CNB Financial Corp

The financial services industry is undergoing rapid technological change, and technological advances, including those related to artificial intelligence ("AI"), are likely to intensify competition. In addition to improving customer services, effective use of technology increases efficiency and enables financial institutions to reduce costs. Accordingly, the Corporation’s future success will depend in part on its ability to address customer needs by using technology. The Corporation cannot assure you that it will be able to successfully take advantage of technological changes or advances or develop and market new technology driven products and services to its customers. Failure to keep pace with technological change affecting the financial services industry could have a material adverse effect on the Corporation's financial condition, results of operations, or liquidity.

The Corporation, primarily through the Bank, depends on its information technology networks and systems to continuously process, record and monitor a large number of customer transactions and to process, transmit and store proprietary and confidential information, including personal information of employees and customers. Accordingly, the Corporation’s and its subsidiaries’ information technology networks and systems must continue to be safeguarded and monitored for potential failures, vulnerabilities, disruptions and breakdowns. We face cybersecurity threats, including system, network or internet failures, cyber attacks, ransomware and other malware, social engineering, phishing schemes and workforce member error, negligence, or fraud. Although the Corporation has business continuity plans and other safeguards in place, any such cybersecurity incident, including those impacting personal information, could result in customer attrition, regulatory fines, penalties or intervention, reputational damage, reimbursement or other compensation costs, and/or additional compliance costs, any of which could materially adversely affect the Corporation’s results of operations or financial condition. Further, adoption of AI tools by us or by third parties may pose new cybersecurity challenges. Threat actors may use AI tools to automate and enhance cybersecurity attacks against us. We use software and platforms designed to detect such cybersecurity threats, including AI-based tools, but these threats could become more sophisticated and harder to detect and counteract, which may pose significant risks to our data security and systems.

Our use of AI could expose us to various risks.

We have begun to utilize AI technologies in various aspects of our business, including internal training material creation. AI technologies are susceptible to errors and other malfunctions which could lead to operational challenges and reputational risks. In addition, we may be subject to increasing regulations related to our use of AI, including regulations related to privacy, data security, and intellectual property rights, which could expose us to legal risks.

The financial services industry is undergoing rapid technological change, and technological advances, including those related to artificial intelligence, are likely to intensify competition. In addition to improving customer services, effective use of technology increases efficiency and enables financial institutions to reduce costs. Accordingly, the Corporation’s future success will depend in part on its ability to address customer needs by using technology. The Corporation cannot assure you that it will be able to successfully take advantage of technological changes or advances or develop and market new technology driven products and services to its customers. Failure to keep pace with technological change affecting the financial services industry could have a material adverse effect on the Corporation's financial condition, results of operations, or liquidity.

The Corporation, primarily through the Bank, depends on its information technology networks and systems to continuously process, record and monitor a large number of customer transactions and to process, transmit and store proprietary and confidential information, including personal information of employees and customers. Accordingly, the Corporation’s and its subsidiaries’ information technology networks and systems must continue to be safeguarded and monitored for potential failures, vulnerabilities, disruptions and breakdowns. We face cybersecurity threats, including system, network or internet failures, cyber attacks, ransomware and other malware, social engineering, phishing schemes and workforce member error, negligence, or fraud. Although the Corporation has business continuity plans and other safeguards in place, any such cybersecurity incident, including those impacting personal information, could result in customer attrition, regulatory fines, penalties or intervention, reputational damage, reimbursement or other compensation costs, and/or additional compliance costs, any of which could materially adversely affect the Corporation’s results of operations or financial condition. Further, new technologies such as artificial intelligence may be more capable at evading these safeguard measures.

Our use of artificial intelligence could expose us to various risks.

We have begun to utilize artificial intelligence technologies in various aspects of our business, including internal training material creation. Artificial intelligence technologies are susceptible to errors and other malfunctions which could lead to operational challenges and reputational risks. In addition, we may be subject to increasing regulations related to our use of artificial intelligence, including regulations related to privacy, data security, and intellectual property rights, which could expose us to legal risks.