10-K: Middlefield Banc Corp. Files 10-K Report, Certifies Financials and Discloses Cyberattack Lawsuits

Middlefield Banc Corp. files its annual 10-K report, certifying financial statements and disclosing details of a prior cyberattack and related lawsuits.

Summary

• Middlefield Banc Corp. has filed its annual report on Form 10-K for the fiscal year ended December 31, 2023.
• The report includes certifications from the principal executive and financial officers regarding the accuracy and fairness of the financial statements.
• The company's subsidiaries include The Middlefield Banking Company, EMORECO Inc., Middlefield Investments, Inc., and MB Insurance Services, LLC.
• The report details the company's business, risk factors, properties, legal proceedings, and financial statements.
• The company experienced a cyberattack in April 2023, which resulted in the misappropriation of nonpublic information.
• The company is currently defending class action lawsuits related to the cyberattack.
• The company's loan portfolio is diversified across various sectors, including commercial real estate, residential real estate, and commercial and industrial loans.
• The company's investment portfolio includes subordinated debt, obligations of states and political subdivisions, and mortgage-backed securities.
• The company's primary sources of funds are deposits, borrowings from the Federal Home Loan Bank, and other funding sources.
• The company operates in a highly competitive banking and financial services industry.
• The company is subject to extensive federal and state banking regulations.
• The company adopted the Current Expected Credit Loss (CECL) model on January 1, 2023, which changed the way credit losses are estimated.
• The company's total assets were $1.82 billion as of December 31, 2023, with total loans of $1.48 billion and total deposits of $1.43 billion.
• The company's net income for 2023 was $17.4 million, or $2.14 per diluted share.

Sentiment

Score: 5

Explanation: The document presents a mixed picture. While the company achieved record net income and loan growth, it also faced a cyberattack, lawsuits, and a decrease in profitability ratios. The adoption of CECL also added complexity and volatility to the financial statements. The overall sentiment is neutral, with both positive and negative factors to consider.

Positives

• The company achieved record net income of $17.4 million in 2023.
• Total loans reached a record high of $1.48 billion.
• Net interest income increased by 29.9% to $65.2 million.
• The company maintains a strong equity to assets ratio of 11.28%.
• The company's book value per share increased by 6.0% to $25.41.
• The company declared $0.85 per share in dividends, a 4.9% increase year-over-year.

Negatives

• The company experienced a cyberattack in April 2023, resulting in the misappropriation of nonpublic information.
• The company is currently defending class action lawsuits related to the cyberattack.
• The company's return on average assets decreased to 0.99% from 1.17% in the previous year.
• The company's return on average equity decreased to 8.83% from 11.25% in the previous year.
• The company's net interest margin decreased by 4 basis points to 4.04%.

Risks

• The company faces increased cybersecurity risks, including potential business disruptions and financial losses.
• The company is subject to risks related to economic conditions, interest rate fluctuations, and credit losses.
• The company operates in a highly competitive industry and market area.
• The company is subject to extensive federal and state banking regulations.
• The company's allowance for credit losses may prove insufficient to absorb expected losses in the loan portfolio.
• The company's financial instruments expose it to market and credit risks, which may increase the volatility of earnings and AOCI.
• The company is dependent on its management team and key employees, and the loss of any of them could adversely affect operations.
• The company may need to raise additional capital in the future, which may not be available when needed or at all.
• The company's goodwill and core deposit intangible assets may decline in the future.
• The company faces a risk of noncompliance and enforcement action with the Bank Secrecy Act and other anti-money laundering statutes and regulations.
• The company is subject to risks associated with climate change, natural disasters, acts of war or terrorism, and the impact of pandemics or epidemics.

Future Outlook

The company expects to maintain a liability-sensitive position for the next two years, anticipating that rising interest rates will lead to an expansion of net interest margin as interest-earning assets reprice faster than interest-bearing liabilities. The company also expects to continue to monitor and manage the risks associated with the cyberattack and related lawsuits.

Management Comments

• Management believes that the allowance for credit losses is appropriately stated as of December 31, 2023.
• Management believes the Bank has the capital adequacy, profitability, and reputation for meeting its customers' current and projected needs.
• Management believes that the stock was not impaired on December 31, 2023, or 2022.

Industry Context

The company operates in a highly competitive banking and financial services industry, facing competition from local, regional, and national commercial banks, credit unions, brokerage firms, and other financial intermediaries. The company's performance is affected by changes in interest rates, economic conditions, and regulatory requirements. The recent failures of Silicon Valley Bank, Signature Bank, and First Republic Bank have increased scrutiny on the banking industry, and the company anticipates increased regulatory scrutiny as a result.

Comparison to Industry Standards

• The company's return on average assets of 0.99% is below the industry average for community banks, which typically ranges from 1.0% to 1.2%.
• The company's return on average equity of 8.83% is also below the industry average for community banks, which typically ranges from 10% to 12%.
• The company's net interest margin of 4.04% is within the typical range for community banks, which generally falls between 3.5% and 4.5%.
• The company's allowance for credit losses to total loans ratio of 1.47% is above the industry average, which typically ranges from 1.0% to 1.2%, indicating a more conservative approach to credit risk management.
• The company's nonperforming assets to total assets ratio of 0.60% is below the industry average, which typically ranges from 0.75% to 1.0%, indicating a relatively strong asset quality.
• The company's capital ratios are above the regulatory requirements for well-capitalized institutions, indicating a strong capital position.
• The company's efficiency ratio of 64.49% is within the typical range for community banks, which generally falls between 60% and 70%.

Corporate Governance

Legal Proceedings

• The company is currently defending class action lawsuits related to the cyberattack that occurred in April 2023.
• The lawsuits claim harm due to alleged actions or inactions by the Bank in connection with the incident and seek monetary damages, equitable and injunctive relief, pre-judgment and post-judgment interest, awards of actual and punitive damages, costs and attorneys fees, and other related relief.

Related Party Transactions

• Loans to principal officers, directors, and their affiliates totaled $24.2 million as of December 31, 2023.
• Deposits of related parties amounted to $33.1 million as of December 31, 2023.

Stakeholder Impact

• Shareholders may be impacted by the decrease in profitability ratios and the potential costs associated with the cyberattack and related lawsuits.
• Employees may be impacted by the changes in compensation policies and the potential for recovery of erroneously awarded compensation.
• Customers may be impacted by the cyberattack and the potential for misuse of their nonpublic information.
• Creditors may be impacted by the company's financial performance and the potential for increased credit risk.

Next Steps

• The company will continue to implement enhanced security measures to safeguard its systems and data.
• The company will continue to defend the class action lawsuits related to the cyberattack.
• The company will continue to monitor and manage its loan portfolio and allowance for credit losses.
• The company will continue to monitor and manage its liquidity and capital resources.
• The company will continue to monitor and manage its interest rate risk.

Key Dates

Keywords

financial statements, cybersecurity, loans, deposits, banking, credit losses, interest rates, regulations, risk management, capital, financial performance, mortgage banking, asset quality, nonperforming assets, CECL