Company: STBA
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0000719220-25-000013
Chunk: 12

Company: S&T BANCORP INC
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 12
---
 associated with our products and services could adversely affect our results of operations, financial condition and stock price, negatively impact our brand and reputation and result in regulatory intervention or sanctions.

As a financial institution we are exposed to operational risk in the form of fraudulent activity that may be committed by customers, other third parties, or employees, targeting us and our customers. The risk of fraud continues to increase for the financial services industry. Fraudulent activity has escalated, become more sophisticated, and continues to evolve, as there are more options to access financial services. While we believe we have operational risk controls in place to prevent or detect

fraud or to mitigate the impact of any fraud, we cannot provide assurance that we can prevent or detect fraud or that we will not experience future fraud losses or incur costs or other damage related to such fraud, at levels that adversely affect our results of operation, financial condition or stock price. Furthermore, fraudulent activity could negatively impact our brand and reputation, which could also adversely affect our results of operation, financial condition or stock price. Fraudulent activity could also lead to regulatory intervention or regulatory sanctions.

We rely on certain critical third-party providers for a number of services that are important to our business. An interruption or cessation of an important service by any critical third-party provider could have a material adverse effect on our business.

We are dependent for the majority of our technology, including our core operating system, on certain critical third-party providers. If these companies were to discontinue providing services to us, we may experience significant disruption to our business. In addition, each of these third parties faces the risk of cyber attack, information breach or loss, or technology failure. If any of our critical third-party service providers experience such difficulties, or if there is any other disruption in our relationships with them, we may be required to find alternative sources of such services. We are dependent on these critical third-party providers securing their information systems, over which we have limited control, and a breach of their information systems could adversely affect our ability to process transactions, service our clients or manage our exposure to risk and could result in the disclosure of sensitive, personal customer information, which could have a material adverse impact on our business through damage to our reputation, loss of business, remedial costs, additional regulatory scrutiny or exposure to civil litigation and possible financial liability. Assurance cannot be provided that we could negotiate terms with alternative service sources that are as favorable or could obtain services with similar functionality as found in existing systems without the need to expend substantial resources, if at all, thereby resulting in