UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

or

Commission File Number: 1-6887

BANK OF HAWAII CORPORATION

(Exact name of registrant as specified in its charter)

1-888-643-3888

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☒ No ☐

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically, every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (Section 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or a smaller reporting company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act).

Yes ☐ No ☒

The aggregate market value of the registrant’s outstanding voting common stock held by non-affiliates on June 30, 2023 (the last business day of the registrant’s most recently completed second fiscal quarter), determined using the per share closing price on that date on the New York Stock Exchange of $41.23, was approximately $1,602,235,278. There was no non-voting common equity of the registrant outstanding on that date.

As of February 14, 2024, there were 39,750,303 shares of common stock outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

Bank of Hawaii Corporation

2023 Form 10-K Annual Report

Table of Contents

Part I

Item 1. Business

General

Bank of Hawaii Corporation (“Bank of Hawai‘i Corporation” or the “Parent”) is a Delaware corporation and a bank holding company (“BHC”) headquartered in Honolulu, Hawaii. The Parent’s principal operating subsidiary, Bank of Hawaii (“Bank of Hawai‘i” or the “Bank”), was organized on December 17, 1897, and is chartered by the State of Hawaii. The Bank’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) and the Bank is a member of the Federal Reserve System.

The Bank, directly and through its subsidiaries, provides a broad range of financial products and services primarily to customers in Hawaii, Guam, and other Pacific Islands. References to “we,” “our,” “us,” or “the Company” refer to the Parent and its subsidiaries and are consolidated for financial reporting purposes. The Bank’s subsidiaries are identified in Exhibit 21.1 to this Form 10-K and include, among others, Bankoh Investment Services, Inc., and Pacific Century Life Insurance Corporation. The Bank’s subsidiaries are engaged in securities brokerage, investment advisory services, and providing credit insurance. We are organized into three business segments for management reporting purposes: Consumer Banking, Commercial Banking, and Treasury and Other. See Management’s Discussion and Analysis of Financial Condition and Results of Operations (“MD&A”) and Note 13 to the Consolidated Financial Statements for more information.

Our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be found free of charge on our website at www.boh.com as soon as reasonably practicable after such material is electronically filed with or furnished to the U.S. Securities and Exchange Commission (the “SEC”). The SEC maintains a website, www.sec.gov, which contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. Our Corporate Governance Guidelines; charters of the Audit and Risk Committee, the Human Resources and Compensation Committee, and the Nominating and Corporate Governance Committee; and our Code of Business Conduct and Ethics are available on our website at www.boh.com. Printed copies of this information may be obtained, without charge, by written request to the Corporate Secretary at 130 Merchant Street, Honolulu, Hawaii, 96813.

We use our website at https://ir.boh.com as a routine channel of distribution of Company information, including press releases, presentations, financial and other supplemental information, as a means of disclosing material non-public information and for complying with our disclosure obligations under Regulation FD. Accordingly, investors should monitor the investor relations portion of our website in addition to following our social media channels, press releases, SEC filings, and public conference calls and webcasts. None of the information provided on our website, in our press releases, public conference calls and webcasts, or through social media channels is incorporated into, or deemed to be a part of, this Annual Report on Form 10-K or in any other report or document we file with the SEC.

Competition

The Company operates in a highly competitive environment subject to intense competition from traditional financial service providers including banks, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services including financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and receive favorable tax treatment. As a result, some of our competitors may have lower cost structures. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve. By emphasizing our extensive branch network, exceptional service levels, and knowledge of local trends and conditions, the Company believes it has developed a competitive advantage in its market.

Supervision and Regulation

Our operations are subject to extensive regulation by federal and state governmental authorities. The regulations are primarily intended to protect depositors, customers, and the integrity of the U.S. banking system and capital markets. The following information describes some of the more significant laws and regulations applicable to us. The descriptions below are qualified in their entirety by reference to the applicable laws and regulations. Proposals to change the laws and regulations governing the banking industry are frequently raised in Congress, in state legislatures, and with the various bank regulatory agencies. Changes in applicable laws or regulations, or a change in the way such laws or regulations are interpreted by regulatory agencies or courts, may have a material impact on our business, operations, and earnings.

The Parent

The Parent is registered as a BHC under the Bank Holding Company Act of 1956, as amended (the “BHC Act”), and is subject to the supervision of and to examination by the Board of Governors of the Federal Reserve (the “FRB”). The Parent is also registered as a financial institution holding company under the Hawaii Code of Financial Institutions (the “Code”) and is subject to the registration, reporting, and examination requirements of the Code.

The BHC Act prohibits, with certain exceptions, a BHC from acquiring direct or indirect beneficial ownership or control of either a company that is not a bank, or more than 5% of the voting shares of any bank, without the FRB’s prior approval. A BHC is generally prohibited from engaging in any activity other than banking, managing or controlling banks or other subsidiaries authorized under the BHC Act, or an activity that the FRB has determined to be so closely related to those activities as to be a proper incident to one of them.

Under FRB policy, a BHC is expected to serve as a source of financial and management strength to its subsidiary bank(s). A BHC is also expected to commit resources to support its subsidiary bank(s) in circumstances where it might not do so absent such a policy. Under this policy, a BHC is expected to maintain reliable funding and contingency plans to stand ready to provide adequate capital funds to its subsidiary bank(s) during periods of financial adversity and to maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary bank(s).

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (the “Riegle-Neal Act”), banks and BHCs from any state are permitted to acquire banks located in any other state, subject to certain conditions, including certain nationwide and state-imposed deposit concentration limits. Banks also have the ability, subject to certain restrictions, to acquire branches outside their home states by acquisition or merger under the Riegle-Neal Act. The establishment of new interstate branches is also possible in those states with laws that expressly permit de novo branching. Because the Code permits de novo branching by out-of-state banks, those banks may establish new branches in Hawaii.

Bank of Hawai‘i

The Bank is subject to extensive federal, state, territorial and foreign regulations that significantly affect its business and activities. The Bank is subject to supervision of the FRB and examination by the Federal Reserve Bank of San Francisco, the Consumer Financial Protection Bureau (the “CFPB”), and the State of Hawaii Department of Commerce and Consumer Affairs’ (“DCCA”) Division of Financial Institutions. These regulatory bodies have broad authority to implement standards and to initiate proceedings designed to prohibit depository institutions from engaging in activities that may represent “unsafe” or “unsound” banking practices or constitute violations of applicable laws, rules, regulations, administrative orders, or written agreements with regulators. The standards relate to, among other compliance matters, operations and management, asset quality, interest rate exposure, capital, executive compensation, and consumer protection. The regulatory bodies are authorized to take informal (non-public) or formal (public) supervisory actions against regulated entities, including BHCs and banks, that fail to meet such standards, including, without limitation, the issuance of written agreements, cease-and-desist orders, and consent orders, which may, among other things, result in restrictions on a bank’s ability to pay dividends, requirements to increase capital, restrictions on activities, the imposition of civil monetary penalties, and revocation of a bank’s charter for the most severe infractions, or putting such a bank into receivership if it is not financially viable.

Bankoh Investment Services, Inc., the broker-dealer and investment adviser subsidiary of the Bank, is incorporated in Hawaii and is regulated by the SEC, the Financial Industry Regulatory Authority, and the DCCA’s Insurance Division. Pacific Century Life Insurance Corporation is incorporated in Arizona and is primarily regulated by the State of Arizona Department of Insurance.

The Dodd Frank Act

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) and its regulations, among other things, mandated capital and liquidity requirements, established standards for mortgage lenders, regulated executive and incentive-based compensation, imposed various consumer protections and numerous other provisions. Provisions also limit or place significant burdens and costs on activities traditionally conducted by banking organizations, such as arranging and participating in swap and derivative transactions, proprietary trading and investing in private equity and other funds.

Several provisions of the Dodd-Frank Act were significantly changed by enactment of the Economic Growth, Regulatory Relief, and Consumer Protection Act in May 2018, notably by eliminating the requirement for institutions like the Company to perform and publicly disclose periodic stress tests. The Company continues to monitor and implement rules, regulations, and interpretations of the Dodd-Frank Act as they are adopted and modified, and to evaluate their application to our current and future operations.

Capital Requirements

In July 2013, the FRB, the Office of the Comptroller of the Currency (the “OCC”) and the FDIC adopted new capital rules (the “Rules”). These Rules were designed to help ensure that banks maintain strong capital positions by increasing both the quantity and quality of capital held by U.S. banking organizations. The Rules reflect, in part, certain standards initially adopted by the Basel Committee on Banking Supervision in December 2010 (which are commonly called “Basel III” standards) as well as requirements by the Dodd-Frank Act.

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) identifies five capital categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.”

The federal banking agencies are authorized by FDICIA to impose progressively more restrictive constraints on operations, management and capital distributions, depending on the capital category in which an institution is classified. These “prompt corrective actions” can include: requiring an insured depository institution to adopt a capital restoration plan guaranteed by the institution’s parent company; placing limits on asset growth and restrictions on activities, including restrictions on transactions with affiliates; restricting the interest rates the institution may pay on deposits; prohibiting the payment of principal or interest on subordinated debt; prohibiting the holding company from making capital distribution without prior regulatory approval; and ultimately appointing a receiver for the institution.

A “well capitalized” institution must have a Common Equity Tier 1 Capital Ratio of at least 6.5%, a Tier 1 Capital Ratio of at least 8%, a Total Capital Ratio of at least 10%, a Tier 1 Leverage Ratio of at least 5%, and not be subject to a capital directive order. As of December 31, 2023, the Bank was classified as “well capitalized.” The classification of a depository institution under one of the categories set out above is primarily for the purpose of applying the prompt corrective actions, and is not intended to be, nor should it be interpreted as, a representation of the overall financial condition or the prospects of that financial institution. See Note 11 to the Consolidated Financial Statements for more information.

Dividend Restrictions

The Parent is a legal entity separate and distinct from the Bank. The Parent’s principal source of funds to pay dividends on its common stock and to service its liabilities is dividends from the Bank. Various federal and state laws and regulations limit the amount of dividends the Bank may pay to the Parent without regulatory approval. The FRB is authorized to determine the circumstances when the payment of dividends would be an unsafe or unsound practice and to prohibit such payments. The right of the Parent, its shareholders, and creditors to participate in any distribution of the assets or earnings of its subsidiaries is also subject to the prior claims of creditors of those subsidiaries. For information regarding the limitations on the Bank’s ability to pay dividends to the Parent, see Note 11 to the Consolidated Financial Statements.

Transactions with Affiliates and Insiders

Transactions between the Bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of the Bank is any company or entity which controls, is controlled by or is under common control with the Bank which is not a subsidiary of the Bank. Under federal law, the Bank is subject to restrictions that limit the transfer of funds or other items of value to the Parent, and any other non-bank affiliates in “covered transactions.” In general, covered transactions include making loans to an affiliate, the purchase of or investment in the securities issued by an affiliate, the purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral security for a loan or extensions of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, or certain transactions with an affiliate that involve the borrowing or lending of securities and certain derivative transactions with an affiliate.

Unless an exemption applies, covered transactions by the Bank with a single affiliate are limited to 10% of the Bank’s capital and surplus, and with respect to all covered transactions with affiliates in the aggregate, they are limited to 20% of the Bank’s capital and surplus. Section 23B of the Federal Reserve Act and Federal Reserve Regulation W also require that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other non-affiliated persons.

The Federal Reserve Act and Federal Reserve Regulation O place restrictions and certain reporting requirements on any extension of credit made by a member bank to (a) an executive officer, director, or principal shareholder of the bank, or any company of which the bank is a subsidiary, and of any other subsidiary of that company, and (b) a company controlled by such a person, or to a political or campaign committee that benefits or is controlled by such a person (collectively referred to as “insiders”). These

restrictions include limits on loans to one borrower and conditions that must be met before such loans can be made. There is also an aggregate limitation on all loans to insiders and their related interests. Certain restrictions also apply to extensions of credit made to an executive officer, directors, or principal shareholder of a bank (or to a related interest of such person) by a correspondent bank.

The Volcker Rule

In December 2013, the Federal Reserve, the OCC, the FDIC, the SEC, and the Commodities Futures Trading Commission issued final rules to implement certain provisions of the Dodd-Frank Act commonly known as the “Volcker Rule.” The Volcker Rule, as amended on August 20, 2019, generally prohibits U.S. banks from engaging in proprietary trading and restricts those banking entities from sponsoring, investing in, or having certain relationships with hedge funds and private equity funds. The prohibitions under the Volcker Rule are subject to a number of statutory exemptions, restrictions, and definitions. The Volcker Rule has not had a material impact on the Company’s Consolidated Financial Statements, but we continue to evaluate its application to our current and future operations.

FDIC Insurance

The FDIC provides insurance coverage for certain deposits held by the Bank through the Deposit Insurance Fund, which the FDIC maintains by assessing depository institutions an insurance premium. The Bank is assessed deposit insurance premiums by the FDIC using a risk-based assessment rate and an adjusted average total assets. The Bank’s FDIC insurance assessment was $28.3 million in 2023, $6.5 million in 2022, and $6.5 million in 2021.

In November 2023, the FDIC implemented a special assessment to recover the loss to the Deposit Insurance Fund following the closures of Silicon Valley Bank, Signature Bank and First Republic Bank earlier in the year. The assessment was based on reported uninsured deposits as of December 31, 2022. The FDIC could cease collection early or extend the special assessment period as they deem necessary depending on whether the amount the FDIC collects from the special assessment is higher or lower than the actual or estimated FDIC losses. The Bank's share of the FDIC special assessment was $14.7 million which was recorded in the fourth quarter of 2023 and is payable in eight quarterly installments starting in June 2024.

A depository institution’s deposit insurance may be terminated by the FDIC upon a finding that the institution’s financial condition is unsafe or unsound, or that the institution has engaged in unsafe or unsound practices, or has violated any applicable rule, regulation, or order or condition enacted or imposed by a regulatory agency. Termination of the Bank’s deposit insurance would end its ability to function as a commercial bank in Hawaii.

Depositor Preference

In the event of the “liquidation or other resolution” of an insured depository institution, claims of insured and uninsured depositors for deposits payable in the United States (including the claims of the FDIC as subrogee of insured depositors), plus certain claims for administrative expenses of the FDIC as a receiver will have priority in payment ahead of unsecured creditors including, in the case of the Bank, the Parent.

Other Safety and Soundness Regulations

The federal banking agencies also have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines before capital becomes impaired.

Community Reinvestment and Consumer Protection Laws

Federal banking regulators, pursuant to the Gramm-Leach-Bliley Act, have enacted regulations limiting the ability of banks and other financial institutions to disclose nonpublic consumer information to non-affiliated third parties. The regulations require disclosure of privacy policies and allow consumers to prevent certain personal information from being shared with non-affiliated third parties. The Fair and Accurate Credit Transaction Act (“FACT Act”) requires financial institutions to develop and implement an identity theft prevention program to detect, prevent and mitigate identity theft “red flags” to reduce the risk that customer information will be misused to conduct fraudulent financial transactions.

A number of other federal and state consumer protection laws extensively govern the Bank’s relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, Telephone Consumer Protection Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state and territorial usury laws and laws regarding unfair and deceptive acts and practices. These and other laws subject the Bank to substantial regulatory oversight and, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, and restrict the Bank’s ability to raise interest rates.

The CFPB was created under the Dodd-Frank Act as an agency responsible for promulgating and enforcing regulations designed to protect consumers including adding prohibitions on unfair, deceptive and abusive acts and practices. The CFPB, along with other prudential regulators and the Department of Justice, have also expanded the focus of their regulatory examinations and investigations to include “fair and responsible banking.” Fair and responsible banking strives to provide equal credit opportunities to all applicants of a community, to prohibit discrimination by lenders on the basis of certain borrower characteristics, and to ensure that a bank’s practices are not deceptive, unfair, or take unreasonable advantage of consumers or businesses. The enhanced focus encompasses the entire loan life cycle, including post-closing activities such as collections and servicing, and pre-application activities such as marketing and loan solicitation and origination.

Violations of applicable consumer protection laws and regulations can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain required bank regulatory approvals for transactions the Bank may wish to pursue, or prohibit us from engaging in such transactions even if approval is not required.

Bank Secrecy Act / Anti-Money Laundering Laws

The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001. The USA PATRIOT Act created new laws, regulations, and penalties, imposed significant new compliance and due diligence obligations, and expanded the application of those laws outside the U.S. Additionally, like all U.S. companies and individuals, the Company is prohibited from transacting business with certain individuals and entities named on the Office of Foreign Asset Control’s list of Specially Designated Nationals and Blocked Persons.

The Bank has been required to implement policies, procedures, and controls to detect, prevent, and report potential money laundering and terrorist financing and to verify the identity of its customers. The Company maintains procedures and systems to identify its customers, and to monitor and block transactions related to prohibited persons and entities. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, the federal financial institution regulatory agencies consider the effectiveness of a financial institution’s anti-money laundering activities when reviewing bank mergers and BHC acquisitions.

Human Capital Management

As of December 31, 2023, we employed 1,899 full-time equivalent employees, of which 1,792 are located in the State of Hawaii, with the remainder located in Guam and other Pacific Islands. None of our employees are subject to a collective bargaining agreement.

People are the heart and soul of the Company, and as such, the Company values the contributions of all of its employees and is committed to building an engaged and connected employee community within the Company. With the introduction of a new role dedicated to Culture and Employee Experience, deep focus was spent on creating a human-centric, inclusive and innovative environment that nurtures a strong sense of belonging, fuels continuous learning, and focuses on developing effective leaders, ultimately driving exceptional employee experience and sustainable organizational success. Key areas of focus for the Company include:

Diversity and Inclusion: The Company believes that a diverse and inclusive workforce fosters an environment where everyone can thrive and be successful. As of December 31, 2023, approximately 88% of our workforce are minorities (non-Caucasian) and approximately 62% of our workforce are female. Of our senior leaders and managers, 82% are minorities and 60% are female. We conduct an external pay equity study periodically to evaluate the gender pay gap and confirm one does not exist.

Employee Development and Training: The Company is committed to providing all employees with the opportunity to develop personally and professionally. We nurture a collaborative, digitally connected workplace to support changing needs. We invest in people leadership capability to deliver exceptional employee experience and develop our workforce of tomorrow. Skills and professional development training is provided to employees at all levels, with additional development sessions specifically targeted to managers and leaders. Key initiatives included the continued support of executive coaching to elevate leadership capabilities, a competitive Leadership Development Program, a hybrid Pathways to Professional Excellence cohort with 36 employees and an enhanced online performance management process that empowers the employee to own the first step of the performance review process.

To help maintain Hawaii’s special culture of ‘ohana and working together toward common goals, continued attention was paid to engaging teammates in a hybrid environment. Based on employee feedback from surveys, online and in-person sessions were continued in 2023 to connect with employees and encourage collaboration. “Recruit Connect” continued in 2023 to help teammates identify job opportunities within the Company and find out more about them. In some cases, sessions led to referred candidates joining the Bank, and to current employees finding a new career path. “Manager Connect”, formerly known as “Manager Excellence Forums” also returned in 2023 as a platform connecting managers so that they can learn from and support one another when facing real management issues, and discuss practical solutions. Manager engagement has been key to navigating the ever changing business environment, and these forums help managers stay connected and improve their management skills while moving forward with their teams. Topics have included: Evaluating Employees and Meaningful Conversations to prepare our managers for the 2023 Performance, Merit & Bonus season, Rising Team, and how our leaders can continue to build stronger team dynamics. “Rising Team” continued to be a priority in 2023. This new and modern technology platform provides a way for us to strengthen our connection with our teammates. “Rising Team” enables managers to confidently facilitate sessions with their team and offers everyone the opportunity to share thoughts and feedback in real time on a variety of leadership themed topics, such as Psychological safety, Appreciation, Natural talents and Career horizons.

Employee Benefits: The Company believes in enabling a healthy workforce and providing a benefits program that is designed to attract, retain, and engage employees. In addition to competitive insurance, healthcare, and retirement offerings, examples of more innovative and workforce-specific benefits offerings include: mortgage discount program, student loan assistance program, well-being sessions, and personal finance education. The Bank continues to incorporate mental health, financial well-being, social health, community, and a positive employee experience in their well-being strategies, in addition to physical health. In 2023, the Bank made additional resources available to employees and continued to look for more opportunities to support employees and cultivate an environment where employees can be their whole selves.

Health and Safety: The health and safety of our employees is a priority. We continue our commitment to workplace safety and workforce health to maintain business and operational continuity without diminishing our focus on both employee and customer safety.

Information about our Executive Officers

Listed below are executive officers of the Parent.

Peter S. Ho, 58

Chairman and Chief Executive Officer since July 2010 and President since April 2008.

Dean Y. Shigemura, 60

Vice Chair since December 2017; Chief Financial Officer since March 2017.

Marco A. Abbruzzese, 58

Vice Chair, Senior Executive Director of Wealth Management since January 2022; Regional Managing Director - Washington and Alaska of Wells Fargo from May 2009 to December 2021.

Sharon M. Crofts, 58

Vice Chair, Client Solutions Group since April 2016.

Matthew K.M. Emerson, 46

Chief Strategy Officer since November 2023; Vice Chair since November 2022; Senior Executive Director of Mortgage Banking and Loans from February 2020 to November 2023; Executive Vice President and Senior Executive Director of eCommerce from September 2018 to February 2020.

Patrick M. McGuirk, 54

Vice Chair and Chief Administrative Officer since September 2023; Senior Executive Vice President and Chief General Counsel from November 2020 to September 2023; Executive Vice President and General Counsel at Flagstar Bank from December 2014 to October 2020.

James C. Polk, 57

Chief Banking Officer since January 2022; Chief Commercial Officer from April 2020 to December 2021; Vice Chair since June 2016.

Mary E. Sellers, 67

Vice Chair and Chief Risk Officer since July 2005.

S. Bradley Shairson, 54

Vice Chair and Deputy Chief Risk Officer since May 2023; Chief Credit Officer from May 2023 to January 2024; Chief Operating Officer and Chief Risk Officer of Regions Bank Capital Markets from March 2017 to April 2023.

Jeanne M. Dressel, 62

Principal Accounting Officer, Senior Vice President and Controller since November 2022; Global Controller of Blockchain.com from September 2021 to October 2022; Senior Vice President and Controller of First Interstate Bank from October 2018 to September 2021.

Item 1A. Risk Factors

There are a number of risks and uncertainties that could negatively affect our business, financial condition or results of operations. We are subject to various risks resulting from changing economic, environmental, political, industry, business, financial and regulatory conditions. The risks and uncertainties described below are what management believes are the material risk factors that could affect our business and operations, although they are not the only risks that may have a material adverse effect on the Company.

Risks Related to Macroeconomic and Political Conditions

Adverse changes in business and economic conditions, in particular those of Hawaii, Guam and other Pacific Islands, could lead to lower revenue, lower asset quality, and lower earnings.

Our business and earnings are closely tied to the economies of Hawaii and the Pacific Islands. These local economies rely heavily on tourism, the U.S. military, real estate, construction, government, and other service-based industries. Lower visitor arrivals or spending, real or threatened acts of war or terrorism, public unrest, increases in energy costs, inflation, the availability of affordable air transportation, climate change, natural disasters and adverse weather, public health issues including the COVID-19 pandemic, and federal, State of Hawaii and local government budget issues may impact consumer and corporate spending. Additionally, financial markets may be adversely affected by the current or anticipated impact of military conflict, including continuing military conflict between Israel and Hamas, Russia and Ukraine, terrorism or other geopolitical events.

There has been significant improvement in tourism and general economic conditions in Hawaii since the beginning of the COVID-19 pandemic. However, in August 2023, wildfires broke out in West Maui destroying the historic town of Lahaina as well as structures and farmland in Upcountry Maui and North Kihei. Roughly 2,200 structures were lost in the fire, 86% of which were homes. Although hotels have reopened, Maui’s visitor industry will continue to be impacted in the coming years.

Deterioration of economic conditions, locally, nationally, and internationally could adversely affect the quality of our assets, credit losses, and the demand for our products and services, which could lead to lower revenues, higher expenses, and lower earnings. The level of domestic and international visitor arrivals and spending, housing prices, and unemployment rates are some of the metrics that we continually monitor. We also monitor the value of collateral, such as real estate, that secures the loans we have made. The borrowing power of our customers could also be negatively impacted by a decline in the value of collateral.

A prolonged period of inflation may impact our profitability by negatively impacting our fixed costs and expenses. Economic and inflationary pressure on consumers and uncertainty regarding the economic improvement could result in changes in consumer and commercial spending, borrowing and savings habits. Such conditions could have a material adverse effect on the credit quality of our loans and our business, financial condition and results of operations.

Climate change and the governmental responses to it could have a material adverse impact on the Bank and its customers

The impacts of climate change, such as extreme weather conditions, natural disasters and rising sea levels, could impact the Bank’s operations as well as those of its customers and third party vendors upon which it relies. Such events could also result in market volatility or negatively impact our customers’ ability to pay outstanding loans, or result in the deterioration of the value of our collateral causing a material adverse effect on the Bank’s financial condition and results of operation. Furthermore, increasing regulation related to climate change could have an adverse effect on the business and financial condition of the Bank and its customers, including our credit portfolio. Further legislation and regulatory requirements could increase the operating expenses of, or otherwise adversely impact, the Bank or its customers. To the extent that the Bank or its customers experience increases in costs, reductions in the value of assets, constraints on operations or similar concerns driven by changes in regulation relating to climate change, the Bank’s business and results of operations may be adversely affected.

Disruptions, instability and failures in the banking industry.

Recent events impacting the financial services industry, including the failure of Silicon Valley Bank, Signature Bank and First Republic Bank, have resulted in decreased confidence in banks among consumer and commercial depositors, other counterparties and investors, as well as significant disruption, volatility and reduced valuations of equity and other securities of banks in the capital markets. These events occurred during a period of rapidly rising interest rates which, among other things, has resulted in unrealized losses in longer duration securities and loans held by banks, more competition for bank deposits and may increase the risk of a potential recession. These recent events have, and could continue to, adversely impact the market price and volatility of the Company’s common stock. These recent events may also result in potentially adverse changes to laws or regulations governing banks and bank holding companies or result in the impositions of restrictions through supervisory or enforcement activities, including higher capital requirements, which could have a material impact on our business. Inability to access short-term funding, loss of client deposits or changes in our credit ratings could increase the cost of funding, limit access to capital markets or negatively impact our overall liquidity or capitalization. We may be impacted by concerns regarding the soundness or

creditworthiness of other financial institutions, which can cause substantial and cascading disruption within the financial markets and increased expenses.

Any reduction in defense spending by the federal government could adversely impact the economy in Hawaii and the Pacific Islands.

The U.S. military has a major presence in Hawaii and the Pacific Islands. As a result, the U.S. military is an important aspect of the economies in which we operate. The funding of the U.S. military is subject to the overall U.S. Government budget and appropriation decisions and processes which are driven by numerous factors, including geo-political events, macroeconomic conditions, and the ability and willingness of the U.S. Government to enact legislation. U.S. Government appropriations have been and likely will continue to be affected by larger U.S. Government budgetary issues and related legislation. Cuts in defense and other security spending could have an adverse impact on the economies in which we operate, which could adversely affect our business, financial condition, and results of operations.

Changes in interest rates could adversely impact our results of operations and capital.

Our earnings are highly dependent on the spread between the interest earned on loans, leases, and investment securities and the interest paid on deposits and borrowings. We primarily rely on customer deposits as a sizable source of relatively stable and low-cost funds. Changes in market interest rates impact the rates earned on loans, leases, and investment securities and the rates paid on deposits and borrowings. In addition, changes to market interest rates could impact the level of loans, leases, investment securities, deposits, and borrowings, and the credit profile of our current borrowers. Interest rates are affected by many factors beyond our control, and fluctuate in response to general economic conditions, currency fluctuations, and the monetary and fiscal policies of various governmental and regulatory authorities.

Changes in monetary policy, including changes in interest rates, will influence the origination of loans and leases, the purchase of investments, the generation of deposits, and the rates received on loans and investment securities and paid on deposits. Any substantial prolonged change in market interest rates may negatively impact our ability to attract deposits, originate loans and leases, and achieve satisfactory interest rate spreads. If we are unable to continue to fund loans and other assets through customer deposits or access capital markets on favorable terms or if we otherwise fail to manage our liquidity effectively, our liquidity, net interest margin, financial results and conditions may be adversely affected.

Credit losses could increase if economic conditions stagnate or deteriorate.

Increased credit losses for the Bank could result if economic conditions stagnate or deteriorate. The risk of nonpayment on loans and leases is inherent in all lending activities. We maintain a reserve for credit losses to absorb estimated expected credit losses over the life of the loan and lease portfolio as of the balance sheet date. Management makes various assumptions and judgments about the loan and lease portfolios in determining the level of the reserve for credit losses. Many of these assumptions are based on current economic conditions. Should economic conditions stagnate or deteriorate nationally or in Hawaii, we may be required to take increased reserves and/or experience higher credit losses in future periods. Inability of our borrowers to make timely repayments on their loans, or decreases in real estate collateral values may result in increased delinquencies, foreclosures, and customer bankruptcies, any of which could have a material adverse effect on our financial condition or results of operations.

Consumer protection initiatives and court decisions related to the foreclosure process affect our remedies as a creditor.

Proposed consumer protection initiatives related to the foreclosure process, including voluntary and/or mandatory programs intended to permit or require lenders to consider loan modifications or other alternatives to foreclosure, could increase our credit losses or increase our expense in pursuing our remedies as a creditor.

In addition, Hawaii’s appellate courts have made rulings that increase the complexity and risk of nonjudicial, or out-of-court, foreclosures. At the same time, a chronic backlog of cases in the Hawaii courts has slowed the judicial foreclosure process, which delays the Bank’s ability to take over, preserve, and sell the mortgaged property. The manner in which these issues are ultimately resolved could impact our foreclosure procedures and costs, which in turn could affect our financial condition or results of operations.

Changes in the capital markets could materially affect the level of assets under management and the demand for our other fee-based services

Changes in the capital markets could affect the volume of income from and demand for our fee-based services. Our investment management revenues depend in large part on the level of assets under management. Market volatility that leads customers to

liquidate investments or move investments to other institutions or asset classes, as well as lower asset values can reduce our level of assets under management, thereby decreasing our investment management revenues.

The Parent’s liquidity is dependent on dividends from the Bank.

The Parent is a separate and distinct legal entity from the Bank. The Parent receives substantially all of its cash in the form of dividends from the Bank. These dividends are the principal source of funds to pay dividends on the Parent’s common and preferred stock or to repurchase common stock under the Parent’s share repurchase program. Various federal and state laws and regulations impose limitations on the payment of dividends, such as requiring regulatory approval under certain circumstances. Limitations on the Parent’s ability to receive dividends from the Bank could have a material adverse effect on the Parent’s ability to meet its obligations, pay dividends to shareholders, or repurchase stock.

There can be no assurance that the Parent will repurchase stock or continue to declare cash dividends.

During 2023, the Parent repurchased 150,000 shares of common stock at a total cost of $9.9 million under its share repurchase program. However, we suspended share repurchases in April 2023 in response to the turmoil in the banking industry due to several significant bank failures. The Parent also paid cash dividends of $111.8 million on common shares during 2023. In January 2024, the Parent’s Board of Directors declared a quarterly cash dividend of $0.70 per share on the Parent’s outstanding common shares.

Our dividend payments and/or stock repurchases may change from time-to-time, and we cannot provide assurance that we will continue to declare dividends and/or repurchase stock in any particular amounts or at all. Dividends and/or stock repurchases are subject to capital availability and periodic determinations by our Board of Directors. We continue to evaluate the potential impact that regulatory proposals may have on our liquidity and capital management strategies, including Basel III and those required under the Dodd-Frank Act. The actual amount and timing of future dividends and share repurchases, if any, will depend on market and economic conditions, applicable SEC rules, federal and state regulatory and supervisory restrictions, and various other factors. In addition, the amount we spend and the number of shares we are able to repurchase under our stock repurchase program may further be affected by a number of other factors, including the stock price and blackout periods in which we are restricted from repurchasing shares. A reduction in or elimination of our dividend payments and/or prolonged suspension of stock repurchases could have a negative effect on our stock price.

Risks Related to Regulatory Changes

Fiscal and Monetary Policy changes may significantly impact our profitability and liquidity

The Company’s business and earnings are significantly affected by the fiscal and monetary policies of the Federal Government and its agencies. The Bank is particularly affected by the policies of the Federal Reserve, which regulates the supply of money and credit in the United States. Among the instruments of monetary policy available to the Federal Reserve are (a) conducting open market operations in U.S. government securities, (b) changing the discount rates of borrowings of depository institutions, (c) imposing or changing reserve requirements against depository institutions’ deposits, and (d) imposing or changing reserve requirements against certain borrowings by banks and their affiliates. These methods are used in varying degrees and combinations to directly affect the availability of bank loans and deposits, as well as the interest rates charged on loans and paid on deposits. Changes to these policies of the Federal Reserve may have a material effect on our business, results of operations and financial condition.

Legislation and regulatory initiatives affecting the financial services industry, including new interpretations, restrictions and requirements, could detrimentally affect the Company’s business.

The Dodd-Frank Act, enacted in July 2010, triggered sweeping reforms to the financial services industry. The Dodd-Frank Act, other consumer protection laws, and their implementing rules and regulations are likely to continue to result in increased compliance costs, along with possible restrictions on our products, services and manner of operations, any of which may have a material adverse effect on our results of operations and financial condition.

The CFPB has exercised its broad rule-making, supervisory, and examination authority of consumer financial products, as well as expanded data collection and enforcement powers, over depository institutions with more than $10.0 billion in assets. Staff changes to key positions within the CFPB by the Biden administration may result in the CFPB pursuing more strict enforcement policies, similar to that experienced under the Obama administration. Regulation of overall safety and soundness, the CRA, federal housing and flood insurance, as they pertain to consumer financial products and services, remains with the FRB. As a result of greater regulatory scrutiny of consumer financial products as a whole, the Company has become subject to more and

expanded regulatory examinations, which also could result in increased costs as well as harm to our reputation in the event of a finding that we have not complied with the increased regulatory requirements.

New laws, regulations, and changes, and the uncertainty surrounding whether such laws, regulations and changes will be implemented, interpreted, repealed or reinstated, in the current regulatory and political climate, may continue to increase our costs of regulatory compliance. They may significantly affect the markets in which we do business, the markets for and value of our investments, and our ongoing operations, costs, and profitability.

In addition, there may be increased regulatory scrutiny in the course of routine examinations and otherwise, and new regulations designed to respond to recent negative developments in the banking industry, all of which may increase our costs of doing business and reduce our profitability. Among other things, there may be increased focus by both regulators and investors on deposit composition, the level of uninsured deposits, brokered deposits, unrealized losses in securities portfolios, liquidity, commercial real estate composition and concentration, and capital and general oversight and control of the foregoing. Financial institutions, such as ourselves, could face increased scrutiny or be viewed as higher risk by regulators and/or the investor community, which could negatively affect its results of operations and financial condition.

Further, leadership and staff changes in regulatory agencies such as the CFPB, CFTC, SEC, and the Treasury Department could lead to changes in the rulemaking, supervision, examination and enforcement priorities and policies of the agencies. The potential impact of any changes within these agencies cannot be predicted at this time.

Changes in the capital, leverage, liquidity requirements for financial institutions could materially affect future requirements of the Company.

Under Basel III, financial institutions are required to have more capital and a higher quality of capital. Under the final rules issued by the banking regulators, minimum requirements increased for both the quantity and quality of capital held by the Company.

Compliance with Basel III resulted in increased capital, liquidity, and disclosure requirements. See the “Regulatory Initiatives Affecting the Banking Industry” section in MD&A for more information.

Changes in income tax laws and interpretations, or in accounting standards, could materially affect our financial condition or results of operations.

Further changes in income tax laws could be enacted, or interpretations of existing income tax laws could change, causing an adverse effect on our financial condition or results of operations. For example, the Inflation Reduction Act was enacted on August 16, 2022, and introduced, among provisions, a new corporate minimum income tax on certain large corporations, an excise tax of 1% on certain share repurchases by corporations, and increased funding for the Internal Revenue Service. Although we do not anticipate the new corporate minimum income tax will currently apply to us, changes in our business and any future regulations or other guidance on the interpretation and application of the new corporate minimum tax, as well as the potential application of the share repurchase excise tax, may result in additional taxes payable by us, which could materially and adversely affect our financial results and operations. Similarly, our accounting policies and methods are fundamental to how we report our financial condition and results of operations. Some of these policies require use of estimates and assumptions that may affect the value of our assets, liabilities, and financial results. Periodically, new accounting standards are issued or existing standards are revised, changing the methods for preparing our financial statements. These changes are not within our control and may significantly impact our financial condition and results of operations.

Risks Related to Business Operations

A failure in or breach of our operational systems, information systems, or infrastructure, or those of our third party vendors and other service providers, may result in financial losses, loss of customers, or damage to our reputation.

We rely heavily on communications and information systems to conduct our business. In addition, we rely on third parties to provide key components of our infrastructure, including loan, deposit and general ledger processing, internet connections, and network access. These types of information and related systems are critical to the operation of our business and essential to our ability to perform day-to-day operations, and, in some cases, are critical to the operations of certain of our customers. These third parties with which we do business or that facilitate our business activities, including exchanges, clearing firms, financial intermediaries or vendors that provide services or security solutions for our operations, could also be sources of operational and information security risk to us, including breakdowns or failures of their own systems or capacity constraints. In addition, our communications and information systems and operations (including those of third parties that facilitate our business activities) could be damaged or interrupted due to events such as natural or human-caused disasters (including public health crises) or extreme weather (including as a result of climate change), geopolitical events and security issues, computer viruses, physical or electronic break-ins, operational failures, and similar events or disruptions.

Although we have safeguards and business continuity plans in place, our business operations may be adversely affected by significant and widespread disruption to our physical infrastructure or operating systems that support our business and our customers, resulting in financial losses, loss of customers, or damage to our reputation.

An interruption or breach in security of our information systems or those related to merchants and third party vendors, including as a result of cyber attacks, could disrupt our business, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, or result in financial losses.

Our business requires the collection and retention of large volumes of customer data, including payment card numbers and other personally identifiable information in various information systems that we maintain and in those maintained by third parties with whom we contract to provide data services. We also maintain important internal company data such as personally identifiable information about our employees and information relating to our operations. The integrity and protection of that customer and company data is important to us. As customer, public, legislative and regulatory expectations and requirements regarding operational and information security have increased, our operating systems and infrastructure must continue to be safeguarded and monitored for potential failures, disruptions and breakdowns.

Our technologies, systems, networks and software, and those of other financial institutions have been, and are likely to continue to be, the target of cybersecurity threats and attacks, which may range from uncoordinated individual attempts to sophisticated and targeted measures directed at us. These cybersecurity threats and attacks may include, but are not limited to, attempts to access information, including customer and company information, malicious code, computer viruses and denial of service attacks that could result in unauthorized access, misuse, loss or destruction of data (including confidential customer information), account takeovers, unavailability of service or other events. These types of threats may result from human error, fraud or malice on the part of external or internal parties, intelligence-gathering by foreign governments, or from accidental technological failure internally or by our vendors. Further, to access our products and services our customers may use computers and mobile devices that are beyond our security control systems. The risk of a security breach or disruption, particularly through cyber-attack or cyber intrusion, including by computer hackers, has increased as the number, intensity and sophistication of attempted attacks and intrusions around the world have increased.

Our customers and employees have been, and will continue to be, targeted by parties using fraudulent emails and other communications in attempts to misappropriate passwords, payment card numbers, bank account information or other personal information or to introduce viruses or other malware through “trojan horse” programs to our customers’ devices. These communications may appear to be legitimate messages sent by the Bank or other businesses, but direct recipients to fake websites operated by the sender of the email or request that the recipient send a password or other confidential information via email or download a program. Despite our efforts to mitigate these threats through product improvements, use of encryption and authentication technology to secure online transmission of confidential consumer information, and customer and employee education, such attempted frauds against us or our merchants and our third party service providers remain a serious issue. The pervasiveness of cyber security incidents in general and the risks of cyber-crime are complex and continue to evolve. In light of several recent high-profile data breaches involving other companies’ losses of customer personal and financial information, we believe this risk could cause customer and/or Bank losses, damage to our brand, and increase our costs through the ongoing cost of technology investments to improve security, as well as the potential financial and reputational impact of a cyber security incident involving the Company.

Although we make significant efforts to maintain the security and integrity of our information systems and have implemented various measures to manage the risk of a security breach or disruption, there can be no assurance that our security efforts and measures will be effective or that attempted security breaches or disruptions would not be successful or damaging. Even the most well-protected information, networks, systems and facilities remain potentially vulnerable because attempted security breaches, particularly cyber-attacks and intrusions, or disruptions will occur in the future, and because the techniques used in such attempts are constantly evolving and generally are not recognized until launched against a target, in some cases are designed not to be detected and, in fact, may not be detected. Accordingly, we may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures, and thus making it virtually impossible for us to entirely mitigate this risk. A security breach or other significant disruption could: 1) disrupt the proper functioning of our networks and systems and therefore our operations and/or those of certain of our customers; 2) result in the unauthorized access to, and destruction, loss, theft, misappropriation or release of confidential, sensitive or otherwise valuable information of ours or our customers, including account numbers and other financial and personal information; 3) result in a violation of applicable privacy, data breach and other laws, subjecting the Bank to additional regulatory scrutiny and exposing the Bank to civil litigation, governmental fines and possible financial liability; 4) require significant management attention and resources to remedy the damages that result; or 5) harm our reputation or cause a decrease in the number of customers that choose to do business with us or reduce the level of business that our customers do with us. The occurrence of any such failures, disruptions or security breaches could have a negative impact on our results of operations, financial condition, and cash flows as well as damage our brand and reputation.

Our mortgage banking income may experience significant volatility.

Our mortgage banking income is highly influenced by the level and direction of mortgage interest rates, real estate activity, and refinancing activity. Interest rates can affect the amount of mortgage banking activity and impact fee income and the fair value of our derivative financial instruments and mortgage servicing rights. Mortgage banking income may also be impacted by changes in our strategy to manage our residential mortgage portfolio. For example, we may occasionally decide to add more conforming saleable loans to our portfolio (as opposed to selling the loans in the secondary market) which would reduce our gains on sales of residential mortgage loans. These variables could adversely affect mortgage banking income.

Our mortgage loan servicing business may be impacted if we do not meet our obligations, or if servicing standards change.

We act as servicer for mortgage loans sold into the secondary market, primarily to government sponsored enterprises (“GSEs”) such as Fannie Mae. As a seller and servicer for those loans, we make warranties about their origination and are required to perform servicing according to complex contractual and handbook requirements. We maintain systems and procedures intended to ensure that we comply with these requirements. We may be penalized and, in limited instances required to repurchase certain mortgages, due to alleged failures to adhere to these requirements. Should GSEs change the requirements in their servicing handbooks, we may sustain higher compliance costs.

Risks related to representation and warranty provisions may impact our mortgage loan servicing business

The Company sells residential mortgage loans in the secondary market primarily to Fannie Mae. The Company also pools Federal Housing Administration (“FHA”) insured and U.S. Department of Veterans Affairs (“VA”) guaranteed residential mortgage loans for sale to Ginnie Mae. These pools of FHA-insured and VA-guaranteed residential mortgage loans are securitized by Ginnie Mae. The agreements under which the Company sells residential mortgage loans to Fannie Mae or Ginnie Mae and the insurance or guaranty agreements with FHA and VA contain provisions that include various representations and warranties regarding the origination and characteristics of the residential mortgage loans. Although the specific representations and warranties vary among investors, insurance or guarantee agreements, they typically cover ownership of the loan, validity of the lien securing the loan, the absence of delinquent taxes or liens against the property securing the loan, compliance with loan criteria set forth in the applicable agreement, compliance with applicable federal, state, and local laws, and other matters. As of December 31, 2023, the unpaid principal balance of residential mortgage loans sold by the Company was $2.0 billion. The agreements under which the Company sells residential mortgage loans require delivery of various documents to the investor or its document custodian. Although these loans are primarily sold on a non-recourse basis, the Company may be obligated to repurchase residential mortgage loans or reimburse investors for losses incurred if a loan review reveals that underwriting and documentation standards were potentially not met. Some agreements may require the Company to repurchase delinquent loans. Upon receipt of a repurchase request, the Company works with investors or insurers to arrive at a mutually agreeable resolution. Repurchase demands are typically reviewed on an individual loan by loan basis to validate the claims made by the investor or insurer and to determine if a contractually required repurchase event has occurred. The Company manages the risk associated with potential repurchases or other forms of settlement through its underwriting and quality assurance practices and by servicing mortgage loans to meet investor and secondary market standards. For the year ended December 31, 2023, the Company repurchased three residential mortgage loans with an aggregate unpaid principal balance totaling $0.6 million as a result of the representation and warranty provisions contained in these contracts. The loans were delinquent as to principal and interest at the time of repurchase, however, no material losses were incurred related to these repurchases.

Risks relating to residential mortgage loan servicing activities may adversely affect our results.

In addition to servicing loans in the Company’s portfolio, substantially all of the loans the Company sells to investors are sold with servicing rights retained. The Company also services loans originated by other mortgage loan originators. As servicer, the Company’s primary duties are to: (1) collect payments due from borrowers; (2) advance certain delinquent payments of principal and interest; (3) maintain and administer any hazard, title, or primary mortgage insurance policies relating to the mortgage loans; (4) maintain any required escrow accounts for payment of taxes and insurance and administer escrow payments; and (5) foreclose on defaulted mortgage loans or, to the extent consistent with the documents governing a securitization, consider alternatives to foreclosure, such as loan modifications or short sales. Each agreement under which the Company acts as servicer generally specifies a standard of responsibility for actions taken by the Company in such capacity and provides protection against expenses and liabilities incurred by the Company when acting in compliance with the respective servicing agreements. However, if the Company commits a material breach of obligations as servicer, the Company may be subject to termination if the breach is not cured within a specified period following notice. The standards governing servicing and the possible remedies for violations of such standards vary by investor. These standards and remedies are determined by servicing guides issued by the investors as well as the contract provisions established between the investors and the Company. Remedies could include repurchase of an affected loan.

The requirement to record certain assets and liabilities at fair value may adversely affect our financial results.

We report certain assets, including available-for-sale investment securities, at fair value. Generally, for assets that are reported at fair value we use quoted market prices or valuation models that utilize market data inputs to estimate fair value. Because we record these assets at their estimated fair value, mark-to-market gains or losses may impact equity or income. The level of interest rates can impact the estimated fair value of investment securities. Mark-to-market values of non-hedged available-for-sale investment securities are recorded in shareholders' equity as a component of other comprehensive income, while hedged investment securities are recorded in interest income. Disruptions in the capital markets may require us to reserve for credit losses in future periods with respect to investment securities in our portfolio. The amount and timing of any credit allowance recognized will be measured as the difference between the security’s amortized cost basis and the amount expected to be collected over the security’s lifetime.

Natural disasters and adverse weather could negatively affect real estate property values and bank operations.

Real estate and real estate property values play an important role for the Bank in several ways. The Bank owns or leases many real estate properties in connection with its operations, primarily located in Hawaii with its unique weather and geology. Our business operations could suffer to the extent the Bank cannot utilize its branch network due to damage from weather or other natural disasters. Real estate is also utilized as collateral for many of our loans. A natural disaster in Hawaii or the Pacific Islands could cause property values in the affected areas to fall, might limit our customers' access to adequate property insurance, or otherwise impact borrowers’ ability to pay their financial obligations, any of which would increase our exposure to loan defaults and could require the Bank to record an impairment on our financial statements.

General Risk Factors

Competition may adversely affect our business.

Our future depends on our ability to compete effectively. We compete for deposits, loans, leases, and other financial services with a variety of competitors, including banks, thrifts, savings associations, credit unions, mortgage companies, finance companies, mutual funds, brokerage firms, insurance companies, and other non-traditional providers of financial services, including financial technology companies and financial service subsidiaries of commercial and manufacturing companies. Some of our competitors are not subject to the same level of regulation and oversight that is required of banks and BHCs, and may benefit from tax exemptions or lower tax rates. As a result, some of these competitors may have lower cost structures.

We expect competitive conditions to intensify as consolidation in the financial services industry continues. The financial services industry is also likely to become more competitive as further technological advances enable more companies, including non-depository institutions, to provide financial services. Also, some of our competitors, through delivery channels such as the Internet, may be based outside of the markets that we serve.

Both federal and local laws provide mechanisms for out-of-state banks and their holding companies to acquire or open branches in our service territories. Failure to effectively address this competitive risk by competing, innovating and making effective use of new and existing channels to deliver our products and services could adversely affect our financial condition or results of operations.

Negative public opinion could damage our reputation and adversely impact our earnings and liquidity.

Reputational risk, or the risk to our business, earnings, liquidity, and capital from negative public opinion, could result from our actual or alleged conduct in a variety of areas, including legal and regulatory compliance, lending practices, corporate governance, litigation, ethical issues, or inadequate protection of customer information. We expend significant resources to comply with regulatory requirements. Failure to comply could result in reputational harm or significant legal and/or remedial costs. Damage to our reputation could adversely affect our ability to retain and attract new customers, and adversely impact our earnings and liquidity.

We are subject to certain litigation, and our expenses related to this litigation may adversely affect our results.

We are, from time-to-time, involved in various legal proceedings arising from our normal business activities. These claims and legal actions, including supervisory actions by our regulators, could involve large monetary claims and significant defense costs. The outcome of these cases is uncertain. Substantial legal liability or significant regulatory action against us could have material financial effects or cause significant reputational harm to us, which in turn could seriously harm our business prospects.

In recent years, regulatory enforcement and fines have increased across the banking and financial services sector. There is no assurance that those actions will not result in regulatory settlements or other enforcement actions against the Company or the Bank. Furthermore, a single event involving a potential violation of law or regulation may give rise to numerous and overlapping investigations and proceedings by multiple federal and state agencies and officials. In addition, if one or more financial institutions are found to have violated a law or regulation relating to certain business activities, this could lead to investigations by regulators or other governmental agencies of the same or similar activities by other financial institutions, including the Company, and large fines and remedial measures that may have been imposed in resolving earlier investigations for the same or similar activities at other financial institutions may be used as the basis for future settlements.

We may be exposed to substantial uninsured liabilities, which could materially affect our results of operations and financial condition. Based on information currently available, we believe that the eventual outcome of known actions against us will not be materially in excess of such amounts accrued by us. However, in the event of unexpected future developments, it is possible that the ultimate resolution of those matters may be material to our financial results for any particular period. See the Contingencies section of Note 20 to the Consolidated Financial Statements for more information.

Our performance depends on attracting and retaining key employees and skilled personnel to operate our business effectively.

Our success is dependent on our ability to recruit qualified and skilled personnel to operate our business effectively. Competition for these qualified and skilled people is intense. There are a limited number of qualified personnel in the markets we serve, so our success depends in part on the continued services of many of our current management and other key employees. Failure to retain our key employees and maintain adequate staffing of qualified personnel could adversely impact our operations and our ability to compete.

The soundness of other financial institutions may adversely impact our financial condition or results of operations.

Our ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, lending, counterparty, or other relationships. As a result, defaults by, or even rumors or questions about, one or more financial services institutions or the financial services industry in general have led to market-wide liquidity problems and could lead to losses or defaults by us or by other institutions. We have exposure to many different industries and counterparties, and we routinely execute transactions with brokers and dealers, commercial banks, investment banks, mutual funds, and other institutional clients. Many of these transactions expose us to credit risk in the event of default of our counterparty or client. In addition, our credit risk may be exacerbated when the collateral held by us cannot be realized upon or is liquidated at prices not sufficient to recover the full amount of the loan or derivative exposure due us. Such losses could materially affect our financial condition or results of operations.

We have experienced increases in FDIC insurance assessments due to the bank failures that occurred in 2023.

In November 2023, the FDIC implemented a special assessment to recover the loss to the Deposit Insurance Fund following the failures of Silicon Valley Bank, Signature Bank, and First Republic Bank earlier in the year. The assessment was based on reported uninsured deposits as of December 31, 2022. The Company's share of the FDIC special assessment was $14.7 million which was recorded in the fourth quarter of 2023 and is payable in eight quarterly installments starting in June 2024. In February 2024, the FDIC updated the loss estimate related to the bank failures to $20.4 billion, and increase from its original estimate of $16.3 billion. Based on the FDIC’s modified loss estimate, we expect an increase in special assessment expense in, or around, June 2024; however, we expect the increase will not be material. Further increases in our assessment fees may have an adverse effect on our results of operations and financial condition.

Item 1B. Unresolved Staff Comments

None.

Item 1C. Cybersecurity

As a company that collects and retains large volumes of customer and employee data, including payment card numbers and other personally identifiable information, we face significant and persistent cybersecurity risks. The protection and integrity of that data is important to us, which is demonstrated by the significant efforts and investments made to implement various measures to manage the risk of a security breach or disruption.

Risk Management and Strategy

Assessing, identifying and managing cybersecurity related risks are integrated into our overall Enterprise Risk framework, of which one of the objectives is to ensure the confidentiality, integrity, and availability of our information sets through the maintenance of a comprehensive information security program. One of the key aspects of this program is a risk assessment that is used to identify industry and company-specific risks, measure control effectiveness, identify any gaps that need to be addressed, and linking our controls with applicable policies, standards and guidelines to ensure that responsible parties are aware of their obligations with respect to this program..

Governance

Since the management of cybersecurity risks is ultimately the responsibility of the Board of Directors, it devotes significant time and attention to the oversight of cybersecurity and information security risks, and benefits from the technical expertise of its members. The Board of Directors reviews an Enterprise Risk Position report that reflects key risk measures and trends across the Company, including cybersecurity. The Board of Directors also reviews and approves the Information Security Policy annually and frequently receives presentations on and discusses cybersecurity and information security risks, industry trends and best practices.

The Audit & Risk Committee, which is charged with assisting the Board of Directors in fulfilling its oversight responsibilities related to the Company’s enterprise-wide risk management framework, receives an operational risk update at least quarterly that includes a review of cybersecurity and information security risk.

The Board of Directors is also responsible for the approval and oversight of the Information Security (IS) Program. Our Chief Information Security Officer (CISO), who is designated as the IS Program Coordinator, has extensive information technology, security and program management experience. The Information Risk and Controls Management Department, under the direction of the CISO, administers the IS Program with an objective of preventing cybersecurity incidents by ensuring the confidentiality, integrity and availability of company information. Central to incident management is the Information Security Incident Response Team (ISIRT), which is responsible for responding expeditiously and effectively to security incidents to minimize risks to the business, customers and consumers. In the event of an incident, we follow the detailed incident response plan, which outlines the steps to be followed from incident identification to mitigation, recovery and notification, including notifying functional areas, regulators, as well as senior leadership and the Board, as appropriate.

All of our employees also have a responsibility to protect the privacy of bank confidential and proprietary information. They are required to undergo periodic information security awareness training to ensure a clear understanding of their roles in protecting information assets and to create a security-minded culture.

We continue to strengthen the management and oversight of cybersecurity risks through new security system enhancements, policies, testing, identification and reporting. We also engage a third-party to perform penetration testing and ongoing analysis to identify potential vulnerabilities and areas for additional enhancements.

We utilize third party service providers to support and facilitate business and operational activities and to achieve strategic goals. However, third parties may expose us and our customers to various risks. We have implemented a Third Party Risk Management framework, which provides the tools and practices utilized in the oversight of third party service providers, with an objective to meet legal and regulatory obligations, contractual requirements, performance expectations, and our own principles and values.

We are subject to extensive federal and state regulation of customer privacy and the security of financial information. Our federal regulator, the FRB, is part of the Federal Financial Institutions Examination Council (FFIEC), which publishes extensive guidelines and examination procedures that are used to review the security of Bank of Hawaiʻi and other financial institutions.

For the 2023 period, we reported no material cybersecurity incidents affecting the confidentiality, integrity, or availability of data or systems. We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition. We face certain ongoing risks from cybersecurity threats that, if realized, are reasonably likely to materially affect us, including our operations, business strategy, results of operations, or financial condition.

For further information, please see our risk factor titled “An interruption or breach in security of our information systems or those related to merchants and third-party vendors, including as a result of cyber attacks, could disrupt our business, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, or result in financial losses.”

Item 2. Properties

Our principal offices are located in the Financial Plaza of the Pacific in Honolulu, Hawaii. We own and lease other branch offices and operating facilities located throughout Hawaii and the Pacific Islands. Additional information with respect to premises and equipment is presented in Notes 6 and 23 to the Consolidated Financial Statements.

Item 3. Legal Proceedings

We are from time to time subject to lawsuits, investigations and claims arising out of the conduct of our business. Management believes that the ultimate resolution of these matters is not likely to materially affect our financial position and results of operations. For additional information, see Note 20 to the Consolidated Financial Statements, under the discussion related to Contingencies.

Item 4. Mine Safety Disclosures

Not Applicable.

Part II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Market Information, Shareholders, and Dividends

Information regarding the historical market prices of the Parent’s common stock, book value, and dividends declared on that stock are shown below.

Market Prices, Book Values, and Common Stock Dividends Per Share