Southern States relies heavily on communications and information systems to conduct its business. Any failure or interruption of these systems could impair or prevent the effective operation of Southern States' customer relationship management, general ledger, deposit, lending, or other functions. Information security risks for financial institutions have significantly increased in recent years, in part because of the proliferation of new technologies, the use of the internet and telecommunication technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, foreign governments, hackers, terrorists, activists, and other external parties. Southern States and its service providers are under continuous and expanding threats of loss due to hacking and cyber-attacks, especially as Southern States continues to expand customer applications using the internet, wireless, mobile and other remote channels to transact business. Therefore, the secure processing, transmission, and storage of information in connection with Southern States' online banking services are critical elements of its operations. However, Southern States' network could be vulnerable to unauthorized access, computer viruses and other malware, phishing schemes, or other security failures. In addition, customers may use personal smartphones, tablet PCs, or other mobile devices that are beyond Southern States' control systems in order to access Southern States' products and services. Southern States' and its service providers' technologies, systems and networks, and customers' devices, may become the target of cyber-attacks, electronic fraud, or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss, or destruction of Southern States or its customers' confidential, proprietary, and other information, or otherwise disrupt Southern States or its customers' or other third parties' business operations. As cyber threats continue to evolve, Southern States may be required to spend significant capital and other resources to protect against these threats or to alleviate or investigate problems caused by such threats. To the extent that Southern States' activities or the activities of Southern States' customers involve the processing, storage, or transmission of confidential customer information, any breaches or unauthorized access to such information could present significant regulatory costs and expose Southern States to litigation and other possible liabilities. Any inability to prevent these types of security threats could also cause existing customers to lose confidence in Southern States' systems and could adversely affect Southern States' reputation and ability to generate deposits. While Southern States has not experienced any material losses relating to cyber-attacks or other information security breaches to date, Southern States may suffer such losses in the future.
Southern States relies on software and systems developed and/or operated by third-party vendors to process various transactions. These systems include, but are not limited to, general ledger, payroll systems and employee benefits, loan and deposit processing, and securities portfolio accounting. While Southern States reviews the security and controls instituted by the applicable vendors and performs its own testing of user controls, Southern States relies on the continued maintenance of controls and data security by these third-party vendors, including safeguards over the security of customer data.
The increased use of online banking may increase the risks related to our information technology systems, including cyber-attacks and unauthorized access.
The occurrence of any cyber-attack or information security breach could result in potential liability to clients, reputational damage, damage to Southern States' competitive position, and the disruption of Southern States' operations, all of which could adversely affect Southern States' financial condition or results of operations, lead to increased compliance and insurance costs and reduce stockholder value.