Company: ONBPP
Filing Date: 2025-02-19
Form Type: 10-K
Source: 0000707179-25-000005
Chunk: 50

Company: OLD NATIONAL BANCORP /IN/
Filing Date: 2025-02-19
Form: 10-K
Item: Item 1A
Chunk 50
---
 rely or attacks on financial or other institutions important to the overall functioning of the financial system could adversely affect, directly or indirectly, aspects of our business.

Despite our efforts to ensure the integrity of our systems, it is possible that we may not be able to anticipate or to implement effective preventive measures against all security breaches, especially because the techniques used change frequently or are not recognized until launched, and because security attacks can originate from a wide variety of sources, including persons who are involved with organized crime or associated with external service providers or who may be linked to terrorist organizations or hostile foreign governments. As cyber threats continue to evolve, including as a result of the increased use of artificial intelligence, we may be required to expend significant additional resources to continue to modify or enhance our systems or to investigate and remediate vulnerabilities. System enhancements and updates may also create risks associated with implementing and integrating new systems. Due to the complexity and interconnectedness of information technology systems, the process of enhancing our systems can itself create a risk of systems disruptions and security issues.

If our security systems were penetrated or circumvented, it could cause serious negative consequences for us, including significant disruption of our operations, misappropriation of our confidential information or that of our clients, or damage our computers or systems and those of our clients and counterparties, and could result in violations of applicable privacy and other laws, financial loss to us or to our clients, loss of confidence in our security measures, client dissatisfaction, significant litigation exposure, regulatory action, and harm to our reputation, all of which could have a material adverse effect on us.

Old National is subject to laws and regulations relating to the privacy of the information of clients, employees or others, and any failure to comply with these laws and regulations could expose the Company to liability and/or reputational damage.

Old National is subject to laws and regulations relating to the privacy of the information of clients, employees or others, and any failure to comply with these laws and regulations could expose the Company to liability and/or 

26

reputational damage. Changes to customer data privacy laws and regulations may impose additional operational burdens on the Company, may limit the Company’s ability to pursue desirable business initiatives and increase the risks associated with any future use of customer data. Compliance with these laws and regulations may require changes to policies, procedures and technology for information security and segregation of data, which could, among other things, make the Company more vulnerable to operational failures, and to monetary penalties, litigation or regulatory enforcement actions for breach of such laws and regulations.

As privacy-related laws