Company: COFS
Filing Date: 2025-03-11
Form Type: 10-K
Source: 0000950170-25-036839
Chunk: 7

Company: CHOICEONE FINANCIAL SERVICES INC
Filing Date: 2025-03-11
Form: 10-K
Item: Item 1A
Chunk 7
---
 its information systems, there can be no assurance that any such failures, interruptions or security breaches of the Company’s information systems or its customers’ information or computer systems would not damage the Company’s reputation, result in a loss of customer business, subject the Company to additional regulatory scrutiny, or expose the Company to civil litigation and financial liability, any of which could have a material adverse effect on the Company’s financial condition and results of operations.

Cybersecurity incidents could disrupt business operations, result in the loss of critical and confidential information, and adversely impact our reputation and results of operations.

 13

Global cybersecurity threats and incidents can range from uncoordinated individual attempts to gain unauthorized access to information technology (IT) systems to sophisticated and targeted measures known as advanced persistent threats, directed at the Company and/or its third party service providers. Although we employ reasonably comprehensive measures to prevent, detect, address and mitigate these threats (including access controls, employee training, data encryption, vulnerability assessments, continuous monitoring of our IT networks and systems and maintenance of backup and protective systems), cybersecurity incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption or unavailability of critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. The potential consequences of a material cybersecurity incident include reputational damage, litigation with third parties and increased cybersecurity protection and remediation costs, which in turn could materially adversely affect our results of operations.

Employee misconduct could adversely impact our reputation and results of operations.

Our reputation is crucial to maintaining and developing relationships with our customers. There is a risk our employees could engage in misconduct that adversely affects our business. For example, if an employee were to engage (or be accused of engaging) in fraudulent, illegal, or suspicious activities, including fraud or theft, we could be subject to regulatory sanctions or penalties, or litigation, and suffer significant harm to our reputation, financial position, and customer relationships as a result. Additionally, our business often requires that we deal with sensitive customer information. If our employees were to improperly use or disclose this information, even inadvertently, we could suffer significant harm to our reputation, financial position and current and future business relationships. We may not be able to deter all employee misconduct, and the precautions we take to detect and prevent this misconduct may not be effective in all circumstances. Misconduct or harassment by our employees (or unsubstantiated allegations of the same), or improper use or disclosure of confidential information by our employees, even inadvertently, could result