PCB Bancorp (PCB) Risk Analysis

Our primary market is located in California, which is subject to earthquakes and other weather or disasters, such as severe rainstorms, wildfire or flood, as well as health epidemics or pandemics (or expectations about them). These events could interrupt our business operations unexpectedly. Climate-related physical changes and hazards could also pose credit risks for us. For example, our borrowers may have collateral properties located in coastal areas at risk to rise in sea level. The properties pledged as collateral in our loan portfolio could also be damaged by tsunamis, floods, earthquakes or wildfires and thereby the recoverability of loans could be impaired. A number of factors can affect credit losses, including the extent of damage to the collateral, the extent of damage not covered by insurance, the extent to which unemployment and other economic conditions caused by the natural disaster adversely affect the ability of borrowers to repay their loans, and the cost of collection and foreclosure to us. Lastly, there could be increased insurance premiums and deductibles, or a decrease in the availability of coverage, due to severe weather-related losses. The ultimate impact on our business of a natural disaster, whether or not caused by climate change, is difficult to predict.

In the course of our business, we may foreclose and take title to real estate, and could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third-parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination, or may be required to investigate or clean up hazardous or toxic substances, or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third-parties based on damages and costs resulting from environmental contamination emanating from the property. If we become subject to significant environmental liabilities, our business, financial condition, results of operations and cash flows may be materially and adversely affected.

Any changes we make to the rates offered on our deposit products to remain competitive with other financial institutions may adversely affect our profitability and liquidity. Interest-bearing deposit accounts earn interest at rates established by management based on competitive market factors. Our cost of deposits decreased from 3.72% for the year ended December 31, 2024, to 3.33% for the year ended December 31, 2025. The demand for the deposit products we offer may also be reduced due to a variety of factors, such as demographic patterns, changes in customer preferences, reductions in consumers' disposable income, regulatory actions that decrease customer access to particular products, or the availability of competing products.

During 2023, the high-profile failures of several depository institutions negatively impacted customer confidence in the safety and soundness of some regional and community banks. As a result, we face that the risk that customers may prefer to maintain deposits with larger financial institutions or invest in fixed income securities instead of deposits with the Bank, either of which could materially adversely impact our liquidity, cost of funding, capital, and results of operations. In response to the failures of other depository institutions, we may face increased regulation and supervisory oversight, higher capital or liquidity requirements or a heightened risk of regulatory enforcement activities, any of which could have a material impact on our business. Further, our costs of deposit insurance may increase as a result of these bank failures and the resulting losses to the FDIC's Deposit Insurance Fund. In addition, concerns about the banking industry's operating environment and the public trading prices of bank holding companies are often correlated, particularly during times of financial stress, which could adversely impact the trading price of our common stock.

The computer systems and network infrastructure we use could be vulnerable to hardware and cyber-security issues. Our operations are dependent upon our ability to protect our computer equipment against damage from fire, power loss, telecommunications failure or a similar catastrophic event. We could also experience a breach by intentional or negligent conduct on the part of employees or other internal or external sources, including our third-party vendors. Any damage or failure that causes an interruption in our operations could have an adverse effect on our financial condition and results of operations. In addition, our operations are dependent upon our ability to protect the computer systems and network infrastructure utilized by us, including our internet banking activities, against damage from physical break-ins, cyber-security breaches and other disruptive problems caused by the internet or other users. Such computer break-ins and other disruptions would jeopardize the security of information stored in and transmitted through our computer systems and network infrastructure, which may result in significant liability, damage our reputation and inhibit the use of our internet banking services by current and potential customers. We rely heavily on communications, information systems (both internal and provided by third-parties) and the internet to conduct our business. Our business is dependent on our ability to process and monitor large numbers of daily transactions in compliance with legal, regulatory and internal standards and specifications. In addition, a significant portion of our operations relies heavily on the secure processing, storage and transmission of personal and confidential information, such as the personal information of our customers and clients. In recent periods, several governmental agencies and large corporations, including financial service organizations and retail companies, have suffered major data breaches, in some cases exposing not only their confidential and proprietary corporate information, but also sensitive financial and other personal information of their customers/clients or customers/clients and their employees or other third-parties, subjecting those agencies and corporations to potential fraudulent activity and exposing their customers/clients, customers/clients and their employees or other third-parties to identity theft and fraudulent activity in their credit card and banking accounts. Therefore, security breaches and cyber-attacks can cause significant increases in operating costs, including the costs of compensating clients and customers for any resulting losses they may incur and the costs and capital expenditures required to correct the deficiencies in and strengthen the security of data processing and storage systems. These risks may increase in the future as we continue to increase mobile payments and other internet-based product offerings and expand our internal usage of web-based products and applications. The continued evolution and increased usage of artificial intelligence technologies may further increase these risks. Other potential attacks have attempted to obtain unauthorized access to confidential information, steal money, or manipulate or destroy data, often through the introduction of computer viruses or malware, cyber-attacks and other means. Other threats of this type may include fraudulent or unauthorized access to data processing or data storage systems used by us or by our customers, electronic identity theft, "phishing," account takeover, and malware or other cyber-attacks. To date, none of these types of attacks have had a material effect on our business or operations. Such security attacks can originate from a wide variety of sources, including persons who are involved with organized crime or who may be linked to terrorist organizations or hostile foreign governments. Those same parties may also attempt to fraudulently induce employees, customers or other users of our systems to disclose sensitive information in order to gain access to our data or that of our customers or clients. We are also subject to the risk that our employees may intercept and transmit unauthorized confidential or proprietary information. An interception, misuse or mishandling of personal, confidential or proprietary information being sent to or received from a customer or third-party could result in legal liabilities, remediation costs, regulatory actions and reputational harm. As cyber-threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities or incidents. We maintain a system of internal controls and insurance coverage to mitigate against such operational risks, including data processing system failures and errors and customer or employee fraud. If our internal controls fail to prevent or detect an occurrence, or if any resulting loss is not insured or exceeds applicable insurance limits, it could have a material adverse effect on our business, financial condition and results of operations. Furthermore, the public perception that a cyber-attack on our systems has been successful, whether or not this perception is correct, may damage our reputation with customers and third-parties with whom we do business.

Competition for qualified employees and personnel in the banking industry is intense and there are a limited number of qualified persons with knowledge of and experience in the community banking industry generally, and in community banking focused on Korean-Americans specifically. The process of recruiting personnel with the combination of skills and attributes required to carry out our strategies can often be lengthy. Our success depends to a significant degree upon our ability to attract and retain qualified management, loan and deposit origination, administrative, marketing and technical personnel and upon the continued contributions of our management and personnel. In addition, our continued success will be highly dependent on retaining the current executive management team, which includes, but is not limited to, executive and senior management, finance, lending, credit administration, and other professionals at the Company and the Bank level who work directly with the management team to implement the strategic direction of the Company's and the Bank's Boards of Directors. We believe this management team, comprised principally of long-time employees who have worked in the banking industry for a number of years, is integral to implementing our business strategy. The loss of the services of any one of them could have a material adverse effect on our business, financial condition, results of operations and cash flows.

Real estate construction loans, including land development loans, comprised 0.7% of our total loans held-for-investment portfolio as of December 31, 2025, and such lending involves additional risks because funds are advanced upon the security of the project, which is of uncertain value prior to its completion, and costs may exceed realizable values in declining real estate markets. Because of the uncertainties inherent in estimating construction costs and the realizable market value of the completed project and the effects of governmental regulation of real property, it is relatively difficult to evaluate accurately the total funds required to complete a project and the related LTV ratio. The risks inherent in construction lending may affect adversely our results of operations. Such risks include, among other things, the possibility that contractors may fail to complete, or complete on a timely basis, construction of the relevant properties; substantial cost overruns in excess of original estimates and financing; market deterioration during construction; and lack of permanent take-out financing. Loans secured by such properties also involve additional risks because they have no operating history. In these loans, loan funds are advanced upon the security of the project under construction (which is of uncertain value prior to completion of construction) and the estimated operating cash flow to be generated by the completed project. Such properties may not be sold or leased so as to generate the cash flow anticipated by the borrower. A general decline in real estate sales and prices across the U.S. or locally in the relevant real estate market, a decline in demand for residential property, economic weakness, high rates of unemployment and reduced availability of mortgage credit are some of the factors that can adversely affect the borrowers' ability to repay their obligations to us and the value of our security interest in collateral, and thereby adversely affect our results of operations and financial results.