Company: TCBI
Filing Date: 2025-02-11
Form Type: 10-K
Source: 0001077428-25-000036
Chunk: 127

Company: TEXAS CAPITAL BANCSHARES INC/TX
Filing Date: 2025-02-11
Form: 10-K
Item: Item 1A
Chunk 127
---
inals, hacktivists, groups linked to terrorist organizations or hostile countries, or third parties whose objective is to disrupt the operations of financial institutions more generally, the Company does not have control over the cybersecurity of the systems of the large number of clients, customers, counterparties and third-party service providers with which it does business, and it is possible that a third party, after establishing a foothold on an internal network without being detected, might obtain access to other networks and systems. The risk of a security breach due to a cyber attack could increase in the future due to factors such as: the Company’s ongoing expansion of its mobile and digital banking and other internet-based product offerings and its internal use of internet-based products and applications and the increased use of remote access to facilitate remote arrangements for employees, vendors and other third parties. In addition, a third party could misappropriate confidential information obtained by intercepting signals or communications from mobile devices used by the Company’s employees. A successful penetration or circumvention of the security of the Company’s systems or the systems of a vendor, governmental body or another market participant could cause serious negative consequences, including: significant disruption of the Company’s operations and those of its clients, customers and counterparties, including losing access to operational systems, misappropriation of confidential information of the Company or that of its clients, customers, counterparties, employees or regulators, disruption of or damage to the Company’s systems and those of its clients, customers and counterparties, the inability, or extended delays in the ability, to fully recover and restore data that has been stolen, manipulated or destroyed, or the inability to prevent systems from processing fraudulent transactions, allegations or violations by the Company of applicable privacy and other laws, financial loss to the Company or to its clients, customers, counterparties or employees, loss of confidence in the Company’s cybersecurity and business resiliency measures, dissatisfaction among the Company’s clients, customers or counterparties, significant exposure to litigation and regulatory fines, penalties or other sanctions, and harm to the Company’s reputation. The extent of a particular cyber attack and the steps that the Company may need to take to investigate the attack may not be immediately clear, and it may take a significant amount of time before such an investigation or determination, judicial or otherwise, can be completed. While such an investigation is ongoing, the Company may not necessarily know the full extent of the harm caused by the cyber attack, and that damage may continue to spread. These factors may inhibit the Company’s ability to provide rapid, full and reliable information