CMA · CIK 28412
What Comerica Incorporated told the SEC could break it.
Comerica's disclosures reflect the core risks of a bank holding company. It is exposed to market risk — losses from adverse moves in interest rates, foreign-exchange rates, and commodity and equity prices — and to liquidity risk, the danger of not having sufficient or reasonably priced access to funds, both managed through its asset-liability committee and risk limits. Like other financial firms, it and its third-party providers are continual targets of cyberattacks that could interrupt service and lose customer data, and it operates under stringent regulation: minimum capital and leverage requirements whose breach triggers escalating restrictions, plus OFAC sanctions, BSA/AML, and Corporate Transparency Act compliance obligations.
3 self-disclosed vulnerabilities, pulled from its own filings, each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Other disclosures
- market and liquidity risk (interest-rate, FX, commodity, equity prices; funding access)high
Comerica is exposed to market risk — losses from adverse moves in interest rates, foreign-exchange rates, commodity and equity prices — and to liquidity risk (insufficient or higher-cost access to funds), managed via its Asset Liability Management Committee policies and risk limits.
“Market risk represents the risk of loss due to adverse movement in prices, including interest rates, foreign exchange rates, commodity prices and equity prices. Liquidity risk represents the risk that the Corporation does not have sufficient access to funds to maintain its normal operations at all times or does not have the ability to raise or borrow funds at a reasonable cost at all times.”
SEC filing →As of 2025
Cybersecurity
- cyberattacks on Comerica and its third-party providers; customer-data lossmedium
Like other financial firms, Comerica and its third-party providers are continual targets of cyberattacks; rapidly evolving threats may not all be preventable, and a breach could interrupt customer service and cause loss or liability, including loss of customer data.
“Like other financial services firms, Comerica and its third-party providers continue to be the subject of cyber attacks.”
SEC filing →As of 2025
Regulatory & policy
- bank capital requirements (FDICIA) and OFAC sanctions/BSA-AML/CTA compliancemedium
Comerica must meet minimum risk-based capital/leverage ratios plus the capital-conservation buffer; failure triggers escalating restrictions (dividend/capital-distribution prohibitions, asset-growth limits, possible conservator/receiver), and it must comply with OFAC sanctions, BSA/AML and Corporate Transparency Act regimes — non-compliance carrying serious legal, financial and reputational consequences.
“Failure to be well capitalized or to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators, including restrictions on the ability to pay dividends or otherwise distribute capital or to receive regulatory approval of applications, or other restrictions on growth.”
SEC filing →As of 2025
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch