Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

Risk Factors - FMCB

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A.
Risk Factors

An investment in our common stock is subject to risks inherent in our business. The material risks and uncertainties that management believes may affect our business are described below. Before making an investment decision, you should carefully consider the risks and uncertainties described below together with all of the other information included or incorporated by reference in this Form 10-K. The risks and uncertainties described below are not the only ones facing our business. Additional risks and uncertainties that management is not aware of or focused on or that management currently deems immaterial may also impair our business operations. If any of the following risks actually occur, our financial condition and results of operations could be materially and adversely affected. If this were to happen, the value of our common stock could decline significantly, and you could lose all or part of your investment.

Risks Relating to the Industry and Geographic Area in Which We Operate and the U.S. Economy
As a financial services company, our business and operations may be adversely affected by weak economic conditions. Our business operations, which primarily consist of lending money to clients in the form of loans, borrowing money from clients in the form of deposits and investing in securities, are sensitive to general business and economic conditions in the United States and California. The tightening of the Federal Reserve’s monetary policies, including repeated and aggressive increases in target range for the federal funds rate as well as the conclusion of the Federal Reserve’s tapering of asset purchases, together with ongoing economic and geopolitical instability, increases the risk of an economic recession. The prolonged inverted yield curve and the actions by the Treasury Department in recent years such as financing more of the U.S. debt with short-term instruments resulted in higher short-term borrowing costs. Despite rate cuts by the Federal Reserve between September and December 2024, the Federal Reserve has signaled caution in easing monetary policy citing strong economic performance, robust GDP growth, and persistent inflation as reasons to move slowly with any further rate cuts. If the U.S. economy weakens, our growth and profitability from our lending, deposit and investment operations could be constrained and our asset quality, deposit levels, loan demand and results of operations may be adversely affected. In addition, economic conditions in foreign countries could affect the stability of global financial markets, which could hinder U.S. economic growth. Our business is also significantly affected by monetary and related policies of the U.S. federal government and its agencies. Changes in any of these policies are influenced by macroeconomic conditions and other factors that are beyond our control. Adverse economic conditions and government policy responses to such conditions could have a material adverse effect on our financial condition and operations. Adverse economic conditions and government policy responses to such conditions could have a material adverse effect on our financial condition and operations. Our clients businesses are also impacted by the strong US dollar which impacts commodity prices and hurts U.S. exports.
A large portion of our loan portfolio is tied to the real estate market where we operate and we may be negatively impacted by downturns in that market. A significant percentage of our loans are real estate related, consisting of loans for construction and land development projects, and for the purchase, improvement or refinancing of residential and commercial real estate. A downturn in the real estate market could increase loan delinquencies, defaults and foreclosures, and significantly impair the value of our collateral and our ability to sell the collateral upon foreclosure. Real estate collateral provides an alternate source of repayment in the event of default by the client and may deteriorate in value during the time the credit is extended. If values decline, it is also more likely that we would be required to increase our allowance for credit losses. If during a period of reduced real estate values we are required to liquidate the property collateralizing a loan to satisfy the debt or to increase our allowance for credit losses, it could materially reduce our profitability and adversely affect our financial condition.
Although only 5.3% of our loan portfolio consisted of real estate construction, and acquisition and land development loans as of December 31, 2024, such loans generally have a higher degree of risk than long-term financing of existing properties because repayment depends on the completion of the project and usually on the sale or long term financing of the property. In addition, these loans are often “interest-only loans,” which normally require only the payment of interest accrued prior to maturity. In addition, these loans are often “interest-only loans,” which normally require only the payment of interest accrued prior to maturity. Interest-only loans carry greater risk than other loans because no principal is paid prior to maturity. This risk is particularly apparent during periods of rising interest rates and declining real estate values. If there is a significant decline in the real estate market due to a material increase in interest rates or for other reasons, many of these loans could default and result in foreclosure. If we are forced to foreclose on a project prior to completion, we may not be able to recover the entire unpaid portion of the loan or we may be required to fund additional money to complete the project or hold the property for an indeterminate period. In addition, real estate exposes us to incurring costs and liabilities for environmental contamination and remediation. Any of these outcomes may result in losses and reduce our earnings. Any of these outcomes may result in losses and reduce our earnings.
The FDIC has given guidance recommending that if the sum of (i) certain categories of CRE loans and (ii) acquisition, development and construction loans (“ADC loans”) exceeds 300% of total risk-based capital, or if ADC loans exceed 100% of total risk-based capital, heightened risk management practices should be employed to mitigate risk. As of December 31, 2024, our ratio of the sum of CRE and ADC loans to total risk-based capital was 172% and our ratio of ADC loans to total risk-based capital was 31.26%. Our concentration in ADC loans is cyclical and tends to increase in the second and third quarters of each year as demand for ADC loans increases. Our concentration in ADC loans is cyclical and tends to increase in the second and third quarters of each year as demand for ADC loans increases. An increase in ADC loan concentration could cause our ratio for ADC loans to increase and even exceed the FDIC’s guidance. An increase in ADC loan concentration could cause our ratio for ADC loans to increase and even exceed the FDIC’s guideline. We have exceeded these guidance ratios at times in the past and may do so in the future. We actively monitor and believe that we effectively manage our CRE and ADC loan concentrations. If we exceed the FDIC’s guidance and do not effectively manage the risk of our CRE and ADC loans, we may be subject to regulatory scrutiny, including a requirement to raise additional capital, reduce our loan concentrations, or undertake other remedial actions. If we exceed the FDIC’s guidelines and do not effectively manage the risk of our CRE and ADC loans, we may be subject to regulatory scrutiny, including a requirement to raise additional capital, reduce our loan concentrations, or undertake other remedial actions.
We could suffer material credit losses if the overall economy and/or a particular industry suffers an economic recession and we do not appropriately manage our credit risk. There are risks inherent in making any loan, including risks in dealing with individual clients, risks of non-payment, risks resulting from uncertainties as to the future value of collateral and risks resulting from changes in economic and industry conditions. Changes in the economy may cause the assumptions that we made at origination to change and may cause clients to be unable to make payments on their loans. Changes in the economy may cause the assumptions that we made at origination to change and may cause clients to be unable to make payments on their loans. There is no assurance that our credit risk monitoring and loan approval procedures are or will be adequate to address the inherent risks associated with lending. There is no assurance that our credit risk monitoring and loan approval procedures are or will be adequate to address the inherent risks associated with lending. Any failure to manage such risks may materially adversely affect our financial condition and results of operations.
The small to medium-sized businesses, including agricultural businesses, that we lend to may have fewer resources to weather adverse business and economic developments, which may impair their ability to repay a loan, and such impairment could adversely affect our operations and financial condition. Our business strategy targets primarily small to medium-sized businesses, which frequently have smaller market shares than their competition, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete, and may experience substantial volatility in operating results, any of which may impair a client’s ability to repay a loan. During recessions, demand for goods and services slows down which may negatively affect business sales, levels of profits, and asset values, particularly real estate which may decrease in value. The physical effects of climate change, as well as governmental and societal responses to climate change could materially adversely affect our operations, businesses and customers. During recent years, the strong U.S. dollar, high inflation rates and the inverted yield curve have had a negative impact on many of our borrowers, particularly in agri-business.
In February 2025, the new Trump Administration announced that it would be imposing increases in tariffs on goods imported to the U.S. from Canada, Mexico, and China and has also indicated that tariffs may be imposed at increased levels on imports to the U.S. from other countries. If other countries, in retaliation to the U.S.’s tariff measures, were to impose increased levels of tariffs on goods exported to such countries by companies in the U.S. such tariff increases may negatively impact companies in the U.S. whose business involves exports to other countries. This could be of particular concern to U.S. companies operating in the agricultural sector who export to other countries. The Company’s customers included a number of agricultural business, which could be negatively affected. Preliminary indications have been that the new Trump Administration tariff increases to Canada and Mexico may be delayed or decreased if such countries adopt various policies urged by the U.S., such as enhanced border security and control measures. The outcome of this process cannot be predicted with any certainty at this time.
The success of a small to medium-sized business often depends on the management skills, talents and efforts of one or a small number of people, and the death, disability or resignation of one or more of these people could have a material adverse impact on the business and its ability to repay its loan. If general economic conditions negatively affect California and small to medium-sized businesses are adversely affected or our clients are otherwise affected by adverse business conditions or developments, our business, financial condition and operations could be adversely affected.
Our profitability depends on interest rates generally, and we may be adversely affected by changes in market interest rates. Our profitability depends in substantial part on our net interest income. Our net interest income depends on many factors that are partly or completely outside of our control, including competition, monetary and fiscal policies, and economic conditions generally. Our net interest income will be adversely affected if market interest rates change so that the interest we pay on deposits and borrowings increases faster than the interest we earn on loans and investments. An inverted yield curve, such as the one that has existed in recent years, places further stress on interest rate risk management. In addition, an increase in interest rates could adversely affect clients’ ability to pay the principal or interest on existing loans or reduce their borrowings. In addition, an increase in interest rates could adversely affect clients’ ability to pay the principal or interest on existing loans or reduce their borrowings. This may lead to an increase in our non-performing assets, a decrease in loan originations, or a reduction in the value of and income from our loans, any of which could have a material and negative effect on our operations. This may lead to an increase in our non-performing assets, a decrease in loan originations, or a reduction in the value of and income from our loans, any of which could have a material and negative effect on our operations. Asset liability mismatches caused by normal fluctuations in market interest rates could also materially and adversely impact profitability. Fluctuations in market rates and other market disruptions are neither predictable nor controllable and may adversely affect our financial condition and earnings.
Since 2022, inflationary pressures have affected many aspects of the U.S. economy, including gasoline and fuel prices, and global and domestic supply-chain issues have also had a disruptive effect on many industries, including the agricultural industry. In January 2022, due to elevated levels of inflation and corresponding pressure to raise interest rates, the Federal Reserve announced after several periods of historically low federal funds rates and yields on Treasury notes that it would be slowing the pace of its bond purchasing and increasing the target range for the federal funds rate over time. The FOMC increased the target range 11 times or 525 basis points from March 2022 to July 2023. The target range remained unchanged through much of 2024 until the FOMC decreased the rate 100 basis points during the last four months of the year. As of December 31, 2024, the federal funds rate decreased to 4.50%. It remains uncertain whether the FOMC will further decrease the target range for the federal funds rate to attain a monetary policy sufficiently restrictive to return inflation to more normalized levels, begin to increase the federal funds rate or leave the rate at its current elevated level for a lengthy period of time. As noted previously, the new Trump Administration has taken steps to increase tariffs on goods imported to the U.S. from certain countries. Retaliation by such countries through the imposition of higher tariffs on exports from the U.S. appears to be a possibility. The imposition of increased tariffs on imports and exports is believed by some economists to entail the possibility of increased inflationary pressures on the U.S. economy. The impact of these developments on the business of our clients and on our business cannot be predicted with certainty but could present challenges in 2025 and beyond.
Beginning in 2021, the U.S. economy began to reflect relatively rapid rates of increase in the consumer price index, inflation rates, and other economic indices; a prolonged elevated rate of inflation could present risks for the U.S. banking industry and our business. During the latter part of 2021 and into 2023, the U.S. economy exhibited relatively rapid rates of increase in the consumer price index, inflation rate, and other economic indices. If the U.S. economy encounters a significant, prolonged rate of inflation, this could pose higher relative risks to the banking industry and our business. Such inflationary periods have historically corresponded with relatively weaker earnings and higher loan losses for banks. Such inflationary periods have historically corresponded with relatively weaker earnings and higher loan losses for banks.
In the past, inflationary environments have caused financing conditions to tighten and have increased borrowing costs for some marginal borrowers, which, in turn, has impacted bank credit quality and loan growth. Additionally, a sustained period of inflation could prompt broad-based selling of longer-duration, fixed-rate debt, which could have negative implications for equity and real estate markets. Additionally, a sustained period of inflation could prompt broad-based selling of longer-duration, fixed-rate debt, which could have negative implications for equity and real estate markets. Small businesses and leveraged loan borrowers can be challenged in a materially higher-rate environment. Higher interest rates can also present challenges for commercial real estate projects, pressuring valuations and loan-to-value ratios.
In addition, the conflict between Russia and Ukraine and global reactions thereto have increased U.S. domestic and global energy prices. Oil supply disruptions related to the Russia-Ukraine conflict, and sanctions and other measures taken by the U.S. or its allies, have led to higher costs for gas, food and goods in the U.S. and exacerbated the inflationary pressures on the economy, with potentially adverse impacts on our customers and on our business, results of operations and financial condition.
We face strong competition from banks, credit unions and other financial services providers that offer banking services, which may limit our ability to attract and retain banking clients. Competition in the banking industry generally, and in our geographic market specifically, is strong. Competitors include banks, as well as other financial services providers, such as savings and loan institutions, consumer finance companies, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. Our competitors include several larger national and regional financial institutions whose greater resources may afford them a marketplace advantage inasmuch as they may offer a wider array of banking services at better rates and be able to target a broader client base through more extensive promotional and advertising campaigns. Moreover, larger competitors may not be as vulnerable as we are to downturns in the local economy and real estate market since they have a broader geographic area and their loan portfolio is more diversified. While our deposit base has increased, several banks have grown their deposit market share in our markets faster than we have resulting in a declining relative deposit market share for us in our existing markets. We believe our declining relative market share in deposits has resulted primarily from aggressive marketing and advertising, in-migration of more competitors, expanded delivery channels and more attractive rates offered by larger bank competitors. We also compete against community banks, credit unions and non-bank financial services companies that have strong local ties. These smaller institutions are likely to cater to the same small to medium-sized businesses that we target. Additionally, non-traditional financial services firms, such as financial technology companies, are less regulated and continue to expand their offerings of services traditionally provided by financial institutions. If we are unable to attract and retain customers, we may be unable to continue to grow our loan and deposit portfolios and our operations and financial condition may otherwise be adversely affected. Ultimately, we may be unable to compete successfully against current and future competitors.
Our financial results may be impacted by the cyclicality and seasonality of our agricultural lending business. The Company has provided financing to agricultural customers in the mid Central Valley of California throughout its history. We recognize the cyclical nature of the industry, often caused by fluctuating commodity prices, changing climatic conditions and the availability of seasonal labor, and manage these risks accordingly. The Company remains committed to providing credit to agricultural customers and will always have a material exposure to this industry. Although the Company’s loan portfolio is believed to be well diversified, at various times during 2024 a significant portion of the Company’s loans (as much as 29.2%) were outstanding to agricultural borrowers. Commitments are well diversified across various commodities, including dairy, grapes, walnuts, almonds, cherries, apples, pears, and various row crops. Additionally, many individual borrowers are themselves diversified across commodity types, reducing their exposure, and therefore the Company’s, to cyclical downturns in any one commodity.
The Company’s service areas can also be significantly impacted by the seasonal operations of the agricultural industry. As a result, the Company’s financial results can be influenced by the banking needs of its agricultural customers. Generally speaking, during the spring and summer customers draw down their deposit balances and increase loan borrowings to fund the purchase of equipment and the planting of crops. Deposit balances are replenished and loans repaid in late fall and winter as crops are harvested and sold.

As previously noted, increased tariffs by foreign countries on goods exported to such countries from the U.S. could adversely impact agricultural producers in the U.S., including the Company’s customers in the agricultural sector.

The impact of climate change and governmental and societal responses to climate change, including on the availability of water and the transition to a low-carbon economy, could adversely affect our business and our clients’ businesses. Despite the fact that 2024 had above-average levels of precipitation in California, the State has experienced severe drought conditions at times over the past several years. These weather patterns reinforce the fact that the long-term risks associated with the availability of water are significant. The farming belt of the Central Valley is often cited as an example of an area that experienced extreme drought. However, not all areas of the state are impacted equally, and this is particularly true in the Central Valley, which stretches some 450 miles from Bakersfield in the south to Redding in the north. The vast majority of the Company’s agricultural customers are located in the mid Central Valley, an area that benefits from the drainage of the Sacramento, American, Mokelumne and Stanislaus rivers.

In addition to the impact that climate has on the availability of water, State and Federal regulators ultimately manage this resource, which may also impact the access of our customers’ water. For example, in 2014, the State of California passed the Sustainable Groundwater Management Act. All Water Districts must develop plans to comply with the Act, including groundwater recharge programs. Although the exact impact of compliance is not currently known, and even prior to 2014 most of the water districts in the Bank’s service area had been developing and implementing management plans, it is possible that some water districts will have to ultimately fallow some ground to achieve compliance with the Act.

In recent years, the federal banking agencies have increased their focus on climate-related risks impacting the operations of banks, the communities they serve and the broader financial system. Accordingly, the agencies have begun to enhance their supervisory expectations regarding the climate risk management practices of larger banking organizations, including by encouraging such banks to: ensure that management of climate-related risk exposures has been incorporated into existing governance structures; evaluate the potential impact of climate-related risks on the bank’s financial condition, operations and business objectives as part of its strategic planning process; account for the effects of climate change in stress testing scenarios and systemic risk assessments; revise expectations for credit portfolio concentrations based on climate-related factors; consider investments in climate-related initiatives and lending to communities disproportionately impacted by the effects of climate change; evaluate the impact of climate change on the bank’s borrowers and consider possible changes to underwriting criteria to account for climate-related risks to mortgaged properties; incorporate climate-related financial risk into the bank’s internal reporting, monitoring and escalation processes; and prepare for the transition risks to the bank associated with the adjustment to a low-carbon economy and related changes in laws, regulations, governmental policies, technology, and consumer behavior and expectations.

On October 21, 2021, the Financial Stability Oversight Council published a report identifying climate-related financial risks as an “emerging threat” to financial stability. On October 24, 2023, the FDIC, the OCC and the Federal Reserve jointly finalized principles for climate-related financial risk management for national banks with more than $100 billion in total assets. Although these risk management principles do not apply to the Bank directly based upon our current size, the FDIC has indicated that all banks, regardless of their size, may have material exposures to climate-related financial and other risks that require prudent management. As climate-related supervisory guidance is formalized, and relevant risk areas and corresponding control expectations are further refined, we may be required to expend significant capital and incur compliance, operating, maintenance and remediation costs in order to conform to such requirements.

Climate-related physical changes and hazards, such as wildfires, could also pose credit risks for us. For example, our borrowers may have collateral properties or operations located in areas at risk of wildfires or subject to the risk of drought in California. The properties pledged as collateral on our loan portfolio could also be damaged by wildfires, earthquakes or other natural disasters, and thereby the recoverability of loans could be impaired. A number of factors can affect credit losses, including the extent of damage to the collateral, the extent of damage not covered by insurance, the extent to which unemployment and other economic conditions caused by the natural disaster adversely affect the ability of borrowers to repay their loans, and the cost of collection and foreclosure to us. Additionally, there could be increased insurance premiums and deductibles, or a decrease in the availability of coverage, due to severe losses resulting from wildfires or other climate-related physical hazards. The ultimate outcome on our business of a natural disaster, whether or not caused by climate change, is difficult to predict but could have a material adverse effect on financial condition, results of operations or profitability.

Additional legislation and regulatory requirements and changes in consumer preferences, including those associated with the transition to a low-carbon economy, could increase expenses of, or otherwise adversely impact, the Company, its businesses or its customers. We and our customers may face cost increases, asset value reductions, operating process changes, reduced availability of insurance, and the like, as a result of governmental actions or societal responses to climate change. New and/or more stringent regulatory requirements relating to climate change or environmental sustainability could materially affect the Company’s results of operations by increasing our compliance costs. Regulatory changes or market shifts to low-carbon products could also impact the creditworthiness of some of our customers or reduce the value of assets securing loans, which may require the Company to adjust our lending portfolios and business strategies.

Risks Related to Our Growth

If we are not able to manage our growth effectively, our future prospects and competitive position could be diminished and our profitability could be reduced. We may also incur higher than anticipated costs, and our ability to execute our growth strategy could be impaired. It is our objective to continue to grow our assets and deposits by increasing our product and service offerings and expanding our operations organically. Our ability to manage growth successfully will depend on our ability to (i) identify suitable markets for expansion; (ii) attract and retain qualified management; (iii) attract funding to support additional growth; (iv) maintain asset quality and cost controls; (v) maintain adequate regulatory capital and profitability to support our lending activities; and (vi) may include finding attractive acquisition targets and successfully acquire and integrate the acquisitions in an efficient manner. Our ability to manage growth successfully will depend on our ability to (i) identify suitable markets for expansion; (ii) attract and retain qualified management; (iii) attract funding to support additional growth; (iv) maintain asset quality and cost controls; (v) maintain adequate regulatory capital and profitability to support our lending activities; and (vi) may include finding attractive acquisition targets and successfully acquire and integrate the acquisitions in an efficient manner. If we do not manage our growth effectively, we may be unable to realize the benefit from our investments in technology, infrastructure, and personnel that we have made to support our expansion. If we do not manage our growth effectively, we may be unable to realize the benefit from our investments in technology, infrastructure, and personnel that we have made to support our expansion. In addition, we may incur higher costs and realize less revenue growth, which would reduce our earnings and diminish our future prospects. In addition, we may incur higher costs and realize less revenue growth, which would reduce our earnings and diminish our future prospects. Failing to maintain effective financial and operational controls as we grow, such as appropriate loan underwriting procedures, adequate allowances for credit losses and compliance with regulatory requirements, could have a negative effect on our financial condition and operations, such as increased credit losses, reduced earnings and potential regulatory restrictions on growth. Failing to maintain effective financial and operational controls, as we grow, such as appropriate loan underwriting procedures, adequate allowances for credit losses and compliance with regulatory requirements could have a negative effect on our financial condition and operations, such as increased credit losses, reduced earnings and potential regulatory restrictions on growth.

Entering new market areas, new lines of business, or new products and services may subject us to additional risks. A failure to successfully manage these risks may have a material adverse effect on our business. As part of our growth strategy, we have implemented and may continue to enter new market areas and new lines of business. We have expanded into the East Bay area of San Francisco and Napa, which are relatively new market areas for us. We introduced commercial equipment leasing as a new product line a few years ago. There are risks and uncertainties associated with these efforts, particularly in instances where such product lines are not fully mature. In developing and marketing new lines of business and/or new products and services and/or shifting the focus of our asset mix and/or expanding into new markets, we may invest significant time and resources. Initial timetables may not be achieved and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives in these markets and shifting market preferences, may also affect or limit their successful implementation. Failure to successfully manage these risks could have an adverse effect on our business, financial condition and results of operations.

Risks Related to Our Personnel
We may have difficulty attracting additional necessary personnel, which may divert resources and limit our ability to successfully expand our operations. Our business plan includes, and is dependent upon, our hiring and retaining highly qualified and motivated associates at every level. We have experienced, and expect to continue to experience, substantial competition in identifying, hiring and retaining top-quality associates due to low unemployment rate and new financial institutions entering our markets. If we are unable to hire and retain qualified personnel, we may be unable to successfully execute our business strategy and manage our growth.

The unexpected loss of key officers would materially and adversely affect our ability to execute our business strategy, and diminish our future prospects. Our success to date and our prospects for success in the future depend substantially on our senior management team. The loss of key members of our senior management team could materially and adversely affect our ability to successfully implement our business plan and, as a result, our future prospects. The loss of senior management without qualified successors who can execute our strategy would also have an adverse impact on us.

As a community bank, our ability to maintain our positive reputation is critical to the success of our business. The failure to maintain that reputation may materially and adversely affect our financial performance. Our reputation is one of the most valuable components of our business. As such, we strive to conduct our business in a manner that enhances our reputation. This is done, in part, by recruiting, hiring and retaining employees who share our core values of being an integral part of the communities we serve, delivering superior service to our clients. If our reputation is negatively affected by the actions of our employees or otherwise, our business and, therefore, our operating results may be materially and adversely affected.

Risks Related to Our Financial Practices

Our allowance for credit losses may not be adequate to cover actual losses. A significant source of risk arises from the possibility that we could sustain losses due to adverse economic conditions which, among other factors, could cause loan defaults and non-performance on loans. We maintain an allowance for credit losses in accordance with U.S. generally accepted accounting principles to provide for such defaults and other non-performance. The determination of the appropriate level of this allowance is an inherently difficult process and is based on numerous assumptions. The determination of the appropriate level of this allowance is an inherently difficult process and is based on numerous assumptions. The amount of future losses is susceptible to changes in economic, operating and other conditions, including changes in interest rates, which may be beyond our control. In addition, our underwriting policies, adherence to credit monitoring processes, and risk management systems and controls may not prevent unexpected losses. Our allowance for credit losses may not be adequate to cover actual credit losses. Our allowance for credit losses may not be adequate to cover actual credit losses. Moreover, any increase in our allowance for credit losses will adversely affect our earnings.

Our financial and accounting estimates and risk management framework rely on analytical forecasting and models, and our risk exposures and losses could be significantly greater than our models indicated. The processes we use to estimate our inherent credit losses and to measure the fair value of financial instruments, as well as the processes used to estimate the effects of changing interest rates and other market measures on our financial condition and operations, depend upon the use of analytical and forecasting models. Some of our tools and metrics for managing risk are based upon our use of observed historical market behavior. We rely on quantitative models to measure risks and to estimate certain financial values. Models may be used in such processes as determining the pricing of various products, grading loans and extending credit, measuring interest rate and other market risks, predicting losses, assessing capital adequacy and calculating regulatory capital levels, as well as estimating the value of financial instruments and balance sheet items. Models may be used in such processes as determining the pricing of various products, grading loans and extending credit, measuring interest rate and other market risks, predicting losses, assessing capital adequacy and calculating regulatory capital levels, as well as estimating the value of financial instruments and balance sheet items.

Poorly designed or implemented models present the risk that our business decisions based on information incorporating such models will be adversely affected due to the inadequacy of that information. Moreover, our models may fail to predict future risk exposures if the information used in the model is incorrect, obsolete or not sufficiently comparable to actual events as they occur.

We seek to incorporate appropriate historical data in our models, but the range of market values and behaviors reflected in any period of historical data is not at all times predictive of future developments in any particular period and the period of data we incorporate into our models may prove to be inappropriate for the period being modeled. In such case, our ability to manage risk would be limited and our risk exposure and losses could be significantly greater than our models indicated. This could harm our reputation as well as our revenues and profits. Finally, information we provide to our regulators based on poorly designed or implemented models could also be inaccurate or misleading. Some of the decisions that our regulators make, including those related to capital distributions to our shareholders, could be affected adversely due to their perception that the quality of the models used to generate the relevant information is insufficient. Some of the decisions that our regulators make, including those related to capital distributions to our stockholders, could be affected adversely due to their perception that the quality of the models used to generate the relevant information is insufficient.

Impairment of investment securities could require charges to earnings, which would negatively affect our operations. We maintain a significant amount of our assets in investment securities, and must periodically evaluate investment securities for current expected credit losses as required by ASC 326. We evaluate our investment securities portfolio for impairment as of each reporting date. At December 31, 2024, we had no investment securities that were impaired. At December 31, 2022, we had no investment securities that were impaired.

Changes in accounting standards could materially affect our financial statements. The Company’s consolidated financial statements are presented in accordance with accounting principles generally accepted in the United States of America, called GAAP. The financial information contained within our consolidated financial statements is, to a significant extent, financial information that is based on approximate measures of the financial effects of transactions and events that have already occurred. A variety of factors could affect the ultimate value that is obtained either when earning income, recognizing an expense, recovering an asset or relieving a liability. Other estimates that we use are fair value of our securities and expected useful lives of our depreciable assets. From time to time, the FASB and the SEC change the financial accounting and reporting standards that govern the preparation of our financial statements or new interpretations of existing standards emerge. These changes can be difficult to predict and operationally complex to implement and can materially affect how we record and report our financial condition and results of operations. In some cases, we could be required to apply a new or revised standard retrospectively, resulting in our restating prior period financial statements.

Risks Related to Our Access to Capital

We may be unable to, or choose not to, pay dividends on our common shares. We have consistently declared an annual cash dividend for 89 years. Our ability to continue to pay dividends depends on various factors. The Company is a legal entity separate and distinct from the Bank, and does not conduct stand-alone operations, which means that the Bank must first pay dividend(s) to the Company. FMCB is a legal entity separate and distinct from the Bank, and does not conduct stand-alone operations, which means that the Bank must first pay dividend(s) to the Company. The FDIC, the DFPI and California corporate and banking laws may, under certain circumstances, prohibit the Bank’s payment of dividends to the Company. Federal Reserve policy requires bank holding companies to pay cash dividends on common shares only out of net income available over the past year and only if prospective earnings retention is consistent with the organization’s expected future needs and financial condition. FRB policy requires bank holding companies to pay cash dividends on common shares only out of net income available over the past year and only if prospective earnings retention is consistent with the organization’s expected future needs and financial condition. The Company’s Board of Directors may determine that, even though funds are available for dividend payments, retaining the funds for other internal uses, such as expansion of our operations, is necessary or appropriate in light of our business plan and objectives. FMCB’s Board of Directors may determine that, even though funds are available for dividend payments, retaining the funds for other internal uses, such as expansion of our operations, is necessary or appropriate in light of our business plan and objectives. A failure to pay dividends may negatively affect your investment. A failure to pay dividends may negatively affect your investment.

The price of our common shares may fluctuate significantly particularly given the illiquid nature of our common stock and our stock may have low trading volumes, which may make it difficult for a shareholder to resell common shares owned at times or prices they find attractive. The stock market and, in particular, the market for financial institution stocks, has experienced significant volatility. The markets may produce downward pressure on stock prices for certain issuers without regard to those issuers’ underlying financial strength. The markets may produce downward pressure on stock prices for certain issuers without regard to those issuers’ underlying financial strength. As a result, the trading volume in our common shares may fluctuate and cause significant price variations to occur. As a result, the trading volume in our common shares may fluctuate and cause significant price variations to occur.

The low trading volume in our common shares on the OTCQX, under the symbol “FMCB,” means that our shares may have less liquidity than other companies, whose shares are more broadly traded. We cannot ensure that the volume of trading in our common shares or the price of our common shares will be maintained or will increase in the future. Our stock price can fluctuate significantly in response to a variety of factors discussed in this section, including, among other things: actual or anticipated variations in quarterly results of operations; operating and stock price performance of other companies that investors deem comparable to our Company; news reports relating to trends, concerns and other issues in the financial services industry; available investment liquidity in our market area since our stock is not listed on any exchange; and perceptions in the marketplace regarding our Company and/or its competitors.

If we need additional capital in the future to continue our growth, we may not be able to obtain it on terms that are favorable. We may need to raise additional capital in the future to support our continued growth and to maintain our capital levels. Our ability to raise capital through the sale of additional securities will depend primarily upon our financial condition and the condition of financial markets at that time. Accordingly, we may not be able to obtain additional capital in the amounts or on terms satisfactory to us. Our growth may be constrained if we are unable to generate or raise additional capital as needed.

Our funding sources may prove insufficient to provide liquidity, replace deposits and support our future growth. We rely on customer deposits, advances from the Federal Home Loan Bank of San Francisco (“FHLB”), lines of credit at other financial institutions and the Federal Reserve Bank (“FRB”) to fund our operations. Although we have historically been able to replace maturing deposits and advances if desired, we may not be able to replace such funds in the future if our financial condition, the financial condition of the FHLB or market conditions were to change. Our financial flexibility will be severely constrained if we are unable to maintain our access to funding or if adequate financing is not available to accommodate future growth at acceptable interest rates. Finally, if we are required to rely more heavily on more expensive funding sources to support future growth, our revenues may not increase proportionately to cover our costs. In this case, our profitability would be adversely affected. FHLB borrowings and other current sources of liquidity may not be available or, if available, may not be sufficient to provide adequate funding for operations. Furthermore, our own actions could result in a loss of adequate funding. For example, our borrowing capacity at the FHLB could be reduced if we are deemed to have poor documentation or processes. Accordingly, we may be required to seek additional higher-cost debt in the future to achieve our long-term business objectives. Accordingly, we may be required to seek additional higher-cost debt in the future to achieve our long-term business objectives. Additional borrowings, if sought, may not be available to us or, if available, may not be available on favorable terms. If additional financing sources are unavailable or are not available on reasonable terms, our growth and future prospects could be adversely affected. If additional financing sources are unavailable or are not available on reasonable terms, our growth and future prospects could be adversely affected.

We may be adversely affected by the lack of soundness of other financial institutions or financial market utilities. Financial institutions are interrelated because of trading, clearing, counterparty or other relationships. Our ability to engage in routine funding and other transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Our ability to engage in routine funding and other transactions could be adversely affected by the actions and commercial soundness of other financial institutions.

The rapid contraction of the M1 and M2 money supply in 2022 and the first quarter of 2023 materially impacted liquidity levels at many financial institutions. The high-profile bank failures of Silicon Valley Bank, Signature Bank and First Republic Bank in 2023, and related negative media attention, also generated significant market trading volatility among publicly-traded bank holding companies and, in particular, regional and community banks. These developments negatively impacted customer confidence in the safety and soundness of regional and community banks.

These events may also result in potentially adverse changes to laws or regulations governing banks and bank holding companies, enhanced regulatory supervision and examination policies and priorities, and/or the imposition of restrictions through regulatory supervisory or enforcement activities, including higher capital requirements and/or an increase in the Bank’s deposit insurance assessments. Although these legislative and regulatory actions cannot be predicted with certainty, any of these potential legislative or regulatory actions could, among other things, subject us to additional costs, limit the types of financial services and products we may offer, and reduce our profitability, any of which could materially and adversely affect our business, results of operations or financial condition. A failure to attract and retain high performing employees, heightened competition from other financial services providers, and an inability to attract additional core deposits and lending clients, among other factors, could limit our ability to grow as rapidly as we have in the past and as such could have a negative effect on our financial condition and operations. Defaults by, or even rumors or questions about, one or more financial institutions or financial market utilities, or the financial services industry generally, may lead to market-wide liquidity problems and losses of client, creditor and counterparty confidence and could lead to losses or defaults by us or by other financial institutions. Defaults by, or even rumors or questions about, one or more financial institutions or financial market utilities, or the financial services industry generally, may lead to market-wide liquidity problems and losses of client, creditor and counterparty confidence and could lead to losses or defaults by us or by other financial institutions.

Risks Related to Cybersecurity and Information Technology

Cyber-attacks or other security breaches could have a material adverse effect on our business. In the normal course of business, we collect, process, and retain sensitive and confidential information regarding our clients. We also have arrangements in place with other third parties through which we share and receive information about their clients who are or may become our clients. Although we devote significant resources and management focus to ensuring the integrity of our systems through information security and business continuity programs, our facilities and systems, and those of third-party service providers, are vulnerable to external or internal security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming or human errors or other similar events.

Information security risks for financial institutions have increased recently in part because of new technologies, the use of the Internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions, and the increased sophistication and activities of organized crime, perpetrators of fraud, hackers, terrorists, nation-state adversaries, and others. In addition to cyber-attacks or other security breaches involving the theft of sensitive and confidential information, hackers recently have engaged in attacks against large financial institutions, particularly denial of service and ransomware attacks that are designed to disrupt key business services, such as client-facing websites. In addition to cyber-attacks or other security breaches involving the theft of sensitive and confidential information, hackers recently have engaged in attacks against large financial institutions, particularly denial of service attacks that are designed to disrupt key business services, such as client-facing websites. We are not able to anticipate or implement effective preventive measures against all potential security breaches, because the techniques used change frequently and because attacks can originate from a wide variety of sources. We are not able to anticipate or implement effective preventive measures against all potential security breaches, because the techniques used change frequently and because attacks can originate from a wide variety of sources. We employ detection and response mechanisms designed to contain and mitigate security incidents, but early detection may be thwarted by sophisticated attacks and malware designed to avoid detection. We employ detection and response mechanisms designed to contain and mitigate security incidents, but early detection may be thwarted by sophisticated attacks and malware designed to avoid detection.

We also face risks related to cyber-attacks and other security breaches in connection with credit and debit card transactions that typically involve the transmission of sensitive information regarding our clients through various third parties, including merchant acquiring banks, payment processors, payment card networks and our core processors. Some of these parties have in the past been the target of security breaches and cyber-attacks, and because the transactions involve third parties and environments such as the point of sale that we do not control or secure, future security breaches or cyber-attacks affecting any of these third parties could impact us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them. We also rely on numerous other third-party service providers to conduct other aspects of our business operations and face similar risks relating to them. While we regularly conduct security assessments on these third parties, we cannot be sure that their information security protocols are sufficient at all times to withstand a cyber-attack or other security breach. The access by unauthorized persons to, or the improper disclosure by us of, confidential information regarding our clients or our own proprietary information, software, methodologies, and business secrets could result in significant legal and financial exposure, supervisory liability, damage to our reputation or a loss of confidence in the security of our systems, products and services, which could have a material adverse effect on our financial condition or operations. The access by unauthorized persons to, or the improper disclosure by us of, confidential information regarding our clients or our own proprietary information, software, methodologies, and business secrets could result in significant legal and financial exposure, supervisory liability, damage to our reputation or a loss of confidence in the security of our systems, products and services, which could have a material adverse effect on our financial condition or operations. In the past several years, there have been a number of well-publicized attacks or breaches affecting others in our industry that have heightened concern by consumers and have resulted in increased regulatory focus. In the past several years, there have been a number of well-publicized attacks or breaches affecting others in our industry that have heightened concern by consumers and have resulted in increased regulatory focus. Furthermore, cyber-attacks or other breaches in the future, whether affecting others or us, could intensify consumer concern and regulatory focus and result in reduced use of our cards and increased costs, all of which could have a material adverse effect on our business. To the extent we are involved in any future cyber-attacks or other breaches, our brand and reputation could be affected, and this could have a material adverse effect on our financial condition and operations. To the extent we are involved in any future cyber-attacks or other breaches, our brand and reputation could be affected, and this could have a material adverse effect on our financial condition and operations. If we experience a cyber-attack, our insurance coverage may not cover all losses, and furthermore, we may experience a loss of reputation.

We rely on our information technology and telecommunications systems and third-party servicers, and the failure of these systems could adversely affect our business. Our business is highly dependent on the successful and uninterrupted functioning of our information technology and telecommunications systems and third-party servicers. We rely on these systems to process deposit services, electronic funds transfer services (including wires and ACH), new and renewal loans, provide client service, facilitate collections and share data across our organization. The failure of these systems, or the termination of a third-party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services exceeds capacity or such third-party systems fail or experience interruptions. If sustained or repeated, a system failure or service denial could result in a deterioration of our ability to process deposit services, electronic funds transfer services (including wires and ACH), new and renewal loans and provide client service or compromise our ability to collect loan payments in a timely manner. If sustained or repeated, a system failure or service denial could result in a deterioration of our ability to process new and renewal loans and provide client service or compromise our ability to collect loan payments in a timely manner. Our ability to adopt new information technology and technological products needed to meet our clients’ banking needs may be limited if our third-party servicers are slow to adopt or choose not to adopt such new technology and products. Our ability to adopt new information technology and technological products needed to meet our clients’ banking needs may be limited if our third-party servicers are slow to adopt or choose not to adopt such new technology and products. Such a failure to provide this technology and products to our clients could result in a loss of clients, which would negatively affect our financial condition and operations. Such a failure to provide this technology and products to our clients could result in a loss of clients, which would negatively affect our financial condition and operations.

Other Operational Risks
Our risk management framework may not be effective in mitigating risks and losses to us. Our risk management framework is comprised of various processes, systems and strategies, and is designed to manage the types of risk to which we are subject, including, among others, credit, market, liquidity, interest rate and compliance. Our framework also includes financial or other modeling methodologies that involve management assumptions and judgment. Our risk management framework may not be effective under all circumstances and may not adequately mitigate any risk of loss to us. If our framework is not effective, we could suffer unexpected losses and our financial condition, operations or business prospects could be materially and adversely affected. We may also be subject to potentially adverse regulatory consequences.
We are subject to certain operating risks, related to client or employee fraud, which could harm our reputation and business. Employee error, or employee or client misconduct, could subject us to financial losses or regulatory sanctions and seriously harm our reputation. Misconduct by our employees could include hiding unauthorized activities from us, improper or unauthorized activities on behalf of our clients or improper use of confidential information. It is not always possible to prevent employee error and misconduct, and the precautions we take to prevent and detect this activity may not be effective in all cases. Employee error could also subject us to financial claims for negligence. If our internal controls fail to prevent or detect an occurrence, or if any resulting loss is not insured, excess insurance coverage is denied or not available, it could have a material adverse effect on our financial condition and operations.
We depend on the accuracy and completeness of information about clients and counterparties, and our financial condition, operations, financial reporting and reputation could be negatively affected if this information is materially misleading, false, inaccurate or fraudulent. In deciding whether to extend credit or enter into other transactions with clients and counterparties, we may rely on information furnished to us by or on behalf of clients and counterparties, including financial statements and other financial information. We also may rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. In deciding whether to extend credit, we may rely upon our clients’ representations that their financial statements conform to U.S. generally accepted accounting principles, or GAAP, and present fairly, in all material respects, the financial condition, operations and cash flows of the client. We also may rely on client representations and certifications, or other auditors’ reports, with respect to the business and financial condition of our clients. We also may rely on client representations and certifications, or other auditors’ reports, with respect to the business and financial condition of our clients. Our financial condition, operations, financial reporting and reputation could be negatively affected if we rely on materially misleading, false, inaccurate or fraudulent information provided by or about clients and counterparties.
Catastrophic events including, but not limited to, hurricanes, tornadoes, earthquakes, fires, floods, prolonged drought, and pandemics may adversely affect the general economy, financial and capital markets, specific industries, and the Bank. The Bank has significant operations and a significant customer base in regions where natural and other disasters may occur. These regions are known for being vulnerable to natural disasters and other risks, such as earthquakes, fires, floods, and prolonged drought. These regions are known for being vulnerable to natural disasters and other risks, such as earthquakes, fires, floods, and prolonged drought. These types of natural catastrophic events at times have disrupted the local economy, the Bank’s business and clients, and could pose physical risks to the Bank’s property. In addition, catastrophic events, such as natural disasters or global pandemics, occurring in other regions of the world may have an impact on the Bank’s clients and in turn on the Bank. Although we have business continuity and disaster recovery programs in place, a significant catastrophic event could materially adversely affect the Bank’s operating results. Although we have business continuity and disaster recovery programs in place, a significant catastrophic event could materially adversely affect the Bank’s operating results.

Risks Related to Our Regulatory Environment

We are subject to regulation, which increases the cost and expense of regulatory compliance, and may restrict our growth and our ability to acquire other financial institutions. Supervision, regulation, and examination of the Company and the Bank by the bank regulatory agencies are intended primarily for the protection of consumers, bank clients and the DIF of the FDIC, rather than holders of our common shares. As a bank holding company under federal law, we are subject to regulation under the BHCA, and the examination and reporting requirements of the Federal Reserve. In addition to supervising and examining us, the Federal Reserve, through its adoption of regulations implementing the BHCA, places certain restrictions on the permissible activities for bank holding companies. In addition to supervising and examining us, the FRB, through its adoption of regulations implementing the BHCA, places certain restrictions on the permissible activities for bank holding companies. Changes in the number or scope of permissible activities could have an adverse effect on our ability to realize our strategic goals. As a California state-chartered bank that is not a member of the Federal Reserve System, the Bank is separately subject to regulation by both the FDIC and the DFPI. The FDIC and DFPI regulate numerous aspects of the Bank’s operations, including adequate capital and financial condition, permissible types and amounts of extensions of credit and investments, permissible non-banking activities and restrictions on dividend payments. We may be required to invest significant management attention and resources to evaluate and make any changes necessary to comply with applicable laws and regulations. This allocation of resources, as well as any failure to comply with applicable requirements, may negatively affect our operations and financial condition.
Banking agencies periodically conduct examinations of our business, including compliance with laws and regulations, and our failure to comply with any regulatory actions to which we become subject because such examinations could materially and adversely affect us. The DFPI, the FDIC, and the Federal Reserve periodically conduct examinations of our business, including compliance with laws and regulations. Accommodating such examinations may require management to reallocate resources that would otherwise be used in the day-to-day operation of other aspects of our business. Accommodating such examinations may require management to reallocate resources that would otherwise be used in the day-to-day operation of other aspects of our business. If, as a result of an examination, the DFPI or a federal banking agency were to determine that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of our operations had become unsatisfactory, or that we or our management were in violation of any law or regulation, it may take a number of different remedial actions as it deems appropriate. These actions could include the power to enjoin “unsafe or unsound” practices, to require affirmative actions to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil monetary penalties against us, our officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to clients, to terminate our deposit insurance. FDIC deposit insurance is critical to the continued operation of the Bank. FDIC deposit insurance is critical to the continued operation of the Bank. If we become subject to such regulatory actions, our business operations could be materially and adversely affected. If we become subject to such regulatory actions, our business operations could be materially and adversely affected.

Changes in laws, government regulation and monetary policy may have a material adverse effect on our operations. Financial institutions have been the subject of significant legislative and regulatory changes (including the Dodd-Frank Act) and may be the subject of further significant legislation or regulation in the future, none of which is within our control. This may result in repeals of or amendments to, existing laws, treaties, regulations, guidance, reporting, recordkeeping requirements, and other government policies. Significant new laws or regulations or changes in, or repeals of, existing laws or regulations, including those with respect to federal and state taxation, may cause our results of operations to differ materially. In addition, the costs and burden of compliance could adversely affect our ability to operate profitably. Further, federal monetary policy significantly affects the Bank’s credit conditions, as well as the Bank’s clients, particularly as implemented through the Federal Reserve, primarily through open market operations in U.S. government securities, the discount rate for bank borrowings and reserve requirements. A material change in any of these conditions could have a material impact on us, the Bank and the Bank’s clients, and therefore on our financial condition and operations.
New and future rulemaking by the CFPB and other regulators, as well as enforcement of existing consumer protection laws, may have a material effect on our operations and operating costs. The CFPB has the authority to implement and enforce a variety of existing federal consumer protection statutes and to issue new regulations. However, with respect to institutions of our size, it does not have primary examination and enforcement authority. The authority to examine depository institutions with $10 billion or less in assets, such as the Bank, for compliance with federal consumer laws remains largely with our primary federal regulator, the FDIC. However, the CFPB may participate in examinations of smaller institutions on a “sampling basis” and may refer potential enforcement actions against such institutions to their primary regulators. In some cases, regulators such as the Federal Trade Commission, or FTC, and the Department of Justice also retain certain rulemaking or enforcement authority, and we remain subject to certain state consumer protection laws. The CFPB has placed significant emphasis on consumer complaint management and has established a public consumer complaint database to encourage consumers to file complaints they may have against financial institutions. We are expected to monitor and respond to these complaints, including those that we deem frivolous, and doing so may require management to reallocate resources away from more profitable endeavors.
The CFPB has adopted a number of significant rules that affect nearly every aspect of the lifecycle of a residential mortgage. These rules implement the Dodd-Frank Act amendments to the Equal Credit Opportunity Act, the Truth in Lending Act and the Real Estate Settlement Procedures Act. The rules require banks to, among other things: (i) develop and implement procedures to ensure compliance with a new “reasonable ability to repay” test and identify whether a loan meets a new definition for a “qualified mortgage”; (ii) implement new or revised disclosures, policies and procedures for servicing mortgages including, but not limited to, early intervention with delinquent clients and specific loss mitigation procedures for loans secured by a client’s principal residence; (iii) comply with additional restrictions on mortgage loan originator compensation; and (iv) comply with new disclosure requirements and standards for appraisals and escrow accounts maintained for “higher priced mortgage loans.” These rules create operational and strategic challenges for us, as we are both a mortgage originator and a servicer.
As noted previously, the new Trump Administration has made leadership changes at the CFPB. The long-term impact of these and other changes at the CFPB cannot be predicted at this time.
We are subject to stringent capital requirements. Pursuant to the Dodd-Frank Act, the federal banking agencies adopted final rules, or the U.S. Basel III Capital Rules, to update their general risk-based capital and leverage capital requirements to incorporate agreements reflected in the Third Basel Accord adopted by the Basel Committee on Banking Supervision, or Basel III Capital Standards, as well as the requirements of the Dodd-Frank Act. The U.S. Basel III Capital Rules are described in more detail in “Supervision and Regulation — Capital Standards” in this Form 10-K.
The failure to meet the established capital requirements could result in one or more of our regulators placing limitations or conditions on our activities or restricting the commencement of new activities. Such failure could subject us to a variety of enforcement remedies available to the federal regulatory authorities, including limiting our ability to pay dividends, issuing a directive to increase our capital and terminating our FDIC deposit insurance. FDIC deposit insurance is critical to the continued operation of the Bank. Our failure to meet applicable regulatory capital requirements, or to maintain appropriate capital levels in general, could affect client and investor confidence, our ability to grow, our costs of funds and FDIC insurance costs, our ability to pay dividends on common shares, our ability to make acquisitions, and our operations and financial condition, generally.
We may be required to contribute capital or assets to the Bank that could otherwise be invested or deployed more profitably elsewhere. Federal law and regulatory policy impose a number of obligations on bank holding companies designed to reduce potential loss exposure to the clients of insured depository subsidiaries and to the FDIC’s DIF. For example, a bank holding company is required to serve as a source of financial strength to its FDIC-insured depository subsidiaries and to commit financial resources to support such institutions where it might not do so otherwise. These situations include guaranteeing the compliance of an “undercapitalized” bank with its obligations under a capital restoration plan.

A capital injection into the Bank may be required at times when we do not have the resources to provide it at the holding company level; therefore, we may be required to issue common shares or debt to obtain the required capital. Issuing additional common shares would dilute our current shareholders’ percentage of ownership and could cause the price of our common shares to decline. Issuing additional common shares would dilute our current stockholders’ percentage of ownership and could cause the price of our common shares to decline. Any debt would be entitled to a priority of payment over the claims of the Company’s general unsecured creditors or equity holders. Thus, any Company borrowing to make the required capital injection may be expensive and adversely affect our cash flows, financial condition, operations, and business prospects.

We face a risk of non-compliance and enforcement actions with respect to the Bank Secrecy Act (“BSA”) and other anti-money laundering statutes and regulations. Like all U.S. financial institutions, we are subject to monitoring requirements under federal law, including anti-money laundering, or AML, and BSA matters. Since September 11, 2001, banking regulators have intensified their focus on AML and BSA compliance requirements, particularly the AML provisions of the USA Patriot Act. There is also increased scrutiny of compliance with the rules enforced by the U.S. Treasury Department’s OFAC, which involve sanctions for dealing with certain persons or countries. While the Bank has adopted policies, procedures and controls to comply with the BSA, other AML statutes and regulations and OFAC regulations, this aggressive supervision and examination and increased likelihood of enforcement actions may increase our operating costs, which could negatively affect our operations and reputation.

We are subject to federal and state fair lending laws, and failure to comply with these laws could lead to material penalties. Federal and state fair lending laws and regulations, such as the Equal Credit Opportunity Act and the Fair Housing Act, impose non-discrimination lending requirements on financial institutions. The FDIC, the Department of Justice, the CFPB and other federal and state agencies are responsible for enforcing these laws and regulations. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation. A successful challenge to our performance under the fair lending laws and regulations could adversely impact our rating under the CRA, and result in a wide variety of sanctions, including the required payment of damages and civil money penalties, injunctive relief, imposition of restrictions on merger and acquisition activity and restrictions on expansion activity, which could negatively impact our reputation, financial condition and operations.

Regulations relating to privacy, information security and data protection could increase our costs, affect or limit how we collect and use personal information and adversely affect our business opportunities. We are subject to various privacy, information security and data protection laws, including requirements concerning security breach notification, and these laws could negatively affect us. Federal law imposes requirements for the safeguarding of certain client information. Various state and federal banking regulators and states have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in certain circumstances in the event of a security breach. Moreover, legislators and regulators in the United States are increasingly adopting or revising privacy, information security and data protection laws that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of consumer or employee information, and some of our current or planned business activities. This could also increase our costs of compliance and business operations and could reduce income from certain business initiatives.

Compliance with current or future privacy, data protection and information security laws (including those regarding security breach notification) affecting client or employee data to which we are subject could result in higher compliance and technology costs and could restrict our ability to provide certain products and services, which could have a material adverse effect on our financial conditions or operations.

Our failure to comply with privacy, data protection and information security laws could result in potentially significant regulatory or governmental investigations or actions, litigation, fines, sanctions and damage to our reputation, which could have a material adverse effect on our financial condition or operations.

Possible changes in the U.S. tax laws could adversely affect our business and result of operations in a variety of ways. We are subject to changes in tax law that could increase our effective tax rates. These law changes may be retroactive to previous periods and as a result could negatively affect our current and future financial performance. In particular, the Tax Cuts and Jobs Act, which was signed into law in December 2017, includes a number of provisions impacting the banking industry and the borrowers and the market for residential and commercial real estate. Changes include a lower limit on the deductibility of interest on residential mortgage loans and home equity loans; a limitation on the deductibility of business interest expense; and a limitation on the deductibility of property taxes and state and local income taxes. The law's limitation on the mortgage interest deduction and state and local tax deduction for individual taxpayers has increased the after-tax cost of owning a home for many of our existing clients. The Inflation Reduction Act, which was signed into law in the United States in August 2022, among other things, imposes a surcharge on stock repurchases. The value of the properties securing loans in our loan portfolio may be adversely impacted as a result of the changing economics of home ownership, which could require an increase in our provision for loan losses, which would reduce our profitability and could materially adversely affect our business, financial condition and results of operations. Further, these changes implemented by these tax laws could make some businesses and industries less inclined to borrow, potentially reducing demand for our commercial loan products.

Item 1B.
Unresolved Staff Comments

None.

Item 1C.
Cybersecurity

The federal banking regulators regularly issue new guidance and standards, and update existing guidance and standards, regarding cybersecurity intended to enhance cyber risk management among financial institutions. Financial institutions are expected to comply with such guidance and standards and to accordingly develop appropriate security controls and risk management processes. If we fail to observe such regulatory guidance or standards, we could be subject to various regulatory sanctions, including financial penalties. In 2023, the SEC issued a final rule that requires disclosure of material cybersecurity incidents, as well as cybersecurity risk management, strategy and governance. Under this rule, banking organizations that are SEC registrants must generally disclose information about a material cybersecurity incident within four business days of determining it is material with periodic updates as to the status of the incident in subsequent filings as necessary.

Under a final rule adopted by federal banking agencies in 2021, banking organizations are required to notify their primary banking regulator within 36 hours of determining that a “computer-security incident” has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, the banking organization’s ability to carry out banking operations or deliver banking products and services to a material portion of its customer base, its businesses and operations that would result in material loss, or its operations that would impact the stability of the United States. The federal banking agencies have also adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of the Board of Directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial services. The increasingly competitive environment is a result primarily of changes in regulation, changes in technology and product delivery systems, and the accelerating pace of consolidation among financial service providers. Moreover, recent cyberattacks against banks and other financial institutions that resulted in unauthorized access to confidential customer information have prompted the federal banking regulators to issue more extensive guidance on cybersecurity risk management. Among other things, financial institutions are expected to design multiple layers of security controls to establish lines of defense and ensure that their risk management processes address the risks posed by compromised customer credentials, including security measures to authenticate customers accessing internet-based services. A financial institution also should have a robust business continuity program to recover from a cyberattack and procedures for monitoring the security of third-party service providers that may have access to nonpublic data at the institution.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs, and many states have also recently implemented or modified their data breach notification, information security and data privacy requirements. We expect this trend of state-level activity in those areas to continue and are continually monitoring developments in the states in which our customers are located.

Risks and exposures related to cybersecurity attacks, including litigation and enforcement risks, are expected to be elevated for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking and other technology-based products and services by us and our customers.

See Item 1A. “Risk Factors” for a further discussion of risks related to cybersecurity.

Risk Management and Strategy

Information security and cybersecurity risk is the risk that the security, confidentiality, integrity or availability of our information and critical information systems are impacted by unauthorized or unintended access, use, disclosure, disruption, modification or destruction. Cybersecurity attacks and other security breaches can have material adverse impacts on our business. While no organization can eliminate cybersecurity risk entirely, we devote significant resources to our security program that we believe is reasonably designed to mitigate our cybersecurity and information technology risk. The Bank devotes significant resources and management focus to ensuring the integrity of our systems through information security and business continuity programs. However, our facilities and systems, and those of third-party service providers, are still vulnerable to external or internal security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming or human errors, or other similar events. The Company seeks to address cybersecurity risks by implementing a governance structure and processes to assess, identify, manage, remediate, and report cybersecurity risks.

Identifying and assessing cybersecurity risks is integrated into our overall risk management program and processes. Cybersecurity risks related to our business, technical operations, data, and privacy, along with cybersecurity risk-related compliance issues, are identified and addressed through a framework consisting of third-party assessments, internal information technology audits, information security assessments, and risk and compliance reviews. We conduct regular privacy and cybersecurity reviews of systems, audit applicable data and information policies, perform penetration and vulnerability testing using third-party tools to test security controls, perform regular training and assessments for the Board of Directors and employees, monitor emerging data privacy and information security laws and regulations, and implement applicable changes to improve our overall security posture. Moreover, legislators and regulators in the United States are increasingly adopting or revising privacy, information security and data protection laws that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of consumer or employee information, and some of our current or planned business activities. We regularly engage third-party auditors to assess our cybersecurity program and compliance with all applicable “best practices” and regulations. The Company adjusts its information security policies, standards, processes and practices as necessary based on the information provided by these assessments and to remediate material identified vulnerabilities.

We have in place a robust incident response process that helps ensure our preparedness for a cybersecurity incident including our ability to detect, analyze, contain, remediate, and recover from a security incident as well as conduct post-incident analysis to avoid future incidents. Incident response process activities are overseen by cross-functional leadership in Risk Management, Operations, Information Security, Compliance, and Information Systems. Security events and incidents are evaluated, ranked by severity, and prioritized for response and remediation. Incidents are evaluated to determine materiality and operational, business, and overall privacy impacts. We conduct regular exercises and drills to simulate responses to various cybersecurity incidents. The incident response team, including management, coordinates with technical and business stakeholders to further analyze risks and enhance detection, mitigation, and remediation strategies incorporated in the incident response program. The Bank is expected to have active board and senior management oversight; adequate policies, procedures, and limits; adequate risk measurement, monitoring, and management information systems; and comprehensive internal controls.

Our risk management program regularly assesses third party risks (inclusive of fourth-party risk) by conducting activities to identify and mitigate risks from third parties (e.g., vendors, suppliers, and other business partners). Cybersecurity risks are evaluated when selecting and managing applicable third-parties that handle or process employee, business, or customer data, and a review process that includes due diligence over a third-party’s information security and technology control environment is conducted at onboarding and periodically throughout the lifecycle of the relationship to ensure that systems of third- parties meet certain security baseline requirements. We maintain procedures to respond to, manage and mitigate third-party cybersecurity events and vulnerabilities when identified.

Cybersecurity Governance
Given the importance of information security, privacy and data protection to our stakeholders, cybersecurity is a critical part of our risk management program and a key focus area for our Board and Executive Management. The Board of Directors oversees management’s processes for identifying and mitigating risks, including cybersecurity risks, to help manage our risk exposure to meet our strategic objectives. Executive Management and our Information Security Officer (“ISO”) regularly brief the Board of Directors on our cybersecurity and information security posture and ensure the Board is apprised of emerging risks and cybersecurity incidents deemed to have a direct or indirect business impact.

The Audit & Risk Committee meets on a monthly basis to receive updates from management, including leaders from Information Systems, Information Security, Risk Management, and Compliance, on matters of cybersecurity risks and mitigation initiatives. The leaders from these areas each bring over 20 years of professional experience and certifications in information technology, information security, information systems audit, compliance, and risk management. This group of leaders provides updates on existing and new cybersecurity risks, status updates on how management is addressing or mitigating cyber risks and cybersecurity or privacy incidents, and progress on key cybersecurity initiatives.

The Electronic Data Processing (“EDP”) Steering Committee is a senior management level committee that meets at least quarterly to discuss a variety of information technology and cybersecurity matters, which form the basis for providing status reports to the Board of Directors. The committee is responsible for monitoring all Information Systems-related projects and initiatives, facilitating the remediation of issues that could adversely impact the ability of the Information Systems Department to perform its function, and allocating available resources to the highest priority projects and initiatives. The Chief Administrative Officer chairs the EDP Steering Committee and members of Executive Management, Information Systems, Information Security, Treasury Management, Retail and Wholesale Banking departments are represented in the meetings. In addition to project management guidance, the committee provides oversight of and direction for the Information Security Program, monitors cybersecurity risks, and helps ensure prompt remediation of cybersecurity incidents.

In 2024, we did not identify any cybersecurity incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition; however, cybersecurity threats are pervasive. Despite the capabilities, processes and security measures we employ that we believe are designed to detect, reduce, and mitigate the risk of cybersecurity incidents, we may not be aware of all vulnerabilities or might not accurately assess the risks of incidents, and such preventative measures cannot provide absolute security and may not be sufficient in all circumstances or mitigate all potential risks. Moreover, cybersecurity threats are continuously evolving, which may cause cybersecurity threats to be more difficult to detect in the future. See “Risk Factors - Risks Related to Cybersecurity and Information Technology” in Part I, Item 1A of this Form 10-K, for additional information about these and other risks related to cybersecurity and information technology.

Recently Filed
Click on a ticker to see risk factors
Ticker * File Date
HWBK 1 day, 14 hours ago
TRSO 1 day, 14 hours ago
SAIC 1 day, 15 hours ago
BHRB 1 day, 15 hours ago
NUVR 1 day, 15 hours ago
TETEF 1 day, 16 hours ago
NRC 1 day, 16 hours ago
PACK 1 day, 17 hours ago
CVGI 1 day, 18 hours ago
NEWT 1 day, 18 hours ago
PACB 1 day, 18 hours ago
CTGO 1 day, 18 hours ago
SNDA 1 day, 19 hours ago
CRVO 1 day, 19 hours ago
MBX 1 day, 19 hours ago
PLX 1 day, 20 hours ago
TSQ 1 day, 21 hours ago
FMCB 4 days, 7 hours ago
ANIK 4 days, 8 hours ago
ACR 4 days, 9 hours ago
BGSF 4 days, 9 hours ago
NXU 4 days, 9 hours ago
SSBK 4 days, 9 hours ago
BPRN 4 days, 10 hours ago
HNVR 4 days, 10 hours ago
MUX 4 days, 10 hours ago
HYAC 4 days, 10 hours ago
LPSN 4 days, 10 hours ago
NEN 4 days, 10 hours ago
HSON 4 days, 10 hours ago
BMRC 4 days, 10 hours ago
UHG 4 days, 10 hours ago
AMTX 4 days, 10 hours ago
GRI 4 days, 10 hours ago
GAN 4 days, 10 hours ago
USCB 4 days, 10 hours ago
LSBK 4 days, 10 hours ago
SKYT 4 days, 10 hours ago
XPOF 4 days, 10 hours ago
MYPS 4 days, 10 hours ago
FRAF 4 days, 10 hours ago
HBIA 4 days, 10 hours ago
AROW 4 days, 10 hours ago
WMT 4 days, 10 hours ago
MCHX 4 days, 10 hours ago
BZFD 4 days, 10 hours ago
MX 4 days, 10 hours ago
MNTK 4 days, 10 hours ago
KBSR 4 days, 10 hours ago
NRXP 4 days, 10 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard