Company: NWBI
Filing Date: 2025-02-25
Form Type: 10-K
Source: 0001471265-25-000016
Chunk: 57

Company: Northwest Bancshares, Inc.
Filing Date: 2025-02-25
Form: 10-K
Item: Item 1A
Chunk 57
---
 rely on information technology systems designed to provide security and authentication necessary to effect the secure transmission of data, these precautions may not protect our information technology systems from system failures, interruptions, or cybersecurity breaches.

Despite the defensive measures we take designed to manage our internal technological and operational infrastructure, threats may originate externally from foreign governments, state-sponsored actors, organized crime, terrorists, hackers, and other third parties or internally from within our organization, including our personnel or third-party providers (including infrastructure-support providers and application developers). Furthermore, we may not be able to ensure that all of our clients, suppliers and other third-party providers, counterparties and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. Our heavy reliance on information technology systems exposes us to operational risks, which include the risk of malfeasance by personnel or persons outside of our organization, denial of service attacks, computer viruses, worms, ransomware, social engineering (including phishing attacks), service outages, software bugs or defects, server failures, errors relating to transaction processing and technology, failures to properly implement systems upgrades, breaches of our internal control systems and compliance requirements, business continuation and disaster recovery issues and other system failures, interruptions, or cybersecurity breaches. Such risks have significantly increased in recent years in part because of the proliferation of new technologies, including artificial intelligence, and the use of the internet and telecommunications technologies to conduct financial transactions.

In addition, we outsource a significant amount of our data processing to, and otherwise rely on, certain third-party providers, and our ability to monitor such third-party providers’ data privacy and cybersecurity practices is limited. If these third-party providers encounter difficulties or experience system failures, interruptions, or cybersecurity breaches, or if we have difficulty communicating with them, our ability to adequately process and account for transactions could be affected, and our business operations could be adversely affected. Additionally, any system failures, interruptions or cybersecurity breaches impacting such third-party providers may not be disclosed to us in a timely manner, and we cannot guarantee that we can obtain adequate or any reimbursement from such third-party providers in the event we should suffer any disruption, compromise, failure, liability, reputational harm or other cost or expense. Due to applicable laws and regulations or contractual obligations, we may be held responsible for system failures, interruptions, or cybersecurity breaches attributed to such third-party providers as they relate to the information we share with them.

The occurrence, or perceived occurrence (whether unfounded or not), of any