CITIZENS & NORTHERN CORP

The Corporation's 2025 10-K Item 1C disclosure states that no cybersecurity threats or incidents materially affected or are reasonably likely to materially affect the Corporation's business, strategy, or financial condition. The filing details a robust governance structure with Board oversight, a Risk Management Committee, and an Information Security Department. It describes proactive measures including third-party vendor due diligence, annual penetration testing, employee training, and an Incident Response Plan. No specific breach, data exfiltration, or financial impact is reported.