OP Bancorp
For the period ended Mar 31, 2025. Filed May 9, 2025.
View on SEC.govAbout this filing
A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.
Mar 31, 2025 · Filed May 9, 2025
What changed in Risk Factors?
Read the current filingPrevious report: 10-Q
Period ended 2024-09-30; filed 2024-11-14.
0001628280-24-047832
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresCurrent report: 10-Q
Period ended 2025-03-31; filed 2025-05-09.
0001628280-25-024201
Item 1A. Risk FactorsUnregistered Sales of Equity Securities and Use of ProceedsDefaults Upon Senior SecuritiesMine Safety DisclosuresThe baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.
Compared 22 previous paragraphs and 103 current paragraphs.
16 unchanged; 1 reworded; 79 added; 5 removed; 0 previous and 7 current paragraphs rearranged.
Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.
A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.
Added paragraphs (79)
Current report
You should carefully consider the risks and uncertainties described below, together with the information included elsewhere in this Report and other documents we file with the SEC. The following risks and uncertainties described below are those that we have identified as material. Events or circumstances arising from one or more of these risks could adversely affect our business, financial condition, operating results and prospects and the value and price of our common stock could decline. The risks identified below are not a comprehensive list of all risks we face. Additional risks and uncertainties not presently known to us, or that we may currently view as not material, may also adversely impact our business, financial condition, and results of operations.
Current report
Our profitability is dependent upon the geographic concentration of the markets in which we operate.
Current report
A substantial portion of our business is derived from our commercial banking activities in the Los Angeles, California, Metropolitan Area. As a result, our business, financial condition and results of operations are subject to the demand for our products in those areas and is also subject to changes in the economic conditions in those areas. Our success depends upon the business activity, population, income levels, deposits and real estate activity in these markets. Further, although we have significant lending and deposit relationships in other areas, and our clients’ business and financial interests may extend well beyond these market areas, adverse economic conditions that affect these market areas could reduce our growth rate, affect the ability of our clients to repay their loans to us, could impair the value of the collateral securing our loans, or otherwise generally could affect our business, financial condition and results of operations. Because of our geographic concentration, we are less able than regional or national financial institutions to diversify demand for our products or our credit risks across multiple markets.
Current report
Similarly, geologic, weather-related, and other hazards such as wildfires, earthquakes, droughts, floods and storms, frequently threaten our markets, and in certain circumstances could be expected to have a disproportionate effect on our business as compared to financial institutions whose client and asset bases are more diversified. Such events may harm our business directly or may harm our clients and prospective clients in a way that increases the risks of defaults on our loans, reduces the value of our collateral, and increases clients’ need for liquidity, thus reducing our deposit base and potentially increasing our costs of funds.
Current report
We may not keep pace with the rapid technological developments in the financial services industry.
Current report
The financial services industry is subject to rapid technological changes, of which we cannot predict the effects on our business. We expect that new services and technologies applicable to our industry will continue to emerge, and these new services and technologies may be superior to, or render obsolete, the technologies we currently utilize in our products and services. These technologies often are expensive, and many of them are unproven, as a result of which we may delay adoption or implementation of these products. Further, as these technologies develop, they may pose a greater than ordinary risk of additional cybersecurity breaches. However, customers are often drawn to these products and services, which poses both a competitive risk and a cybersecurity risk to us. If we cannot adopt and implement financial services technologies at a cost and with a level of security that allows us to keep pace with our competitors and with customer expectations, we may face challenges to our revenues, and we may lose customers or fail to attract new customers. Further, if these products were to fail to perform as expected, we may face increase cybersecurity risks and customer dissatisfaction. These outcomes, alone or in combination with other factors, may have a material adverse impact on our business, financial condition and results of operations.
Current report
Our operations could be disrupted by our third-party service providers experiencing difficulty in providing their services, terminating their services or failing to comply with banking regulations.
Current report
We depend to a significant extent on relationships with third-party service providers. Specifically, we utilize third party core banking services and receive credit card and debit card services, branch capture services, Internet banking services and services complementary to our banking products from various third party service providers. These types of third-party relationships are subject to increasingly demanding regulatory requirements that require us to maintain and continue to enhance our due diligence and ongoing monitoring and control over our third-party vendors. We may be required to renegotiate our agreements to meet these enhanced requirements, which could increase our costs or which may be impracticable. If our service providers experience difficulties or terminate their services and we are unable to replace them, our operations could be interrupted. It may be difficult for us to timely replace some of our service providers, which may be at a higher cost due to the unique services they provide. A third-party provider may fail to provide the services we require, or meet contractual requirements, comply with applicable laws and regulations, or suffer a cyberattack or other security breach. We expect that our regulators would hold us responsible for deficiencies of our third-party relationships which could result in enforcement actions, including civil money penalties or other administrative or judicial penalties or fines, or client remediation, any of which could have a material adverse effect on our business, financial condition and results of operations.
Current report
Although we believe we have minimal exposure to customers that have direct economic ties to South Korea and other countries in Asia, many of our customers maintain significant investment, business, and other ties to the region. As a result, we are still likely to feel the effects of adverse economic and political conditions in South Korea and Asia, including the effects of rising inflation or slowing growth and volatility in the real estate and stock markets in South Korea and elsewhere in Asia. U.S. and global economic policies, military tensions in North Korea, and unfavorable global economic conditions may adversely impact the South Korean and other Asian economies. In addition, pandemics and other public health crises or concerns over the possibility of such crises could create economic and financial disruptions in the region. The coronavirus pandemic has had a material adverse effect on the Asian economies. A significant deterioration of economic conditions in Asia, and in South Korea in particular, could expose us to, among other things, economic and transfer risk, and we could experience an outflow of deposits by those of our customers with connections to Asia. Transfer risk may result when an entity is unable to obtain the foreign exchange needed to meet its obligations or to provide liquidity. This may adversely impact the recoverability of investments with, or loans made to, such entities. Adverse economic conditions in Asia, and in South Korea in particular, may also negatively impact asset values and the profitability and liquidity of our customers who operate in this region.
Current report
Increasing challenges in credit markets and the effects on our current and future borrowers have adversely affected, and in the future may adversely affect, our loan portfolio and may result in losses or increasing provision expense.
Current report
Although the Federal Reserve System (commonly referred to as “the Fed”) has recently made modest incremental reductions in benchmark interest rates, the current interest rate environment remains significantly elevated from those of the recent past, and recent indications as of the date of this report are that further reductions are unlikely in the near future. Interest rates affect both our ability to reprice variable-rate loans and to originate new fixed-rate loans, and in times of significant uncertainty about interest rates, such as the present, clients and prospective investors often reduce their borrowing levels, which tends to have a deflating effect on our outstanding loan balances and thus on our interest income.
Current report
During the third and fourth quarters of 2024, the Federal Reserve Open Markets Committee cut benchmark interest rates three times and for the first time since 2020. Although the Fed has indicated after its meetings in January and March, 2025, that economic conditions appeared to have stabilized, the committee held benchmark rates stead, and, as a result, we are unable to predict changes in future interest rates. Further, even if adjustments are made, the effect on overall markets remains uncertain, and reflect in part a perceived increase in risks of political instability associated with the new presidential administration and subsequent governmental and economic reactions. If rates resume increasing, or if they continue to remain at relatively elevated levels for prolonged periods, our borrowers may experience increasing difficulty in repaying their loans. Further, borrowers may defer additional borrowing decisions pending the resolution of both the political uncertainties and the potential for further market adjustments in response to those matters and to general economic conditions.
Current report
Changes in interest rates also can affect the value of loans, investment securities and other assets. Rising interest rates will result in a decline in value of the fixed-rate debt securities we hold in our investment securities portfolio. The unrealized losses resulting from holding these securities would be recognized in accumulated other comprehensive income and reduce total shareholders’ equity. Unrealized losses do not negatively impact our regulatory capital ratios. However, tangible common equity and the associated ratios would be reduced. If debt securities in an unrealized loss position are sold, such losses become realized and will reduce our regulatory capital ratios.
Current report
To the extent interest rates remain relatively elevated, or if economic conditions affecting our borrowers worsen, our allowance for credit losses and related provision could be negatively impacted, which would result in a reduction in net income for the corresponding period, or in some cases we may experience losses in excess of established reserves, which would have a similar effect. At the same time, even if interest rates stabilize or if reductions are less significant than clients expect, we may confront a loss of demand that adversely affects our interest earning assets. Either of these outcomes, alone or in combination with other factors, may have a material adverse effect on our results of operations.
Current report
Liquidity risks could affect operations and adversely affect our business, financial condition, and results of operations.
Current report
Liquidity is essential to our business. An inability to raise funds through deposits, borrowings, the sale of loans and/or investment securities and through other sources could have a substantial negative effect on our liquidity. Our most important source of funds consists of our customer deposits. Such deposit balances can decrease when customers perceive alternative investments, such as money market funds, bonds and the stock market, as providing a better risk/return tradeoff. If customers move money out of bank deposits and into other investments, we could lose a relatively low cost source of funds, which would require us to seek wholesale funding alternatives in order to continue to grow, thereby increasing our funding costs and reducing our net interest income and net income.
Current report
Other primary sources of funds consist of cash from operations, investment maturities and sales, and sale of loans. Additional liquidity is provided by our ability to borrow from the Federal Reserve Bank of San Francisco and the Federal Home Loan Bank of San Francisco. We also may borrow from third-party lenders from time to time. Our access to funding sources in amounts adequate to finance or capitalize our activities or on terms that are acceptable to us could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry.
Current report
Any decline in available funding could adversely impact our ability to continue to implement our strategic plan, including our ability to originate loans, invest in securities, meet our expenses, or to fulfill obligations such as repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse effect on our liquidity, business, financial condition and results of operations.
Current report
As of March 31, 2025, approximately 89.0% of our loan portfolio was comprised of loans with real estate as a primary or secondary component of collateral. As a result, adverse developments affecting real estate values in our market areas could increase the credit risk associated with our real estate loan portfolio. The market value of real estate can fluctuate significantly in a short period of time as a result of market conditions in the geographic area in which the real estate is located. Real estate values and real estate markets are generally affected by changes in national, regional or local economic conditions, the rate of unemployment, fluctuations in interest rates and the availability of loans to potential purchasers, changes in tax laws and other governmental statutes, regulations and policies and acts of nature, such as earthquakes and other natural disasters. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio, significantly impair the value of property pledged as collateral on loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses, which could result in losses that would adversely affect profitability. Moreover, a substantial portion of the collateral underlying our real estate loans is located in the Los Angeles Metropolitan Area, which recently has experienced an unprecedented series of wildfires that destroyed or heavily damaged some properties and rendered others inaccessible. We have not yet fully determined whether or to what extent these events have affected our loan portfolio or the underlying collateral, and the ultimate effects may not be determinable in the foreseeable future. These events and the related declines and losses could have a material adverse effect on our business, financial condition and results of operations.
Current report
As of March 31, 2025, we had$1.5 billion of commercial loans, consisting of$1.0 billion of commercial real estate loans,$258.8 million of SBA loans, and$202.3 million of commercial and industrial loans, including trade finance loans, for which real estate is not the primary source of collateral. Commercial loans represented 72.6% of our total loan portfolio as of March 31, 2025. Commercial loans are often larger and involve greater risks than other types of lending. Because payments on such loans are often dependent on the successful operation or development of the property or business involved, repayment of such loans is often more sensitive than other types of loans to adverse conditions in the real estate market or the general business climate and economy. Accordingly, a downturn in the real estate market and a challenging business and economic environment may increase our risk related to commercial loans, particularly commercial real estate loans. Unlike home mortgage loans, which generally are made on the basis of the borrowers’ ability to make repayment from their employment and other income and which are secured by real property whose value tends to be more easily ascertainable, commercial loans typically are made on the basis of the borrowers’ ability to make repayment from the cash flow of the commercial venture. Our commercial and industrial loans are primarily made based on the identified cash flow of the borrower and secondarily on the collateral underlying the loans. Most often, collateral consists of accounts receivable, inventory and equipment. Inventory and equipment may depreciate over time, may be difficult to appraise and may fluctuate in value based on the success of the business. Accounts receivable may be uncollectable. If the cash flow from business operations is reduced, the borrower’s ability to repay the loan may be impaired. Due to the larger average size of each commercial loan as compared with other loans such as residential loans, as well as collateral that is generally less readily-marketable, losses incurred on a small number of commercial loans could have a material adverse effect on our business, financial condition and results of operations.
Current report
Our success depends, in large degree, on the skills of our management team and our ability to retain, recruit and motivate key officers and employees. Our senior management team has significant industry experience, and their knowledge and relationships would be difficult to replace. Further, we believe that our focus on particular aspects of our communities, including the Korean culture and language and our Christian leadership principles, would call for any replacements to embody these same traits, which may make it more difficult to replace management team members and other employees who leave the Company or who retire. Leadership changes occur from time to time, and we cannot predict whether significant resignations will occur or whether we will be able to recruit additional qualified personnel. Competition for senior executives and skilled personnel in the financial services and banking industry is intense, which means the cost of hiring, incentivizing and retaining talent may continue to increase. We need to continue to attract and retain key employees and to recruit qualified individuals to succeed existing key personnel to ensure the continued growth and successful operation of our business. In addition, as a provider of relationship-based commercial banking services, we must attract and retain qualified banking personnel to continue to grow our business, and competition for such personnel can be intense. Our ability to effectively compete for senior executives and other qualified personnel by offering competitive compensation and benefit arrangements may be restricted by applicable banking laws and regulations. In addition, to attract and retain personnel with appropriate skills and knowledge to support our business, we may offer a variety of benefits, which could reduce our earnings. The loss of the services of any senior executive and, in particular, Ms. Min Kim, our President and Chief Executive Officer, or other key personnel, or the inability to recruit and retain qualified personnel in the future, could have a material adverse effect on our business, financial condition and results of operations.
Current report
Similarly, we recently announced and have begun to implement a leadership succession plan pursuant to which, among other things, Ms. Kim will retire as our Chief Executive Officer and will assume the role of Chair of our Board of Directors, and will be succeeded in the CEO role by Mr. Sang Oh effective July 1, 2025. Relatedly, we announced in February 2025 that Ms. Christine Oh, our longtime Chief Financial Officer, has accepted the role of Chief Operating Officer and will be succeeded in her CFO role by Jaehyun Park. These transitions have begun and will continue throughout much of the first half of Fiscal 2025, and may take longer. While our Board of Directors has carefully considered and begun to implement these plans, there can be no assurance that these changes will not prove disruptive to our operations, our employees or our customers, or that they ultimately will be successful in promoting our strategic goals and assuring a smooth leadership transition. Unexpected failures or shortcomings as these changes occur may have a material adverse effect upon our business, financial condition and results of operations.
Current report
The operation of our business requires us to manage credit risk. As a lender, we are exposed to the risk that our borrowers will be unable to repay their loans according to their terms, and that the collateral securing repayment of their loans, if any, may not be sufficient to ensure repayment. In addition, there are risks inherent in making any loan, including risks with respect to the period of time over which the loan may be repaid, risks relating to proper loan underwriting, risks resulting from changes in economic and industry conditions and risks inherent in dealing with individual borrowers. To manage credit risk successfully, we must, among other things, maintain disciplined and prudent underwriting standards and ensure that our bankers follow those standards. The weakening of these standards for any reason, such as an attempt to attract higher yielding loans, a lack of discipline or diligence by our employees in underwriting and monitoring loans, the inability of our employees to adequately adapt policies and procedures to changes in economic or any other conditions affecting borrowers and the quality of our loan portfolio, may result in loan defaults, foreclosures and additional charge-offs and may necessitate that we significantly increase our allowance for credit losses, each of which could adversely affect our net income. As a result, our inability to successfully manage credit risk could have a material adverse effect on our business, financial condition and results of operations.
Current report
As of March 31, 2025, our nonperforming loans (which consist of nonaccrual loans, loans past due 90 days or more and still accruing interest and loans modified under troubled debt restructurings) totaled$10.4 million, or 0.51% of our gross loans, and 0.41% of total assets. Our other real estate owned (“OREO”) totaled$1.2 million as of March 31, 2025.
Current report
Our nonperforming assets adversely affect our net income in various ways. We do not record interest income on nonaccrual loans or other real estate owned, thereby adversely affecting our net interest income, net income and returns on assets and equity, and our loan administration costs increase, which together with reduced interest income adversely affects our efficiency ratio. When we take collateral in foreclosure and similar proceedings, we are required to mark the collateral to its then-fair market value, which may result in a loss, and we may be exposed to environmental risks associated with the ownership of OREO properties. These nonperforming loans and other real estate owned also increase our risk profile and the level of capital our regulators believe is appropriate for us to maintain in light of such risks. The resolution of nonperforming assets requires significant time commitments from management and can be detrimental to the performance of their other responsibilities. If we experience increases in nonperforming loans and nonperforming assets, our net interest income may be negatively impacted and our loan administration costs could increase, each of which would have an adverse effect on our net income and related ratios, such as return on assets and equity.
Current report
Our allowance for credit losses on loans may prove to be insufficient to absorb potential losses in our loan portfolio.
Current report
We maintain an allowance for credit losses on loans to provide for loan defaults and non-performance, which reflects our estimate of the current expected credit losses in our loan portfolio at the relevant balance sheet date. Our allowance for credit losses was $25.4 million, or 1.24% expressed as a percentage of loans, as of March 31, 2025. Allowance for credit losses on loans is funded from a provision for credit losses on loans, which is a charge to our income statement. The Company had a provision for credit losses on loans of $736 thousand for the three months ended March 31, 2025. The processes we use to estimate the allowance for credit losses on loans and to measure the fair value of financial instruments, as well as the processes used to estimate the effects of changing interest rates and other market measures on our financial condition and results of operations, depends upon the use of analytical models which takes into account known risks, composition and growth of the loan portfolio and economic forecasts. These models may not be accurate, particularly in times of market stress, unforeseen circumstances or due to flaws in the model’s design or implementation. If the models we use for interest rate risk and asset-liability management are inadequate, we may incur increased or unexpected losses upon changes in market interest rates or other market measures. If the models we use for determining the allowance for credit losses on loans are inadequate, the allowance for credit losses on loans may not be sufficient to support future charge-offs. If the models we use to measure the fair value of financial instruments are inadequate, the fair value of such financial instruments may fluctuate unexpectedly or may not accurately reflect what we could realize upon sale or settlement of such financial instruments. Any such failure in our analytical models could result in losses that could have a material adverse effect on our business, financial condition and results of operations.
Current report
In addition, we evaluate all loans identified as individually evaluated loans and allocate an allowance based upon our estimation of the potential loss associated with those problem loans. While we strive to carefully manage and monitor credit quality and to identify loans that may be deteriorating, at any time there are loans included in the portfolio that may result in losses, but that have not yet been identified as nonperforming or potential problem loans. Through established credit practices, we attempt to identify deteriorating loans and adjust the allowance for credit losses on loans accordingly. However, because future events are uncertain and because we may not successfully identify all deteriorating loans in a timely manner, there may be loans that deteriorate in an accelerated time frame. We cannot be sure that we will be able to identify deteriorating loans before they become nonperforming assets, or that we will be able to limit losses on those loans that have been so identified.
Current report
Although management believes that the allowance for credit losses on loans is adequate to absorb losses on any existing loans that may become uncollectible, we may be required to take additional provisions for credit losses on loans in the future to further supplement the allowance for credit losses on loans, either due to management’s decision to do so or because our banking regulators require us to do so. Our bank regulatory agencies will periodically review our allowance for credit losses on loans and the value attributed to nonaccrual loans or to real estate acquired through foreclosure and may require us to adjust our determination of the value for these items. If our allowance for credit losses on loans is inaccurate, for any of the reasons discussed above (or other reasons), and is inadequate to cover the loan losses that we actually experience, the resulting losses could have a material adverse effect on our business, financial condition and results of operations.
Current report
We may not be able to continue growing our business, particularly if we cannot increase loans and deposits through organic growth.
Current report
We grew our consolidated assets to$2.5 billion as of March 31, 2025 from$2.4 billion as of December 31, 2024. Our deposits have grown to$2.2 billion as of March 31, 2025 from$2.0 billion as of December 31, 2024. Our ability to continue to grow successfully will depend to a significant extent on our capital resources. It also will depend, in part, upon our ability to attract deposits and grow our loan portfolio and investment opportunities and on whether we can continue to fund growth while maintaining cost controls and asset quality, as well on other factors beyond our control, such as national, regional and local economic conditions and interest rate trends. Further, we have expanded by establishing de novo branches in the Bay Area of California and in the Atlanta, Georgia, Las Vegas, Nevada, and Washington, DC, metropolitan area, and loan production offices in some of these locations as well as in the Dallas, Texas area. These efforts may prove less successful or more expensive than we have estimated, and in certain cases could materially and adversely affect our results of operation or our financial condition.
Current report
Our ability to expand our business or make strategic acquisitions outside of California may be limited by our license agreement that restricts our ability to use the name “Open Bank.”
Current report
The intellectual property rights to the use of our name “Open Bank” will continue to be one of the components of our strategy to build a relationship community bank focused on the Korean-American population base. We have not registered the trademark “Open Bank” under the trademark laws of the United States. Open Bank, S.A., a corporation organized and existing under the laws of Spain with its principal office located in Ciudad Grupo Santander, Av. Catabria Boadilla del Monte Madrid Spain (“Open Bank S.A.”) originally registered the trademark “Open Bank” (U.S. Registration No. 3397518) in 2008 with the United States Patent and Trademark Office. Open Bank S.A. provides financial services in Spain and solicits financial services in the United States through the internet. Open Bank S.A. is not licensed to engage in banking services in the United States or California and to our knowledge in any other state in the United States. In February 2014, we entered into a Coexistence Agreement with Open Bank S.A. (the “Coexistence Agreement”), under which both parties agreed that we may use the name “Open Bank” in connection with banking and banking related services in the state of California and the cities of New York, Dallas, Atlanta, Chicago, Seattle and Fort Lee, New Jersey (the “Permitted Markets”).
Current report
We agreed to limit all of the Bank’s marketing, advertising, publicity, soliciting and or media efforts using the “Open Bank” name to primarily the Korean-American community in the Permitted Markets, however, we have the right under the Coexistence Agreement to market through the internet. The Coexistence Agreement states that these limitations are not intended to mean that we should in any way engage in discriminatory tactics or policy or in any way discriminate against non-Korean-American customers or potential customers. Under the Coexistence Agreement, Open Bank S.A. retains the right to use and market its services in relation to its registered trademark in any state or territory in the United States. The Bank further agreed not to challenge Open Bank, S.A.’s trademark registration or any future applications by Open Bank S.A. The Coexistence Agreement has no termination date and is perpetual. If Open Bank S.A. decides to become a licensed bank in California or in any of the other Permitted Markets, depending on its business and marketing plan, there could be confusion created by the use of the name “Open Bank” which could have a material adverse impact on our ability to build our brand in the Permitted Markets. In addition, if Open Bank, S.A. were to assert that we breached the Coexistence Agreement, Open Bank, S.A. could file for an injunction, seek to have us change our name or seek monetary damages, all of which could have a material adverse impact on our financial condition and results of operations. There are no approval rights of either party for any of the actions or omissions that either party may take under the Coexistence Agreement.
Current report
To date we have not received notice that we are in breach of the Coexistence Agreement or that our business cannot be operated as currently conducted and as proposed to be conducted. Additionally, to our knowledge, Open Bank S.A. had not undertaken any actions to engage in any business or marketing activities in the United States other than have a presence on the internet through their website. However, the Coexistence Agreement restricts our potential geographic expansion beyond the Permitted Markets, which could affect our overall growth over the long term.
Showing the first 40 of 79 passages. Open the source sections for the rest.
Removed paragraphs (5)
Previous report
Readers should consider the matters discussed in the section captioned “Part II, Item 1A. Risk Factors,” set forth in our Annual Report on Form 10-K for the fiscal year ended December 31, 2023 (“Annual Report”), for a list of known risks and uncertainties that could affect our business, results of operations, financial condition and cash flows, and could cause our actual results to vary materially from those expressed in this Report and our other public filings. Except as expressly set forth below, there have been no material changes from the risk factors described in the Company's Annual Report. Other factors besides those described in our Annual Report or discussed elsewhere in our other reports filed with or furnished to the SEC could affect our business or results. Readers should not consider any description of such factors to be a complete set of all potential risks that the Company faces.
Previous report
Our cybersecurity investments may create unforeseen implementation challenges that confer unexpected disruptions, unbudgeted costs, or delays in adaptation to crucial threats.
Previous report
Enhancements and upgrades to our infrastructure or computer systems may be time-consuming, may entail significant costs, and may themselves create risks associated with implementing new systems and integrating them with existing ones. Due to the complexity and interconnectedness of our systems, the process of enhancing our infrastructure and operating systems, including their security measures and controls, also can create an inherent risk of system disruptions and security issues. Similarly, we may not be able to timely recover critical business processes or operations that have been disrupted, which may further increase any associated costs and consequences of such disruptions. Although we have enterprise incident response processes, business continuity plans and other safeguards in place to help provide operational resiliency, our business operations may be adversely affected by significant and widespread disruption to our physical infrastructure or computer systems that support our businesses and customers.
Previous report
Cybersecurity incidents, failures or lapses could give rise to regulatory harms to the Company or the Bank.
Previous report
As cybersecurity threats become increasingly widespread and sophisticated, federal and state banking and privacy regulations are becoming correspondingly complex and prevalent, and the penalties for the actual or suspected violations of such rules are becoming increasingly substantial. Accordingly, we must meet stringent and increasingly costly regulatory requirements regarding our own obligations, as well as our reliance on third-party service providers, and any failure by us or our third-party service providers to comply with applicable laws, rules, regulations, or internal policies could result in the Company or the Bank becoming subject to fines, penalties, or business restrictions, as well as to increased costs to remediate any actual or perceived deficiencies and potentially to legal and other costs associated with defending against such regulatory sanctions.
Reworded paragraphs (1)
Previous wording
As a smaller bank holding company and a small community bank, we lack the resources available to larger institutions to recruit, train and retain a large staff focused on data security. Instead, like most community banks, we rely heavily on third-party vendors and other service providers for these functions. As financial institutions and technology systems become more interconnected and more complex, any operational incident at a third party, such as a vendor or customer, may increase our operational risks, including from information breaches or loss, breakdowns, disruptions or failures of their own systems or infrastructure, or any deficiencies in the performance of their responsibilities. These risks are increased to the extent we rely on a single-source vendor or provider. If a third-party vendor or service provider is not fully effective in assisting us in protecting our data and systems, we may be held responsible for any resulting failures, and even a failure by a third party could damage or jeopardize our relationships with our customers. Further, a recent and well-publicized cybersecurity incident involving the failure of one of the world’s most sophisticated security platforms resulted in extensive outages of that provider’s customer systems, the effect of which was a cascading failure of several of that firm’s clients’ networks. Such interruptions, occurring as a result of the acts or omissions of one or more of our vendors, could result in liability to our customers, as well as reputational harm and a potential interruption of our business.
Current wording
As a smaller bank holding company and a small community bank, we lack many of the resources available to larger institutions to recruit, train and retain a large staff focused on data security. Instead, like most community banks, we rely heavily on third-party vendors and other service providers for these functions. As financial institutions and technology systems become more interconnected and more complex, any operational incident at a third party, such as a vendor or customer, may increase our operational risks, including from information breaches or loss, breakdowns, disruptions or failures of their own systems or infrastructure, or any deficiencies in the performance of their responsibilities. These risks are increased to the extent we rely on a single-source vendor or provider. If a third-party vendor or service provider is not fully effective in assisting us in protecting our data and systems, we may be held responsible for any resulting failures, and even a failure by a third party could damage or jeopardize our relationships with our customers. Further, a recent and well-publicized cybersecurity incident involving the failure of one of the world’s most sophisticated security platforms resulted in extensive outages of that provider’s customer systems, the effect of which was a cascading failure of several of that firm’s clients’ networks. Such interruptions, occurring as a result of the acts or omissions of one or more of our vendors, could result in liability to our customers, as well as reputational harm and a potential interruption of our business.
Rearranged current paragraphs (7)
Current report — wording carried from elsewhere
Interruptions, cyberattacks, fraudulent activity or other security breaches may have a material adverse effect on our business.
Current report — wording carried from elsewhere
Our business is highly dependent on the collection, storage, transmittal, sharing, processing and retention of information about our customers and employees. To accomplish these activities, we rely heavily upon electronic infrastructure that we own or that we obtain via license or other contractual arrangements with third parties. These technologies affect, among other things, our customers’ ability to access and transfer funds, initiate and pay loans and leases, communicate with our customer service teams, and engage in a variety of other activities that form the foundation of modern financial services businesses. Likewise, our employee data and related technologies allow us to communicate with our employees about routine and extraordinary matters, compensate our staff, maintain timekeeping, payroll and benefits records, and comply with an increasingly complex web of labor and employment laws and regulations. The loss, interruption or disruption of these systems may damage our relationships with customers and correspondingly may harm our reputation. Compromises or interruptions in our employment-related systems may cause challenges in our relationships with our employees, upon whom we are heavily dependent in the conduct of our business and the development and maintenance of our relationships with customers and prospective customers.
Current report — wording carried from elsewhere
There have been a number of recent and well-publicized incidents involving various types of cybersecurity lapses, some of which have had substantial adverse impacts upon targeted businesses and on customers of even some of the world’s most prominent cybersecurity and financial services firms. Similarly, extremely sophisticated criminal and nation-state organizations routinely target and exploit information technology networks, data systems, and other critical infrastructure. One of the most prominent recent events resulted in a widespread failure of a large cybersecurity platform, some of the consequences of which are not yet, and may not soon be, fully known or estimable.
Current report — wording carried from elsewhere
We devote significant resources and management focus to ensuring the integrity of our systems against cybercriminals and similar actors, as well as against threats from fires and other natural disasters; power or telecommunications failures; acts of terrorism or wars or other catastrophic events; breaches, physical break-ins or errors resulting in interruptions and unauthorized disclosure of confidential information, through information security and business continuity programs. Likewise, we have made, and we continue to make, substantial investments in systems that are intended to protect against these vulnerabilities, including real-time threat detection and warning, security programs and protocols, backup and alternative-access systems, virus and malware protection programs, and a wide variety of other protective measures.
Current report — wording carried from elsewhere
Notwithstanding these investments, cybersecurity measures are, by their nature, largely reactive, and threats are constantly evolving. We expect that the development of AI-based technologies will accelerate both the number and the sophistication of these threats. We routinely experience attempts to exploit our networks and systems, and we must continue investing in increasingly advanced (and concomitantly expensive) technology to counteract these threats. Further, if our systems cannot timely detect and mitigate vulnerabilities, or cannot promptly respond to threats, we may experience damage to or interruptions in the availability of our computer networks, or we may experience a loss of data, unauthorized use or disclosure of customer information, or a loss of customer funds as a result of unauthorized access to customer accounts. Likewise, breaches of our payroll, benefits, and other employee-related systems may give rise to liability under employment laws and may damage our relationships with our employees.
Current report — wording carried from elsewhere
The access by unauthorized persons to, or the improper disclosure by us or our third-party vendors of, confidential information regarding our customers or our own proprietary information, software, methodologies and business secrets, failures or disruptions in our communications, information and technology systems, or our failure to adequately address them, could negatively affect our customer relationship management, online banking, accounting or other systems. We cannot assure readers that such breaches, failures or interruptions will not occur or, if they do occur, that they will be adequately addressed by us or the third parties on which we rely.
Current report — wording carried from elsewhere
Accordingly, any failures or interruptions of our communications, information and technology systems could damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny or expose us to civil litigation and possible financial liability, any of which could have a material adverse effect on our business, financial condition or results of operations.