Item 1A. Risk Factors.

Making or continuing an investment in our common stock involves certain risks that you should carefully consider. The risks and uncertainties described below are not the only risks that may have a material adverse effect on us. Additional risks and uncertainties also could adversely affect our business, consolidated financial condition, results of operations and cash flows. If any of the following risks actually occurs, our business, financial condition or results of operations could be negatively affected, the market price of your common stock could decline, and you could lose all or a part of your investment. Further, to the extent that any of the information contained in this Annual Report on Form 10-K constitutes forward-looking statements, the risk factors set forth below also are cautionary statements identifying important factors that could cause our actual results to differ materially from those expressed in any forward-looking statements made by us or on our behalf.

Risks Related to Credit and Liquidity

If loan losses are greater than anticipated, our earnings may be adversely affected.

As a lender, we are exposed to the risk that customers will be unable to repay their loans according to their terms and that any collateral securing the payment of their loans may not be sufficient to assure repayment. Credit losses are inherent in the business of making loans. Our credit risk with respect to our real estate and construction loan portfolio relates principally to the creditworthiness of individuals and the value of the real estate serving as security for the repayment of loans, and the credit risk with respect to our commercial and consumer loan portfolio relates principally to the general creditworthiness of businesses and individuals within the local markets in which we operate. We make various assumptions and judgments about the collectability of our loan portfolio and

---

provide an allowance for potential credit losses based on a number of factors. We believe that our allowance for credit losses is adequate. We believe that our allowance for loan losses is adequate. However, if estimates, assumptions or judgments used in calculating this allowance are incorrect, the allowance for credit losses may not be sufficient to cover our actual loan losses. Deterioration of economic conditions affecting borrowers, new information regarding existing loans, inaccurate management assumptions, identification of additional problem loans and other factors, both within and outside of our control, may result in higher levels of nonperforming assets and charge-offs and loan losses in excess of our current allowance for credit losses, requiring us to make material additions to our allowance for credit losses, which could have a material adverse effect on our business, consolidated financial condition, results of operations and cash flows. Deterioration of economic conditions affecting borrowers, new information regarding existing loans, inaccurate management assumptions, identification of additional problem loans and other factors, both within and outside of our control, may result in higher levels of nonperforming assets and charge-offs and loan losses in excess of our current allowance for loan losses, 14 requiring us to make material additions to our allowance for loan losses, which could have a material adverse effect on our business, consolidated financial condition, results of operations and cash flows. The actual amount of future provisions for credit losses cannot be determined at this time and may vary from the amounts of past provisions. The actual amount of future provisions for loan losses cannot be determined at this time and may vary from the amounts of past provisions. In addition, banking regulators periodically review our allowance for credit losses and may require us to increase our provision for credit losses or recognize further charge-offs if the regulators’ judgments are different than those of our management. In addition, banking regulators periodically review our allowance for loan losses and may require us to increase our provision for loan losses or recognize further charge-offs if the regulators’ judgments are different than those of our management. Material additions to the allowance could materially decrease our net income.

CRE lending may expose us to increased lending risks.

Our policy generally has been to originate CRE loans primarily in the states in which the Bank operates. At December 31, 2024, CRE loans, including owner occupied, investor, and real estate construction loans, totaled $293.3 million or 35.6%, of our total loan portfolio. As a result of our growth in this portfolio over the past several years and planned future growth, these loans require more ongoing evaluation and monitoring and we are implementing enhanced risk management policies, procedures and controls. CRE loans generally involve a greater degree of credit risk than residential mortgage loans because they typically have larger balances and are more affected by adverse conditions in the economy. Because payments on loans secured by CRE often depend upon the successful operation and management of the properties and the businesses which operate from within them, repayment of such loans may be affected by factors outside the borrower’s control, such as adverse conditions in the real estate market or the economy or changes in government regulation. In recent years, CRE markets have been experiencing substantial growth, and increased competitive pressures have contributed significantly to historically low capitalization rates and rising property values. However, CRE markets have been facing downward pressure since 2022 due in large part to increasing interest rates and declining property values. Accordingly, the federal banking agencies have expressed concerns about weaknesses in the current CRE market and have applied increased regulatory scrutiny to institutions with CRE loan portfolios that are fast growing or large relative to the institutions' total capital. To address supervisory expectations with respect to financial institutions' handling of CRE borrowers who are experiencing financial difficulty, in June of 2023, the federal banking agencies, including the OCC, issued an interagency policy statement addressing prudent CRE loan accommodations and workouts. Our failure to adequately implement enhanced risk management policies, procedures and controls could adversely affect our ability to increase this portfolio going forward and could result in an increased rate of delinquencies in, and increased losses from, this portfolio. At December 31, 2024, the Company had no CRE loans on nonaccrual status.

Weakness in the residential real estate markets could adversely affect our performance.

As of December 31, 2024, 1-4 family residential real estate loans represented approximately 9% of our total loan portfolio. A general decline in home values would adversely affect the value of collateral securing the residential real estate that we hold, as well as the volume of loan originations and the amount we realize on the sale of real estate loans. Additionally, if insurance obtained by our borrowers is insufficient to cover any losses sustained to the collateral, the decreases in the value of collateral securing our loans as a result of natural disasters or other related events could adversely impact our financial condition and results of operations. If insurance coverage is unavailable to our borrowers due to the reluctance of insurance companies to renew policies covering the collateral or due to other factors, the resulting increase in cost of home ownership could affect the ability of borrowers to repay loans. These factors could result in higher delinquencies and greater charge-offs in future periods, which could materially adversely affect our business, financial condition or results of operations.

Our business is subject to liquidity risk, which could disrupt our ability to meet financial obligations.

Liquidity risk refers to the ability of the Company to ensure that sufficient cash flow and liquid assets are available to satisfy current and future financial obligations, including demand for loans and deposit withdrawals, funding operating costs and other corporate purposes. Liquidity risk arises whenever the maturities of financial instruments included in assets and liabilities differ or when assets cannot be liquidated at fair market value as needed. The Company obtains funding through deposits and various short-term and long-term wholesale borrowings, including federal funds purchased and securities sold under repurchase agreements, the Federal Reserve Discount Window and Federal Home Loan Bank (FHLB) advances. Any restriction or disruption of the Company’s ability to obtain funding from these or other sources could have a negative effect on the Company’s ability to satisfy its current and future financial obligations, which could materially affect the Company’s condition or results of operations.

Liquidity risks could affect our operations and jeopardize our financial condition.

Liquidity is essential to our business. An inability to raise funds through deposits, borrowings, the repayment or sale of loans and other sources could have a substantial negative effect on our liquidity. Our funding sources include federal funds, purchased

---

securities sold under repurchase agreements, core and non-core deposits, and short- and long-term debt. We maintain a portfolio of securities that can be used as a source of liquidity. In addition, certain loans in the Company's loan portfolio may be pledged to the FHLB or Federal Reserve Bank ("FRB") as a source of liquidity. Other sources of liquidity are available should they be needed, such as through our acquisition of additional non-core deposits. Bancshares may be able, depending on market conditions, to issue and sell debt securities and preferred or common equity securities in public or private transactions. Our access to funding sources in amounts adequate to finance or capitalize our activities or on acceptable terms could be impaired by factors that affect us specifically or the financial services industry or economy in general, such as further disruption in the financial markets, negative views and expectations about the prospects for the financial services industry, deterioration within the credit markets, or the financial condition, liquidity or profitability of the financial institutions with which we transact.

Risks Related to Our Market and Industry

Our business and operations may be materially adversely affected by national and local market economic conditions.

Our business and operations, which primarily consist of banking activities, including lending money to customers in the form of loans and borrowing money from customers in the form of deposits, are sensitive to general business and economic conditions in the United States generally, and in our local markets in particular. If economic conditions in the United States or any of our local markets weaken, our growth and profitability from our operations could be constrained. The current economic environment is characterized by high inflation levels and interest rates. These conditions impact our ability to attract deposits and to generate attractive earnings through our loan and investment portfolios. All of these factors can individually or in the aggregate be detrimental to our business, and the interplay between these factors can be complex and unpredictable. Unfavorable market conditions can result in a deterioration in the credit quality of our borrowers and the demand for our products and services, an increase in the number of delinquencies, defaults and charge-offs, additional provisions for loan losses, a decline in the value of our collateral, and an overall material adverse effect on the quality of our loan portfolio. Additionally, national financial markets may be adversely affected by sustained high levels of inflation, the current or anticipated impact of military conflict, including the current conflicts in the Middle East and Ukraine, terrorism, and other geopolitical events. Additionally, national financial markets may be adversely affected by the current or anticipated impact of military conflict, including escalating military tension between Russia and Ukraine, terrorism or other geopolitical events.

The economic conditions in our local markets may be different from the economic conditions in the United States as a whole. Our success depends to a certain extent on the general economic conditions of the geographic markets that we serve in Alabama, Tennessee and Virginia, as well as other states in which our indirect lending team operates. Our success depends to a certain extent on the general economic conditions of the geographic markets that we serve in Alabama, Mississippi, Tennessee and Virginia. Local economic conditions in these areas have a significant impact on our commercial, real estate and construction loans, the ability of borrowers to repay these loans and the value of the collateral securing these loans. Adverse changes in the economic conditions of the southeastern United States in general or any one or more of these local markets could negatively impact the financial results of our banking operations and have a negative effect on our profitability.

Significant changes to the size, structure, powers and operations of the federal government may cause economic disruptions that could, in turn, adversely impact our business, results of operations and financial condition.

The Trump administration has commenced efforts to implement significant changes to the size and scope of the federal government and reform its operations to achieve stated goals that include reducing the federal budget deficit and national debt, improving the efficiency of government operations, and promoting innovation and economic growth. To date, these efforts have been carried out through a mix of executive actions aimed at eliminating or modifying federal agency and federal program funding, reducing the size of the federal workforce, reducing or altering the scope of activities conducted by, and possibly eliminating, various federal agencies and bureaus, and encouraging the use of AI and other advanced technologies within the public and private sectors. These changes, if implemented and taken as a whole, may have varied effects on the economy that are difficult to predict. For instance, the delivery of government services and the distribution of federal program funds and benefits may be disrupted or, in some cases, eliminated as a result of funding cuts or recasting of federal agency mandates. Further, a substantial reduction of the federal workforce could adversely affect regional and local economies, both directly and indirectly, in geographies with significant concentrations of federal employees and contractors. It is possible that such comprehensive changes to the federal government may be materially adverse to the regional and local economies where we conduct business and to our customers, which, in turn, could be materially adverse to our business, financial condition and results of operations. Our risk and exposure to these matters remains heightened because of the evolving nature and complexity of these threats from cybercriminals and hackers, our plans to continue to provide internet banking channels, and our plans to develop additional remote connectivity solutions to serve our customers.

The banking industry is highly competitive, which could result in loss of market share and adversely affect our business.

We encounter strong competition in making loans, acquiring deposits and attracting customers for investment services. We compete with commercial banks, online banks, credit unions, finance companies, mutual funds, insurance companies, investment banking companies, brokerage firms and other financial intermediaries operating in our markets and elsewhere in various segments of the financial services market. Many of these competitors, some of which are affiliated with large bank holding companies, have substantially greater resources and lending limits than we do. In addition, many of our non-bank competitors are not subject to the

---

same extensive federal regulations that govern bank holding companies and federally insured banks, and, as a result, may be able to offer certain products and services at a lower cost than we are able to offer, which could adversely affect our business.

Rapid and significant changes in market interest rates may adversely affect our performance.

Most of our assets and liabilities are monetary in nature and are therefore subject to significant risks from changes in interest rates. Our profitability depends to a large extent on net interest income, and changes in interest rates can impact our net interest income as well as the valuation of our assets and liabilities. Our consolidated results of operations are affected by changes in interest rates and our ability to manage interest rate risks. Changes in market interest rates, changes in the relationships between short-term and long-term market interest rates and changes in the relationships between different interest rate indices can affect the interest rates charged on interest-earning assets differently than the interest rates paid on interest-bearing liabilities. These differences could result in an increase in interest expense relative to interest income or a decrease in our interest rate spread. Significant increases in market interest rates on loans, or the perception that an increase may occur, could adversely affect both our ability to originate new loans and our ability to grow.

Beginning in early 2022, in response to growing signs of inflation, the FRB increased interest rates rapidly, causing the federal funds rate to reach a 22-year high. Although the FRB reduced its benchmark rates in the latter part of 2024, the inflationary outlook in the United States is currently uncertain. Rapid changes in interest rates make it difficult for the Bank to balance its loan and deposit portfolios, which may adversely affect our results of operations by, for example, reducing asset yields or spreads, creating operating and system issues, or having other adverse impacts on our business. Persistent inflation could lead to higher interest rates, which could, in turn, increase the borrowing costs of our customers, making it more difficult for them to repay their loans or other obligations. High interest rates could also push down asset prices and weaken economic activity. For a more detailed discussion of these risks and our management strategies for these risks, see “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations.” Our net interest margin depends on many factors that are partly or completely out of our control, including competition, federal economic monetary and fiscal policies and general economic conditions. Despite the implementation of strategies to manage interest rate risks, changes in interest rates may have a material adverse impact on our profitability.

The performance of our investment portfolio is subject to fluctuations due to changes in interest rates and market conditions.

Changes in interest rates can negatively affect the performance of most of our investments. Interest rate volatility can reduce gains or create losses in our investment portfolios. Interest rates are highly sensitive to many factors, including governmental monetary policies, domestic and international economic and political conditions and other factors beyond our control. Fluctuations in interest rates affect returns on, and the market value of, investment securities. The fair market value of the securities in our portfolio and the investment income from these securities also fluctuate depending on general economic and market conditions. In addition, actual net investment income and/or cash flows from investments that carry prepayment risk, such as mortgage-backed and other asset-backed securities, may differ from those anticipated at the time of investment as a result of interest rate fluctuations. The potential effect of these factors is heightened due to the current conditions in the financial markets and economic conditions generally.

Fiscal challenges facing the U.S. government could negatively impact financial markets which in turn could have an adverse effect on our financial position or results of operations.

Federal budget deficit concerns and the potential for political conflict over legislation to fund U.S. government operations and raise the U.S. government’s debt limit may increase the possibility of a default by the U.S. government on its debt obligations, related credit-rating downgrades, or an economic recession in the United States. On January 21, 2025, the U.S. Treasury began taking extraordinary measures to prevent a default on U.S. government debt, which measures are expected to continue until such time as the U.S. Congress increases the debt ceiling. However, it is unclear how long such extraordinary measures will forestall a default in the event of extended Congressional negotiations or inaction. Many of our investment securities are issued by the U.S. government and government agencies and sponsored entities. As a result of uncertain domestic political conditions, including potential future federal government shutdowns, the possibility of the federal government defaulting on its obligations for a period of time due to debt ceiling limitations or other unresolved political issues, investments in financial instruments issued or guaranteed by the federal government pose liquidity risks. In connection with prior political disputes over U.S. fiscal and budgetary issues leading to the U.S. government shutdown in 2011, S&P lowered its long-term sovereign credit rating on the U.S. from AAA to AA+. In 2023, Congress narrowly averted two separate government shutdowns by passing continuing resolutions. In part due to repeated debt-limit political standoffs and last-minute resolutions, in 2023 a rating agency downgraded the U.S. long-term foreign-currency issuer default rating to AA+ from AAA. A further downgrade, or a downgrade by other rating agencies, as well as sovereign debt issues facing the governments of other countries, could have a material adverse impact on financial markets and economic conditions in the U.S. and worldwide and, therefore, materially adversely affect our business, financial condition and results of operations.

---

Any government shutdown could adversely affect the U.S. and global economy and our liquidity, financial condition and earnings.

Disagreement over the federal budget has previously caused the U.S. federal government to shut down for periods of time. On December 21, 2024, President Biden signed a bipartisan continuing resolution to extend federal spending and avert a government shutdown through March 14, 2025. Accordingly, without a final agreement regarding the federal budget in place prior to the expiration of the continuing resolution, or another continuing resolution, it is still possible that a partial shutdown of the U.S. government may occur. An extended period of shutdown of portions of the U.S. federal government could negatively impact the financial performance of certain customers and could negatively impact customers’ future access to certain loan and guaranty programs. Continued adverse political and economic conditions could have a material adverse effect on our business, financial condition and results of operations. During any protracted federal government shutdown, we may not be able to close certain loans and we may not be able to recognize non-interest income on the sale of loans. In addition, we believe that some borrowers may decide not to proceed to close on their loans, which would result in a permanent loss of the related non-interest income. A federal government shutdown could also result in reduced income for government employees or employees of companies that engage in business with the federal government, which could result in greater loan delinquencies, increased in our non-performing, criticized, and classified assets, and a decline in demand for our products and services.

Changes in the policies of monetary authorities and other government action could adversely affect our profitability.

Our consolidated results of operations are affected by credit policies of monetary authorities, particularly the Federal Reserve. The instruments of monetary policy employed by the Federal Reserve include open market operations in United States government securities, changes in the discount rate or the federal funds rate on bank borrowings and changes in reserve requirements against bank deposits. In view of changing conditions in the national economy and in the money markets, we cannot predict future changes in interest rates, deposit levels, loan demand or our business and earnings. Furthermore, the actions of the United States government and other governments in responding to such conditions may result in currency fluctuations, exchange controls, market disruption and other adverse effects.

Risks Related to Privacy and Technology

Technological changes in the banking and financial services industries may negatively impact our results of operations and our ability to compete.

The banking and financial services industries are undergoing rapid changes, with frequent introductions of new technology-driven products and services. In addition to enhancing the level of service provided to customers, the effective use of technology increases efficiency and enables financial institutions to reduce costs. To remain competitive, financial institutions must continuously evaluate changing customer preferences with respect to emerging technologies and develop plans to address such changes in the most cost-effective manner possible. Our future success will depend, in part, on our ability to use technology to offer products and services that provide convenience to customers and create additional efficiencies in operations, and our failure to do so could negatively impact our business. Additionally, our competitors may have greater resources to invest in technological improvements than we do, and we may not be able to effectively implement new technology-driven products and services, which could reduce our ability to effectively compete.

Our information systems may experience a failure or interruption.

We rely heavily on communications and information systems to conduct our business. Any failure or interruption in the operation of these systems could impair or prevent the effective operation of our customer relationship management, general ledger, deposit, lending or other functions. While we have policies and procedures designed to prevent or limit the effect of a failure or interruption in the operation of our information systems, there can be no assurance that any such failures or interruptions will not occur or, if they do occur, that they will be adequately addressed. The occurrence of any failures or interruptions impacting our information systems could damage our reputation, result in a loss of customer business, and expose us to additional regulatory scrutiny, civil litigation and possible financial liability, any of which could have a material adverse effect on our business, consolidated financial condition, results of operations and cash flows.

We use information technology in our operations and offer online banking services to our customers, and unauthorized access to our customers’ confidential or proprietary information as a result of a cyber-attack or otherwise could expose us to reputational harm and litigation and adversely affect our ability to attract and retain customers.

Information security risks for financial institutions have generally increased in recent years, in part because of the proliferation of new technologies, the use of the internet and telecommunications technologies to conduct financial transactions, and the increased

---

sophistication and activities of organized crime, hackers, terrorists, activists and other external parties. We are under continuous threat of loss due to hacking and cyber-attacks, especially as we continue to expand customer capabilities to utilize the internet and other remote channels to transact business. Our risk and exposure to these matters remains heightened because of the evolving nature and complexity of these threats from cybercriminals and hackers, our plans to continue to provide internet banking channels, and our plans to develop additional remote connectivity solutions to serve our customers. Therefore, the secure processing, transmission and storage of information in connection with our online banking services are critical elements of our operations. However, our network could be vulnerable to unauthorized access, computer viruses and other malware, phishing schemes or other security failures. In addition, our customers may use personal smartphones, tablet PCs or other mobile devices that are beyond our control systems in order to access our products and services. Our technologies, systems and networks, and our customers’ devices, may become the target of cyber-attacks, electronic fraud or information security breaches that could result in the unauthorized release, gathering, monitoring, use, loss or destruction of our or our customers’ confidential, proprietary and other information, or otherwise disrupt our or our customers’ or other third parties’ business operations. As cyber threats continue to evolve, we may be required to spend significant capital and other resources to protect against these threats or to alleviate or investigate problems caused by such threats. To the extent that our activities or the activities of our customers involve the processing, storage or transmission of confidential customer information, any breaches or unauthorized access to such information could present significant regulatory costs and expose us to litigation and other possible liabilities. Any inability to prevent these types of security threats could also cause existing customers to lose confidence in our systems and could adversely affect our reputation and ability to generate deposits. In addition, we may not have adequate insurance coverage to compensate for losses from a cyber threat event. While we have not experienced any material losses relating to cyber-attacks or other information security breaches to date, we may suffer such losses in the future. The occurrence of any cyber-attack or information security breach could result in potential legal liability, reputational harm, damage to our competitive position, additional compliance costs, and the disruption of our operations, all of which could adversely affect our business, consolidated financial condition, results of operations and cash flows.

We depend on outside third parties for the processing and handling of our records and data, which exposes us to additional risk for cybersecurity breaches and regulatory action.

We rely on software and internet-based platforms developed by third-party vendors to process various transactions. In some cases, we have contracted with third parties to run their proprietary software on our behalf. These systems include, but are not limited to, general ledger, payroll, employee benefits, loan and deposit processing and securities portfolio accounting. If these third-party service providers experience difficulties, are subject to cybersecurity breaches or terminate their services, and we are unable to replace them with other service providers on a timely basis, our operations could be interrupted. If an interruption were to continue for a significant period of time, our business, consolidated financial condition and results of operations could be adversely affected. While we perform a review of controls instituted by the applicable vendors over these programs in accordance with industry standards and perform our own testing of user controls, we must rely on the continued maintenance of controls by these third-party vendors, including safeguards over the security of customer data. In addition, we maintain, or contract with third parties to maintain, daily backups of key processing outputs in the event of a failure on the part of any of these systems. Nonetheless, we may incur a temporary disruption in our ability to conduct business or process transactions, or damage to our reputation, if the third-party vendor fails to adequately maintain internal controls or institute necessary changes to systems. Such a disruption or breach of security could have a material adverse effect on our business.

In addition, federal regulators have issued guidance outlining their expectations for third-party service provider oversight and monitoring by financial institutions. Any failure to adequately oversee the actions of our third-party service providers could result in regulatory actions against us, which could adversely affect our business, consolidated financial condition, results of operations and cash flows.

The development and use of Artificial Intelligence (“AI”) presents risks and challenges that may adversely impact our business.

We or our third-party (or fourth party) vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to our business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in our implementation of AI technology and increase our compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may produce output or take action that is incorrect, that reflects biases included in the data on which they are trained, that results in the release of private, confidential, or proprietary information, that infringes on the intellectual property rights of others, or that is otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, we may rely on AI

---

models developed by third parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third parties have taken to limit the risks associated with the output of their models, matters over which we may have limited visibility. Any of these risks could expose us to liability or adverse legal or regulatory consequences and harm our reputation and the public perception of our business or the effectiveness of our security measures.

Risks Related to Legal, Reputational and Compliance Matters

We are subject to extensive governmental regulation, and the costs of complying with such regulation could have an adverse impact on our operations.

The financial services industry is extensively regulated and supervised under both federal and state law. We are subject to the supervision and regulation of the Federal Reserve, the FDIC and the ASBD. These regulations are intended primarily to protect depositors, the public and the FDIC’s Deposit Insurance Fund, rather than shareholders. Additionally, we are subject to supervision, regulation and examination by other regulatory authorities, such as the SEC and state securities and insurance regulators. If, as a result of an examination, the Federal Reserve, the FDIC or the ASBD were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of any of our operations had become unsatisfactory, or that we were in violation of any law or regulation, they may take a number of different remedial actions as they deem appropriate. These actions include the power to require us to remediate any such adverse examination findings. We are also subject to changes in federal and state laws, as well as regulations and governmental policies, income tax laws and accounting principles. Regulations affecting banks and other financial institutions are undergoing continuous change, and the ultimate effect of such changes cannot be predicted. Regulations and laws may be modified at any time, and new legislation may be enacted that could affect us.

The recent turnover of the Presidential administration will result in certain changes in the leadership and senior staffs of the FDIC, the CFPB, the SEC, the Treasury Department, and other agencies. These changes are expected to impact the rulemaking, supervision, examination and enforcement priorities and policies of the agencies, including the possible reversal of a number of final and proposed rules and policy statements promulgated under the Biden administration. The potential impact of any changes in agency personnel, policies and priorities on the financial services sector, including the Bank, cannot be predicted at this time. We cannot assure you that any changes in regulations or new laws will not adversely affect our performance or consolidated results of operations. Our regulatory framework is discussed in greater detail under “Item 1. Business – Supervision and Regulation.”

We are subject to laws regarding the privacy, information security and protection of personal information, and any violation of these laws or unauthorized disclosure of such information could damage our reputation and otherwise adversely affect our operations and financial condition.

Our business requires the collection and retention of large volumes of customer data, including personally identifiable information in various information systems that we maintain and in those maintained by third parties with whom we contract to provide data services. We also maintain important internal data, such as personally identifiable information about our employees and information relating to our operations. We are subject to complex and evolving laws and regulations governing the privacy and protection of personal information of individuals (including customers, employees, suppliers and other third parties). For example, our business is subject to the Gramm-Leach-Bliley Act, which, among other things: (1) imposes certain limitations on our ability to share nonpublic personal information about our customers with nonaffiliated third parties; (2) requires us to provide certain disclosures to customers about our information collection, sharing and security practices and to afford customers the right to “opt out” of any information sharing by us with nonaffiliated third parties (with certain exceptions); and (3) requires us to develop, implement and maintain a written comprehensive information security program containing appropriate safeguards based on our size and complexity, the nature and scope of our activities, and the sensitivity of customer information we process, as well as plans for responding to data security breaches. Various state and federal banking regulators and state legislatures have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in the event of a security breach. Ensuring that our collection, use, transfer and storage of personal information complies with all applicable laws and regulations can increase our costs. Furthermore, we may not be able to ensure that all of our clients, suppliers, counterparties and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. If personal, confidential or proprietary information of customers or others were to be mishandled or misused (in situations where, for example, such information was erroneously provided to unauthorized persons, or where such information was intercepted or otherwise compromised by third parties), we could be exposed to litigation or regulatory sanctions under applicable laws and regulations. Concerns about the effectiveness of our measures to safeguard personal information could cause us to lose customers or potential customers for our products and services and thereby reduce our revenues. Accordingly, any failure or perceived failure to comply with applicable privacy or data protection laws and regulations may subject us to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices or in

---

significant liabilities, fines or penalties, and could damage our reputation and otherwise adversely affect our business, consolidated financial condition, results of operations and cash flows.

Our FDIC deposit insurance premiums and assessments may increase and thereby adversely affect our financial results.

The Bank’s deposits are insured by the FDIC up to legal limits, and, accordingly, the Bank is subject to periodic insurance assessments by the FDIC. The Bank’s regular assessments are determined by its risk classification, which is based on its regulatory capital levels and the level of supervisory concern that it poses. Numerous bank failures during the financial crisis and increases in the statutory deposit insurance limits increased resolution costs to the FDIC and put significant pressure on the Deposit Insurance Fund. The FDIC has authority to increase insurance assessments, and any significant increase in insurance assessments would likely have an adverse effect on us.

We face a risk of noncompliance and enforcement action under the Bank Secrecy Act and other anti-money laundering statutes and regulations.

The Bank Secrecy Act of 1970, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective anti-money laundering program and to file reports such as suspicious activity reports and currency transaction reports. We are required to comply with these and other anti-money laundering requirements. Our federal and state banking regulators, the Financial Crimes Enforcement Network and other government agencies are authorized to impose significant civil money penalties for violations of anti-money laundering requirements. We are also subject to increased scrutiny with respect to our compliance with the regulations issued and enforced by the Office of Foreign Assets Control. If our program is deemed deficient, we could be subject to liability, including fines, civil money penalties and other regulatory actions, which may include restrictions on our business operations and our ability to pay dividends, restrictions on mergers and acquisitions activity, restrictions on expansion, and restrictions on entering new business lines. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have significant reputational consequences for us. Any of these circumstances could have a material adverse effect on our business, consolidated financial condition, results of operations and cash flows.

We are subject to numerous laws designed to protect consumers, including the CRA and fair lending laws, and a failure to comply with these laws could lead to a wide variety of sanctions.

The CRA, the Equal Credit Opportunity Act, the Fair Housing Act, and other fair lending laws and regulations (collectively, “fair lending laws”) impose community investment and nondiscriminatory lending requirements on financial institutions. The CFPB, the Department of Justice and other federal and state agencies are responsible for enforcing these federal laws and regulations and comparable state provisions. Various federal banking agencies have recently completed significant changes to their respective CRA regulations. Federal, state or local consumer lending laws may restrict our ability to originate certain mortgage loans or increase our risk of liability with respect to such loans. A successful regulatory challenge to an institution's performance under the fair lending laws could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions, restrictions on expansion and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution's performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition and results of operations.

Bancshares’ liquidity is subject to various regulatory restrictions applicable to its subsidiaries.

There are various regulatory restrictions on the ability of Bancshares’ subsidiaries to pay dividends or to make other payments to Bancshares. In addition, Bancshares’ right to participate in any distribution of assets of any of its subsidiaries upon a subsidiary’s liquidation or otherwise will be subject to the prior claims of creditors of that subsidiary, except to the extent that any of Bancshares’ claims as a creditor of such subsidiary may be recognized.

The internal controls that we have implemented to mitigate risks inherent to the business of banking might fail or be circumvented.

Management regularly reviews and updates our internal controls and procedures that are designed to manage the various risks in our business, including credit risk, operational risk, financial risk, compliance risk and interest rate risk. No system of controls, however well-designed and operated, can provide absolute assurance that the objectives of the system will be met. If such a system fails or is circumvented, there could be a material adverse effect on our business, consolidated financial condition, results of operations and cash flows.

Changes in tax laws and interpretations and tax challenges may adversely affect our financial results.

The enactment of federal tax reform has had, and is expected to continue to have, far reaching and significant effects on us, our customers and the United States economy. Further, the income tax treatment of corporations may at any time be clarified and/or

---

modified through legislation, administration or judicial changes or interpretations. These changes or interpretations could adversely affect us, either directly or as a result of the effects on our customers.

In the course of our business, we are sometimes subject to challenges from taxing authorities, including the Internal Revenue Service, individual states and municipalities, regarding amounts due. These challenges may result in adjustments to the timing or amount of taxable income or deductions or allocation of income among tax jurisdictions, all of which may require a greater provisioning for taxes or otherwise negatively affect our financial results.

Climate change and related legislative and regulatory initiatives may result in operational changes and expenditures that could significantly impact the Company’s business.

Political and social attention to the issue of climate change has increased in recent years. Federal and state legislatures and regulatory agencies have continued to propose and advance numerous legislative and regulatory initiatives seeking to mitigate the effects of climate change. The federal banking agencies, including the OCC, have emphasized that climate-related risks are faced by banking organizations of all types and sizes and are in the process of enhancing supervisory expectations regarding banks’ risk management practices. In December 2021, the OCC published proposed principles for climate risk management by banking organizations with more than $100 billion in assets. The OCC also has appointed its first ever Climate Change Risk Officer and established an internal climate risk implementation committee in order to assist with these initiatives and to support the agency’s efforts to enhance its supervision of climate change risk management. Similar and even more expansive initiatives are expected, including potentially increasing supervisory expectations with respect to banks’ risk management practices, accounting for the effects of climate change in stress testing scenarios and systemic risk assessments, revising expectations for credit portfolio concentrations based on climate-related factors and encouraging investment by banks in climate-related initiatives and lending to communities disproportionately impacted by the effects of climate change. In March 2024, the SEC adopted final rules for "The Enhancement and Standardization of Climate-Related Disclosures for Investors,” which would have required issuers to provide climate-related disclosures. In April 2024, the SEC stayed the effectiveness of the final rules pending the outcome of certain legal challenges. To the extent that these initiatives lead to the promulgation of new regulations or supervisory guidance applicable to the Company or the Bank, we would likely experience increased compliance costs and other compliance-related risks. The lack of empirical data surrounding the credit and other financial risks posed by climate change render it impossible to predict how specifically climate change may impact the Company’s financial condition and results of operations.

Risks Related to Strategic Planning

We intend to engage in acquisitions of other banking institutions from time to time. These acquisitions may not produce revenue or earnings enhancements or cost savings at levels, or within time frames, originally anticipated and may result in unforeseen integration difficulties.

We regularly evaluate opportunities to strengthen our current market position through acquisitions, subject to regulatory approval. Such transactions could, individually or in the aggregate, have a material effect on our operating results and financial condition, including short and long-term liquidity. Our acquisition activities could be material to our business. These activities could require us to use a substantial amount of cash or other liquid assets and/or incur debt. In addition, if goodwill recorded in connection with acquisitions were determined to be impaired, then we would be required to recognize a charge against our earnings, which could materially and adversely affect our results of operations during the period in which the impairment was recognized. Our acquisition activities could involve a number of additional risks, including the risks of:

---

Depending on the condition of any institutions or assets that are acquired, any acquisition may, at least in the near term, materially adversely affect our capital and earnings and, if not successfully integrated following the acquisition, may continue to have such effects.

Generally, any acquisition of target financial institutions, banking centers or other banking assets by us may require approval by, and cooperation from, a number of governmental regulatory agencies, possibly including the Federal Reserve and the FDIC, as well as state banking regulators. Such regulators could deny our application based on their regulatory criteria or other considerations, which could restrict our growth, or the regulatory approvals may not be granted on terms that are acceptable to us. For example, we could be required to sell banking centers as a condition to receiving regulatory approvals, and such a condition may not be acceptable to us or may reduce the benefit of any acquisition.

We cannot assure you that we will be successful in overcoming these risks or any other problems encountered in connection with pending or potential acquisitions. Our inability to overcome these risks could have an adverse effect on levels of reported net income, return on equity and return on assets and the ability to achieve our business strategy and maintain market value.

We may not be able to maintain consistent growth, earnings or profitability.

There can be no assurance that we will be able to continue to grow and to remain profitable in future periods, or, if profitable, that our overall earnings will remain consistent with our prior results of operations or increase in the future. Our growth in recent years has been driven by a number of factors, including strong growth in our indirect lending portfolio and demand in the commercial and real estate loan markets in certain of the communities that we serve. A downturn in economic conditions in our markets, heightened competition from other financial services providers, an inability to retain or grow our core deposit base, regulatory and legislative considerations, and failure to attract and retain high-performing talent, among other factors, could limit our ability to grow our assets or increase our profitability to the same extent as in recent periods. Sustainable growth requires that we manage our risks by following prudent loan underwriting standards, balancing loan and deposit growth without materially increasing interest rate risk or compressing our net interest margin, maintaining adequate capital, hiring and retaining qualified employees and successfully implementing our strategic initiatives. A failure to sustain our recent rate of growth or adequately manage the factors that have contributed to our growth or successfully enter new markets could have a material adverse effect on our earnings and profitability and, therefore on our business, consolidated financial condition, results of operations and cash flows.

General Risks

We cannot guarantee that we will pay dividends in the future.

Dividends from the Bank are Bancshares’ primary source of funds for the payment of dividends to its shareholders, and there are various legal and regulatory limits regarding the extent to which the Bank may pay dividends or otherwise supply funds to Bancshares. The ability of both the Bank and Bancshares to pay dividends will continue to be subject to and limited by the results of operations of the Bank and by certain legal and regulatory restrictions. Further, any lenders making loans to Bancshares or the Bank may impose financial covenants that may be more restrictive than the legal and regulatory requirements with respect to the payment of dividends. There can be no assurance as to whether or when Bancshares may pay dividends to its shareholders.

Extreme weather could cause a disruption in our operations, which could have an adverse impact on our profitability.

Some of our operations are located in areas near the Gulf of America, a region that is susceptible to hurricanes and other forms of extreme weather. Such weather events could disrupt our operations and have a material adverse effect on our overall results of operations. Further, a hurricane, tornado or other extreme weather event in any of our market areas could adversely impact the ability of borrowers to timely repay their loans and may adversely impact the value of collateral that we hold.

---

Securities issued by us, including our common stock, are not insured.

Securities issued by us, including our common stock, are not savings or deposit accounts or other obligations of any bank and are not insured by the Deposit Insurance Fund maintained by the FDIC or by any other governmental agency or instrumentality, or any private insurer, and are subject to investment risk, including the possible loss of principal.

Future issuances of additional securities by us could result in dilution of your ownership.

We may decide from time to time to issue additional securities in order to raise capital, support growth or fund acquisitions. Further, we may issue stock options or other stock grants to retain and motivate employees. Such issuances of securities by us would dilute the respective ownership interests of our shareholders.

Our common stock price could be volatile, which could result in losses for individual shareholders.

The market price of our common stock may be subject to significant fluctuations in response to a variety of factors, including, but not limited to:

Due to these factors, you may not be able to sell your stock at or above the price you paid for it, which could result in substantial losses.

Our performance and results of operations depend in part on the soundness of other financial institutions.

Our ability to engage in routine investment and banking transactions, as well as the quality and value of our investments in equity securities and obligations of other financial institutions, could be adversely affected by the actions, financial condition and profitability of such other financial institutions with which we transact, including, without limitation, the FHLBA and our correspondent banks. Financial services institutions are interrelated as a result of shared credits, trading, clearing, counterparty and other relationships. As a result, defaults by, or even rumors or questions about, one or more financial institutions, or the financial services industry generally, could lead to market-wide liquidity problems and losses of depositor, creditor or counterparty confidence in certain institutions, and could lead to losses or defaults by other institutions. Any defaults by, or failures of, the institutions with whom we transact could adversely affect our debt and equity holdings in such other institutions, our participation interests in loans originated by other institutions, and our business, including our liquidity, consolidated financial condition and earnings.

We depend on the services of our management team and board of directors, and the unexpected loss of key officers or directors may adversely affect our operations.

A departure of any of our executive officers, other key personnel or directors could adversely affect our operations. The community involvement of our executive officers and directors and our directors’ diverse and extensive business relationships are

---

important to our success. A material change in the composition of our management team or board of directors could cause our business to suffer.

Item 1B. Unresolved Staff Comments.

None.

Item 1C. Cybersecurity.

---