Company: BOH
Filing Date: 2025-03-04
Form Type: 10-K
Source: 0000950170-25-031193
Chunk: 34

Company: BANK OF HAWAII CORP
Filing Date: 2025-03-04
Form: 10-K
Item: Item 1A
Chunk 34
---
 essential to our ability to perform day-to-day operations, and, in some cases, are critical to the operations of certain of our customers. These third parties with which we do business or that facilitate our business activities, including exchanges, clearing firms, financial intermediaries or vendors that provide services or security solutions for our operations, could also be sources of operational and information security risk to us, including breakdowns or failures of their own systems or capacity constraints. In addition, our communications and information systems and operations (including those of third parties that facilitate our business activities) could be damaged or interrupted due to events such as natural or human-caused disasters (including public health crises) or extreme weather (including as a result of climate change), geopolitical events and security issues, computer viruses, physical or electronic break-ins, operational failures, and similar events or disruptions.

Although we have safeguards and business continuity plans in place, our business operations may be adversely affected by significant and widespread disruption to our physical infrastructure or operating systems that support our business and our customers, resulting in financial losses, loss of customers, or damage to our reputation.

An interruption or breach in security of our information systems or those related to merchants and third party vendors, including as a result of cyber attacks, could disrupt our business, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, or result in financial losses.

Our business requires the collection and retention of large volumes of customer data, including payment card numbers and other personally identifiable information in various information systems that we maintain and in those maintained by third parties with whom we contract to provide data services. We also maintain important internal company data such as personally identifiable information about our employees and information relating to our operations. The integrity and protection of that customer and company data is important to us. As customer, public, legislative and regulatory expectations and requirements regarding operational and information security have increased, our operating systems and infrastructure must continue to be safeguarded and monitored for potential failures, disruptions and breakdowns.

Our technologies, systems, networks and software, and those of other financial institutions have been, and are likely to continue to be, the target of cybersecurity threats and attacks, which may range from uncoordinated individual attempts to sophisticated and targeted measures directed at us. These cybersecurity threats and attacks may include, but are not limited to, attempts to access information, including customer and company information, malicious code, computer viruses and denial of service attacks that could result in unauthorized access, misuse, loss or destruction of data (including confidential customer information), account takeovers