Rbb Bancorp (RBB) Risk Analysis

Various aspects of our operations involve the risk of legal liability. We have been, and expect to continue to be, named or threatened to be named as defendants in legal proceedings arising from our business activities. We establish accruals for legal proceedings when information related to the loss contingencies represented by those proceedings indicates both that a loss is probable and that the amount of the loss can be reasonably estimated, but we do not have accruals for all legal proceedings where we face a risk of loss. In addition, amounts accrued may not represent the ultimate loss to us from those legal proceedings. Thus, our ultimate losses may be higher or lower, and possibly significantly so, than the amounts accrued for loss contingencies arising from legal proceedings, and these losses could have a material and adverse effect on our business, financial condition, results of operations and the value of our common stock.

In the course of our business, we may foreclose and take title to real estate, and could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination, or may be required to investigate or clear up hazardous or toxic substances, or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, as the owner or former owner of any contaminated site, we may be subject to common law claims by third parties based on damages, and costs resulting from environmental contamination emanating from the property. If we ever become subject to significant environmental liabilities, our business, financial condition, liquidity, and results of operations could be materially and adversely affected.

We primarily operate in California, New York, New Jersey and Illinois markets with a concentration of Asian-American individuals and businesses; however, one of our strategies is to expand beyond California into other domestic markets that have concentrations of Asian-American individuals and businesses. We also currently have operations in Las Vegas, Nevada and Honolulu, Hawaii, including operating a branch office, and would consider strategic opportunities for additional branch expansion. In the course of any expansion, we may encounter significant risks and uncertainties that could have a material adverse effect on our operations. These risks and uncertainties include increased expenses and operational difficulties arising from, among other things, our ability to attract sufficient business in new markets, to manage operations in noncontiguous market areas, to comply with all of the various local laws and regulations, and to anticipate events or differences in markets in which we have no current experience.

Our operations consist of offering banking and mortgage banking services to generate both interest and noninterest income. Many of our competitors offer the same, or a wider variety of, banking and related financial services within our market areas. These competitors include national banks, regional banks and other community banks. We also face competition from many other types of financial institutions, including savings and loan institutions, finance companies, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. In addition, a number of out-of-state financial intermediaries have opened production offices or otherwise solicit deposits in our market areas. Additionally, we face growing competition from so-called "online businesses" with few or no physical locations, including online banks, lenders and consumer and commercial lending platforms, as well as automated retirement and investment service providers. Increased competition in our markets may result in reduced loans, deposits and commissions and brokers' fees, as well as reduced net interest margin and profitability. Ultimately, we may not be able to compete successfully against current and future competitors. If we are unable to attract and retain banking and mortgage loan customers and expand our sales market for such loans, we may be unable to continue to grow our business, and our financial condition and results of operations may be adversely affected.

Several high-profile bank failures in the first half of 2023 generated significant market volatility among publicly traded bank holding companies and, in particular, regional banks. The industry has stabilized since these failures and the customer confidence in the safety and soundness of smaller regional banks has improved considerably. Nevertheless, risks remain that customers may choose to invest in higher yielding and higher-rated short-term fixed income securities or maintain deposits with larger more systematically important financial institutions, all of which could materially and adversely impact our liquidity, loan funding capacity, net interest margin, capital, and results of operations. In addition, the banking operating environments and public trading prices of banking institutions can be highly correlated, in particular during times of stress, which could adversely impact the trading prices of our common stock and potentially, our results of operations. Separately, banking regulators have announced a more stringent supervisory posture after the bank failures.

The Company is continuously enhancing and expanding our digital products and services to meet client and business needs with desired outcomes. These digital products and services often include storing, transmitting, and processing confidential client, employee, monetary, and business information. Due to the nature of this information, and the value it has for internal and external threat actors, we, and our third-party service providers, continue to be subject to cyber-attacks and fraud activity that attempts to gain unauthorized access, misuse information and information systems, steal information, disrupt or degrade information systems, spread malicious software, and other illegal activities. We believe we have robust preventive, detective, and administrative safeguards and security controls to minimize the probability and magnitude of a material event. However, because the tactics and techniques used by threat actors to bypass safeguards and security controls change frequently, and often are not recognized until after an event has occurred, we may be unable to anticipate future tactics and techniques, or to implement adequate and timely protective measures. Cybersecurity, and the continued development and enhancement of controls, processes, and practices designed to protect client information, systems, computers, software, data, and networks from attack, damage, or unauthorized access remain a priority for the Company. As cybersecurity threats continue to evolve, we may be required to expend additional resources to continue to enhance, modify, and refine our protective measures against these evolving threats. To date, we have no knowledge of a successful cyber-attack or other material information security breach affecting our systems. However, our risk and exposure to these matters remains heightened because of, among other things, the evolving nature of these threats, the continuation of a remote work environment for our employees and service providers and our plans to continue to implement and expand digital banking services, expand operations, and use third-party information systems that includes cloud-based infrastructure, platforms, and software. Recent instances of attacks specifically targeting financial services businesses indicate that the risk to our systems remains significant. If we or a critical third party vendor were to experience a cyber-attack or information security breach, we could suffer damage to our reputation, productivity losses, response costs associated with investigation and resumption of services, and incur substantial additional expenses, including remediation expenses costs associated with client notification and credit monitoring services, increased insurance premiums, regulatory penalties and fines, and costs associated civil litigation, any of which could have a materially adverse effect on our business, financial condition, and results of operations. In addition, the Company's clients and vendors rely on technology and systems unmanaged by the Company, such as networking devices, server infrastructure, personal computers, smartphones, tablets, and other mobile devices, to contact and conduct business with the Company. If the devices of the Company's clients or vendors become the target of a cyber-attack, or information security breach, it could result in unauthorized access to, misuse of, or loss of confidential client, employee, monetary, or business information. Threat actors using improperly obtained personal or financial information of consumers can attempt to obtain loans, lines of credit, or other financial products from the Company, or attempt to fraudulently persuade the Company's employees, clients, or other users of the Company's systems to disclose confidential information in order to gain improper access to the Company's information and information systems. We also face additional costs when our customers become the victims of cyber-attacks. For example, various retailers have reported that they have been the victims of a cyber-attack in which large amounts of their clients' data, including debit and credit card information, is obtained. Our clients may be the victims of phishing scams, providing cyber criminals access to their accounts, or credit or debit card information. In these situations, we incur costs to replace compromised cards and address fraudulent transaction activity affecting our clients. Both internal and external fraud and theft are risks. If confidential client, employee, monetary, or business information were to be mishandled or misused, we could suffer significant regulatory consequences, reputational damage, and financial loss. Such mishandling or misuse could include, for example, if such information were erroneously provided to parties who are not permitted to have the information, either by fault of our systems, employees, or counterparties, or if such information were to be intercepted or otherwise inappropriately taken by third parties, or if our own employees abused their access to financial systems to commit fraud against our clients and the Company. These activities can occur in connection with the origination of loans and lines of credit, ACH transactions, wire transactions, ATM transactions, and checking transactions, and result in financial losses as well as reputational damage. Operational errors can include information system misconfiguration, clerical or record-keeping errors, or disruptions from faulty or disabled computer or telecommunications systems. Because the nature of the financial services business involves a high volume of transactions, certain errors may be repeated or compounded before they are discovered and successfully rectified. Because of the Company's large transaction volume and its necessary dependence upon automated systems to record and process these transactions, there is a risk that technical flaws, tampering, or manipulation of those automated systems, arising from events wholly or partially beyond its control, may give rise to disruption of service to customers and to financial loss or liability. We are exposed to the risk that our business continuity and data security systems prove to be inadequate. The occurrence of any of these risks could result in a diminished ability for us to operate our business, additional costs to correct defects, potential liability to clients, reputational intervention, any of which could adversely affect our business, financial condition and results of operations.

Real estate construction loans, including land development loans, comprised approximately 6.0% of our total loan portfolio as of December 31, 2023, and such lending involves additional risks because funds are advanced upon the security of the project, which is of uncertain value prior to its completion, and costs may exceed realizable values in declining real estate markets. Because of the uncertainties inherent in estimating construction costs and the realizable market value of the completed project and the effects of governmental regulation of real property, it is relatively difficult to evaluate accurately the total funds required to complete a project and the related loan-to-value ratio. As a result, construction loans often involve the disbursement of substantial funds with repayment dependent, in part, on the success of the ultimate project and the ability of the borrower to sell or lease the property, rather than the ability of the borrower or guarantor to repay principal and interest. If our appraisal of the value of the completed project proves to be overstated or market values or rental rates decline, we may have inadequate security for the repayment of the loan upon completion of construction of the project. If we are forced to foreclose on a project prior to or at completion due to a default, we may not be able to recover all of the unpaid balance of, and accrued interest on, the loan as well as related foreclosure and holding costs. In addition, we may be required to fund additional amounts to complete the project and may have to hold the property for an unspecified period of time while we attempt to dispose of it. The risks inherent in construction lending may affect adversely our results of operations. Such risks include, among other things, the possibility that contractors may fail to complete, or complete on a timely basis, construction of the relevant properties; substantial cost overruns in excess of original estimates and financing; market deterioration during construction; and lack of permanent take-out financing. Loans secured by such properties also involve additional risk because they have no operating history. In these loans, loan funds are advanced upon the security of the project under construction (which is of uncertain value prior to completion of construction) and the estimated operating cash flow to be generated by the completed project. Such properties may not be sold or leased so as to generate the cash flow anticipated by the borrower. A general decline in real estate sales and prices across the United States or locally in the relevant real estate market, a decline in demand for residential real estate, economic weakness, higher interest rates, high rates of unemployment, and reduced availability of mortgage credit, are some of the factors that can adversely affect the borrowers' ability to repay their obligations to us and the value of our security interest in collateral, and thereby adversely affect our results of operations and financial results.