HomeStreet (HMST) Risk Factors

Market factors outside of our control, including changing interest rate environments, regulatory decisions, increased competition, changes in the yield curve, consumer confidence, rates of unemployment and other forces of market volatility, can have a significant impact on our results of operations, financial condition and capital positions. Our earnings are dependent on the difference between the interest earned on loans and investments and the interest paid on deposits and borrowings. Changes in interest rates impact the rates earned on loans and investment securities and the rates paid on deposits and borrowings and may negatively impact our ability to attract deposits, make loans, and achieve satisfactory interest rate spreads. In addition, changes to market interest rates may impact the demand for loans, levels of deposits and investments and the credit quality of existing loans. These rate changes have and may further adversely impact our liquidity, financial condition, results of operations and capital position. The rate of prepayment of loans, which is impacted by changes in interest rates and general economic conditions, among other things, impacts the value of our MSRs. We actively hedge this risk with financial derivative instruments to mitigate losses, but changes in interest rates can be difficult to predict and changes in our hedging instruments may not correlate with changes in the values of our MSRs and LHFS. In addition to overall fluctuations in interest rates, asymmetrical changes in interest rates, for example a greater increase in short term rates than in long term rates, could adversely impact our net interest income because our liabilities tend to be more sensitive to short term rates while our assets tend to be more sensitive to long term rates. In addition, it may take longer for our assets to reprice to adjust to a new rate environment because fixed rate loans do not fluctuate with interest rate changes and adjustable rate loans often have a specified initial fixed rate period before reset. As a result, a flattening or an inversion of the yield curve is likely to have a negative impact on our net interest income. Our securities portfolio also includes securities whose value is sensitive to interest rate fluctuations. The unrealized gains or losses in our available-for-sale portfolio are reported as a separate component of shareholders' equity until realized upon sale. Interest rate fluctuations may impact the value of these securities and as a result, shareholders' equity, and may cause material fluctuations from quarter to quarter. Failure to hold our securities until maturity or until market conditions are favorable for a sale could adversely affect our operating results, financial condition and capital position.

We face pricing competition for loans and deposits, both in pricing and products, as well as in customer service and convenience. Our most direct competition comes from other banks, credit unions, mortgage banking companies and finance companies, and more recently, competition has also come from companies that rely heavily on technology to provide financial services, are moving to provide cryptocurrency products and offerings, and often target a younger customer demographic. The significant competition in attracting and retaining deposits and making loans, as well as in providing other financial services, throughout our market area may impact future earnings and growth. Our success depends, in part, on the ability to adapt products and services to evolving industry standards and customer preferences and trends and provide consistent customer service while keeping costs in line. We sometimes experience increasing pressure to provide products and services at lower prices, which could reduce net interest income and noninterest income from fee-based products and services. New technology-driven products and services are often introduced and adopted, including innovative ways that customers can make payments, access products and manage accounts. We could be required to make substantial capital expenditures to modify or adapt existing products and services or develop new products and services. We may not be successful in introducing new products and services or those new products may not achieve market acceptance. In addition, advances in technology such as telephone, text and online banking, e-commerce and self-service automatic teller machines and other equipment, as well as changing customer preferences to access our products and services through digital channels, could decrease the value of our branch network and other assets. As a result of these competitive pressures, our business, financial condition, results of operations and capital position may be adversely affected.

Although we presently have retail deposit branches in four states, with lending offices in these states and two others, a substantial majority of our revenues are derived from operations in the Puget Sound region of Washington, the Portland, Oregon metropolitan area, the San Francisco Bay Area, and the Los Angeles, Orange County, Riverside and San Diego metropolitan areas in Southern California. All of our markets are located in the Western United States. Each of our primary markets is subject to various types of natural disasters, including earthquakes, wildfires, volcanic eruptions, mudslides and floods, and many have experienced disproportionately significant economic volatility in the past, as well as more recent local political unrest and calls to action, including calls for rent disruption, when compared to other parts of the United States. Economic events, political unrest or natural disasters that affect the Western United States and our primary markets in that region may have an unusually pronounced impact on our business. Because our operations are not more geographically diversified, we may lack the ability to mitigate those impacts from operations in other regions of the United States.

We originate a substantial portion of our single family mortgage loans for sale to third party investors, including government-sponsored enterprises ("GSEs") such as Fannie Mae, Freddie Mac and Ginnie Mae. Changes in the types of loans purchased by these GSEs or the program requirements for those entities could adversely impact our ability to sell certain of the loans we originate for sale, leaving us unable to find a buyer on similar terms. Similarly, changes in the fee structures by any of our third party loan purchasers, including the GSEs, may increase our costs of doing business, the cost of loans to our customers, and the cost of selling loans to third party loan purchasers, all of which could in turn decrease our margin and negatively impact our profitability. In addition, significant changes in the underwriting criteria of third party loan purchasers could increase our costs or decrease our ability to sell into the secondary markets. Any of these changes can have a negative impact on our liquidity, financial condition, results of operations and capital position.

The financial services industry is undergoing rapid technological changes with frequent introductions of new technology-driven products and services to better serve customers and to reduce costs. Our future success will depend, in part, upon our ability to provide products and services using technology that will satisfy client demands for convenience, as well as to create additional efficiencies in our operations. Many national vendors provide turn-key services to community banks, such as Internet banking and remote deposit capture that allow smaller banks to compete with institutions that have substantially greater resources to invest in technological improvements. However, we may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to our customers.

As a financial institution, we are susceptible to fraudulent activity, operational and informational security breaches and cybersecurity incidents that are committed against us or our customers, employees, third-party vendors and others, which may result in financial losses or increased costs, disclosure or misuse of our information or customer information, misappropriation of assets, data privacy breaches, litigation or reputational damage. Related risks for financial institutions have increased in recent years in part because of proliferation and use of new and existing technologies to conduct financial transactions and transmit data, as well as the increased sophistication and unlawful or clandestine activities of organized crime, state-sponsored and other hackers, terrorists, activists, and other malicious external parties to engage in fraudulent activity such as phishing or check, electronic or wire fraud, unauthorized access to our controls and systems, denial or degradation of service attacks, malware and other dishonest acts. Within the financial services industry, the commercial banking sector has generally experienced, and will continue to experience, increased electronic fraudulent activity, security breaches and cybersecurity-related incidents. The nature of our industry sector exposes us to these risks because our business and operations include the protection and storage of confidential and proprietary corporate and personal information, including sensitive financial and other personal data, and any breach thereof could result in identity theft, account or credit card fraud or other fraudulent activity that could involve their accounts and business with us. The risk to our organization may be further elevated over the near term because of recent geopolitical events in Eastern Europe and Asia, which may result in increased attacks against U.S. critical infrastructure, including financial institutions. Our computer systems, software and networks are subject to ongoing cyber incidents such as unauthorized access; loss or destruction of data (including confidential client information); account takeovers; unavailability of service; computer viruses or other malicious code; cyber-attacks; and other events. While we have experienced and continue to experience various forms of these cyber incidents in the past, we have not been materially impacted by them. Cyber incidents may not occur again, and they could occur more frequently and on a more significant scale. Our business and operations rely on the secure processing, transmission, protection and storage of confidential, private and personal information by our computer operation systems and networks, as well as our online banking or reporting systems used by customers to effect certain financial transactions, all of which are either managed directly by us or through our third-party data processing vendors. The secure maintenance and transmission of confidential information, and the execution of transactions through our systems, are critical to protecting us and our customers against fraud and security breaches and to maintain customer confidence. To access our products and services, our customers may use personal computers, smartphones, tablet PCs, and other mobile devices that function beyond our control systems. Although we believe we have invested in, and plan to continue investing in, maintaining and routinely testing adequate operational and informational security procedures and controls, we rely heavily on our third-party vendors, technologies, systems, networks and our customers' devices, all of which are the target of cyber-attacks, computer viruses, malicious code, unauthorized access, hackers or information security breaches that have resulted in and could again in the future result in the unauthorized release, gathering, monitoring, misuse, loss, theft or destruction of our confidential, proprietary and other information or that of our customers, or that could disrupt our operations or those of our customers or third parties. Even though we invest in, maintain and routinely test our operational and informational security procedures and controls, we may fail to anticipate or sufficiently mitigate security breaches, or we may experience data privacy breaches, that could result in losses to us or our customers, damage to our reputation, incurrence of significant costs, business disruption, our inability to grow our business and exposure to regulatory scrutiny or penalties, litigation and potential financial liability, any of which could adversely affect our business, financial condition, results of operations or capital position. Our computer systems could be vulnerable to unforeseen problems other than cybersecurity related incidents or other data security breaches, including the potential for infrastructure damage to our systems or the systems of our vendors from fire, power loss, telecommunications failure, physical break-ins, theft, natural disasters or similar catastrophic events. Any damage or failure that causes interruptions in operations may compromise our ability to perform critical functions in a timely manner (or may give rise to perceptions of such compromise) and could increase our costs of doing business, or have a material adverse effect on our results of operations results as well as our reputation and customer or vendor relationships. In addition, some of the technology we use in our regulatory compliance, including our mortgage loan origination and servicing technology, as well as other critical business activities such as core systems processing, essential web hosting and deposit and processing services, as well as security solutions, are provided by third party vendors. If those providers fail to update their systems or services in a timely manner to reflect new or changing regulations, or if our personnel operate these systems in a non-compliant manner, our ability to meet regulatory requirements may be impacted and may expose us to heightened regulatory scrutiny and the potential for monetary penalties. These vendors are also sources of operational and informational security risk to us, including from interruptions or failures of their own systems, cybersecurity or ransomware attacks, capacity constraints or failures of their own internal controls. Such third parties are targets of cyber-attacks, computer viruses, malicious code, unauthorized access, hackers, ransomware attacks or information security breaches that have compromised and could again in the future compromise the confidential or proprietary information of HomeStreet and our customers.