Binah Capital Group (BCG) Risk Factors

Litigation and other proceedings may include, but are not limited to, complaints from or litigation by customers or reinsurers, related to alleged breaches of contract or otherwise. As our market share increases, competitors may pursue litigation to require us to change our business practices or offerings and limit our ability to compete effectively. We continually face risks associated with litigation of various types arising in the normal course of our business operations, including disputes relating to general commercial and corporate litigation. We are not currently involved in any material litigation with our customers, consumers, or affinity partners. We cannot predict with any certainty whether we will be involved in such litigation in the future or what impact such litigation would have on our business. If we were to be involved in litigation and it was determined adversely, it could require us to pay significant damage amounts or to change aspects of our operations, either of which could have a material adverse effect on our financial results. Even claims without merit can be time-consuming and costly to defend and may divert management's attention and resources away from our business and adversely affect our business, results of operations and financial condition. Additionally, routine lawsuits over claims that are not individually material could in the future become material if aggregated with a substantial number of similar lawsuits. In addition to increasing costs, a significant volume of customer complaints or litigation could adversely affect our brand and reputation, regardless of whether such allegations are valid or whether we are liable. We cannot predict with certainty the costs of defense, the costs of prosecution, insurance coverage or the ultimate outcome of litigation or other proceedings filed by or against us, including remedies or damage awards, and adverse results in such litigation, and other proceedings may harm our business and financial condition.

We could be adversely affected by changes in applicable tax laws, regulations, or administrative interpretations thereof. For example, the U.S. federal tax legislation commonly referred to as the Tax Cuts and Jobs Act (the "TCJA"), enacted in December 2017, resulted in fundamental changes to the Internal Revenue Code ("Code"), including, among many other things, a reduction to the federal corporate income tax rate, a limitation on the deductibility of business interest expense, a limitation on the deductibility of certain director and officer compensation expense, limitations on the use of net operating loss carrybacks and carryovers and changes relating to the scope and timing of U.S. taxation on earnings from international business operations. Subsequent legislation, the Coronavirus Aid, Relief, and Economic Security Act (the "CARES Act"), enacted on March 27, 2020, relaxed certain of the limitations imposed by the TCJA for certain taxable years, including the limitation on the use and carryback of net operating losses and the limitation on the deductibility of business interest expense. The exact impact of the TCJA and the CARES Act for future years is difficult to quantify, but these changes could materially adversely affect holders of our common stock. In addition, on August 16, 2022, President Biden signed into law the Inflation Reduction Act of 2022, which among other things, imposes a 1% excise tax on the fair market value of stock repurchased by "covered corporations" beginning in 2023. Other changes could be enacted in the future to increase the corporate tax rate, limit further the deductibility of interest or effect other changes that could have a material adverse effect on our business, results of operations and financial condition. Such changes could also include increases in state taxes and other changes to state tax laws to replenish state and local government finances depleted by costs attributable to the COVID-19 pandemic and the reduction in tax revenues due to the accompanying economic downturn. In addition, our effective tax rate and tax liability are based on the application of current income tax laws, regulations, and treaties. These laws, regulations and treaties are complex, and the manner in which they apply to the Company and its diverse set of business arrangements is often open to interpretation. Significant management judgment is required in determining the Company's provision for income taxes, its deferred tax assets and liabilities and any valuation allowance recorded against its net deferred tax assets. The tax authorities could challenge our interpretation of laws, regulations, and treaties, resulting in additional tax liability or adjustment to its income tax provision that could increase its effective tax rate. Changes to tax laws may also adversely affect our ability to attract and retain key personnel.

Use of our technology involves the storage and transmission of information, including personal information, in relation to our staff, contractors, business partners and current, past, or potential customers. Security breaches, including by hackers or insiders, could expose confidential information, which could result in potential regulatory investigations, fines, penalties, compliance orders, liability, litigation, and remediation costs, as well as reputational harm, any of which could materially adversely affect our business and financial results. Further, outside parties may attempt to fraudulently induce employees or customers to disclose sensitive information in order to gain access to our information or customers' information. Any of these incidents could result in an investigation by a competent regulator, resulting in a fine or penalty, or an order to implement specific compliance measures. It could also trigger claims by affected third parties. While we use encryption and authentication technology licensed from third parties designed to effect secure transmission of such information, we cannot guarantee the security of the transfer and storage of personal information. Any or all of the issues above could adversely affect our ability to attract new customers or retain existing customers, or subject us to governmental or third-party lawsuits, investigations, regulatory fines or other actions or liability, resulting in a material adverse effect to our business, results of operations and financial condition. There are numerous existing and proposed federal, state, and local laws in the United States and around the world regarding privacy and the collection, processing, storing, sharing, disclosing, using, cross-border transfer, and the protection of personal information and other data. The scope of these existing and proposed laws are changing, subject to differing interpretations, may be costly to comply with, and may be inconsistent between countries and jurisdictions or conflict with other rules. These laws include the California Consumer Privacy Act of 2018 (the "CCPA"), which became effective on January 1, 2020. The CCPA gives California residents expanded rights to access and delete their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used. The CCPA provides civil penalties for violations, as well as a private right of action and statutory damages for data breaches that are expected to increase data breach litigation. The CCPA may increase our compliance costs and potential liability. Any failure or perceived failure to comply with these rules may result in regulatory fines or penalties including orders that require us to change the way we process data (including by way of our algorithms). In the event of a data breach, we are also subject to breach notification laws in the jurisdictions in which we operate, including U.S. state laws, and the risk of litigation and regulatory enforcement actions. Additionally, we are subject to the terms of our privacy policies and privacy-related obligations to third parties. Any failure or perceived failure by us to comply with our privacy policies, our privacy-related obligations to customers or other third parties, or our privacy-related legal obligations, or any compromise of security that results in the unauthorized release or transfer of sensitive information, which could include personally identifiable information or other user data, may result in governmental or regulatory investigations, enforcement actions, regulatory fines, compliance orders, litigation or public statements against us by consumer advocacy groups or others, and could cause customers to lose trust in us, all of which could be costly and have an adverse effect on our business. In addition, new and changed rules and regulations regarding privacy, data protection of customer information could cause us to delay planned uses and disclosures of data to comply with applicable privacy and data protection requirements. Moreover, if third parties that we work with violate applicable laws or our policies, such violations also may put personal information at risk, which may result in increased regulatory scrutiny and have a material adverse effect to our reputation, business, and operating results.

Each of our four broker-dealer subsidiaries depends on the operational capacity and ability of its clearing broker for the orderly processing of transactions. By engaging the processing services of a clearing firm, each of our broker-dealer subsidiaries is exempt from some capital reserve requirements and other regulatory requirements imposed by federal and state securities laws. If these clearing agreements were terminated for any reason, we would be forced to find alternative clearing arrangements and could have an impact on our business. We cannot assure you that we would be able to find alternative clearing arrangements on acceptable terms to us or at all. Also, the loss of a clearing firm could hamper the ability of our subsidiaries to recruit and retain their respective independent financial advisors.

Several competitors have brands that are well recognized. As a relatively new entrant into the digital market, we spend considerable capital to create brand awareness and build our reputation. We may not be able to build brand awareness, and our efforts at building, maintaining, and enhancing our reputation could fail. Complaints or negative publicity about our business practices, our marketing and advertising campaigns, our compliance with applicable laws and regulations, the integrity of the data that we provide to consumers, data privacy and security issues, and other aspects of our business, whether valid or not, could diminish confidence in our brand, which could adversely affect our reputation and business. As we expand our product offerings and enter new markets, we need to establish our reputation with new customers, and to the extent we are not successful in creating positive impressions, our business in these newer markets could be adversely affected. There can be no assurance that we will be able to maintain or enhance our reputation, and failure to do so could materially adversely affect our business, results of operations and financial condition. If we are unable to maintain or enhance consumer awareness of our brand cost-effectively, our business, results of operations and financial condition could be materially adversely affected.

Our continued success is dependent on our systems, applications, and software continuing to operate and to meet the changing needs of our customers and users. We rely on our technology and engineering staff and vendors to successfully implement changes to and maintain our systems and services in an efficient and secure manner. Like all information systems and technology, our website may contain material errors, failures, vulnerabilities or bugs, particularly when new features or capabilities are released, and may be subject to computer viruses or malicious code, break-ins, phishing impersonation attacks, attempts to overload our servers with denial-of-service or other attacks, ransomware and similar incidents or disruptions from unauthorized use of our computer systems, as well as unintentional incidents causing data leakage, any of which could lead to interruptions, delays or website or online app shutdowns, or could cause loss of critical data or the unauthorized disclosure, access, acquisition, alteration or use of personal or other confidential information. If we experience compromises to our security that result in technology performance, integrity, or availability problems, the complete shutdown of our website or the loss or unauthorized disclosure, access, acquisition, alteration or use of confidential information, customers may lose trust and confidence in us, and customers may decrease the use of our website or stop using our website entirely. Because the techniques used to obtain unauthorized access, disable, or degrade service, or sabotage systems change frequently, often they are not recognized until launched against a target, and may originate from less regulated and remote areas around the world, we may be unable to proactively address these techniques or to implement adequate preventative measures. Even if we take steps that we believe are adequate to protect us from cyber threats, hacking against our competitors or other companies could create the perception among our customers or potential customers that our website is not safe to use. A significant impact on the performance, reliability, security, and availability of our systems, software, or services may harm our reputation, impair our ability to operate, retain existing customers or attract new customers, and expose us to legal claims and government action, each of which could have a material adverse impact on our financial condition, results of operations, and growth prospects.

From time to time, third parties may misappropriate our data through website scraping, robots or other means and aggregate this data on their websites with data from other companies. In addition, copycat websites or online apps may misappropriate data and attempt to imitate our brand or the functionality of our website. If we become aware of such websites or online apps, we intend to employ technological or legal measures in an attempt to halt their operations. However, we may be unable to detect all such websites or online apps in a timely manner and, even if we could, technological and legal measures may be insufficient to halt their operations. In some cases, particularly in the case of websites or online apps operating outside of the United States, our available remedies may not be adequate to protect us against the effect of the operation of such websites or online apps. Regardless of whether we can successfully enforce our rights against the operators of these websites or online apps, any measures that we may take could require us to expend significant financial or other resources, which could harm our business, results of operations or financial condition. In addition, to the extent that such activity creates confusion among consumers or advertisers, our brand and business could be harmed.

U.S. and global markets are experiencing volatility and disruption following the escalation of geopolitical tensions, the invasion of Ukraine by Russia in February 2022 and the Israel-Hamas war. In response to the invasion of Ukraine by Russia, the North Atlantic Treaty Organization ("NATO") deployed additional military forces to eastern Europe, and the United States, the United Kingdom, the European Union and other countries have announced various sanctions and restrictive actions against Russia, Belarus and related individuals and entities, including the removal of certain financial institutions from the Society for Worldwide Interbank Financial Telecommunication (SWIFT) payment system. Certain countries, including the United States, have also provided and may continue to provide military aid or other assistance to Ukraine and Israel during the ongoing military conflicts, increasing geopolitical tensions. The invasion of Ukraine by Russia, the Israel-Hamas war and the resulting measures that have been taken, and could be taken in the future, by NATO, the United States, the United Kingdom, the European Union and other countries have created global security concerns that could have a lasting impact on regional and global economies. Although the length and impact of the ongoing military conflict in Ukraine and Israel is highly unpredictable, the conflicts could lead to market disruptions, including significant volatility in energy and other commodity prices, credit and capital markets, as well as supply chain interruptions. Additionally, these and any other military actions and any resulting sanctions could adversely affect the global economy and financial markets and lead to instability and lack of liquidity in capital markets. Any of the abovementioned factors, or any other negative impact on the global economy, capital markets or other geopolitical conditions resulting from the Russian invasion of Ukraine, the Israel-Hamas war, and subsequent sanctions, could adversely affect the business and operations. The extent and duration of the Russian invasion of Ukraine, the Israel-Hamas war, resulting sanctions and any related market disruptions are impossible to predict, but could be substantial, particularly if current or new sanctions continue for an extended period of time or if geopolitical tensions result in expanded military operations on a global scale. Any such disruptions may also have the effect of heightening many of the other risks described elsewhere in this "Risk Factors" section, such as those related to the market for our securities.

Like other brokerage and financial services firms, our business and profitability are directly affected by elements that are beyond our control, such as economic and political conditions, broad trends in business and finance, changes in volume of securities and futures transactions, changes in the markets in which such transactions occur and changes in how such transactions are processed. A weakness in securities markets, such as a slowdown causing reduction in trading volume in U.S. or foreign securities and derivatives, has historically resulted in reduced transaction revenues and would have a material adverse effect on our business, financial condition, and results of operations.