Company: WTFCN
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001015328-25-000093
Chunk: 229

Company: WINTRUST FINANCIAL CORP
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 229
---
 service our clients, manage our exposure to risk or expand our business.

Moreover, debit card numbers are susceptible to theft at the point of sale via the physical terminal through which transactions are processed and by other means of hacking. The security and integrity of these transactions are dependent upon retailers’ vigilance and willingness to invest in technology and upgrades. Despite third-party security risks that are beyond our control, we offer our customers protection against fraud and attendant losses for unauthorized use of debit cards in order to stay competitive in the marketplace. Offering such protection to our customers exposes us to potential losses which, in the event of a data breach at one or more retailers of considerable magnitude, may adversely affect our business, financial condition, and results of operations.

Although we believe that we have appropriate information security procedures and controls designed to prevent or limit the effects of a cyber-attack, information security breach or other similar incident, our or our customers’ and/or third parties’ computers, systems or networks may be the target of cyber-attacks, information security breaches or other similar incidents that could result in the unauthorized release, accessing, gathering, monitoring, loss, destruction, modification, acquisition, transfer, use or other processing of our or our customers’ confidential, personal, proprietary and other information. Additionally, we may not be insured against all types of losses as a result of cyber-attacks, information security breaches and other similar incidents, and our insurer may deny coverage as to any future claim or insurance coverage may not be available on reasonable terms, or at all, or may be inadequate to cover all losses resulting from such incidents.

Cyber-attacks, information security breaches or similar incidents, whether directed at us or third parties, may result in a material loss or have material consequences. Furthermore, the public perception that a cyber-attack on our systems has been successful, whether or not this perception is correct, may damage our reputation with customers and third parties with whom we do business. Hacking or other unauthorized disclosure of personal information and identity theft risks, in particular, could cause serious reputational harm. A successful penetration or circumvention of system security could cause us serious negative consequences, including our loss of customers and business opportunities, significant disruption to our operations and business, misappropriation or destruction of our confidential, personal, proprietary or other information and/or that of our customers or other third parties, or damage to our or our customers’ and/or third parties’ computers, systems or networks, and could result in a violation of applicable data privacy and cybersecurity laws and regulations and other laws and