Company: COHN
Filing Date: 2025-03-12
Form Type: 10-K
Source: 0001437749-25-007158
Chunk: 297

Company: Cohen & Co Inc.
Filing Date: 2025-03-12
Form: 10-K
Item: Item 1
Chunk 297
---
 use and implementation of AI technology, limit our ability to integrate AI, and increase our compliance costs and the risk of non-compliance.

Additionally, we may integrate AI into our operations, technology, products, and services in the future. AI models may produce output or take action that is incorrect, infringe on the intellectual property rights of others, or is otherwise harmful. In addition, the complexity of AI models may make it challenging to understand why they generate particular outputs. There can be no assurance that any products or services that utilize AI will be successful or that we will keep pace with the rapid evolution of AI.  Additionally, others may use AI to increase the frequency and severity of cybersecurity attacks against us or our third-party service providers, which could adversely impact our business and results of operations.

      26

Failure to protect client data or prevent breaches of our information systems could expose us to liability or reputational damage.

The secure transmission of confidential information over public networks is a critical element of our operations. We are dependent on information technology networks and systems to securely process, transmit and store electronic information and to communicate among our locations and with our clients and vendors. As the breadth and complexity of this infrastructure continue to grow, the potential risk of security breaches and cyber-attacks increases. As a financial services company, we may be subject to cyber-attacks and phishing scams by third parties. In addition, vulnerabilities of our external service providers and other third parties could pose security risks to client information. Such breaches could lead to shutdowns or disruptions of our systems and potential unauthorized disclosure of confidential information and violations of privacy laws and regulations.

In providing services to clients, we manage, utilize and store sensitive and confidential client data, including personal data. As a result, we are subject to numerous laws and regulations designed to protect this information, such as U.S. federal and state laws and foreign regulations governing the protection of personally identifiable information. These laws and regulations are increasing in complexity and number, change frequently and sometimes conflict. If any person, including any of our employees, negligently disregards or intentionally breaches our established controls with respect to client data, or otherwise mismanages or misappropriates that data, we could be subject to significant monetary damages, regulatory enforcement actions, fines and/or criminal prosecution in one or more jurisdictions. Unauthorized disclosure of sensitive or confidential client data, whether through systems failure, employee negligence, fraud or misappropriation, could damage our reputation and cause us to lose clients. Similarly, unauthorized