditions and business activity prevailing in the portions of Missouri and Kansas in which its operations are located. Although our customers' business and financial interests may extend well beyond our market areas, the financial conditions of both the Company and the Bank would be adversely affected by deterioration in the general economic and real estate climate in Missouri and Kansas.

Previous wording

The Company's Profitability Depends On The Bank's Asset Quality and Lending Risks. Success in the banking industry largely depends on the quality of loans and other assets. A significant source of risk for us arises from the possibility that losses will be sustained because borrowers, guarantors and related parties may fail to perform in accordance with the terms of their loans. The Bank's loan officers are actively encouraged to identify deteriorating loans. Loans are also monitored and categorized through an analysis of their payment status. The Bank's failure to timely and accurately monitor the quality of its loans and other assets could have a materially adverse effect on the operations and financial condition of the Company and the Bank. There is a degree of credit risk associated with any lending activity. The Bank attempts to minimize its credit risk through loan diversification. Although the Bank's loan portfolio is varied, with no undue concentration in any one industry, substantially all of the loans in the portfolio have been made to borrowers in central, west central, and southwest Missouri. Therefore, the loan portfolio is susceptible to factors affecting the central, west central, and southwest Missouri area and the level of non-performing assets is heavily dependent upon local conditions. There can be no assurance that the level of the Bank's non-performing assets will not increase above current levels. High levels of non-performing assets could have a materially adverse effect on the operations and financial condition of the Company and the Bank.

Current wording

The Company's Profitability Depends On the Bank's Asset Quality and Lending Risks. Success in the banking industry largely depends on the quality of loans and other assets. A significant source of risk for us arises from the possibility that losses will be sustained because borrowers, guarantors and related parties may fail to perform in accordance with the terms of their loans. The Bank's loan officers are actively encouraged to identify deteriorating loans. Loans are also monitored and categorized through an analysis of their payment status. The Bank's failure to timely and accurately monitor the quality of its loans and other assets could have a materially adverse effect on the operations and financial condition of the Company and the Bank. There is a degree of credit risk associated with any lending activity. The Bank attempts to minimize its credit risk through loan diversification. Although the Bank's loan portfolio is varied, with no undue concentration in any one industry, substantially all of the loans in the portfolio have been made to borrowers in central, west central, and southwest Missouri, and eastern Kansas as part of the Kansas City metro. Therefore, the loan portfolio is susceptible to factors affecting the central, west central, and southwest Missouri, and eastern Kansas and the level of non-performing assets is heavily dependent upon local conditions. There can be no assurance that the level of the Bank's non-performing assets will not increase above current levels. High levels of non-performing assets could have a materially adverse effect on the operations and financial condition of the Company and the Bank.

Previous wording

The recent bank failures of Silicon Valley Bank in California, Signature Bank in New York, and First Republic Bank in California during the first and second quarters of 2023 have caused a degree of panic and uncertainty in the investor community and among bank customers generally. While the Company does not believe that the circumstances of these three banks' failures are indicators of broader issues with the banking system, the failures may reduce customer confidence, affect sources of funding and liquidity, increase regulatory requirements and costs, adversely affect financial markets and/or have a negative reputational ramification for the banking industry, including the Company. The Company will continue to monitor the ongoing events concerning these three banks as well as any future potential bank failures and volatility within the banking industry generally, together with any responsive measures taken by the banking regulators to mitigate or manage potential turmoil in the banking industry.

Current wording

Bank failures, such as the failures of Silicon Valley Bank, Signature Bank and First Republic Bank in 2023, may cause a degree of panic and uncertainty in the investor community and among bank customers generally. Bank failures may also reduce customer confidence, affect sources of funding and liquidity, increase regulatory requirements and costs, adversely affect financial markets or have a negative reputational ramification for the banking industry, including the Company. The Company will monitor events concerning any future potential bank failures and volatility within the banking industry generally, together with any responsive measures taken by the banking regulators to mitigate or manage potential turmoil in the banking industry.

Previous wording

The FDIC's Changes in the Calculation of Deposit Insurance Premiums and Ability to Levy Special Assessments Could Increase the Company's Non-Interest Expense and May Reduce Its Profitability. The range of base assessment rates historically varies from 12 to 45 basis points depending on an institution's risk category, with newly added financial measures resulting in increased assessment rates for institutions heavily relying on brokered deposits to support rapid asset growth. However, the Dodd-Frank Act requires the FDIC to amend its regulations to redefine the assessment base used for calculating deposit insurance assessments. On February 9, 2011, the FDIC adopted a final rule that defines the assessment base as the average consolidated total assets during the assessment period minus the average tangible equity of the insured depository institution during the assessment period. The FDIC also imposed a new assessment rate scale (which was revised further in 2016). Under the new system, banks will generally pay assessments at a rate between 2.5 and 32 basis points per assets minus tangible equity, depending upon an institution's risk category (the final rule also includes progressively lower assessment rate schedules when the FDIC's reserve ratio reaches certain levels). The rulemaking changes the current assessment rate schedule so the schedule will result in the collection of assessment revenue that is approximately the same as generated under the current rate schedule and current assessment base. Nearly all banks with assets less than $10 billion will pay smaller deposit insurance assessments as a result of the new rule. The majority of the changes in the FDIC's final rule became effective on April 1, 2011. The FDIC has the statutory authority to impose special assessments on insured depository institutions in an amount, and for such purposes, as the FDIC may deem necessary. The FDIC issued a final rule in November 2023 to implement a special assessment to recover the significant losses incurred by the FDIC in connection with the 2023 bank failures, but that special assessment did not apply to the Bank. The change in the calculation methodology for deposit insurance premiums and the possible emergency special assessments could increase non-interest expense and may adversely affect the Company's profitability.

Current wording

The FDIC's Changes in the Calculation of Deposit Insurance Premiums and Ability to Levy Special Assessments Could Increase the Company's Non-Interest Expense and May Reduce Its Profitability. The range of base assessment rates historically varies from 12 to 45 basis points depending on an institution's risk category, with newly added financial measures resulting in increased assessment rates for institutions heavily relying on brokered deposits to support rapid asset growth. However, the Dodd-Frank Act requires the FDIC to amend its regulations to redefine the assessment base used for calculating deposit insurance assessments. On February 9, 2011, the FDIC adopted a final rule that defines the assessment base as the average consolidated total assets during the assessment period minus the average tangible equity of the insured depository institution during the assessment period. The FDIC also imposed a new assessment rate scale (which was revised further in 2016). Under the new system, banks will generally pay assessments at a rate between 2.5 and 32 basis points per assets minus tangible equity, depending upon an institution's risk category (the final rule also includes progressively lower assessment rate schedules when the FDIC's reserve ratio reaches certain levels). The rulemaking changes the current assessment rate schedule so the schedule will result in the collection of assessment revenue that is approximately the same as generated under the current rate schedule and current assessment base. Nearly all banks with assets less than $10 billion will pay smaller deposit insurance assessments as a result of the new rule. The majority of the changes in the FDIC's final rule became effective on April 1, 2011. The FDIC has the statutory authority to impose special assessments on insured depository institutions in an amount, and for such purposes, as the FDIC may deem necessary. The FDIC issued a final rule in November 2023 to implement a special assessment to recover the significant losses incurred by the FDIC in connection with the 2023 bank failures (Silicon Valley Bank in California, Signature Bank in New York and First Republic Bank in California), but that special assessment did not apply to the Bank. The change in the calculation methodology for deposit insurance premiums and the possible emergency special assessments could increase non-interest expense and may adversely affect the Company's profitability.

Previous wording

We May Elect Or Be Compelled To Seek Additional Capital In The Future, But That Capital May Not Be Available When It Is Needed. We are required by regulatory authorities to maintain adequate levels of capital to support operations. In addition, we may elect to raise additional capital to support the growth of the Company's business or to finance acquisitions, if any, or we may elect to raise additional capital for other reasons. In that regard, a number of financial institutions have recently raised considerable amounts of capital as a result of a deterioration in their results of operations and financial condition arising from the turmoil in the mortgage loan market, deteriorating economic conditions, declines in real estate values and other factors. Should we elect or be required by regulatory authorities to raise additional capital, we may seek to do so through the issuance of, among other things, common stock or securities convertible into common stock, which could dilute your ownership interest in the Company. Although we remain "well-capitalized" and have not had a deterioration in liquidity, the future cost and availability of capital may be adversely affected by illiquid credit markets, economic conditions and a number of other factors, many of which are outside of the Company's control. Accordingly, we cannot assure you of the ability to raise additional capital if needed or on terms acceptable to us. If we cannot raise additional capital when needed or on terms acceptable to us, it may have a material adverse effect on the Company's financial condition and results of operations.

Current wording

We May Elect or Be Compelled To Seek Additional Capital In The Future, But That Capital May Not Be Available When Needed. We are required by regulatory authorities to maintain adequate levels of capital to support operations. In addition, we may elect to raise additional capital to support the growth of the Company's business or to finance acquisitions, if any, or we may elect to raise additional capital for other reasons. In that regard, a number of financial institutions have recently raised considerable amounts of capital as a result of a deterioration in their results of operations and financial condition arising from the turmoil in the mortgage loan market, deteriorating economic conditions, declines in real estate values and other factors. Should we elect or be required by regulatory authorities to raise additional capital, we may seek to do so through the issuance of, among other things, common stock or securities convertible into common stock, which could dilute your ownership interest in the Company. Although we remain "well-capitalized" and have not had a deterioration in liquidity, the future cost and availability of capital may be adversely affected by illiquid credit markets, economic conditions and a number of other factors, many of which are outside of the Company's control. Accordingly, we cannot assure you of the ability to raise additional capital if needed or on terms acceptable to us. If we cannot raise additional capital when needed or on terms acceptable to us, it may have a material adverse effect on the Company's financial condition and results of operations.

Previous wording

Fraudulent Activity Could Damage Our Reputation, Disrupt Our Business, Increase our Costs and Cause Losses. Financial institutions are inherently exposed to operational risk in the form of theft and other fraudulent activity by employees, clients and other third parties targeting us and our customers or data. Such activity may take many forms, including check fraud, electronic fraud, wire fraud, phishing, social engineering, and other dishonest acts. Although the Company devotes substantial resources to maintaining effective policies and internal controls to identify and prevent such incidents, given the increasing sophistication of possible perpetrators, the Company or the Bank may experience financial losses or reputational harm as a result of fraud. In addition, we may be required to make significant capital expenditures in order to modify and enhance our protective measures or to investigate and remediate fraudulent activity. Although we have not experienced any material business or reputational harm as a result of fraudulent activities in the past, the occurrence of fraudulent activity could damage our reputation, disrupt our business, increase our costs and cause losses in the future.

Current wording

The Actual or Perceived Occurrence of Fraudulent Activity, Breaches or Failures of our Information Security Controls, or Cybersecurity Related Incidents Could Damage Our Reputation, Disrupt Our Business, Increase our Costs and Cause Losses. Financial institutions are inherently exposed to operational risk in the form of theft and other fraudulent activity by employees, clients and other third parties targeting us and our customers or data. Such activity may take many forms, including check fraud, electronic fraud, wire fraud, phishing, social engineering, and other dishonest acts. Information security breaches and cybersecurity-related incidents may include fraudulent or unauthorized access to systems used by us, our customers or third-party vendors, denial or degradation of service attacks, and malware or other cyber attacks. Although the Company devotes substantial resources to maintaining effective policies and internal controls to identify and prevent such incidents, given the increasing sophistication of possible perpetrators, the Company or the Bank may experience financial losses or reputational harm as a result of fraud. In addition, we may be required to make significant capital expenditures in order to modify and enhance our protective measures or to investigate and remediate fraudulent activity. Although we have not experienced any material business or reputational harm as a result of fraudulent activities in the past, the occurrence of fraudulent activity could damage our reputation, disrupt our business, increase our costs and cause losses in the future.

Previous wording

The Company's Success Largely Depends on the Efforts of its Executive Officers. The success of the Company and the Bank has been largely dependent on the efforts of David Turner, Executive and Director, and Brent M. Giles, CEO and Director, and the other executive officers. These individuals are expected to continue to perform their services. However, the loss of the services of Mr. Turner or Mr. Giles, or any of the other key executive officers could have a materially adverse effect on the Company and the Bank.

Current wording

The Company's Success Largely Depends on the Efforts of its Executive Officers. The success of the Company and the Bank has been largely dependent on the efforts of Brent M. Giles, CEO and Director, Gregg Bexten, President and Director, and the other executive officers. These individuals are expected to continue to perform their services. However, the loss of the services of Mr. Giles or Mr. Bexten, or any of the other key executive officers could have a materially adverse effect on the Company and the Bank.

Previous wording

Severe Weather, Natural Disasters, Pandemics, and Other External Events Could Significantly Impact Our Business. Severe weather, including tornadoes, droughts, hailstorms and other natural disasters, pandemics, such as the outbreak of COVID-19, acts of war or terrorism and other adverse external events could have a significant impact on our ability to conduct business. Such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue or cause us to incur additional expenses. Operations in our markets could be disrupted by both the evacuation of large portions of the population as well as damage or lack of access to our banking and operation facilities. Military and political conflicts, including the current military conflict between Russia and Ukraine, may increase volatility in commodity and energy prices, create supply chain issues and cause instability in financial markets, which may adversely affect us and our clients. Other severe weather or natural disasters, pandemics, acts of war or terrorism or other adverse external events may occur in the future. Although management has established business continuity plans and procedures, the occurrence of any such events could have a material adverse effect on our business, financial condition and results of operations.

Current wording

Severe Weather, Natural Disasters, Pandemics, and Other External Events Could Significantly Impact Our Business. Severe weather, including tornadoes, droughts, hailstorms and other natural disasters, pandemics, or public health emergencies such as the outbreak of COVID-19, acts of war or terrorism and other adverse external events could have a significant impact on our ability to conduct business. Such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue or cause us to incur additional expenses. Operations in our markets could be disrupted by both the evacuation of large portions of the population as well as damage or lack of access to our banking and operation facilities. Military and political conflicts, including the current military conflict between Russia and Ukraine, may increase volatility in commodity and energy prices, create supply chain issues and cause instability in financial markets, which may adversely affect us and our clients. Other severe weather or natural disasters, pandemics, acts of war or terrorism or other adverse external events may occur in the future. Although management has established business continuity plans and procedures, the occurrence of any such events could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

The Short-Term And Long-Term Impact of the Changing Regulatory Capital Requirements and New Capital Rules is Uncertain. The federal banking agencies have substantially amended the regulatory capital rules applicable to us and the Bank. The amendments implement the Basel III Rules and changes required by the Dodd-Frank Act. The amended rules include new minimum risk-based capital and leverage ratios, which became effective in January 2015, with certain requirements to be phased in beginning in 2016, and refined the definition of what constitutes "capital" for purposes of calculating those ratios.

Current wording

The Short-Term and Long-Term Impact of any Change to Regulatory Capital Requirementsis Uncertain. The Company and the Bank are subject to various regulatory capital requirements. The federal banking agencies have substantially amended the regulatory capital rules applicable to us and the Bank in the past and may do so again in the future. The amendments implement the Basel III Rules and changes required by the Dodd-Frank Act. The amended rules include new minimum risk-based capital and leverage ratios, which became effective in January 2015 (with certain phase-ins), and refined the definition of what constitutes "capital" for purposes of calculating those ratios.

Previous wording

Regulations Relating to Privacy, Information Security and Data Protection Could Increase Our Costs, Affect or Limit How We Collect and Use Personal Information and Adversely Affect Our Business Opportunities. We are subject to various privacy, information security and data protection laws, including requirements concerning security breach notification, and we could be negatively impacted by these laws. For example, our business is subject to the Gramm-Leach-Bliley Act which, among other things: (i) imposes certain limitations on our ability to share non-public personal information about our clients with non-affiliated third parties; (ii) requires that we provide certain disclosures to clients about our information collection, sharing and security practices and afford clients the right to “opt out” of any information sharing by us with non-affiliated third parties (with certain exceptions); and (iii) requires that we develop, implement and maintain a written comprehensive information security program containing safeguards that are appropriate based on our size and complexity, the nature and scope of our activities and the sensitivity of client information we process, as well as plans for responding to data security breaches. Many state and federal banking regulators, states and foreign countries have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notifications in certain circumstances in the event of a security breach. Moreover, legislators and regulators in the U.S. and other countries are increasingly adopting or revising privacy, information security and data protection laws that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of client or employee information, and some of our current or planned business activities. This could also increase our costs of compliance and business operations and could reduce income from certain business initiatives. This includes increased privacy-related enforcement activity at the federal level by the Federal Trade Commission, as well as at the state level.

Current wording

Regulations Relating to Privacy, Cybersecurity, Information Security and Data Protection Could Increase Our Costs, Affect or Limit How We Collect and Use Personal Information and Adversely Affect Our Business Opportunities. We are subject to various privacy, information security and data protection laws, including requirements concerning security breach notification, and we could be negatively impacted by these laws. For example, our business is subject to the Gramm-Leach-Bliley Act which, among other things: (i) imposes certain limitations on our ability to share non-public personal information about our clients with non-affiliated third parties; (ii) requires that we provide certain disclosures to clients about our information collection, sharing and security practices and afford clients the right to “opt out” of any information sharing by us with non-affiliated third parties (with certain exceptions); and (iii) requires that we develop, implement and maintain a written comprehensive information security program containing safeguards that are appropriate based on our size and complexity, the nature and scope of our activities and the sensitivity of client information we process, as well as plans for responding to data security breaches. Many state and federal banking regulators, states and foreign countries have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notifications in certain circumstances in the event of a security breach. Moreover, legislators and regulators in the U.S. and other countries are increasingly adopting or revising privacy, information security and data protection laws that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of client or employee information, and some of our current or planned business activities. This could also increase our costs of compliance and business operations and could reduce income from certain business initiatives. This includes increased privacy-related enforcement activity at the federal level by the Federal Trade Commission, as well as at the state level.

Previous wording

We Continually Encounter Technological Change, and We Cannot Predict How Changes in Technology Will Affect Our Business. The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology driven by products and services, which include developments in:

Current wording

We Continually Encounter Technological Change, and We Cannot Predict How Changes in Technology May Affect Our Business. The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology driven by products and services, which include developments in:

Previous wording

The Price of Our Common Stock Could Fluctuate Significantly, and This Could Make it Difficult for You to Resell Shares of Our Common Stock at Times or at Prices You Find Attractive. The stock market and, in particular, the market for financial institution stocks, has experienced significant volatility during the recent changes in economic and industry conditions. In some cases, the markets have produced downward pressure on stock prices for certain issuers without regard to those issuers' underlying financial strength. As a result, the trading volume in our common stock could fluctuate more than usual and cause significant price variations to occur. This could make it difficult for you to resell shares of our common stock at times or at prices you find attractive.

Current wording

The Price of Our Common Stock Could Fluctuate Significantly, Which Could Make it Difficult for You to Resell Shares of Our Common Stock at Times or at Prices You Find Attractive. The stock market and, in particular, the market for financial institution stocks, has experienced significant volatility during the recent changes in economic and industry conditions. In some cases, the markets have produced downward pressure on stock prices for certain issuers without regard to those issuers' underlying financial strength. As a result, the trading volume in our common stock could fluctuate more than usual and cause significant price variations to occur. This could make it difficult for you to resell shares of our common stock at times or at prices you find attractive.