Berkshire Hills (BHLB) Risk Factors

New federal or state laws and regulations could affect lending, funding practices, capital, and liquidity standards. New laws, regulations, and other regulatory changes may also increase compliance costs and affect business and operations. Moreover, the FDIC sets the cost of FDIC insurance premiums, which can affect profitability. Regulatory capital requirements and their impact on the Company may change. The Company may need to raise additional capital in the future to support operations and continued growth. The Company's ability to raise capital, if needed, will depend on its condition and performance, and on market conditions. New laws, regulations, and other regulatory changes, along with negative developments in the financial industry and the domestic and international credit markets, may significantly affect the markets in which the Company does business, the markets for and value of its loans and investments, and ongoing operations, costs and profitability. For more information, see "Regulation and Supervision" in Item 1 of this report. With total assets over $10 billion, the Company and the Bank are subject to closer supervision by their primary regulators and, as to compliance with consumer protection laws and regulations, the Consumer Financial Protection Bureau. The Company and the Bank are subject to capital stress testing expectations which require significant resources and infrastructure. If the Company's compliance with the enhanced supervision and requirements is insufficient, there can be significant negative consequences for its operations, profitability, and ability to further pursue its strategic growth plan.

The Company has been, and in the future could be, subject to various regulatory and legal proceedings, including class action litigation. It is inherently difficult to gauge the result of these matters, and there can be no guarantee that we will prevail in any litigation or proceeding. Legal and regulatory matters of any degree of significance could result in significant costs and diversion of our efforts could have a material adverse effect on our financial condition and operating results. As disclosed in Part I, Item 3, "Legal Proceedings," we currently have ongoing proceedings. If we settle these claims or the litigation is not resolved in our favor, we could suffer reputational damage, incur legal costs, and settlements or judgments that may exceed amounts covered by our existing insurance policies. We cannot provide assurances that our insurer will cover all legal costs, settlements or judgments we incur. If we are not successful in defending ourselves from these claims, or if our insurer does not cover the full amount of legal costs we incur, the outcome could materially adversely affect our business, results of operations and financial condition. Furthermore, adverse determinations in such matters could result in actions by our regulators that could materially adversely affect our business, financial condition or results of operations. There can be no assurance that other proceedings, which may have a material adverse effect on our business, results of operations or financial condition will not arise in the near or long-term future.

Real estate lending is a major business activity for the Company. Real estate market conditions affect the value and marketability of real estate collateral, and they also affect the cash flows, liquidity, and net worth of many borrowers whose operations and finances depend on real estate market conditions. We have a geographic concentration of loans in our market areas. Adverse conditions in the Company's market areas could reduce growth rates, affect the ability of our customers to repay their loans and increase loan losses, and generally affect the Company's financial condition and results of operations. Potential increases in interest rates can lead to increased capitalization rates over time which could adversely affect commercial property appraisals and collateral value. Residential property values may be similarly adversely impacted. Pandemic impacts on the supply of and demand for commercial and residential properties have caused unusual valuation changes in many markets, which may not be sustained if market conditions normalize. As of December 31, 2023, commercial real estate loans comprised approximately 49% of our loan portfolio. Commercial real estate mortgage loans generally involve a greater degree of credit risk than residential real estate mortgage loans because they typically have larger balances and are more affected by adverse conditions in the economy. Because payments on loans secured by commercial real estate often depend upon the successful operation and management of the properties and the businesses which operate from within them, repayment of such loans may be affected by factors outside the borrower's control, such as adverse conditions in the real estate market or the economy or changes in government regulations or changes in the level of interest rates. In recent years, commercial real estate markets have been particularly impacted by the economic disruption resulting from the COVID-19 pandemic. The COVID-19 pandemic has also been a catalyst for the evolution of various remote work options which could impact the long-term performance of some types of office properties within our commercial real estate portfolio. Accordingly, the federal banking regulatory agencies have issued advisories on managing commercial real estate concentrations in a challenging economic environment. Failures in our risk management policies, procedures and controls could adversely affect our ability to manage this portfolio going forward and could result in an increased rate of delinquencies in, and increased losses from, this portfolio, which, accordingly, could have a material adverse effect on our business, financial condition and results of operations.

The Company's branch network continues to be a very significant source of new business generation, however, consumers continue to migrate much of their routine banking to self-service channels. In recognition of this shift in consumer patterns, we regularly review the branch network, which has resulted in branch consolidation accompanied by the enhancement of the Bank's capabilities to serve its customers through alternate delivery channels. The benefits of this strategy will depend on our ability to realize expected benefits without experiencing significant customer attrition, unexpected costs, or unanticipated disruptions to operations.

In addition to being affected by interest rates, the secondary mortgage markets are also subject to investor demand for residential mortgage loans and increased investor yield requirements for these loans. These conditions may fluctuate or worsen in the future. As a result, a prolonged period of secondary market illiquidity may reduce the Company's loan production volumes and operating results. Secondary markets are significantly affected by Fannie Mae, Freddie Mac and Ginnie Mae (collectively, the "Agencies") for loan purchases that meet their conforming loan requirements. These agencies could limit purchases of conforming loans due to capital constraints, a change in the criteria for conforming loans or other factors. Proposals to reform mortgage finance could affect the role of the Agencies and the market for conforming loans which comprise the majority of the Company's mortgage lending and related originations income.

Increased levels of remote access resulting from more work from home employees may create additional opportunities for cybercriminals to exploit vulnerabilities, and employees may be more susceptible to phishing and social engineering attempts due to work responsibilities at home. In addition, technological resources may be strained due to the number of remote users. The Company's computer systems and network infrastructure are subject to security risks and could be susceptible to cyber-attacks, such as denial of service attacks, hacking, terrorist activities or identity theft. Financial services institutions and companies engaged in data processing have reported breaches in the security of their websites or other systems, some of which have involved sophisticated and targeted attacks intended to obtain unauthorized access to sensitive information, destroy data, steal financial assets, disable or degrade service, or sabotage systems, often through the introduction of computer viruses or malware, cyber-attacks and other means. Denial of service attacks have been launched against a number of large financial services institutions. As a growing regional bank, the Company may be subject to similar attacks in the future. Hacking and identity theft risks could cause serious reputational harm and possible financial loss to the Company. Cyber threats are rapidly evolving and the Company may not be able to anticipate or prevent all such attacks. Advancements in the use of artificial intelligence could lead to adversarial attacks by exploiting vulnerabilities to manipulate model outputs or bypass security controls. The Company may incur increasing costs in an effort to minimize these risks and could be held liable for any security breach or loss. Despite efforts to ensure the integrity of its systems, the Company will not be able to anticipate all security breaches of these types, and the Company may not be able to implement effective preventive measures against such security breaches. The techniques used by cyber criminals change frequently and can originate from a wide variety of sources, including outside groups such as external service providers, organized crime affiliates, terrorist organizations or hostile foreign governments. Those parties may also attempt to fraudulently induce employees, customers or other users of the Company's systems to disclose sensitive information in order to gain access to its data or that of its clients or to conduct unauthorized financial transactions. These risks may increase in the future as the Company continues to increase its mobile-payment and other internet-based product offerings and expands its internal usage of web-based products and applications. A successful penetration or circumvention of system security could cause serious negative consequences to the Company,including significant disruption of operations, misappropriation of sensitive information of the Company or that of its customers, or damage to computers or systems of the Company or those of its customers and counterparties. A security breach could result in violations of applicable privacy and other laws, financial loss to the Company or to its customers, loss of confidence in the Company's security measures, significant litigation exposure, and harm to the Company's reputation, all of which could have a material adverse effect on the Company.