Our industry is susceptible to significant technological changes as there continue to be a high level of new technology driven products and services introduced.  Technological advancement aids us in providing customer service and increases efficiency.  Our national competitors may have more resources to invest in technological changes.  As a result they may be able to offer

Our operations are dependent on our ability to process financial transactions in a secure manner.  Failure in or breach of our operational or security systems or infrastructure, or those of our third-party vendors and other service providers, could disrupt our business or the businesses of our customers, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, increase our costs and cause losses. We must ensure that information is properly protected from a variety of threats such as cyber attacks, error, fraud, sabotage, terrorism, industrial espionage, privacy violation, service interruption, and natural disaster.  These threats arise from numerous sources including human error, fraud on the part of employees or third parties, technological failure, telecommunication outages, and severe weather conditions. Information security risks for financial institutions like us have increased recently in part because of new technologies, the increased use of the internet and telecommunications technologies (including mobile devices and cloud computing) to conduct financial and other business transactions, political activism, and the increased sophistication and activities of organized crime. Although we employ detection and response mechanisms designed to contain and mitigate security incidents, early detection may be thwarted by persistent sophisticated attacks and malware designed to avoid detection.

While we have not been materially impacted by cyber incidents, we have been subject to other intentional cyber incidents from third parties over the last several years, including denial of service attacks which attempt to interrupt service to customers and malicious software attacks on computer systems which attempt to allow unauthorized entrance. We also face risks related to cyber attacks and other security breaches in connection with card transactions that typically involve the transmission of sensitive information regarding our customers through various third parties. Some of these parties have in the past been the target of security breaches and cyber attacks, and because the transactions involve third parties and environments that we do not control or secure, future security breaches or cyber attacks affecting any of these third parties could impact us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them. We also rely on numerous other third party service providers to conduct other aspects of our business operations and face similar risks relating to them. While we conduct security assessments on our higher risk third party service providers, we cannot be sure that their information security protocols are sufficient to withstand a cyber attack or other security breach. There can be no assurance that cyber incidents will not occur and they could occur more frequently and on a more significant scale.

We devote significant resources to implement, maintain, monitor and regularly upgrade our systems and networks with measures such as intrusion detection and prevention and firewalls to safeguard critical business applications. The additional cost to the Company of our cyber security monitoring and protection systems and controls includes the cost of hardware and software, third party technology providers, consulting, and legal fees, in addition to the incremental cost of our personnel who focus a substantial portion of their responsibilities on cyber security. In addition, because cyber attacks can change frequently we may be unable to implement effective preventive or proactive measures in time. With the assistance of third-party service providers, we intend to continue to implement security technology and establish procedures to maintain network security, but there is no assurance that these measures will be successful. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities.

Any activity that jeopardizes our network and the security of the information stored thereon may result in significant cost and have a significant adverse effect on our reputation. We maintain insurance coverage that may, subject to policy terms and conditions, cover certain aspects of cyber risks. Such insurance coverage may be insufficient to cover all losses.

Any successful cyber attack or other security breach involving the misappropriation or other unauthorized disclosure of confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business. Any successful cyber attack may also subject the Company to regulatory investigations, litigation or enforcement, or require the payment of regulatory fines or penalties or undertaking costly

remediation efforts with respect to third parties affected by a cyber security incident, all or any of which could adversely affect the Company’s business, financial condition or results of operations and damage its reputation.

We rely on third-party vendors to provide key components of our business operations such as data processing, recording and monitoring transactions, online and mobile banking interfaces and services, internet connections and network access. While we have performed due diligence procedures in selecting vendors, we do not control their actions. In the event that one or more of our vendors suffers a bankruptcy or otherwise becomes unable to continue to provide products or services, or fails to protect non-public personal information of our customers or employees, we may suffer operational impairments, reputational damage and financial losses. Replacing these third-party vendors could create significant delay and expense. Accordingly, use of such third parties creates an inherent risk to our business operations.

Risks Related to the Company's Common Stock

The average daily trading volume of our common stock is relatively small compared to many public companies. The desired market characteristics of depth, liquidity, and orderliness require the substantial presence of willing buyers and sellers in the marketplace at any given time. In our case, this presence depends on the individual decisions of a relatively small number of investors and general economic and market conditions over which we have no control. Due to the relatively small trading volume of our common stock, significant sales of our common stock, or the expectation of these sales, could cause the stock price to fall more than would be justified by the inherent worth of the Company. Conversely, attempts to purchase a significant amount of our stock could cause the market price to rise above the reasonable inherent worth of the Company.

Our common stockholders are only entitled to receive the dividends declared by our Board of Directors. Although we have historically paid annual dividends on our common stock, there can be no assurances that we will be able to continue to pay regular annual dividends or that any dividends we do declare will be in any particular amount. The primary source of money to pay our dividends comes from dividends paid to the Company by the Bank. The Bank’s ability to pay dividends to the Company is subject to, among other things, its earnings, financial condition and applicable regulations, which in some instances limit the amount that may be paid as dividends.

None.

The Company's office and the main office of the Bank are located at 131 E. Main Street, Hills, Iowa.  This is a brick building containing approximately 45,000 square feet. A portion of the building was built in 1977, a two-story addition was completed in 1984, and a two-story brick addition was completed in February 2001.  With the completion of the 2001 addition, the entire Bank’s operations and administrative functions were consolidated in Hills, Iowa.  The Bank operates its business from its main office and its 18 full service branches in the Iowa counties of Johnson, Linn and Washington.  The Bank owns its main office complex and 14 of its branch offices.  Four of the Bank’s branches are leased.

All of the properties owned by the Bank are free and clear of any mortgages or other encumbrances of any type.  See Note 15 to the Consolidated Financial Statements for minimum future rental commitments for leased properties.

None.

Not applicable.

As of January 31, 2021,2022, the Company had 2,7012,727 stockholders.  There is no established trading market for the Company's common stock, and the Company's stock is not actively traded.  Our common stock is not listed on the NASDAQ stock market or any other stock exchange. While there is no established public trading market for our common stock, our shares are currently quoted in the inter-dealer quotation, or “over-the-counter,” marketplace under the trading symbol “HBIA.”  The principal over-the-counter market is operated by OTC Markets Group, Inc., which provides quotes for the Company on its OTC Pink tier.

The high and low bid information for the Company’s stock for each quarter of the two most recent fiscal years, as reported by OTC Market Groups, Inc., is provided below.  The prices indicated reflect inter-dealer prices, without retail mark-up, mark-down or commission and may not necessarily represent actual transactions.