PCB BANCORP

Item 1 - Legal Proceedings

In the normal course of business, the Company is involved in various legal claims. Management has reviewed all legal claims against the Company with counsel and have taken into consideration the views of such counsel as to the potential outcome of the claims in determining the accrued loss contingency. The Company did not have any accrued loss contingencies for legal claims at September 30, 2024. It is reasonably possible the Company may incur losses in addition to the amounts currently accrued. However, at this time, the Company is unable to estimate the range of additional losses that are reasonably possible because of a number of factors, including the fact that certain of these litigation matters are still in their early stages and involve claims for which, at this point, the Company believes have little to no merit. Management has considered these and other possible loss contingencies and does not expect the amounts to be material to the consolidated financial statements.

Network and Data Incident

On August 30, 2021, the Bank identified unusual activity on its network. The Bank responded promptly to disable the activity, investigate its source and monitor the Bank’s network. The Bank subsequently became aware of claims that it had been the target of a ransomware attack. On September 7, 2021, the Bank determined that an external actor had illegally accessed and/or acquired certain data on its network. The Bank worked with third-party forensic investigators to understand the nature and scope of the incident and determine what information may have been accessed and/or acquired and who may have been impacted. The investigation revealed that this incident impacted certain files containing certain Bank customer information. Some of these files contained documents related to loan applications, such as tax returns, Form W-2 information of their employees, and payroll records. The Bank has notified all individuals identified as impacted, consistent with applicable laws. All impacted individuals were offered free Equifax Complete Premier credit monitoring and identify theft protection services. The Bank has notified law enforcement and appropriate authorities of the incident.

On December 16, 2021, Plaintiff Min Woo Bae, individually and on behalf of all others similarly situated, filed in the Los Angeles County Superior Court a complaint based on the incident for damages, injunctive relief, and equitable relief, styled Min Woo Bae v. Pacific City Bank, Case Number 21STCV45922 (“the Matter”). During the three months ended September 30, 2023, the Bank agreed to settle this matter in exchange for $700 thousand to the putative class members, including costs of settlement administration, and attorneys’ fees and costs. The Bank received preliminary court approval of the settlement and notice was provided to members of the proposed class during the three months ended September 30, 2023. The court issued an order granting final approval on June 20, 2024.

The Company expects that the full amount of the final settlement will be covered under the Company’s applicable insurance policies.