Cybersecurity incident disclosed by SouthState Corp in a Form 8-K (February 2024)

Material Cybersecurity Incidents. SouthState Bank, N.A., (the "Company") detected what was determined to be a cybersecurity incident on February 6, 2024. Upon detection, the Company initiated its incident response and business continuity protocols and began taking measures to disrupt the unauthorized activity. As part of its process to address the incident, the Company proactively took measures to isolate parts of its network, which resulted in some disruption to the Company's business processes. The Company's operations have continued throughout this process in all material respects. The Company is conducting a thorough investigation and a cybersecurity firm has been engaged. Banking regulators and law enforcement have been notified. While the investigation is ongoing, as of the date of this filing, the incident has not had a material impact on the Company's operations, and the Company has not determined the incident is reasonably likely to materially impact the Company's financial conditions or results of operations. Cautionary Statement Regarding Forward Looking Statements Statements included in this communication, which are not historical in nature are intended to be, and are hereby identified as, forward-looking statements for purposes of the safe harbor provided by Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. Forward-looking statements are based on, among other things, management’s beliefs, assumptions, current expectations, estimates and projections about the financial services industry, the economy and SouthState. Words and phrases such as “may,” “approximately,” “continue,” “should,” “expects,” “projects,” “anticipates,” “is likely,” “look ahead,” “look forward,” “believes,” “will,” “intends,” “estimates,” “strategy,” “plan,” “could,” “potential,” “possible” and variations of such words and similar expressions are intended to identify such forward-looking statements. SouthState cautions readers that…

​ ​ Material Cybersecurity Incidents. ​ As disclosed in the Original Report, on February 6, 2024, SouthState Bank, N.A. detected what was determined to be a cybersecurity incident. Upon detection, SouthState initiated its incident response and business continuity protocols and began taking measures to disrupt the unauthorized activity. In addition, SouthState has been conducting an investigation. A cybersecurity firm was engaged to assist. SouthState also notified banking regulators and law enforcement. As a result of these and other measures, SouthState has contained the impact of the cybersecurity incident. ​ Based on the investigation and findings, SouthState will mail notification letters to individuals whose personal information may have been involved. ​ While the cybersecurity incident had a significant impact on certain of SouthState’s business processes, as of the date of this filing, it has not had a material impact on SouthState’s overall financial condition or results of operations, and SouthState has determined that the incident is not reasonably likely to have a material impact on its financial conditions or results of operations. Forward Looking Statements ​ This Amendment contains “forward-looking statements” within the meaning of the federal securities laws. Forward-looking statements are based on, among other things, management’s beliefs, assumptions, current expectations, estimates and projections about the financial services industry, the economy and SouthState. Words and phrases such as “may,” “approximately,” “continue,” “should,” “expects,” “projects,” “anticipates,” “is likely,” “look ahead,” “look forward,” “believes,” “will,” “intends,” “estimates,” “strategy,” “plan,” “could,” “potential,” “possible” and variations of such words and similar expressions are intended to identify such forward-looking statements. ​ SouthState cautions readers that forward-looking statements are subject to certain risks, uncertainties and assumptions that are…