Hilltop Holdings Inc.

Overall, competition among providers of financial products and services continues to increase as technological advances, including artificial intelligence and automation, have lowered the barriers to entry for financial technology companies, with consumers having the opportunity to select from a growing variety of traditional and nontraditional alternatives, including online checking, savings and brokerage accounts, online lending, online insurance underwriters, crowdfunding, digital wallets, and money transfer services. The ability of non-banking financial institutions to provide services previously limited to commercial banks has intensified competition. Because non-banking financial institutions are not subject to many of the same regulatory restrictions as banks and bank holding companies, they can often operate with greater flexibility and lower cost structures.

We rely heavily on communications and information systems to conduct our business and maintain the security of confidential information and complex transactions, which subjects us to an increasing risk of cyber incidents and threats of cyber-attacks from these activities due to a combination of new technologies and the increasing use of the Internet to conduct financial transactions, including the usage of artificial intelligence and automation, as well as a potential failure, interruption or breach in the security of these systems, including those that could result from attacks or planned changes, upgrades and maintenance of these systems. Such cyber incidents, which are becoming increasingly sophisticated through the use of techniques and tools-including artificial intelligence that circumvent security controls, evade detection and remove forensic evidence, or other disruption or failure in our information systems, could result in failures or disruptions in our customer relationship management, securities trading, general ledger, deposits, computer systems, electronic underwriting servicing or loan origination systems; or unauthorized disclosure of confidential and non-public information maintained within our systems. We also utilize relationships with third parties to aid in a significant portion of our information systems, communications, data management and transaction processing. These third parties with which we do business may also be sources of cybersecurity or other technological risks, including operational errors, system interruptions or breaches, unauthorized disclosure of confidential information and misuse of intellectual property, and have experienced cyber-attacks. Evolving technologies and the increased use of artificial intelligence and automation by third parties further increase the risk of cyber-attacks and threats of cyber-attacks against us or those third parties that we depend upon. If our third-party service providers encounter any of these issues, we could be exposed to disruption of service, reputational damages, and litigation risk, any of which could have a material adverse effect on our business.

Like most financial services companies, we significantly depend on technology to deliver our products and services and to otherwise conduct business. The financial services industry is continually undergoing rapid technology change with frequent introductions of new technology-driven products and services, including increased usage of artificial intelligence and automation. To remain technologically competitive and operationally efficient, we have either begun the significant investment in or have plans to invest in new technological solutions, substantial core system upgrades and other technology enhancements within each of our operating segments and corporate. Many of these solutions and enhancements have a significant duration, include phased implementation schedules, are tied to critical systems, and require substantial internal and external resources for design and implementation. Many of our competitors have greater resources to develop these and other new technologies without reliance on third-party vendors or developers, which can reduce their costs and exposure to third-party risks, which could put us at a competitive disadvantage.

Additionally, any implementation by us of certain new technologies, such as artificial intelligence, machine learning and other large language models and similar technologies, can expose us to new or increased operational risks, including risks related to our system of internal controls. The implementation of these new technologies may have unintended consequences due to their limitations or failure to use and implement them effectively. Although we take steps to mitigate

Overall, competition among providers of financial products and services continues to increase as technological advances, including the rise of artificial intelligence and automation, have lowered the barriers to entry for financial technology companies, with consumers having the opportunity to select from a growing variety of traditional and nontraditional alternatives, including online checking, savings and brokerage accounts, online lending, online insurance underwriters, crowdfunding, digital wallets, and money transfer services. The ability of non-banking financial institutions to provide services previously limited to commercial banks has intensified competition. Because non-banking financial institutions are not subject to many of the same regulatory restrictions as banks and bank holding companies, they can often operate with greater flexibility and lower cost structures. This competition could result in the loss of customer deposits and brokerage accounts and lower mortgage originations which could have a material adverse effect on our financial condition and results of operations.

Overall, competition among providers of financial products and services continues to increase as technological advances, including artificial intelligence and automation, have lowered the barriers to entry for financial technology companies, with consumers having the opportunity to select from a growing variety of traditional and nontraditional alternatives, including online checking, savings and brokerage accounts, online lending, online insurance underwriters, crowdfunding, digital wallets, and money transfer services. The ability of non-banking financial institutions to provide services previously limited to commercial banks has intensified competition. Because non-banking financial institutions are not subject to many of the same regulatory restrictions as banks and bank holding companies, they can often operate with greater flexibility and lower cost structures.

We rely heavily on communications and information systems to conduct our business and maintain the security of confidential information and complex transactions, which subjects us to an increasing risk of cyber incidents and threats of cyber attacks from these activities due to a combination of new technologies and the increasing use of the Internet to conduct financial transactions, including the usage of artificial intelligence and automation, as well as a potential failure, interruption or breach in the security of these systems, including those that could result from attacks or planned changes, upgrades and maintenance of these systems. Such cyber incidents could result in failures or disruptions in our customer relationship management, securities trading, general ledger, deposits, computer systems, electronic underwriting servicing or loan origination systems; or unauthorized disclosure of confidential and non-public information maintained within our systems. We also utilize relationships with third parties to aid in a significant portion of our information systems, communications, data management and transaction processing. These third parties with which we do business may also be sources of cybersecurity or other technological risks, including operational errors, system interruptions or breaches, unauthorized disclosure of confidential information and misuse of intellectual property, and have experienced cyber attacks. Evolving technologies and the increased use of artificial intelligence and automation by third parties further increase the risk of cyber attacks and threats of cyber attacks against us or those third parties that we depend upon. If our third-party service providers encounter any of these issues, we could be exposed to disruption of service, reputation damages, and litigation risk, any of which could have a material adverse effect on our business.

The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology-driven products and services, including increased usage of artificial intelligence and automation. Many of our competitors have substantially greater resources to invest in technological improvements. We may not be able to effectively or timely implement new technology-driven products and services or be successful in marketing these products and services to our customers and clients. Failure to successfully keep pace with technological change affecting the financial services industry and avoid interruptions, errors and delays could have a material adverse impact on our business, financial condition, results of operations or cash flows.

Overall, competition among providers of financial products and services continues to increase as technological advances, including the rise of artificial intelligence and automation, have lowered the barriers to entry for financial technology companies, with consumers having the opportunity to select from a growing variety of traditional and nontraditional alternatives, including online checking, savings and brokerage accounts, online lending, online insurance underwriters, crowdfunding, digital wallets, and money transfer services. The ability of non-banking financial institutions to provide services previously limited to commercial banks has intensified competition. Because non-banking financial institutions are not subject to many of the same regulatory restrictions as banks and bank holding companies, they can often operate with greater flexibility and lower cost structures. This competition could result in the loss of customer deposits and brokerage accounts and lower mortgage originations which could have a material adverse effect on our financial condition and results of operations.