We depend upon data processing, software, communication, and information access and exchange on a variety of computing platforms and networks and over the internet, and we rely on the services of a variety of third party vendors to meet our data processing and communication needs. Consequently, we are subject to certain related operational risks, both in our operations and through those of our service providers. These risks include, but are not limited to, data processing system failures and errors, inadequate or failed internal processes, customer or employee fraud, cyberattacks and catastrophic failures resulting from civil unrest, terrorist acts or natural disasters. Despite the safeguards we maintain, we cannot be certain that all of our systems are entirely free from vulnerability to attack or other technological difficulties or failures. Information security risks have increased significantly due to the use of online, telephone and mobile banking channels by customers and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties. Our technologies, systems and networks and those of certain of our service providers as well as our customers’ devices, may be the target of cyberattacks, computer viruses, malicious code, phishing attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of our or our customers’ confidential, proprietary and other information, the theft of customer assets through fraudulent transactions or disruption of our or our customers’ or other third parties’ business operations. If information security is breached or other technology difficulties or failures occur, information may be lost or misappropriated, services and operations may be interrupted and we could be exposed to claims from customers, any or all of which could adversely affect our reputation, business, results of operations or financial condition. While we have instituted safeguards and controls, we cannot provide assurance that they will be effective in all cases, and their failure in some circumstances could have a material adverse effect on our business, financial condition or results of operations. 15