Company: CCNE
Filing Date: 2025-03-06
Form Type: 10-K
Source: 0000736772-25-000071
Chunk: 33

Company: CNB FINANCIAL CORP/PA
Filing Date: 2025-03-06
Form: 10-K
Item: Item 1A
Chunk 33
---
 regulator could deem our security measures not to be appropriate given the lack of prescriptive measures in certain data protection laws. Furthermore, increased regulation of data collection, use and retention practices, including self-regulation and industry standards, changes in existing laws and regulations, enactment of new laws and regulations, increased enforcement activity, and changes in interpretation of laws, could increase our cost of compliance and operation, limit our ability to grow our business or otherwise harm the Corporation.

19

While we have purchased cybersecurity insurance, there are no assurances that the coverage would be adequate in relation to any incurred losses. Moreover, as cyber attacks increase in frequency and magnitude, we may be unable to obtain cybersecurity insurance in amounts and on terms we view as adequate for our operations. Further information relating to cybersecurity risk management is discussed in Item 1C. “Cybersecurity” of this report.

A pandemic and measures intended to prevent its spread, could have a material adverse effect on our business, results of operations, cash flows, and financial condition.

A pandemic could negatively impact the global economy, disrupt financial markets and international trade, and result in varying unemployment levels, all of which could negatively impact our business, results of operations, cash flows, and financial condition. In response to pandemic outbreaks, governments and other authorities around the world, including federal, state and local authorities in the United States, have imposed, and may in the future impose measures intended to mitigate its spread, including restrictions on freedom of movement and business operations such as issuing guidelines, travel bans, border closings, business closures and quarantine orders.

Our business and financial performance could be adversely affected, directly or indirectly, by terrorist activities, international hostilities or domestic civil unrest.

Neither the occurrence nor the potential impact of geopolitical instabilities, terrorist activities, international hostilities or other extraordinary events beyond the Corporation’s control can be predicted. However, these occurrences could adversely impact us, for example, by preventing us from conducting our business in the ordinary course. Also, their impact on our borrowers, depositors, other customers, suppliers or other counterparties could result in indirect adverse effects on us. Other indirect adverse consequences from these occurrences could result from impacts to the financial markets, the economy in general or in any region, or key parts of the infrastructure (such as the power grid) on which we and our customers rely. These types of indirect effects, whether specific to our counterparties or more generally applicable, could lead, for example, to an increase in delinquencies, bankruptcies or defaults that could result in the Corporation