Company: CMA
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000028412-25-000108
Chunk: 342

Company: COMERICA INC
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1A
Chunk 342
---
-party systems or infrastructure, expose Comerica to risk. For example, Comerica’s ability to conduct business may be adversely affected by any significant disruptions to Comerica or to third parties with whom Comerica interacts or upon whom it relies. Although Comerica has programs in place related to business continuity, disaster recovery and information security to maintain the confidentiality, integrity and availability of its systems, business applications and customer information, such disruptions may still give rise to interruptions in service to customers and loss or liability to Comerica, including loss of customer data. In addition, Comerica’s ability to implement backup systems and other safeguards with respect to 

20

third-party systems is more limited than with respect to its own systems. Increasing usage of automation and a measured approach to leveraging artificial intelligence by Comerica or third parties on which Comerica relies would further increase the impact if Comerica's operational or security systems were to fail or be breached.

Comerica’s financial, accounting, data processing, backup or other operating or security systems and infrastructure may fail to operate properly or become disabled or damaged as a result of a number of factors, including events that are wholly or partially beyond its control, which could adversely affect its ability to process transactions or provide services. Such events may include sudden increases in customer transaction volume and/or customer activity; electrical, telecommunications or other major physical infrastructure outages; natural disasters such as earthquakes, tornadoes, hurricanes and floods; disease pandemics; cyber attacks; and events arising from local or larger scale political or social matters, including wars and terrorist acts. 

The occurrence of any failure or interruption in Comerica's operations or information systems, or any security breach, could cause reputational damage, jeopardize the confidentiality of customer information, result in a loss of customer business, subject Comerica to regulatory intervention or expose it to civil litigation and financial loss or liability, any of which could have a material adverse effect on Comerica. 

•Comerica relies on other companies to provide certain key components of its delivery systems, and certain failures could materially adversely affect operations.

Comerica faces the risk of operational disruption, failure or capacity constraints due to its dependency on third-party suppliers for components of its delivery systems. Third-party suppliers provide certain key components of Comerica's delivery systems, such as cloud-based computing, networking and storage services, cash services, payment processing services, recording and monitoring services, internet connections and network access, clearing agency services, card processing services and trust processing