Company: WSBC
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0000950170-25-030795
Chunk: 148

Company: WESBANCO INC
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 148
---
, market, operational, reputational and strategic risks. Included in this framework are three independent lines of defense, which allows Wesbanco to effectively govern and manage risk. If our risk management framework is not effective, Wesbanco could be exposed to unexpected losses and become subject to regulatory consequences, as a result of which our business, financial condition, results of operations or prospects could be materially adversely affected.

RISKS RELATED TO THE USE OF TECHNOLOGY

INTERRUPTION TO OUR INFORMATION SYSTEMS OR BREACHES IN SECURITY COULD ADVERSELY AFFECT WESBANCO’S OPERATIONS.

Wesbanco relies on information systems and communications for operating and monitoring all major aspects of business, as well as internal management functions. Any failure, interruption, intrusion or breach in security of these systems could result in failures or disruptions in the Wesbanco customer relationship, management, general ledger, deposit, loan and other systems. While Wesbanco has policies, procedures and technical safeguards designed to prevent or limit the effect of any failure, interruption, intrusion or security breach of its information systems, and also performs testing of business continuity and disaster recovery plans, there can be no absolute assurance that the above-noted issues will not occur or, if they do occur, that they will be adequately addressed.

There have been efforts on the part of third parties to breach data security at various financial institutions. The ability of our customers to bank remotely, including online and through mobile devices, requires secure transmission of confidential information and increases the risk of data security breaches. Because the techniques used to attack financial services company communications and information systems change frequently (and generally increase in sophistication), often attacks are not recognized until launched against a target, may be supported by foreign governments or other well-financed entities, and may originate from less regulated and remote areas around the world, we may be unable to address these techniques in advance of attacks, including by implementing adequate preventative measures. Certain financial institutions in the United States have also experienced attacks from technically sophisticated and well-resourced third parties that were intended to disrupt normal business activities by making internet banking systems inaccessible to customers for extended periods. These “denial-of-service” attacks, if attempted, would require substantial resources to defend, and may affect customer satisfaction and behavior. Moreover, the development and maintenance of preventative and detective measures is costly and requires ongoing monitoring and updating as technologies change and efforts to overcome security measures become more sophisticated. Despite our efforts, the possibility of these events occurring cannot be eliminated.

21

Cyber-attacks on third