Peoples Financial Services (PFIS) Risk Analysis

Purported shareholder plaintiffs have asserted legal claims related to the merger. The results of any such potential legal proceeding is difficult to predict and such legal proceedings could delay or prevent the merger from being completed in a timely manner. Moreover, any litigation could be time consuming and expensive, and could divert attention of Peoples' and FNCB's respective management teams away from their companies' regular business. Any lawsuit adversely resolved against Peoples, FNCB, or members of their respective boards of directors, could have a material adverse effect on each party's business, financial condition and results of operations. One of the conditions to the consummation of the merger is the absence of any law, order, decree or injunction (whether temporary, preliminary or permanent) or other action taken by the governmental authority of competent jurisdiction that restricts, enjoins or prohibits or makes illegal the consummation of the transactions contemplated by the Merger Agreement, including the merger. Consequently, if a settlement or other resolution is not reached in any lawsuit that is filed or any regulatory proceeding and a claimant secures injunctive or other relief or a governmental authority issues an order or other directive restricting, prohibiting or making illegal the completion of the transactions contemplated by the Merger Agreement, including the merger, then such injunctive or other relief may prevent the merger from being completed in a timely manner or at all.

We depend to a significant extent on relationships with third party service providers. Specifically, we utilize third party core banking services and receive credit card and debit card services, branch capture services, Internet banking services and services complementary to our banking products from various third party service providers. If these third party service providers experience difficulties or terminate their services and we are unable to replace them with other service providers, our operations could be interrupted. It may be difficult for us to replace some of our third party vendors, particularly vendors providing our core banking, credit card and debit card services, in a timely manner if they were unwilling or unable to provide us with these services in the future for any reason. If an interruption were to continue for a significant period of time, it could have a material adverse effect on our business, financial condition or results of operations. Even if we are able to replace them, it may be at higher cost to us or on terms that are less favorable to us than those currently provided by our existing third party service providers, which could have a material adverse effect on our business, financial condition or results of operations. In addition, if a third party provider fails to provide the services we require, fails to meet contractual requirements, such as compliance with applicable laws and regulations, or suffers a cyber-attack or other security breach, our business could suffer economic and reputational harm that could have a material adverse effect on our business, financial condition or results of operations.

Our deposits are insured by the FDIC up to legal limits and, accordingly, we are subject to FDIC deposit insurance assessments. Should our supervisory rating be lowered or our unsecured debt increase, we may be required to pay an increased assessment. More generally, should the designated reserve ratio of the FDIC Deposit Insurance Fund be raised or the fund suffer losses, we may be required to pay an increased assessment, which may adversely impact our earnings.

Competition in the banking and financial services industry is intense. We compete actively with other Pennsylvania, New Jersey and New York financial institutions, many larger than us, as well as with financial and non-financial institutions headquartered elsewhere. Commercial banks, savings banks, savings and loan associations, credit unions, and money market funds actively compete for deposits and loans. Such institutions, as well as consumer finance, insurance companies and brokerage firms, may be considered competitors with respect to one or more services they render. Many of the institutions with which we compete have substantially greater resources and lending limits and may offer certain services that we do not or cannot provide. Our profitability depends upon our ability to successfully compete in our market area.

Negative developments affecting the banking industry in 2023, high profile bank failures and resulting media coverage and fallout, eroded consumer confidence in the safety and soundness of the banking system and generated significant market volatility among publicly traded bank holding companies and, in particular, regional banks like the Company. As a result, customers may choose to maintain deposits with larger financial institutions or invest in higher yielding short-term fixed income securities, all of which could materially adversely impact the Company's liquidity, loan funding capacity, net interest margin, capital and results of operations. While the Department of the Treasury, the Federal Reserve, and the FDIC have made statements ensuring that depositors of these recently failed banks would have access to their deposits, including uninsured deposit accounts, there is no guarantee that such actions will be successful in restoring customer confidence in regional banks and the banking system more broadly.

In the ordinary course of our business activities, including the ongoing maintenance of deposits, loan and other account relationships for our customers, receiving instructions and effecting transactions for those customers and other users of our products and services, we regularly collect, process, transmit and store significant amounts of confidential information regarding our customers, employees and others. In addition to confidential information regarding our customers, employees and others, we, and in some cases a third party, compile, process, transmit and store proprietary, non-public information concerning our business, operations, plans and strategies. Information security risks have significantly increased in recent years in part because of the proliferation of new technologies, the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties. We rely on digital technologies, computer and email systems, software, and networks to conduct secure processing, transmission and storage of confidential information. In addition, to access our products and services, our customers may use personal smart phones, tablet PCs and other mobile devices that are beyond our control systems. Our technologies, systems, and networks (including such third-party information technology platforms on which our business depends) and our customers' devices have been subject to, and are likely to continue to be the target of, cyber-attacks, computer viruses, malicious code, phishing attacks or information security breaches that could result in the unauthorized use, loss or destruction of our or our customers' or third parties' confidential information, or otherwise disrupt our or our customers' or other third parties' business operations. In addition to cyber-attacks or other security breaches involving the theft of sensitive and confidential information, hackers have engaged in attacks against large financial institutions, particularly denial of service attacks, that are designed to disrupt key business services, such as customer-facing web sites. We are not able to anticipate or implement effective preventive measures against all security breaches of these types, especially because the techniques used change frequently and because attacks can originate from a wide variety of sources. Although we use a variety of physical, procedural and technological safeguards to protect confidential information from mishandling, misuse or loss, these safeguards cannot provide assurance that mishandling, misuse or loss of the information will not occur, and that if mishandling, misuse or loss of the information did occur, those events will be promptly detected and addressed. A failure in or breach of our operational or information security systems, or those of a third-party service provider, as a result of cyber-attacks or information security breaches or otherwise could have a material adverse effect on our business, damage our reputation, increase our costs and/or cause significant losses. Furthermore, because some of our employees are working remotely from their homes, there is an increased risk of disruption to our operations because our employees' residential networks and infrastructure may not be as secure as our office environment. As information security risks and cyber threats continue to evolve, we may be required to expend substantial resources to further enhance our information security measures and/or to investigate and remediate any information security vulnerabilities. If information security is breached, despite the controls we and our third-party vendors have instituted, information can be lost or misappropriated, resulting in financial loss or costs to us or damages to others. These costs or losses could materially exceed the amount of insurance coverage, if any, which would adversely affect our earnings. In addition, our reputation could be damaged which could result in loss of customers, greater difficulty in attracting new customers, or an adverse effect on the value of our common stock.

Effective and competitive delivery of our products and services is increasingly dependent upon information technology resources and processes, both those provided internally as well as those provided through third party vendors. In addition to better serving customers, the effective use of technology increases efficiency and enables us to reduce costs. Our future success will depend, in part, upon our ability to address the needs of our customers by using technology to provide products and services to enhance customer convenience, as well as to create additional efficiencies in our operations. Many of our competitors have greater resources to invest in technological improvements. Additionally, as technology in the financial services industry changes and evolves, keeping pace becomes increasingly complex and expensive for us. There can be no assurance that we will be able to effectively implement new technology-driven products and services, which could reduce our ability to compete effectively.

The Company's business activities and earnings are affected by general business conditions in the United States and in the market areas the Company operates. These conditions include short-term and long-term interest rates, inflation, unemployment levels, consumer confidence and spending, fluctuations in both debt and equity capital markets, and the strength of the economy in the United States generally and, in particular, the Company's market area. A favorable business environment is generally characterized by, among other factors, economic growth, efficient capital markets, low inflation, low unemployment, high business and investor confidence, and strong business earnings. Unfavorable or uncertain economic and market conditions can be caused by declines in economic growth, business activity or investor or business confidence; limitations on the availability or increases in the cost of credit and capital; increases in inflation or interest rates; high unemployment; global pandemics, natural disasters or acts of terrorism or outbreak of domestic or international hostilities; or a combination of these or other factors. In particular, prolonged periods of inflation may impact our profitability by negatively impacting our fixed costs and expenses, including increasing funding costs and expense related to talent acquisition and retention, and negatively impacting the demand for our products and services. Additionally, inflation may lead to a decrease in consumer purchasing power and increase default rates on loans. Economic pressure on consumers and uncertainty regarding continuing economic improvement may result in changes in consumer and business spending, borrowing and savings habits. Elevated levels of unemployment, declines in the values of real estate, extended federal government shutdowns, or other events that affect household and/or corporate incomes could impair the ability of the Company's borrowers to repay their loans in accordance with their terms and reduce demand for banking products and services.

An inability to raise funds through deposits, borrowings, the sale of securities or loans and other sources could have a substantial negative effect on our liquidity. Our access to funding sources in amounts adequate to finance our activities or the terms of which are acceptable to us could be impaired by factors that affect us specifically or the financial services industry or economy in general. Although we have historically been able to replace maturing deposits and borrowings as necessary, we might not be able to replace such funds in the future if, among other things, our results of operations or financial condition or the results of operations or financial condition of our lenders or market conditions were to change. Additionally, negative news about us or the banking industry in general could negatively impact market and/or customer perceptions of the Bank, which could lead to a loss of depositor confidence and an increase in deposit withdrawals, particularly among those with uninsured deposits. Furthermore, as we and other banks experienced in 2023, the failure of other financial institutions may cause deposit outflows as customers (i) spread deposits among several different banks so as to maximize their amount of FDIC insurance, (ii) move deposits to larger banks (who may be considered "too big to fail"), or (iii) remove deposits from the banking system entirely. As of December 31, 2023, approximately 14.0% of our deposits were uninsured and uncollateralized. A failure to maintain adequate liquidity could have a material adverse effect on our business, financial condition and results of operations.