Webster Financial (WBS) Risk Analysis

The nature of our business ordinarily results in certain legal proceedings and claims. Whether claims or legal actions are founded or unfounded, if such claims and legal actions are not resolved in a manner favorable to us, they may result in significant financial liability and/or adversely affect how the market perceives us, the products and services we offer, as well as customer demand for those products and services. Any financial liability or reputation damage could have a material adverse effect on our business, which could have a material adverse effect on our financial condition and results of operations. We assess our liabilities and contingencies in connection with outstanding legal proceedings and certain threatened claims and assessments using the latest and most reliable information. For matters identified where it is probable that we will incur a loss and we can reasonably estimate the amount, we will establish an accrual for the loss. Once established, the accrual is then adjusted, as needed, to reflect any relevant developments. However, the actual cost of an outstanding legal proceeding or threatened claim and assessment may be substantially higher than the amount accrued by management.

We face substantial competition in all areas of our operations from a variety of different competitors, both within and beyond our financial markets, many of which are larger and may have more financial resources than we do. Such traditional competitors primarily include national, regional, community, and internet banks within the various markets in which we operate, including the HSA market. We also face competition from many other types of financial institutions, including savings and loans, credit unions, non-bank health savings account trustees, finance companies, brokerage firms, insurance companies, online lenders, factoring companies, and other financial intermediaries. Some of these organizations are not subject to the same degree of regulation that is imposed on bank holding companies and federally insured depository institutions, which may give them greater flexibility in accessing funding and providing various services. Moreover, organizations that are larger than we are may be able to achieve greater economies of scale or offer a broader range of products and services, or better pricing on products and services, than what we can offer. The financial services industry could become even more competitive as a result of legislative and regulatory changes, and continued consolidation. In addition, as customer preferences and expectations continue to evolve, technology has lowered barriers to entry and has made it possible for non-banks to offer products and services traditionally provided by banks. The financial services industry also faces increasing competitive pressure from the introduction of disruptive new technologies, such as blockchain and digital payments, often by non-traditional competitors and financial technology companies. Among other things, technology and other changes are allowing customers to complete financial transactions that historically have involved banks at one or both ends of the transaction. Our ability to compete successfully depends on a number of factors, including, among other things: - the ability to develop, maintain, and build upon long-term customer relationships based on top quality service, high ethical standards, and safe, sound financial position;- the ability to expand our market position;- the scope, relevance, and pricing of products and services offered to meet customer needs and demands, including within the HSA market;- the rate at which we introduce new products and services relative to our competitors;- customer satisfaction with our level of service and products; and - industry and general economic trends. Failure to perform in any of these areas could significantly weaken our competitive position, which could adversely affect our growth and profitability, and in turn, could have a material adverse effect on our financial condition and results of operations.

There is an increasing concern over the risks of climate change and related environmental sustainability matters. The physical risks of climate change include discrete events, such as flooding and wildfires, and longer-term shifts in climate patterns, such as extreme heat, sea level rise, and more frequent and prolonged drought. Such events could disrupt our operations, those of our customers, or third parties on which we rely, including through direct damage to assets and indirect impacts from supply chain disruption and market volatility. In addition, transitioning to a low-carbon economy may entail extensive policy, legal, technological, and market initiatives. Transition risks, including changes in consumer preferences and additional regulatory requirements or taxes, could increase our expenses and undermine our strategies. Our reputation and client relationships may be damaged as a result of our practices related to climate change, including our direct or indirect involvement in certain industries or projects associated with causing or exacerbating climate change, as well as any decisions we make to conduct or change our activities in response to managing climate risk. Further, our ability to attract and retain employees may also be harmed if our response to climate change is perceived as ineffective or insufficient. We have developed and continue to enhance processes to assess and monitor the Bank's exposure to climate risk. However, because the timing and impact of climate change have limited predictability, our risk management strategies may not be effective in mitigating climate risk exposure.

We invest in certain tax-advantaged investments that support qualified affordable housing projects and other community development initiatives. Our investments in these projects rely on the ability of the projects to generate a return primarily through the realization of federal and state income tax credits and other tax benefits. We face the risk that tax credits, which remain subject to recapture by taxing authorities based on compliance with relevant requirements at the project level, may not be able to be realized. The risk of not being able to realize the tax credits and other tax benefits associated with a particular project depends on many factors that are outside of our control. A project's failure to realize these tax credits and other tax benefits may have a negative impact on our investment, and as a result, on our financial condition and results of operations.

As a financial institution, we depend on our ability to process, record, and monitor a large number of customer transactions. Accordingly, our operational systems and technology infrastructure must continue to be safeguarded and monitored for potential failures, disruptions, and breakdowns. Our business, financial, accounting, data processing, or other operating systems and facilities, including mobile banking and other recently developed technologies, may stop operating properly or become disabled or compromised as a result of a number of factors that may be beyond our control. For example, there could be sudden increases in customer transaction volume, electrical or telecommunications outages, natural disasters, pandemics, events arising from political or social matters, including terrorist acts and cyber-attacks, all of which may contribute to a cybersecurity threat. Although we have business continuity plans and information security and technology processes and controls in place, we are at risk of cybersecurity threats due to disruptions or failures in the operational systems or technology infrastructures that support our businesses and customers, or cyber-attacks or security breaches of the networks, systems, or devices on which information assets are stored or are used by customers to access our products and services. Any of these incidents could result in customer attrition, regulatory fines, penalties or intervention, reputational damage, reimbursement, or other compensation costs, which could have a material adverse effect on our business strategy, results of operations, or financial condition. Additionally, third parties with whom we do business or that facilitate our business activities, including exchanges, clearing houses, financial intermediaries, or vendors that provide services or security solutions for our operations, could also be sources of operational risk and information security risk, including breakdowns or failures of their own systems, capacity constraints, and cyber-attacks, each of which could pose a cybersecurity risk. In recent years, information security risks for financial institutions have risen due to the increased sophistication and activities of organized crime, hackers, terrorists, hostile foreign governments, activists, and other external parties. There have been instances involving financial services and consumer-based companies reporting unauthorized access to, and disclosure of, customer information or the destruction or theft of corporate data. There have also been highly publicized cases where hackers have requested ransom-payments in exchange for allowing access to systems and/or not disclosing customer information. Our inherent risk and exposure to information security matters remains heightened, and as a result, the continued development and enhancement of our controls, processes, and practices designed to protect operational systems, computers, software, data, and networks from attack, damage, or unauthorized access remains a high priority for us. While we have purchased network and privacy liability insurance coverage, which includes digital asset loss, business interruption loss, network security liability, privacy liability, network extortion, and data breach coverage, such insurance may not cover any and all actual losses. As cybersecurity threats and related regulations continue to evolve, we may be required to expend significant additional resources to modify our protective measures or to investigate and remediate any information security vulnerabilities.

The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology-driven products and services and the use of artificial intelligence. These new technologies may be superior to, or render obsolete, the technologies currently used in our products and services. Our future success depends, in part, upon our ability to address the needs of our customers by using technology and information to provide products and services that will satisfy customer demands, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements because of their larger size and available capital. Developing or acquiring new technologies and incorporating them into our products and services may require significant investment, take considerable time, and ultimately may not be successful. We cannot predict which technological developments or innovations will become widely adopted or how those technologies may be regulated. We also may not be able to effectively market new technology-driven products and services to our customers. Failure to successfully keep pace with and adapt to technological change affecting the financial services industry could have a material adverse impact on our business and, in turn, our financial condition and results of operations.

Our success depends, in large part, on our ability to attract, develop, compensate, motivate, and retain skilled people, including executives, managers, and other key employees with the skills and know-how necessary to run our business. The failure to attract or retain talented executives, managers, and employees with diverse backgrounds and experiences, or the loss of certain executives, managers, and key employees, could have a material adverse impact on our business. These risks may be heightened when U.S. labor markets, or segments of those markets, are especially competitive. Competition for the best people in most activities in which we engage can be intense, and we may not be able to hire sufficiently skilled people or retain them. The recent transition towards companies offering remote and hybrid work environments, which is expected to endure, as well as our workplace policies (or perceptions of those policies by current and potential employees), including policies with respect to remote and hybrid work, could impact our ability to attract and retain talent with the necessary skills and experience. In addition, the transition to remote and hybrid work environments may exacerbate the challenges of attracting and retaining skilled employees because job markets may be less constrained by physical geography. The unexpected loss of services of our key personnel could have a material adverse impact on the business because of their skills, knowledge of our markets, years of industry experience, and the difficulty of promptly finding qualified replacement personnel. Further, our business is primarily relationship-driven, in that many of our key employees have extensive customer relationships. The loss of a key employee with such customer relationships may lead to the loss of business if the customers were to follow that employee to a competitor or otherwise choose to transition to another financial services provider. While we believe that our relationships with key personnel are good, we cannot guarantee that all of our key personnel will remain with our organization.

Third parties perform significant operational services on our behalf. For instance, we depend on our vendor-provided core banking processing systems to process a large number of increasingly complex transactions on a daily basis. Accordingly, we are exposed to the risk that vendors and third-party service providers might not perform in accordance with their contracts or service agreements, whether due to changes in their organizational structure, strategic focus, support for existing products, technology, services, financial condition, or for any other reason. Their failure to perform could be disruptive to our operations, which could have a materially adverse impact on our business, results of operations, and financial condition. Although we require third-party service providers to have business continuity and disaster recovery plans that are aligned with our plans, such plans may not operate successfully or in a timely manner so as to prevent any such material adverse impact.