Company: FITBI
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000035527-25-000079
Chunk: 387

Company: FIFTH THIRD BANCORP
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1A
Chunk 387
---
 Fifth Third, or in some cases provide services to Fifth Third domestically and internationally. Fifth Third has a third-party risk program to oversee third- and fourth-party providers. This does not eliminate all risk and its failure to do so could result in customer losses, operational issues, litigation, regulatory actions and reputational damage. Industry trends demonstrate a shift towards the use of cloud providers, Software as a Service partners and hosted platforms rather than traditional software services that can be operated from within a company’s firewall and data centers, and the implementation and development of new and emerging technologies such as artificial intelligence. These additional risks are further heightened through the increasing use of near real-time money movement solutions such as Zelle, and increase the difficulty to detect, prevent and recover fraudulent transactions. These additional risks are increasing the costs of Fifth Third’s investment in technology and cybersecurity and require further investment in cyber-related and data loss event insurance which Fifth Third has in place. Though Fifth Third has insurance against some cybersecurity risks and attacks, it may not be sufficient to offset the impact of a material loss event. Future investment in these areas could have higher than expected costs and/or result in operating inefficiencies, which could increase the costs associated with the implementation as well as ongoing operations.

If personal, confidential or proprietary information of customers or clients in the Bancorp’s or such vendors’ or other third-parties’ possession were to be mishandled or misused, the Bancorp could suffer significant regulatory consequences, reputational damage and financial loss.

Fifth Third relies on its systems and certain third-party service providers and certain failures (including those related to cybersecurity or weather events exacerbated by climate change) could materially adversely affect operations.

Fifth Third’s operations, including its financial and accounting systems, use computer systems and telecommunications networks operated by both Fifth Third and third-party service providers. Fifth Third may not be sufficiently resilient and may not recover from significant operational events in a timely manner which could create operational and reputational risks. Additionally, Fifth Third collects, processes and stores sensitive consumer data by utilizing those and other systems and networks. Fifth Third has security, backup and recovery systems in place, as well as a business continuity plan to ensure the systems will not be inoperable. Fifth Third also has security to prevent unauthorized access to the systems. In addition, Fifth Third requires its third-party service providers to maintain similar controls. However, Fifth Third cannot be certain that the measures will be successful, particularly given the rapidly evolving sophistication of threat actors and technologies.

A security breach in these systems or the loss or corruption