Company: CMA
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000028412-25-000108
Chunk: 241

Company: COMERICA INC
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1
Chunk 241
---
erica relies would further increase the impact if Comerica's operational or security systems were to fail or be breached.

Comerica’s financial, accounting, data processing, backup or other operating or security systems and infrastructure may fail to operate properly or become disabled or damaged as a result of a number of factors, including events that are wholly or partially beyond its control, which could adversely affect its ability to process transactions or provide services. Such events may include sudden increases in customer transaction volume and/or customer activity; electrical, telecommunications or other major physical infrastructure outages; natural disasters such as earthquakes, tornadoes, hurricanes and floods; disease pandemics; cyber attacks; and events arising from local or larger scale political or social matters, including wars and terrorist acts. 

The occurrence of any failure or interruption in Comerica's operations or information systems, or any security breach, could cause reputational damage, jeopardize the confidentiality of customer information, result in a loss of customer business, subject Comerica to regulatory intervention or expose it to civil litigation and financial loss or liability, any of which could have a material adverse effect on Comerica. 

•Comerica relies on other companies to provide certain key components of its delivery systems, and certain failures could materially adversely affect operations.

Comerica faces the risk of operational disruption, failure or capacity constraints due to its dependency on third-party suppliers for components of its delivery systems. Third-party suppliers provide certain key components of Comerica's delivery systems, such as cloud-based computing, networking and storage services, cash services, payment processing services, recording and monitoring services, internet connections and network access, clearing agency services, card processing services and trust processing services. While Comerica conducts due diligence prior to engaging with third-party suppliers and performs ongoing monitoring of supplier controls, it does not control their operations. Further, while Comerica's supplier management policies and practices are designed to comply with current regulations, these policies and practices cannot eliminate this risk. In this context, any supplier failure to properly deliver these services could adversely affect Comerica’s business operations, and result in financial loss, reputational harm, and/or regulatory action. 

•Legal and regulatory proceedings and related matters with respect to the financial services industry, including those directly involving Comerica and its subsidiaries, could adversely affect Comerica or the financial services industry in general.

Comerica is, has been, and may in the future be, subject to various legal and regulatory proceedings. It is inherently difficult to assess the outcome of