Berkshire Hills (BHLB) Risk Analysis

Berkshire is required to obtain the approvals of certain regulatory agencies before completing the Mergers. Satisfying any requirements of these regulatory agencies may delay the date of completion of the Mergers. The requisite regulatory approvals may not be received at all (in which case the Mergers could not be completed), may not be received in a timely fashion, or may contain conditions or restrictions on completion of the Mergers that cannot be satisfied. In addition, any conditions or restrictions imposed could have the effect of imposing additional costs on or limiting the revenues of the combined company following the Mergers, which might have an adverse effect on the combined company following the Mergers. Further, it is possible that, among other things, restrictions on the combined operations of the two companies, including divestitures, may be sought by governmental agencies as a condition to obtaining the required regulatory approvals. This may diminish the benefits of the Mergers to the combined company or otherwise have an adverse effect on the combined company following the Mergers.

The Company's use of derivative financial instruments exposes us to financial and contractual risks with counterparties. The Company maintains correspondent bank relationships, purchase loans, manages certain loan participations, engage in securities and funding transactions, and undergo other activities with financial counterparties that are customary to its industry. The Company also utilizes services from major vendors of technology, telecommunications, and other essential operating services. There is financial, reputational, and operational risk in these relationships, which the Company seeks to manage through internal controls and procedures, but there are no assurances that the Company will not experience loss or interruption of its business as a result of unforeseen events with these providers. The Company's mortgage banking operations have exposed us to counterparty transactions including the use of third parties to participate in the management of interest rate risk and mortgage sales and hedging, as well as mortgage servicing. Financial, reputational, and operational risks are inherent in these counterparty and correspondent relationships. The Company could experience losses if there are failures in the controls or accounting, including those related to derivatives activities or if there are performance failures by any counterparties. The risk of loss is increased when interest rates change suddenly and if the intended hedging objectives are not achieved as a result of market or counterparty behaviors.

Real estate lending is a major business activity for the Company. Real estate market conditions affect the value and marketability of real estate collateral, and they also affect the cash flows, liquidity, and net worth of many borrowers whose operations and finances depend on real estate market conditions. We have a geographic concentration of loans in our market areas. Adverse conditions in the Company's market areas could reduce growth rates, affect the ability of our customers to repay their loans and increase loan losses, and generally affect the Company's financial condition and results of operations. Potential increases in interest rates can lead to increased capitalization rates over time which could adversely affect commercial property appraisals and collateral value. Residential property values may be similarly adversely impacted. As of December 31, 2024, commercial real estate loans comprised approximately 51% of our loan portfolio. Commercial real estate mortgage loans generally involve a greater degree of credit risk than residential real estate mortgage loans because they typically have larger balances and are more affected by adverse conditions in the economy. Because payments on loans secured by commercial real estate often depend upon the successful operation and management of the properties and the businesses which operate from within them, repayment of such loans may be affected by factors outside the borrower's control, such as adverse conditions in the real estate market or the economy, changes in government regulations and fiscal policy, or changes in the level of interest rates. Failures in our risk management policies, procedures and controls could adversely affect our ability to manage this portfolio going forward and could result in an increased rate of delinquencies in, and increased losses from, this portfolio, which, accordingly, could have a material adverse effect on our business, financial condition and results of operations.

The Company's branch network continues to be a very significant source of new business generation, however, consumers continue to migrate much of their routine banking to self-service channels. In recognition of this shift in consumer patterns, we regularly review the branch network, which has resulted in branch consolidation accompanied by the enhancement of the Bank's capabilities to serve its customers through alternate delivery channels. The benefits of this strategy will depend on our ability to realize expected benefits without experiencing significant customer attrition, unexpected costs, or unanticipated disruptions to operations.

In addition to being affected by interest rates, the secondary mortgage markets are also subject to investor demand for residential mortgage loans and increased investor yield requirements for these loans. These conditions may fluctuate or worsen in the future. As a result, a prolonged period of secondary market illiquidity may reduce the Company's loan production volumes and operating results. Secondary markets are significantly affected by Fannie Mae, Freddie Mac and Ginnie Mae (collectively, the "Agencies") for loan purchases that meet their conforming loan requirements. These agencies could limit purchases of conforming loans due to capital constraints, a change in the criteria for conforming loans or other factors. Proposals to reform mortgage finance could affect the role of the Agencies and the market for conforming loans which comprise the majority of the Company's mortgage lending and related originations income.

Increased levels of remote access resulting from more work from home employees may create additional opportunities for cybercriminals to exploit vulnerabilities, and employees may be more susceptible to phishing and social engineering attempts due to work responsibilities at home. In addition, technological resources may be strained due to the number of remote users. The Company's computer systems and network infrastructure are subject to security risks and could be susceptible to cyber-attacks, such as denial of service attacks, hacking, terrorist activities or identity theft. Financial services institutions and companies engaged in data processing have reported breaches in the security of their websites or other systems, some of which have involved sophisticated and targeted attacks intended to obtain unauthorized access to sensitive information, destroy data, steal financial assets, disable or degrade service, or sabotage systems,often through the introduction of computer viruses or malware, cyber-attacks and other means. Denial of service attacks have been launched against a number of large financial services institutions. As a growing regional bank, the Company may be subject to similar attacks in the future. Hacking and identity theft risks could cause serious reputational harm and possible financial loss to the Company. Cyber threats are rapidly evolving and the Company may not be able to anticipate or prevent all such attacks. Advancements in the use of artificial intelligence could lead to adversarial attacks by exploiting vulnerabilities to manipulate model outputs or bypass security controls. The Company may incur increasing costs in an effort to minimize these risks and could be held liable for any security breach or loss. Despite efforts to ensure the integrity of its systems, the Company will not be able to anticipate all security breaches of these types, and the Company may not be able to implement effective preventive measures against such security breaches. The techniques used by cyber criminals change frequently and can originate from a wide variety of sources, including outside groups such as external service providers, organized crime affiliates, terrorist organizations or hostile foreign governments. Those parties may also attempt to fraudulently induce employees, customers or other users of the Company's systems to disclose sensitive information in order to gain access to its data or that of its clients or to conduct unauthorized financial transactions. These risks may increase in the future as the Company continues to increase its mobile-payment and other internet-based product offerings and expands its internal usage of web-based products and applications. A successful penetration or circumvention of system security could cause serious negative consequences to the Company, including significant disruption of operations, misappropriation of sensitive information of the Company or that of its customers, or damage to computers or systems of the Company or those of its customers and counterparties. A security breach could result in violations of applicable privacy and other laws, financial loss to the Company or to its customers, loss of confidence in the Company's security measures, significant litigation exposure, and harm to the Company's reputation, all of which could have a material adverse effect on the Company.