Company: STBA
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0000719220-25-000013
Chunk: 10

Company: S&T BANCORP INC
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 10
---
 although not material, we anticipate that we could experience further incidents of that nature as well as other types of attempts or incidents. There can be no assurance that we will not suffer material losses or other material consequences relating to technology failure, cyber incidents or other information or security breaches. 

In addition to external threats, insider threats also present a risk to us. Insiders, having legitimate access to our systems and the information contained in them, have the opportunity to make inappropriate use of the systems and information, or as a result of human error, misconduct or malfeasance, expose us to risk. We have policies, procedures, and controls in place designed to prevent or limit this risk, but we cannot guarantee that these policies, procedures and controls fully mitigate this risk. Additionally, a number of our employees have shifted to working from remote locations, which we expect to remain high for the foreseeable future, increasing the number of surfaces that require protection and the overall risks and exposures to cyber threats.

We have taken and continue to take measures to design, implement and reassess our controls, backup systems and other safeguards to support our operations, but no matter how well designed or implemented, we may not be able to anticipate and prevent all potential types of security incidents and breaches, and we may not be able to implement effective preventive measures against such security breaches in a timely manner. As cyber threats continue to evolve, we may also be required to expend significant additional resources to continue to modify or enhance our systems or to investigate and remediate vulnerabilities. System enhancements and updates have further potential to create risks associated with implementing and integrating new systems. Due to the complexity and interconnectedness of information technology systems, the process of enhancing our systems can itself create a risk of systems disruptions and security issues. Any of these matters could result in failure, circumvention of our security systems, or significant disruptions to us or third parties with whom we interact, misappropriation or destruction of our confidential information and/or that of our customers, or damage to our customers’ and/or third parties’ computers or systems, loss of our customers and business opportunities, and could result in a violation of applicable privacy laws and other laws, litigation exposure, regulatory fines, penalties or intervention, loss of confidence in our security measures, reputational damage, reimbursement or other compensatory costs, and additional compliance costs. In addition, any of the matters described above could have a material adverse impact on our results of business operations and financial condition.

Any of the foregoing risks may cause us to experience a cybersecurity incident, attack or breach.