First American Financial (FAF) Risk Factors

In addition to the Company's innovative activities, other participants in the real estate industry are seeking to innovate in ways that could adversely impact the Company's businesses. These participants include certain of the Company's sources of business, competitors, investments and ultimate customers. Innovations by these participants may change the demand for the Company's products and services, the manner in which the Company's products and services are ordered or fulfilled and the revenue or profitability derived from the Company's products and services. The Company's investments in some of these participants could also facilitate efforts that ultimately disrupt the Company's business or enable competitors. Accordingly, the Company's efforts to anticipate and participate in these transformations could require significant additional investment and management attention and may not succeed. These innovative efforts by third parties, and the manner in which the Company, its agents and other industry participants respond to them, could therefore have an adverse effect on the Company.

The Company uses computer software applications, systems and other technologies (collectively referred to as "systems"), some of which it owns and manages and some of which are owned and/or managed by third parties, including providers of distributed computing infrastructure platforms commonly known as the "cloud." The Company and its agents, suppliers, service providers, and customers use systems to receive, process, store and transmit business information, including non-public personal information as well as data from suppliers and other information upon which the Company's business relies. The Company also uses these systems to manage substantial cash, investment assets, bank deposits, trust assets, escrow account balances and custodial balances on behalf of itself and its customers, among other activities. Many of the Company's products, services and solutions involving the use of real property related data are fully reliant on these systems and are only available electronically. Accordingly, for a variety of reasons, the integrity of these systems and the protection of the information that resides thereon are critically important to the Company's successful operation. These systems have been subject to, and are likely to continue to be the target of, malware, cyberattacks and cyberterrorism, ransomware attacks, phishing attacks, unauthorized access, online and offline fraud and other malicious activity. These attacks are prevalent, continue to increase in frequency and sophistication, and are increasingly difficult to detect. These systems also have known and unknown vulnerabilities. Once identified, the Company's information technology and information security personnel seek to remediate these vulnerabilities based on the level of risk presented. For a number of reasons, including the introduction of new vulnerabilities, resource constraints, competing business demands and dependence on third parties, a number of unremediated vulnerabilities will always exist. Remediation of some vulnerabilities are outside of the control of the Company and third-party remediation efforts may not be timely provided or implemented or otherwise adequate, even when the level of risk is critical or high. Further, certain other potential causes of system damage or other negative system-related events are wholly or partially beyond the Company's control, such as natural disasters, vendor failures to satisfy service level requirements, third party negligence or intentional acts, and power or telecommunications failures. These circumstances could expose the Company to system-related damages, failures, interruptions, cyberattacks, as the Company experienced in December 2023 (as described further in Item 1C. Cybersecurity of the Company's Annual Report on Form 10-K for the year ended December 31, 2023), and other negative events or could otherwise disrupt the Company's business and could also result in the loss or unauthorized release, gathering, monitoring or destruction of confidential, proprietary and other information pertaining to the Company, its customers, employees, agents or suppliers. In conducting its business and delivering its products and services, the Company also utilizes service providers. These service providers and the systems they utilize are typically subject to similar types of system- and information security-related risks that the Company faces. The Company provides certain of these service providers with data, including nonpublic personal information. There is no guarantee that the Company's due diligence or ongoing vendor oversight will be sufficient to ensure the integrity and security of the systems utilized by these service providers or the protection of the information that resides thereon. Certain laws and contracts the Company has entered into require it to comply with certain information security requirements and to notify various parties, including consumers or customers, in the event of certain actual or potential data breaches or systems failures, including those of the Company's service providers. Further, the Company's financial institution customers have obligations to safeguard their systems and sensitive information and the Company may be bound contractually and/or by regulation to comply with the same requirements. If the Company or its service providers fail to comply with applicable regulations and contractual requirements, the Company could be exposed to lawsuits, governmental proceedings or the imposition of fines, among other consequences. Any inability of the Company or its service providers to prevent or adequately respond to the issues described above could disrupt the Company's business, delay the delivery of its products and services, inhibit its ability to retain existing customers or attract new customers, divert management's time and energy, otherwise harm its reputation and/or result in financial losses, litigation, regulatory inquiries, increased costs or other adverse consequences that could be material to the Company.

The Company utilizes lower cost labor in countries such as India and the Philippines, among others. These countries are subject to relatively high degrees of political and social instability and may lack the infrastructure to withstand natural disasters, health crises and other catastrophe events. Such disruptions could decrease efficiency and increase the Company's costs. Weakness of the United States dollar in relation to the currencies used in these countries may also reduce the savings achievable through this strategy. Laws, regulations, business requirements or social or political pressures may require the Company to use labor based in the United States or may otherwise effectively increase the Company's labor costs abroad. The Company may not be able to pass on these increased costs to its customers.

Title insurance rates are subject to extensive regulation, which varies from state to state. In many states the approval of the applicable state insurance regulator is required prior to implementing a rate change. These regulations could hinder the Company's ability to promptly adapt to changing market dynamics through price adjustments, which could adversely affect its results of operations, particularly in a rapidly declining market.

Historically, uncertainty and negative trends in general economic conditions in the United States and abroad, including significant tightening of credit markets and a general decline in the value of real property, have created a difficult operating environment for the Company. These conditions also tend to negatively impact, and recently have impacted, the amount of funds the Company receives from third parties held in trust pending the closing of commercial and residential real estate transactions. The Company deposits a substantial portion of these funds, as well as its own funds, with the federal savings bank it owns. The Company's bank invests those funds and any realized and unrealized losses on those investments will be reflected in the Company's consolidated financial statements. The likelihood of such losses, which generally would not occur if the Company were to deposit these funds in an unaffiliated entity, increases when economic conditions are unfavorable. Moreover, during periods of unfavorable economic conditions, the return on these funds deposited at the Company's bank, as well as funds the Company deposits with third party financial institutions, tends to decline. In addition, the Company holds investments in entities, such as title agencies, settlement service providers and venture-stage companies, some of which have been negatively impacted by these conditions, as well as other securities in its investment portfolio, which also may be, and recently have been, negatively impacted by these conditions. Depending upon the ultimate severity and duration of any economic downturn and other negative economic conditions, the resulting effects on the Company could be materially adverse, including a significant reduction in revenues, earnings and cash flows, higher claims, challenges to the Company's ability to satisfy covenants or otherwise meet its obligations under debt facilities and other contracts, difficulties in obtaining access to capital, challenges to the Company's ability to pay dividends at currently anticipated levels, deterioration in the value of or return on its investments and increased credit risk from customers and others with obligations to the Company.

The real estate settlement services industry, an industry in which the Company generates a substantial portion of its revenue and earnings, and the mortgage servicing and subservicing industry are subject to continuous scrutiny by regulators, legislators, the media and plaintiffs' attorneys. Though often directed at these industries generally, these groups also focus their attention directly on the Company's businesses from time to time. In either case, this scrutiny may result in changes which could adversely affect the Company's operations and, therefore, its financial condition and liquidity. Governmental entities have routinely inquired into certain practices in the real estate settlement services industry and the mortgage servicing and subservicing industry to determine whether certain of the Company's businesses or its competitors have violated applicable laws, which include, among others, the insurance codes of the various jurisdictions, the Real Estate Settlement Procedures Act, the Truth in Lending Act and similar state, federal and foreign laws. The CFPB, for example, has actively utilized its regulatory authority over the mortgage and real estate markets by bringing enforcement actions against various participants in the mortgage and settlement industries and we expect that such enforcement activity will intensify. Departments of insurance in the various states, the CFPB and other federal regulators and applicable regulators in international jurisdictions, either separately or together, also periodically conduct targeted inquiries into the practices of title insurance companies, other settlement services providers and mortgage servicers in their respective jurisdictions. Currently, the Company is the subject of regulatory inquiries. Further, from time to time plaintiffs' lawyers have targeted, and are expected to continue to target, the Company and other members of the Company's industry with lawsuits claiming legal violations or other wrongful conduct. These lawsuits often involve large groups of plaintiffs and claims for substantial damages. These types of inquiries or proceedings have from time to time resulted, and may in the future result, in findings of a violation of the law or other wrongful conduct and the payment of fines or damages or the imposition of restrictions on the Company's conduct. This could impact the Company's operations and financial condition. Moreover, these laws and standards of conduct often are ambiguous and, thus, it may be difficult to ensure compliance. This ambiguity may force the Company to mitigate its risk by settling claims or by ending practices that generate revenues, earnings and cash flows. Currently the Company is a party to class action lawsuits.