Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

Risk Factors - SBT

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. Risk Factors” in this Annual Report on Form 10-K. You should carefully consider these risk factors in evaluating these forward-looking statements. These risks are not exhaustive. Other sections of this Annual Report on Form 10-K include additional factors that could adversely impact our business and financial performance. Moreover, we operate in a very competitive and rapidly changing environment. New risks and uncertainties emerge from time to time, and it is not possible for us to predict all risks and uncertainties that could have an impact on the forward-looking statements contained in this Annual Report on Form 10-K. New risks and uncertainties arise from time to time, and it is not possible for us to predict those events or how they may affect us. Should one or more of the foregoing risks materialize, or should underlying assumptions prove incorrect, actual results or outcomes may vary materially from those projected in, or implied by, such forward-looking statements.

Any forward-looking statement speaks only as of the date on which it is made, and we do not undertake any obligation to publicly update, revise, correct or review any forward-looking statement, whether as a result of new information, future developments or otherwise except as required by law.Any forward-looking statement speaks only as of the date on which it is made, and we do not undertake any obligation to publicly update or review any forward-looking statement, whether as a result of new information, future developments or otherwise except as required by law. New risks and uncertainties arise from time to time, and it is not possible for us to predict those events or how they may affect us. In addition, we cannot assess the impact of any particular risk, uncertainty or other factor on our business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements.

2

Risk Factors Summary

The following is a summary of the material risks we are exposed to in the course of our business activities. The below summary does not contain all of the information that may be important to you, and you should read the below summary together with the more detailed discussion of risks set forth under “Item 1A. Risk Factors,” as well as under “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations.”

Risks Related to the Transaction

·

The impact of the pendency of the Transaction on our current business and contractual restrictions

·

The receipt of regulatory approvals and any unanticipated additional conditions that regulators may impose in order to close the Transaction

·

The Stock Purchase Agreement being terminated or the Transaction not completed, and the impact of such on our business

·

Shareholder litigation that could prevent or delay the completion of the Transaction

Risks Related to the Plan of Dissolution

·

The timing and ultimate amount of distributions to shareholders and potential shareholder liability to third parties for part or all of the liquidating distributions if cash reserves are inadequate

·

The inability of shareholders to buy or sell shares of our common stock after the effective time of the dissolution

Risks Related to the Economy and Financial Markets

·

The effects of fiscal and monetary policies and regulations of the federal government and Board of Governors of the Federal Reserve System (the “FRB”)

·

Economic disruptions due to significant changes to the size, structure, powers and operations of the federal government and macroeconomic and geopolitical challenges and uncertainties affecting the stability of regions and countries around the globe and the effect of changes in the economic and political relations between the U.S. and other nations

·

Changes in the state of the general economy and the financial markets and U.S. trade policies, including the imposition of tariffs and retaliatory tariffs and their effects on the demand for our loan services

Risks Related to Credit

·

The credit risks of lending activities, including changes in the levels of delinquencies and nonperforming assets, changes in the financial performance and/or economic condition of our borrowers and our concentration in residential real estate loans and the geographic concentration of our loans and operations in California

·

The potential insufficiency of our allowance for credit losses to cover current expected credit losses in our loan portfolio

Risks Related to Interest Rates

·

Negative impacts of future changes in interest rates

Risks Related to Liquidity

·

Our ability to ensure we have adequate liquidity and to obtain external financing on favorable terms, or at all, in the future

·

The quality of our real estate loans and our ability to sell our loans to the secondary market

3

·

Our deposit account balances that exceed the Federal Deposit Insurance Corporation (the “FDIC”) insurance limits may expose the Bank to enhanced liquidity risk

Risks Related to Our Highly Regulated Industry

·

The extensive laws and regulations affecting the financial services industry, changes in banking and securities laws and regulations and their application by our regulators, including as a result of the recent bank failures

·

Failure to comply with banking laws and regulations and enforcement priorities of the federal bank regulatory agencies

Risks Related to Competition

·

Strong competition within our market areas or with respect to our products and pricing

·

Our ability to keep pace with technological change and introduce new products and services

·

Compliance with the Plea Agreement and the effect of the Plea Agreement on our reputation and ability to raise capital

Other Risks Related to Our Business

Our operational, technological and organizational infrastructure, including the effectiveness of our enterprise risk management framework at mitigating risk and loss to us
Operational risks from a high volume of financial transactions and increased reliance on technology, including risk of loss related to cybersecurity or privacy breaches and the increased frequency and sophistication of cyberattacks
The effects of natural disasters on us and our California borrowers and the adequacy of our business continuity and disaster recovery plans
Environmental, Social and Governance matters, including climate change and related legislative and regulatory matters and Diversity, Equity and Inclusion matters
The reliance of our critical accounting policies and estimates, including for the allowance for credit losses, on analytical and forecasting techniques and models
Other economic, competitive, governmental, regulatory and technological factors affecting our operations, pricing, products and services and the other risks described elsewhere herein or in the documents incorporated by reference herein and our other filings with the SEC

Risks Related to Governance Matters

The Seligman family’s ability to influence our operations and control the outcome of matters submitted for shareholder approval
Our ability to pay dividends

The foregoing risk factors should not be construed as an exhaustive list and should be read in conjunction with the cautionary statements that are included under “Cautionary Note Regarding Forward-Looking Statements” above and elsewhere in this Annual Report on Form 10-K, as well as the items set forth under “Item 1A. Risk Factors.”

4

PART I

ITEM 1. BUSINESS

OVERVIEW

General

We are a unitary thrift holding company incorporated in 1989 and headquartered in Southfield, Michigan and our primary business is the operation of our wholly-owned subsidiary, Sterling Bank. Through Sterling Bank, we currently originate commercial real estate loans and commercial and industrial loans, and provide deposit products, consisting primarily of checking, savings and term certificate accounts. Historically, the Company’s largest asset class has been residential mortgage loans; however, the Bank suspended all residential loan originations in early 2023. The Bank also engages in mortgage banking activities and, as such, acquires, sells and services residential mortgage loans. The Bank operates through a network of 27 branches of which 25 branches are located in the San Francisco and Los Angeles, California metropolitan areas with the remaining branches located in New York, New York and Southfield, Michigan. In February 2024, the Company closed one of its branches in San Francisco and consolidated the operations into a nearby branch office. In October 2024, the Company published notice of the planned closing of the branch office located at the Company’s headquarters in Southfield, Michigan in connection with the closing of the sale of the Bank (as described below).

Our results of operations are dependent primarily on our net interest income, which is the difference between the interest earned on our assets, primarily our loan and securities portfolios, and the interest paid on our deposits and borrowings. Our net income is also affected by our provision for credit losses, non-interest income, non-interest expense (general and administrative expense) and income tax expense. Our net income is also affected by our provision for loan losses, non-interest income, non-interest expense (general and administrative expense) and income tax expense. Non-interest income includes service charges and fees; net gain on sales of loans and securities; mortgage servicing fee income, net; income from company-owned life insurance; and other non-interest income. General and administrative expense consists of salaries and employee benefits expense; occupancy and equipment expense; federal deposit insurance assessments; data processing expense; professional fees; and other non-interest expenses. Our net income is also significantly affected by general economic and competitive conditions, particularly changes in market interest rates and U.S. Treasury yield curves, government policies and actions of regulatory authorities.

Sale of the Bank and Dissolution of the Company

On September 15, 2024, the Company and the Bank entered into a definitive stock purchase agreement (the “Stock Purchase Agreement”) with EverBank Financial Corp, a Delaware corporation (“EverBank”), which provides for the Company to sell all of the issued and outstanding shares of capital stock of the Bank to EverBank for a fixed purchase price of $261 million to be paid in cash to the Company (the “Transaction”). Following the completion of the Transaction, EverBank will cause the Bank to merge with and into EverBank, National Association, the bank subsidiary of EverBank, with EverBank, National Association as the surviving bank. Following the bank merger, the separate corporate existence of the Bank will cease.

Also on September 15, 2024, the Company’s board of directors unanimously approved a plan of dissolution (the“Plan of Dissolution”), which provides for the dissolution of the Company under Michigan law following the closing of the Transaction. The Company intends to file a certificate of dissolution with the Michigan Department of Licensing and Regulatory Affairs, and subject to first completing the wind down of the Company and paying or providing for the Company’s creditors and existing and reasonably foreseeable debts, liabilities, and obligations of and claims against the Company (including all transaction expenses incurred in connection with the negotiation and consummation of the Stock Purchase Agreement and any claims or demands received by the Company on behalf of any of its shareholders) in accordance with Michigan law and the Plan of Dissolution, distribute the remaining cash to its shareholders according to their respective rights and interests, in one or more distributions.

The Company’s shareholders approved the Stock Purchase Agreement, the Transaction and the Plan of Dissolution at a Special Meeting of Shareholders held on December 18, 2024. The Transaction is expected to close early in the second quarter of 2025. The Transaction is subject to customary closing conditions, including the receipt of required regulatory approvals. On March 13, 2025, the Company received approval for the Transaction from the Office of the Comptroller of the Currency. The Transaction remains subject to the receipt of approval from the Board of Governors of the Federal Reserve System. In addition, EverBank’s obligation to complete the Transaction is also subject to the following conditions: (i) the sale by the Bank of its portfolio of residential tenant-in-common loans (“TIC loans”) (with an aggregate principal balance of approximately $349 million at December 31, 2024) and receipt by the Bank of the purchase price specified in such agreement and (ii) the average daily closing balance of the Bank’s deposits for the

5

monthly period ending on the last day of the month before closing is not less than 85% of the average daily closing balance of such deposits for the monthly period ending on July 31, 2024.

Simultaneously with the execution of the Stock Purchase Agreement, the Bank entered into the mortgage loan purchase agreement (the “Mortgage Loan Purchase Agreement”) with Bayview Acquisitions LLC, a Delaware limited liability company (“Bayview”). The Mortgage Loan Purchase Agreement provides that Bayview will purchase the Bank’s residential tenant-in-common loans for an aggregate purchase price equal to 87% of the aggregate unpaid principal balance of the loans on the agreed upon purchase date plus all accrued and unpaid interest. The Bank’s obligation to consummate the sale contemplated by the Mortgage Loan Purchase Agreement is subject to certain conditions, including the receipt by the Bank of evidence of the shareholder and regulatory approvals required for the Transaction. As of December 31, 2024, the residential tenant-in-common loans were not held for sale as the Bank’s intent to liquidate its tenant-in-common loan portfolio is based upon its ability to close the Transaction and receipt of the required approvals for the Transaction. The closing of the loan sale is to occur after receipt of all regulatory approvals for the Transaction and shortly prior to the closing of the Transaction.

Subsidiaries

The Company’s only subsidiary is the Bank.

OUR BUSINESS

Lending Activities

One- to-Four Family Residential Loans. We previously originated residential loans. We previously originated construction loans. In May 2022, the Company outsourced the residential loan origination function to a third-party residential lending service provider. As a result, the Company reduced its workforce in its in-house mortgage origination area. In November 2022, the service provider notified the Company of its intention to cease conducting business. In November 2022, Promontory MortgagePath advised the Company of its intent to cease conducting business. The Company explored possible other service providers but decided to suspend the origination of residential lending in early 2023. We may continue to purchase loan pools and loan participations.

The origination of mortgage loans to enable borrowers to purchase or refinance existing homes was historically our most significant loan origination activity, and such loans continue to comprise the largest portion of our loan portfolio. The origination of mortgage loans to enable borrowers to purchase or refinance existing homes historically was our most significant loan origination activity and such loans continue to comprise the largest portion of our loan portfolio. We offered fixed-rate and adjustable-rate mortgage loans with terms of up to 30 years. We offer fixed-rate and adjustable-rate mortgage loans with terms of up to 30 years.

Historically, our most significant product was our Advantage Loan Program, and this former loan product—one-, three-, five- or seven-year adjustable-rate mortgages that required down payments of at least 35%—continues to be the largest portion of our gross loans, comprising 52% of our residential loans at December 31, 2024. An internal review of this program indicated that certain employees engaged in misconduct in connection with the origination of a significant number of such loans, including with respect to the verification of income, the amount of income reported for borrowers, reliance on third parties, and related documentation, which led to the termination of the program. Nevertheless, this former loan product—one-, three-, five- or seven-year adjustable-rate mortgages that required down payments of at least 35%—continues to be the largest portion of our gross loans, comprising 63% of our residential loans at December 31, 2022. An internal review of this program indicated that certain employees engaged in misconduct in connection with the origination of a significant number of such loans, including with respect to verification of income, the amount of income reported for borrowers, reliance on third parties, and related documentation, which led to the termination of the program. We discontinued originating loans under the Advantage Loan Program at the end of 2019.

To avoid the uncertainty of audits and inquiries by third-party investors in Advantage Loan Program loans sold to the secondary market, beginning at the end of the second quarter of 2020, we commenced making offers to each of those investors to repurchase 100% of our previously sold Advantage Loan Program loans. As of December 31, 2024, we had repurchased such loans with an aggregate principal balance of $309.1 million and had outstanding commitments to repurchase an additional $11.1 million through July 2025. At December 31, 2024, the unpaid principal balance of residential mortgage loans sold under the Advantage Loan Program that were subject to potential repurchase obligations for breach of representations and warranties, including loans subject to binding repurchase commitments, totaled $20.8 million. As of December 31, 2022, we had repurchased such loans with an aggregate principal balance of $309.1 million and had outstanding commitments to repurchase an additional $21.3 million through July 2025. At December 31, 2022, the unpaid principal balance of residential mortgage loans sold under the Advantage Loan Program that were subject to potential repurchase obligations for breach of representations and warranties, including loans subject to binding repurchase commitments, totaled $43.3 million.

6

Another significant residential loan product we previously offered was our TIC loans, which are similar to traditional co-op loans. Our primary market areas of San Francisco and Los Angeles contain a substantial number of two- to six-unit residential buildings and a large amount of condominium conversions. Through our TIC loan program, we offered loans to owners of individual units within the building based on their relative ownership share. Through our TIC loan program, we lend to owners of individual units within the building based on their relative ownership share. At December 31, 2024, we had total outstanding TIC loans of $349.0 million. Our TIC loans generally consisted of three-, five- and seven-year adjustable-rate mortgages. We also offered conventional conforming fixed-rate loans with terms of either 15, 20, or 30 years for mortgages at the Federal Housing Finance Agency limits for those markets where we originated loans. The bulk of our conforming mortgage loans were originated with the intent to sell, after which we typically retained the servicing rights to these loans. The bulk of our conforming mortgage loans are originated with the intent to sell, after which we typically retain the servicing rights to these loans. In addition, we had a jumbo loan program for residential real estate loans of up to $2.5 million, for which we offered both fixed and adjustable rates. In addition, we have a jumbo loan program for residential real estate loans of up to $2.5 million, for which we offer both fixed and adjustable rates. Across our portfolio, our adjustable-rate mortgage loans are based on a 30-year amortization schedule and generally interest rates and payments adjust annually after a one-, three-, five- or seven-year initial fixed period. Interest rates on our adjustable-rate loans adjust to a rate typically equal to 350 to 450 basis points above the one-year secured overnight financing rate (“SOFR”) or adjust to a rate based on the U.S. Treasury one- and five- year constant maturity Treasury rate.

Across our residential portfolio, our loan-to-value ratio (defined as current loan amount compared to appraised value at the time of loan origination) was 49% as of December 31, 2024. For discussion regarding risks particular to our residential real estate loans, see “Item 1A. Risk Factors—Risks Related to Credit. Risk Factors-Risks Related to Competition. Risk Factors-Risks Related to Competition.

Commercial Loans. We offer a variety of commercial loan products, consisting primarily of commercial real estate loans, construction loans and commercial and industrial loans. The majority of our commercial loans are secured by real estate or other business assets. Our underwriting practice for commercial loans requires the identification and documentation of the sources of repayment, risks to repayment, mitigating factors and the aggregate exposure of the lending relationship for each commercial loan. We have several levels of lending authority. Lending limits are based on total exposure to the borrower including all extensions of credit, both used and unused, guarantees, co-signatures or endorsements. Our commercial loans are almost exclusively recourse loans, as we endeavor to secure personal guarantees on each loan we underwrite. Our commercial loans are almost exclusively recourse loans, as we endeavor to secure personal guarantees on each loan we underwrite.

Commercial Real Estate Loans. Our commercial real estate loan portfolio includes loans secured by hotels, office, industrial, retail, multifamily and mixed-use properties. We focus on properties within or contiguous to our branch footprint, focusing on borrowers with income-producing properties, strong cash flow characteristics and strong collateral profiles. We focus on projects within or contiguous to our branch footprint, focusing on borrowers with income-producing properties, strong cash flow characteristics and strong collateral profiles. Our loan-to-value policy limit is 75% for commercial real estate loans. Our loan-to-value policy limits are 75% for commercial real estate loans. Income producing commercial real estate loans are subject to a minimum debt service coverage ratio at origination which varies by property type. At December 31, 2024, commercial real estate loans totaled $296.5 million, 37% of which are secured by multifamily properties. At December 31, 2024, approximately 57% of our commercial real estate loan portfolio consisted of adjustable-rate loans with an average reset of 31 months. For discussion regarding the risks particular to our commercial real estate loans, see “Item 1A. Risk Factors—Risks Related to Credit. Risk Factors-Risks Related to Competition. Risk Factors-Risks Related to Competition.

Construction Loans. We previously originated construction loans in greater frequency, but we currently originate such loans on a limited basis, generally in connection with the Bank’s CRA considerations. We have $2.5 million of construction loans on our balance sheet at December 31, 2024, which are comprised primarily of residential construction, commercial construction and mixed-use development loans. We continue to have $44.5 million of construction loans on our balance sheet at December 31, 2022, which are comprised primarily of residential construction, commercial construction and mixed-use development loans. Interest reserves are generally established on construction loans. The interest reserve allows the borrower to draw loan funds to pay interest charges on the outstanding balance of the loan when financial condition precedents are met. These construction loans are typically based on the prime rate of interest and have maturities of up to 36 months. These loans were typically based on the prime rate of interest and had maturities of up to 36 months. Our most recent loan-to-value policy limits are 70% for commercial construction loans and 40% for land loans.

Commercial and Industrial Loans.Commercial Real Estate Loans. We also offer commercial and industrial loans consisting of certain term loans and commercial lines of credit to businesses and individuals for business purposes. The commercial and industrial portfolio totaled $7.4 million at December 31, 2024. These term loans are secured by inventory, equipment, accounts receivable, other assets and in some instances by commercial real estate properties. These loans are typically extended to finance companies or other non-bank lenders with terms of less than 5 years. These loans were typically based on the prime rate of interest and had maturities of up to 36 months. Also, our commercial lines of credit are typically secured by real estate, inventory, equipment, accounts receivable and other assets. These lines of credit are typically secured by real estate, inventory, equipment, accounts receivable and other assets.

7

Investment Portfolio

As of December 31, 2024, the fair value of our investment portfolio totaled $342.8 million, with an average effective yield of 3.51%, and the estimated duration on the fixed income portion of our investment portfolio (fair value of $338.1 million) is 1.98 years. The primary objectives of the investment portfolio are to provide liquidity, generate economic value, be responsive to cash needs and assist in managing interest rate risk. As of December 31, 2024, 45% of our investment portfolio consists of U.S. Treasury and Agency securities, with the balance in mortgage-backed securities, collateralized mortgage and debt obligations and equity securities. We regularly evaluate the composition of our investment portfolio as the interest rate yield curve changes and may sell investment securities from time to time to adjust our exposure to interest rates or to provide liquidity.

Our investment policy is reviewed at least annually by our board of directors. Overall investment goals are established by our board of directors, chief executive officer, chief financial officer and members of our Asset and Liability Committee. Overall investment goals are established by our board, Chief Executive Officer, Chief Financial Officer and members of our Asset and Liability Committee (“ALCO”). Our board of directors has delegated the responsibility of monitoring our investment activities to our management and Asset and Liability Committee. Day-to-day activities pertaining to the securities portfolio are conducted under the supervision of our chief financial officer.

Deposits

We offer traditional depository products, including checking, savings, money market, individual retirement accounts and certificates of deposits, to individuals and businesses throughout our market areas. Our deposits are insured by the FDIC up to statutory limits. Our deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) up to statutory limits. We offer customers traditional retail deposit products through our branch network and the ability to access their accounts through online and mobile banking platforms. We seek to grow our deposits through the use of competitive rates, a focused marketing campaign, and multi-product clubs in which we offer varying benefits depending on the overall relationship with the customer. We seek to grow our deposits through use of competitive rates, a focused marketing campaign, and multi-product clubs in which we offer varying benefits depending on the overall relationship with the customer. Our bankers are incentivized to acquire and maintain quality, core deposits as we depend on deposits to fund the majority of our loans. Brokered deposits are obtained when needed to build liquidity at favorable rates.

Market Area

The primary markets in which we operate are the San Francisco and Los Angeles metropolitan areas, and our 25-branch network in these areas is our core distribution channel. In addition, we have one branch in New York City and our headquarters branch in Southfield, Michigan. In October 2024, the Company published notice of the planned closing of the branch office located at the Company’s headquarters in Southfield, Michigan in connection with the closing of the Transaction. We strive to take advantage of our core footprint and deep-rooted relationships to target local customers with a diversified product offering. Our local branch network enables us to gather deposits, promote the Sterling brand and customer loyalty, originate loans and other products and maintain relationships with our customers through regular community involvement.

Competition

The financial services industry is highly competitive as we compete for loans, deposits and customer relationships in our market. Competition involves efforts to retain current clients, make new loans and obtain new deposits, increase the scope and sophistication of services offered and offer competitive interest rates paid on deposits and charged on loans. Within our branch footprint, we primarily face competition from national, regional and other local financial institutions that have established branch networks throughout the San Francisco and Los Angeles metropolitan areas as well as the New York City market, giving them visible retail presence to customers.

In mortgage banking, we face competition from a wide range of national financial institutions, regional and local community banks, as well as credit unions and national mortgage underwriters. In commercial banking, we face competition to underwrite loans to sound, stable businesses and real estate projects at competitive price levels that make sense for our business and risk profile. Our major commercial bank competitors include larger national, regional and local financial institutions that may have the ability to make loans on larger projects than we can or provide a larger mix of product offerings. We also compete with smaller local financial institutions that may have aggressive pricing and unique terms on various types of loans and, increasingly, financial technology platforms that offer their products exclusively through web-based portals.

8

In retail banking, we primarily compete with national and local banks that have a visible retail presence and personnel in our market areas. The primary factors driving competition in consumer banking are customer service, interest rates, fees charged, branch location and hours of operation and the range of products offered. We compete for deposits by advertising, offering competitive interest rates and seeking to provide a higher level of personal service. We also face competition from non-traditional alternatives to banks such as credit unions, internet-based banks, money centers, money market mutual funds and cash management accounts.

For further discussion regarding the competitive factors and uncertainties impacting our business, see “Item 1A. Risk Factors—Risks Related to Competition.”

HUMAN CAPITAL RESOURCES

Overview

Our culture remains focused on integrity, inclusion, continuous learning and synergy as the Company continues to build on the employee experience. The Company’s approach to human capital issues at this time is informed by the Transaction and the need to retain certain employees in order to accomplish the goals of the Company and the Bank given the proposed Transaction and the wind down of the Company following the Transaction. Seligman, alleging a breach of fiduciary duties to the Company and the Bank by using his position to develop and direct the now-terminated Advantage Loan Program to advance his own interests and unjustly enrich himself at the expense of the Company, the Bank, and the Company’s minority shareholders.

In 2024, we continued to focus on initiatives that promote employee engagement through the introduction of technology to improve communication and transparency with our employment practices. In 2024, we established a management-level Human Resources committee that performs annual reviews of related policies and ongoing survey activities. The Company continues to be invested in building a culture of engagement that promotes giving back to our shareholders, employees and the communities we serve. We continue towards building a culture of engagement that promotes giving back to the communities we serve, our shareholders and employees. Collaboration and teamwork remain at the core of our focus.

As of December 31, 2024, we had a total of 216 full time and seven part time employees, located predominately in California, Michigan and New York, a net reduction of 32 employees from December 31, 2023. This represents a reduction in the employee base due to certain planned reductions during 2024 to obtain further operating efficiencies, some expected employee attrition following the announcement of the Transaction and voluntary resignations because of the highly competitive job market in our California locations. Our employees are not represented by a collective bargaining unit or are parties to a collective bargaining agreement. We believe that our relationship with our employees is built on trust, transparency, and inclusivity and because of that, we continue to have a dedicated and engaged workforce.

Culture and Engagement

We strive to amplify the employee voice through communication using multiple channels, one being the employee engagement survey. We conducted our annual employee engagement survey in August 2024 and overall participation was 74%. In addition to the survey, we have published an internal news bulletin on a quarterly basis to inform employees of what is happening at the Company and recognize employees and teams for their contributions at work, in our communities and with our customers. Overall, our culture is one that promotes our core competencies, and we will continue to build on integrity, continuous learning and synergy.

Management values our employees and continues to work with the human resources team on improving on the employee experience from recruitment through departure. We believe the implementation of the Human Resources Information System has added to the employee application, recruitment and on-boarding practices that contribute toward building a culture of engagement. Human resources technology is being implemented across the organization to help with communication and provide employees with the information they need through the Human Resources Information System discussed above. We continue to strive to build a culture in which employees feel valued, heard and are provided with the knowledge, tools and resources to be successful.

As of December 31, 2024, 55% of employees were female, and 62% identified within an ethnically diverse group. Within the employees at the level of assistant vice president or higher, 54% were female and 54% identified within an ethnically diverse group. In the group of employees at the level of assistant vice president or higher, 49% were female and 56% identified within an ethnically diverse group. We are committed to providing a workplace that is free of harassment and discrimination by taking proactive measures and providing all employees with non-discrimination and sexual harassment prevention training on an annual basis. We continue to support and provide diversity training to all employees to increase cultural competency and collaboration.

9

We believe in having a workforce in which employees feel valued, empowered and that they are making a positive difference within our communities, workplace and within the lives of the customers we serve.

Talent Acquisition, Retention and Development

The Company continues to provide an adaptable work arrangement model to provide employees the opportunity to work remotely, on a hybrid schedule or in the office based on their position, responsibilities and location. It is our goal to attract, retain and develop employees and provide opportunities for growth. We believe the pool of available talent from which we can recruit critical talent has expanded due to our flexible work environment provided by the adaptable work arrangement model.

We understand that our ability to retain employees leads to the retention of customers and allows us to build strong relationships based on trust, so we continue to invest in the professional development of our employees. Our customers depend on the capabilities and knowledge of our employees, which is why we have been investing in the growth of our team. For further discussion regarding retention of our employees, see “Item 1A. Risk Factors—Other Risks Related to Our Business.

We strive to offer competitive pay, benefits and services to meet the needs of our employees. In 2024, we continued to offer competitive benefits to all employees. Our benefits include health care, a 401(k) plan with an employer matching contribution, financial education and counseling, partial tuition reimbursement, wellness initiatives (including programs designed to help our employees meet their health goals) and paid time off. We continue to offer over 600 technical and professional development courses and educational reimbursement for approved external training opportunities. Our goal is to promote a culture of continuous learning in which employees are developing both interpersonally and professionally to meet their career goals.

SUPERVISION AND REGULATION

General

Sterling Bank is a federally chartered stock savings bank that has elected to operate as a covered savings association, effective August 9, 2023. As a covered savings association, the Bank generally functions as a commercial bank without the constraints applicable to a thrift institution. For instance, for so long as the Bank continues to operate as a covered savings association, the Bank is not required to satisfy the QTL test that applies generally as a matter of federal law to thrift institutions. The Bank is subject to primary examination and regulation by the OCC and, as an insured depository institution, the FDIC. The federal system of regulation and supervision establishes a comprehensive framework of activities in which Sterling Bank may engage and is intended primarily for the protection of depositors and the FDIC’s Deposit Insurance Fund (the “DIF”) rather than our shareholders. In connection with its election to operate as a covered savings association, Sterling Bank was required to become a member of the Federal Reserve System and subscribe to the capital stock of the Federal Reserve Bank of Chicago.

Sterling Bank also is a member of, and owns stock in, the Federal Home Loan Bank (the “FHLB”) of Indianapolis, which is one of the 11 regional banks in the FHLB system. Sterling Bank also is a member of, and owns stock in, the Federal Home Loan Bank (the “FHLB”) of Indianapolis, which is one of the 11 regional banks in the FHLB system.

As a unitary thrift holding company, Sterling Bancorp is required to comply with the rules and regulations of the FRB. As a company that controls a depository institution that has elected to operate as a covered savings association, Sterling Bancorp is treated for most regulatory purposes as a bank holding company. We are required to file certain reports with the FRB and are subject to examination by and the enforcement authority of the FRB. Sterling Bancorp is also subject to the rules and regulations of the SEC under the federal securities laws. However, upon completion of the Transaction, Sterling Bancorp will no longer be a registered thrift holding company and therefore will not be required to comply with applicable federal banking laws and the rules and regulations of the FRB thereunder.

Under this system of regulation, the regulatory authorities have extensive discretion in connection with their supervisory, enforcement, rulemaking and examination activities and policies, including rules or policies that: establish minimum capital levels; restrict the timing and amount of dividend payments; govern the classification of assets; determine the adequacy of the allowance for credit losses for regulatory purposes; and establish the timing and amounts of assessments and fees.10 Table of ContentsUnder this system of regulation, the regulatory authorities have extensive discretion in connection with their supervisory, enforcement, rulemaking and examination activities and policies, including rules or policies that: establish minimum capital levels; restrict the timing and amount of dividend payments; govern the classification of assets; determine the adequacy of the allowance for loan losses for regulatory purposes; and establish the timing and amounts of assessments and fees. Moreover, as part of their examination authority, the banking regulators assign numerical ratings to banks and savings institutions relating to capital, asset quality, management, liquidity, earnings and other factors. These ratings are inherently subjective and the receipt of a less than satisfactory rating in one or more categories may result in enforcement action by the banking regulators against a financial institution.

10

A less than satisfactory rating may also prevent a financial institution, such as Sterling Bank or Sterling Bancorp, from obtaining necessary regulatory approvals to access the capital markets, pay dividends, acquire other financial institutions or establish new branches.

In addition, we must comply with significant anti-money laundering (“AML”) and anti-terrorism laws and regulations, the CRA and regulations implemented thereunder, and fair lending laws and regulations. Government agencies have the authority to impose monetary penalties and other sanctions on institutions that fail to comply with these laws and regulations, which could significantly affect our business activities, including our ability to expand our branch network or acquire other financial institutions.

Finally, we are also subject to the laws and regulations of the State of Michigan, in which our main office is located, and other states in which we do business, including California and New York.

Any change in applicable laws or regulations, whether by the OCC, the FDIC, the FRB, the SEC, state regulators, or Congress, could have a material adverse impact on the operations and financial performance of Sterling Bancorp and Sterling Bank.

Set forth below is a brief description of material regulatory requirements that are or will be applicable to Sterling Bancorp and Sterling Bank. The description is limited to certain material aspects of the statutes and regulations addressed and is not intended to be a complete description of such statutes and regulations and their effects on Sterling Bancorp and Sterling Bank.

Federal Banking Regulation

Business Activities. A federal savings bank derives its lending and investment powers from HOLA and applicable federal regulations. A federal savings bank that elects to operate as a covered savings association, including Sterling Bank, retains its federal savings bank charter and continues to be treated as such for certain enumerated purposes; however, covered savings associations generally are afforded the same rights and privileges as national banks under the National Bank Act and other applicable federal laws and regulations. Under these laws and regulations, Sterling Bank may invest in mortgage loans secured by residential and commercial real estate, commercial business and consumer loans, certain types of debt securities and certain other assets, subject to applicable limits. Sterling Bank may also establish subsidiaries that may engage in certain activities not otherwise permissible for Sterling Bank, including wealth and investment management.

Corporate and Risk Governance. We are required as a supervisory matter to implement an effective corporate and risk governance framework commensurate with our size, complexity and risk profile. Fundamental components of this framework include the authorities and responsibilities of directors and senior managers to govern the operations and structure of the Company and the Bank, as well as the implementation and management of systems and processes designed to identify, measure, monitor and control the risks to the organization, specifically including strategic, reputation, compliance and operational risks. Although our asset-liability management strategy is designed to control and mitigate exposure to the risks related to changes in market interest rates, those rates are affected by many factors outside of our control, including governmental monetary policies, inflation, deflation, recession, changes in unemployment, the money supply, international disorder and instability in domestic and foreign financial markets.

Further, the federal banking agencies have in recent years increased their focus on banks’ third-party risk management controls and practices. In 2023, the federal banking agencies, including the OCC, adopted interagency guidance on risk management of third-party relationships. The guidance applies broadly to any business agreement between a banking organization and another entity, by contract or otherwise (including affiliated entities), and requires banking organizations to analyze the risks associated with each third-party relationship and establish effective governance and risk management processes for all stages of a third-party relationship, including planning, due diligence and third-party selection, contract negotiation, ongoing monitoring and termination. Additionally, on July 25, 2024, the federal banking agencies issued a joint statement on banks’ arrangements with third parties to deliver bank deposit products and services which identified the agencies’ expectations for risk management controls relating to such arrangements. See “Item 1A. Risk Factors - Other Risks Related to Our Business” for additional discussion of this topic.

Capital Requirements. Prior to January 1, 2023, the Federal regulations required Sterling Bancorp and Sterling Bank to meet several minimum capital standards under the risk-based capital rules implemented by the federal banking agencies pursuant to the Dodd-Frank Act. In general, subject to certain exceptions as discussed further below, minimum capital standards include a common equity Tier 1 capital to risk-weighted assets ratio of 4.5%, a Tier 1 capital to risk-weighted assets ratio of 6.0%, a total adjusted capital to risk-weighted assets ratio of 8.0%, and a Tier 1 capital to average total assets leverage ratio of 4.0%.

11

In determining the amount of risk-weighted assets for purposes of calculating risk-based capital ratios, all assets, including certain off-balance sheet assets (for example, recourse obligations, direct credit substitutes and residual interests) are multiplied by a risk-weight factor assigned by the regulations based on the risks believed inherent in the type of asset. Higher levels of capital are required for asset categories believed to present greater risk. Common equity Tier 1 capital is generally defined as common shareholders’ equity and retained earnings. Tier 1 capital is generally defined as common equity Tier 1 and additional Tier 1 capital. Additional Tier 1 capital includes certain noncumulative perpetual preferred stock and related surplus, and minority interests in equity accounts of consolidated subsidiaries. Total capital includes Tier 1 capital (common equity Tier 1 capital plus additional Tier 1 capital) and Tier 2 capital. Tier 2 capital is comprised of capital instruments and related surplus, meeting specified requirements, and may include cumulative preferred stock and long-term perpetual preferred stock, mandatory convertible securities, intermediate preferred stock and subordinated debt. Also included in Tier 2 capital is the allowance for credit losses limited to a maximum of 1.25% of risk-weighted assets. Also included in Tier 2 capital is the allowance for loan losses limited to a maximum of 1.25% of risk-weighted assets. Calculation of all types of regulatory capital is subject to deductions and adjustments specified in the regulations. In assessing an institution’s capital adequacy, the OCC takes into consideration not only these numeric factors, but qualitative factors as well, and has the authority to establish higher capital requirements for individual institutions where deemed necessary.

The Bank, after consultation with the OCC, determined that a risk-weighting of 100% should be applied to its Advantage Loan Program loans under the risk weighting requirements for first-lien residential mortgage exposure set forth under the Basel III capital rules.11 Table of ContentsThe Bank, after consultation with the OCC, determined during 2022 that a risk-weighting of 100% should be applied to its Advantage Loan Program loans under the risk weighting requirements for first-lien residential mortgage exposure set forth under the Basel III capital rules. Previously, the Company and the Bank generally applied a 50% risk weight to the Advantage Loan Program loans. The new risk weighting was applied as of December 31, 2021.

In addition to establishing the minimum regulatory capital requirements, the capital rules limit capital distributions and certain discretionary bonus payments to management if the institution does not hold a capital conservation buffer consisting of 2.5% of common equity Tier 1 capital to risk-weighted assets above the amount necessary to meet its minimum risk-based capital requirements.

The capital rules provide for an optional simplified measure of capital adequacy for qualifying community banking organizations (that is, the community bank leverage ratio (the “CBLR”) framework), as provided by the Economic Growth, Regulatory Relief and Consumer Protection Act of 2018 (the “EGRRCPA”). The CBLR framework is designed to reduce burden by removing the requirements for calculating and reporting risk-based capital ratios for qualifying community banking organizations that opt into the framework. In order to qualify for the CBLR framework, a community banking organization must have (i) a Tier 1 leverage ratio of greater than 9.0%, (ii) less than $10 billion in total consolidated assets, and (iii) limited amounts of off-balance-sheet exposure and trading assets and liabilities. A qualifying community banking organization that opts into the CBLR framework and meets all requirements under the framework will be considered to have met the well capitalized ratio requirements under prompt corrective action regulations and will not be required to report or calculate risk-based capital. Failure to meet the qualifying criteria within the grace period or maintain a leverage ratio of 8% or greater requires the institution to comply with the generally applicable capital requirements. The Bank is a qualifying community bank organization and elected to opt into the CBLR framework, effective as of January 1, 2023.

As discussed above, by opting into the CBLR framework, we are not required to meet minimum standards under the risk-based capital rules implemented by the federal banking agencies pursuant to the Dodd-Frank Act. Instead, maintaining a Tier 1 leverage ratio of greater than 9.0% is considered to have satisfied the risk-based and leverage capital requirements in the regulatory agencies’ generally applicable capital rules and to have met the well capitalized ratio requirements. Instead, maintaining a Tier 1 leverage ratio of greater than 9.0% will be considered to have satisfied the risk-based and leverage capital requirements in the regulatory agencies’ generally applicable capital rules and to have met the well capitalized ratio requirements. Tier 1 leverage ratio is defined as Tier 1 capital to average total consolidated assets ratio. At December 31, 2024, the Company and the Bank met the requirement to have a Tier 1 leverage ratio greater than 9.0%. At December 31, 2022, the Company and the Bank met Tier 1 leverage ratio greater than 9.0% and would have met the CBLR requirement had it been applicable at that date.

Loans-to-One Borrower. Generally, a federal savings bank may not make a loan or extend credit to a single or related group of borrowers in excess of 15% of unimpaired capital and surplus. An additional amount may be loaned, equal to 10% of unimpaired capital and surplus, if the loan is secured by readily marketable collateral, which generally includes certain financial instruments (but not real estate). As of December 31, 2024, the Bank was in compliance with the loans-to-one borrower limitations.

12

Capital Distributions. Federal regulations impose limitations on capital distributions by a federal savings bank, which include cash dividends, stock repurchases and other transactions charged to the savings bank’s capital account. A federal savings bank must file an application with the OCC for approval of a capital distribution under various circumstances, including, for example, if the savings bank’s total capital distributions for the applicable calendar year exceed the sum of its net income for that year to date plus its retained net income for the preceding two years; the savings bank would not be at least adequately capitalized or otherwise would not remain an “eligible savings association” under applicable OCC regulations following the distribution; or the distribution would violate any applicable law, regulation or agreement with, or order or notice approved by, the OCC.

Even if an application is not otherwise required, every savings bank that is a subsidiary of a unitary thrift holding company, such as Sterling Bank, must still file a notice with the FRB at least 30 days before its board of directors declares a dividend or approves a capital distribution. FRB approval is also required for any repurchase of capital stock by a financial institution with over $3 billion in assets, unless an exception applies.

A notice or application related to a capital distribution or share repurchase may be disapproved by the OCC if:

the federal savings bank would be undercapitalized following the distribution;
the proposed capital distribution raises safety and soundness concerns; or
the capital distribution would violate a prohibition contained in any statute, regulation or agreement, or any condition imposed upon the savings bank in an application or notice approved by the OCC.

In addition, the Federal Deposit Insurance Act provides that an insured depository institution may not make any capital distribution if, after making such distribution, the institution would fail to meet any applicable regulatory capital requirement.

CRA and Fair Lending Laws. Under the CRA, as implemented by federal regulations, all federal savings banks have a continuing and affirmative obligation, consistent with its safe and sound operation, to help meet the credit needs of its entire community, including low- and moderate- income borrowers. The CRA does not establish specific lending requirements or programs for financial institutions, nor does it limit an institution’s discretion to develop the types of products and services that it believes are best suited to its particular community, consistent with the CRA. The CRA requires the OCC, in connection with its examination of a federally chartered savings association, to assess the institution’s record of meeting the credit needs of its community and to take such record into account in its evaluation of certain applications by such institution. A savings bank’s failure to comply with the provisions of the CRA could, at a minimum, result in denial of certain corporate applications such as branch expansion or mergers, or in restrictions on its activities. The CRA requires a written evaluation of an institution’s CRA performance utilizing a four-tiered descriptive rating system. All institutions insured by the FDIC must publicly disclose their rating. Sterling Bank received a satisfactory CRA rating in its most recent federal examination.

In October 2023, the federal banking agencies issued a joint final rule to revise the regulations implementing CRA. Under the final rule, the agencies will evaluate a bank’s CRA performance based upon the varied activities that it conducts and the communities in which it operates. CRA evaluations and data collection requirements will be tailored based on bank size and type. The Bank is considered a “large bank” under the final rule and therefore will be evaluated under new lending, retail services and products, community development financing and community development services tests. The final rule includes CRA assessment areas associated with mobile and online banking and new metrics and benchmarks to assess retail lending performance. In addition, the final rule emphasizes smaller loans and investments that can have a high impact and be more responsive to the needs of low- and moderate-income communities. On March 29, 2024, a federal district court in Texas granted a preliminary injunction barring implementation of the final rule. The injunction extends the effective date of April 1, 2024, and all other implementation dates, on a day-for-day basis until the injunction is lifted. While the federal banking agencies are appealing the district court’s decision, to date the injunction remains in effect and implementation of the final rule is delayed indefinitely. Compliance with the majority of the final rule’s provisions otherwise would not have been required until January 1, 2026, and the data reporting requirements of the final rule would not have taken effect until January 1, 2027.

13

The CRA, the Equal Credit Opportunity Act (“ECOA”), the Fair Housing Act and other fair lending laws and regulations impose nondiscriminatory lending requirements on financial institutions. The fair lending laws prohibit discrimination in the provision of banking services on the basis of prohibited factors including, among others, race, color, national origin, gender, and religion. The fair lending laws prohibit discrimination in the provision of banking services on the basis of prohibited factors including, among others, race, color, national origin, gender, and religion. The enforcement of these laws has, in recent years, been a priority for the Consumer Financial Protection Bureau (the “CFPB”), the Department of Housing and Urban Development and other regulators. The enforcement of these laws has been an increasing focus for the Consumer Financial Protection Bureau (the “CFPB”), the Department of Housing and Urban Development (“HUD”) and other regulators. Under the fair lending laws, a lender may be liable for policies that result in a disparate treatment of or have a disparate impact on a protected class of applicants or borrowers. If a pattern or practice of lending discrimination is alleged by a regulator, then that agency may refer the matter to the DOJ for investigation. Pursuant to a Memorandum of Understanding entered into by the DOJ and CFPB, the agencies have agreed to share information and coordinate investigations and have also generally committed to strengthen their coordination efforts, including in respect of fair lending investigations. A successful challenge to an institution’s performance under the CRA or fair lending laws and regulations could result in a wide variety of sanctions, including the required payment of damages and civil money penalties, injunctive relief, imposition of restrictions on mergers and acquisitions activity and restrictions on expansion activity. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation.

ATR/QM Rules. The CFPB’s ability-to-repay (“ATR”) and qualified mortgage (“QM”) rules require, in connection with the origination of residential real estate loans within its scope, that a mortgage lender must make a reasonable and good faith determination at or before consummation that the consumer will have a reasonable ability to repay the loan according to its terms. Among other requirements, a creditor must verify the information on which it bases its repayment ability determination by using reasonably reliable, written third-party records. These rules prohibit creditors, such as Sterling Bank, from extending residential real estate loans without regard for the consumer’s ability to repay and add restrictions and requirements to residential mortgage origination and servicing practices. In addition, these rules restrict the imposition of prepayment penalties and compensation practices relating to residential real estate loan origination. Mortgage lenders are required to determine consumers’ ability to repay in one of two ways. The first alternative requires the mortgage lender to consider eight underwriting factors when making the credit decision. The mortgage lender may also originate QMs, which are entitled to a presumption that the creditor making the loan satisfied the ATR requirements. In general, a QM is a residential real estate loan that does not have certain high-risk features, such as negative amortization, interest-only payments, balloon payments, a term exceeding 30 years or an annual percentage rate that exceeds applicable limits prescribed by rule. In general, a QM is a residential real estate loan that does not have certain high-risk features, such as negative amortization, interest-only payments, balloon payments or a term exceeding 30 years. Further, the EGRRCPA created a new category of QMs presumed to satisfy ability-to-repay requirements of the ATR/QM rules for loans that meet certain criteria and are held in portfolio by banks with less than $10 billion in assets, including the Bank. Further, the Economic Growth Act created a new category of QMs presumed to satisfy ability-to-repay requirements of the ATR/QM rules under for loans that meet certain criteria and are held in portfolio by banks with less than $10 billion in assets, including the Bank.

Our residential real estate loans originated under our former programs, such as TIC loan program and Advantage Loan Program, are not QMs, as our underwriting processes for those programs do not follow applicable regulatory guidance required for such qualification; however, our remaining conforming residential real estate loans originated in 2021 and 2022 were QMs.Our residential real estate loans originated under our TIC program and our former Advantage Loan Program are not QMs, as our underwriting processes for those programs do not follow applicable regulatory guidance required for such qualification; however, our remaining conforming residential real estate loans originated in 2021 and 2022 were QMs. See “Item 1A. Risk Factors – Risks Related to Our Highly Regulated Industry” for additional discussion of this topic.

Transactions with Related Parties. A federal savings bank’s authority to engage in transactions with its affiliates is limited by Sections 23A and 23B of the Federal Reserve Act and federal regulation. An affiliate is generally a company that controls, or is under common control with, an insured depository institution such as Sterling Bank. Sterling Bancorp is an affiliate of Sterling Bank because of its control of Sterling Bank. A subsidiary of a bank that is not also a depository institution or a financial subsidiary under federal law is not treated as an affiliate of the bank for the purposes of Sections 23A and 23B; however, the OCC has the discretion to treat subsidiaries of a bank as affiliates on a case-by-case basis. Section 23A limits the extent to which a bank or its subsidiaries may engage in covered transactions with any one affiliate to 10% of the bank’s capital stock and surplus. The amount of covered transactions with all affiliates is limited to 20% of the bank’s capital stock and surplus. “Covered transactions” include, among other things, the making of a loan to an affiliate, a purchase of assets from an affiliate, the issuance of a guarantee on behalf of an affiliate and the acceptance of securities of an affiliate as collateral for a loan. All such transactions are required to be on terms and conditions that are consistent with safe and sound banking practices and no transaction may involve the acquisition of any low-quality asset from an affiliate. Certain covered transactions, such as loans to or guarantees on behalf of an affiliate, must be secured by collateral in amounts ranging from 100 to 130 percent of the loan amount, depending upon the type of collateral. In addition, Section 23B requires that any covered transaction (and specified other transactions) between a bank and an affiliate must be on terms and conditions that are substantially the same, or at least as favorable, to the bank, as those that would be provided to a non-affiliate.

14

A bank’s loans to its executive officers, directors, any owner of more than 10% of its stock (each, an “insider”) and certain entities affiliated with any such person (an insider’s “related interest”) are subject to the conditions and limitations imposed by Section 22(h) of the Federal Reserve Act and the FRB’s Regulation O. The aggregate amount of a bank’s loans to any insider and the insider’s related interests may not exceed the loans-to-one-borrower limit applicable to national banks. Aggregate loans by a bank to its insiders and insiders’ related interests may not exceed the bank’s unimpaired capital and unimpaired surplus. With certain exceptions, such as education loans and certain residential mortgages, a bank’s loans to its executive officers, may not exceed the greater of $25,000 or 2.5% of the bank’s unimpaired capital and unimpaired surplus, but in no event more than $100,000. Regulation O also requires that any loan to an insider or a related interest of an insider be approved in advance by a majority of the board of directors of the bank, with any interested director not participating in the voting, if the loan, when aggregated with any existing loans to that insider or the insider’s related interests, would exceed the lesser of $500,000 or 5% of the bank’s unimpaired capital and surplus. Generally, such loans must (i) be made on substantially the same terms as and follow credit underwriting procedures that are no less stringent than, those that are prevailing at the time for comparable transactions with unaffiliated persons and that do not present more than a normal risk of repayment or present other unfavorable features, and (ii) not exceed certain limitations on the amount of credit extended to such persons, individually and in the aggregate, which limits are based, in part, on the amount of Sterling Bank’s capital. An exception is made for extensions of credit made pursuant to a benefit or compensation plan of a bank that is widely available to employees of the bank and that does not give any preference to insiders of the bank over other employees of the bank.

Enforcement. The OCC has primary enforcement responsibility over federal savings banks and has authority to bring enforcement action against all institution-affiliated parties, including directors, officers, shareholders, attorneys, appraisers and accountants who knowingly or recklessly participate in wrongful action likely to have an adverse effect on a federal savings bank. Formal enforcement action by the OCC may range from the issuance of a capital directive, formal agreement (such as the agreement described below) or cease and desist order to removal of officers and/or directors of the institution and the appointment of a receiver or conservator. Civil penalties cover a wide range of violations and actions, and range up to $25,000 per day, unless a finding of reckless disregard is made, in which case penalties may be as high as $1 million per day (with such amounts subject to periodic adjustments based upon rates of inflation). Civil penalties cover a wide range of violations and actions, and range up to $25,000 per day, unless a finding of reckless disregard is made, in which case penalties may be as high as $1 million per day. The FDIC also has the authority to terminate deposit insurance or recommend to the OCC that enforcement action be taken with respect to a particular savings bank. If such action is not taken, the FDIC has authority to take the action under specified circumstances.

As discussed above under “Item 1. Business-General” and in “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations,” the Bank entered into the OCC Agreement on June 18, 2019 and was under formal investigation. As discussed above under “Item 1. Business—General” and in “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations,” the Bank entered into the OCC Agreement on June 18, 2019 and was under formal investigation. Further, on September 27, 2022, the Bank was assessed a $6 million civil money penalty by the OCC with regard to the Bank’s credit underwriting processes and Bank Secrecy Act (“BSA”) and AML laws and regulations (“BSA/AML”) compliance controls relating to its Advantage Loan Program, resolving the OCC’s investigation of the Bank. In connection with such assessment, the OCC determined that the Bank had implemented all corrective actions required by OCC Agreement, and as a result, such agreement was terminated.

Standards for Safety and Soundness. The federal banking agencies have adopted the Interagency Guidelines for Establishing Standards for Safety and Soundness (the “Guidelines”). The Guidelines establish certain safety and soundness standards for all depository institutions. The operational and managerial standards in the Guidelines relate to the following: (1) internal controls and information systems; (2) internal audit systems; (3) loan documentation; (4) credit underwriting; (5) interest rate exposure; (6) asset growth; (7) compensation, fees and benefits; (8) asset quality; and (9) earnings. Rather than providing specific rules, the Guidelines set forth basic compliance considerations and guidance with respect to a depository institution. Failure to meet the standards in the Guidelines, however, could result in a request by the OCC to one of the federal savings banks to provide a written compliance plan to demonstrate its efforts to come into compliance with such Guidelines. Failure to provide a plan or to implement a provided plan requires the appropriate federal banking agency to issue an order to the institution requiring compliance.

Interstate Banking and Branching. Federal law permits well capitalized and well managed holding companies to acquire banks in any state, subject to FRB approval, certain concentration limits and other specified conditions. Interstate mergers of banks are also authorized, subject to regulatory approval and other specified conditions. Among other things, banks may establish de novo branches on an interstate basis provided that branching is authorized by the law of the host state for the banks chartered by that state.

15

Prompt Corrective Action. Federal law requires, among other things, that federal bank regulators take prompt corrective action with respect to institutions that do not meet minimum capital requirements. For this purpose, the law establishes five capital categories: well capitalized, adequately capitalized, undercapitalized, significantly undercapitalized and critically undercapitalized. An institution is deemed to be well capitalized if it has a total risk-based capital ratio of 10.0% or greater, a Tier 1 risk-based capital ratio of 8.0% or greater, a leverage ratio of 5.0% or greater and a common equity Tier 1 ratio of 6.5% or greater. An institution is adequately capitalized if it has a total risk-based capital ratio of 8.0% or greater, a Tier 1 risk-based capital ratio of 6.0% or greater, a leverage ratio of 4.0% or greater and a common equity Tier 1 ratio of 4.5% or greater. An institution is undercapitalized if it has a total risk-based capital ratio of less than 8.0%, a Tier 1 risk-based capital ratio of less than 6.0%, a leverage ratio of less than 4.0% or a common equity Tier 1 ratio of less than 4.5%. An institution is deemed to be significantly undercapitalized if it has a total risk-based capital ratio of less than 6.0%, a Tier 1 risk-based capital ratio of less than 4.0%, a leverage ratio of less than 3.0% or a common equity Tier 1 ratio of less than 3.0%. An institution is considered to be critically undercapitalized if it has a ratio of tangible equity (as defined in the regulations) to total assets that is equal to or less than 2.0%.

At each successive lower capital category, an insured depository institution is subject to more restrictions and prohibitions, including restrictions on growth, restrictions on interest rates paid on deposits, restrictions or prohibitions on payment of dividends, and restrictions on the acceptance of brokered deposits.16 Table of ContentsAt each successive lower capital category, an insured depository institution is subject to more restrictions and prohibitions, including restrictions on growth, restrictions on interest rates paid on deposits, restrictions or prohibitions on payment of dividends, and restrictions on the acceptance of brokered deposits. Furthermore, if an insured depository institution is classified in one of the undercapitalized categories, it is required to submit a capital restoration plan to the appropriate federal banking agency, and the holding company must guarantee the performance of that plan. Based upon its capital levels, a bank that is classified as well capitalized, adequately capitalized or undercapitalized may be treated as though it were in the next lower capital category if the appropriate federal banking agency, after notice and opportunity for hearing, determines that an unsafe or unsound condition, or an unsafe or unsound practice, warrants such treatment. An undercapitalized bank’s compliance with a capital restoration plan is required to be guaranteed by any company that controls the undercapitalized institution in an amount equal to the lesser of 5.0% of the institution’s total assets when deemed undercapitalized or the amount necessary to achieve the status of adequately capitalized. If an undercapitalized bank fails to submit an acceptable plan, it is treated as if it is significantly undercapitalized. Significantly undercapitalized banks must comply with one or more of a number of additional restrictions, including but not limited to an order by the applicable regulatory authority to sell sufficient voting stock to become adequately capitalized, requirements to reduce total assets, cease receipt of deposits from correspondent banks or dismiss directors or officers, and restrictions on interest rates paid on deposits, compensation of executive officers and capital distributions by the parent holding company. Critically undercapitalized institutions are subject to additional measures including, subject to a narrow exception, the appointment of a receiver or conservator within 270 days after it obtains such status.

As discussed in “Capital Requirements” section above, a qualifying community banking organization that opts into the CBLR framework and meets all requirements under the framework is considered to have met the well capitalized ratio requirements under prompt corrective action regulations and is not required to calculate or report risk-based capital ratios. As discussed in “Capital Requirements” section above, a qualifying community banking organization that opts into the CBLR framework and meets all requirements under the framework will be considered to have met the well capitalized ratio requirements under prompt corrective action regulations and will not be required to report or calculate risk-based capital. Under the CBLR framework, which each of Sterling Bancorp and Sterling Bank has elected to adopt as of January 1, 2023, a Tier 1 leverage ratio of greater than 9.0%, calculated on a consolidated basis, is considered to have met the well capitalized ratio requirements applicable to each entity. Sterling Bancorp and Sterling Bank each satisfied this requirement as of December 31, 2024.

Federal Insurance of Deposit Accounts. The DIF insures deposits at FDIC-insured financial institutions such as Sterling Bank. Deposit accounts at Sterling Bank are insured by the FDIC generally up to a maximum of $250,000 per separately insured depositor. The FDIC charges insured depository institutions premiums to maintain the DIF.

The Dodd-Frank Act increased the minimum target DIF ratio from 1.15% of estimated insured deposits to 1.35% of estimated insured deposits. Insured institutions with assets of $10 billion or more were given the responsibility for funding the increase. The Dodd-Frank Act eliminated the prior 1.5% maximum fund ratio, instead leaving the target fund ratio to the discretion of the FDIC, which has exercised that discretion by establishing a long-term target fund ratio of 2%.

Under the FDIC’s risk-based assessment system, insured institutions are assigned to one of four risk categories based on supervisory evaluations, regulatory capital levels and certain other risk factors. Rates are based on each institution’s risk category and certain specified risk adjustments. Institutions deemed to be less risky pay lower rates while institutions deemed riskier pay higher rates. Assessment rates (inclusive of possible adjustments) currently range from 21/2 to 45 basis points of each institution’s total assets less tangible capital. However, in 2022, the FDIC adopted a final rule to increase initial base deposit insurance assessment rate schedules uniformly by 2 basis points, beginning in the first quarterly assessment period of 2023. The FDIC may increase or decrease the scale uniformly, except that no adjustment can deviate more than two basis points from the base scale without notice and comment rulemaking. However, on October 18, 2022, the FDIC adopted a final rule to increase initial base deposit insurance assessment rate schedules uniformly by 2 basis points, beginning in the first quarterly assessment period of 2023. The FDIC may increase or decrease the scale uniformly, except that no adjustment can deviate more than two basis points from the base scale without notice and comment rulemaking.

16

Any significant increase in deposit insurance assessments would have an adverse effect on the operating expenses and results of operations of Sterling Bank. We cannot predict what assessment rates will be in the future.

Insurance of deposits may be terminated by the FDIC upon a finding that an institution has engaged in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order or regulatory condition imposed by the FDIC. We do not know of any practice, condition or violation that might lead to termination of our deposit insurance.

Regulation of Brokered Deposits. Section 29 of the Federal Deposit Insurance Act establishes, among other things, a general prohibition on the acceptance by any insured depository institution that is not well capitalized of any deposit obtained, directly or indirectly, by or through any deposit broker. This statutory prohibition is further implemented through the regulations of the FDIC and, historically, numerous published and unpublished FDIC staff interpretations of the statute and the FDIC’s regulation.

The FDIC’s brokered deposits regulation provides a framework for determining whether an entity meets the statutory definition of “deposit broker.” Among other things, the regulation (1) identifies a number of business relationships in which the agent or nominee of the depositor is not deemed to be a “deposit broker” because the primary purpose of the agent or nominee is not the placement of funds with depository institutions; (2) provides for an application process for entities that seek to rely upon a “primary purpose” exception, but do not qualify as one of the enumerated business relationships to which the exception is deemed to apply; and (3) establishes that a third party with an exclusive deposit-placement arrangement with only one bank is not considered a deposit broker. Additionally, as mandated by the EGRRCPA, the regulation establishes a limited exception for reciprocal deposits for banks that are well rated and well capitalized (or adequately capitalized and have obtained a waiver from the FDIC). Additionally, as mandated by the Economic Growth Act, the FDIC’s final rule includes a limited exception for reciprocal deposits for banks that are well rated and well capitalized (or adequately capitalized and have obtained a waiver from the FDIC). Under the limited exception, qualified banks are able to except from treatment as “brokered” deposits up to $5 billion or 20 percent of the institution’s total liabilities in reciprocal deposits (which is defined as deposits received by a financial institution through a deposit placement network with the same maturity (if any) and in the same aggregate amount as deposits placed by the institution in other network member banks). The Bank’s acceptance of brokered deposits could have an impact on its deposit insurance premiums, capital and liquidity risk management planning and regulatory monitoring and reporting obligations.

Supervisory Assessments. Supervisory Assessments. OCC-chartered banks are required to pay supervisory assessments to the OCC to fund its operations. The amount of the assessment paid by a federally-chartered bank to the OCC is calculated on the basis of the institution’s total assets, including consolidated subsidiaries, as reported to the OCC. For the 2024 calendar year, the OCC elected to maintain its general assessment schedule from calendar year 2023 with no adjustments for inflation. However, for the 2025 calendar year, the OCC increased the marginal rates in the general assessment fee schedule for assets under $40 billion by a factor of 2.65 percent to account for inflation.

Data Privacy and Cybersecurity. We are subject to a number of U.S. federal, state, local and foreign laws and regulations relating to consumer privacy and data protection. Under the privacy protection provisions of the Gramm-Leach-Bliley Act and related regulations, we are limited in our ability to disclose non-public information about consumers to nonaffiliated third parties. These limitations require disclosure of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to a nonaffiliated third party. Federal banking agencies, including the OCC, have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of the board of directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial services.

The changing privacy laws in the United States, Europe and elsewhere create new individual privacy rights and impose increased obligations on companies handling personal information, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act. While we generally handle Gramm-Leach-Bliley Act -regulated nonpublic, personal information that is exempt under the California Consumer Privacy Act (as well as the other broad state consumer privacy laws), the California Consumer Privacy Act applies to the personal information of our employees and job applicants based in California as well as representatives of any business contacts that the Bank engages with who are California residents.

The other state privacy laws that exempt GLBA-protected personal information also apply to personal information that we may collect from consumers through initial contacts such as through our website or phone inquiries, before such consumers have applied for or received any financial services or products from us. With respect to residents of the states that have such laws, our obligations are similar to those we have under the CCPA with respect to residents of California.

17

In addition, Congress and federal regulatory agencies may enact similar laws, or promulgate regulations, that could create new individual privacy rights and impose increased obligations on companies handling personal data. Of note, the federal banking agencies have adopted joint regulations that impose upon banking organizations and their service providers notification requirements for significant cybersecurity incidents. On November 23, 2021, the federal banking agencies published a final rule that will impose upon banking organizations and their service providers new notification requirements for significant cybersecurity incidents. Specifically, the regulations require banking organizations to notify their primary federal regulator promptly, and no later than 36 hours after, the discovery of a “computer-security incident” that rises to the level of a “notification incident” within the meanings attributed to those terms by the rule. Specifically, the final rule requires banking organizations to notify their primary federal regulator promptly, and no later than 36 hours after, the discovery of a “computer-security incident” that rises to the level of a “notification incident” within the meanings attributed to those terms by the final rule. Banks’ service providers are required to notify any affected bank to or on behalf of which they provide services “as soon as possible” after determining that they have experienced any incident that materially disrupts, degrades, or is reasonably likely to disrupt or degrade, covered services provided to a bank for four or more hours. Banks’ service providers are required under the final rule to notify any affected bank to or on behalf of which they provide services “as soon as possible” after determining that they have experienced any incident that materially disrupts, degrades, or is reasonably likely to disrupt or degrade, covered services provided to a bank for four or more hours.

Recent and ongoing developments may also impact our data security- and privacy-related internal controls and risk profile. On October 22, 2024, the CFPB adopted a final rule regarding personal financial data rights that is designed to promote “open banking.” The final rule requires, among other things, that data providers, including any financial institution, make available to consumers and certain authorized third parties upon request certain covered transaction, account and payment information. IDIs with between $1.5 billion and $3 billion in total assets, including Sterling Bank, are required to comply with the final rule by April 1, 2029. On the same day the final rule was released, certain industry participants filed a complaint against the CFPB challenging the final rule. This legal challenge may delay or halt the final rule’s implementation.

BSA/AML Regulation, USA PATRIOT Act and National Defense Authorization Act. The BSA, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective AML program and to file timely reports such as suspicious activity reports and currency transaction reports. We are required to comply with these and other AML requirements. The federal banking agencies and the Financial Crimes Enforcement Network (“FinCEN”) are authorized to impose significant civil money penalties for violations of those requirements and have recently engaged in coordinated enforcement efforts against banks and other financial services providers with the DOJ, Drug Enforcement Administration and Internal Revenue Service. We are also subject to increased scrutiny of compliance with the sanctions programs administered by the Office of Foreign Assets Control.

The USA PATRIOT Act gives federal agencies additional powers to address terrorist threats through enhanced domestic security measures, expanded surveillance powers, increased information sharing, and broadened AML requirements. The USA PATRIOT Act mandates that financial service companies implement additional policies and procedures and take heightened measures designed to address any or all of the following matters: customer identification programs, money laundering, terrorist financing, identifying and reporting suspicious activities and currency transactions, currency crimes, and cooperation between financial institutions and law enforcement authorities.

On June 28, 2024 FinCEN issued a proposed rule to strengthen and modernize financial institutions’ AML and Countering the Financing of Terrorism (“CFT”) programs. Key requirements of the proposed rule include (1) conducting periodic risk assessments to measure AML/CFT risks; (2) designating a qualified AML/CFT officer; and (3) periodic testing of the AML/CFT program by an independent internal or external party. The proposed rule would also require that a financial institution’s AML/CFT program be established, maintained and enforced by persons in the United States who are accessible to, and subject to oversight and supervision by, the secretary of the Treasury and the appropriate federal functional regulator. Additionally, as noted above, President Trump has issued multiple Executive Orders addressing federal agency rulemaking priorities and processes that may have the effect of inhibiting or delaying future rulemaking activity, including in this area.

Prohibitions Against Tying Arrangements. Federal savings banks are prohibited, subject to some exceptions, from extending credit to or offering any other service, or fixing or varying the consideration for such extension of credit or service, on the condition that the customer obtain some additional service from the institution or its affiliates or not obtain services of a competitor of the institution.

Climate-Related Regulation and Risk Management. In recent years, the federal banking agencies have increased their focus on climate-related risks impacting the operations of banks, the communities they serve and the broader financial system. Accordingly, the agencies have begun to enhance their supervisory expectations regarding the climate risk management practices of larger banking organizations, including by encouraging such banks to: ensure that management of climate-related risk exposures has been incorporated into existing governance structures; evaluate the potential impact of climate-related risks on the bank’s financial condition, operations and business objectives as part of its strategic planning process; account for the effects of climate change in stress testing scenarios and systemic risk assessments; revise expectations for credit portfolio concentrations based on climate-related

18

factors; consider investments in climate-related initiatives and lending to communities disproportionately impacted by the effects of climate change; evaluate the impact of climate change on the bank’s borrowers and consider possible changes to underwriting criteria to account for climate-related risks to mortgaged properties; incorporate climate-related financial risk into the bank’s internal reporting, monitoring and escalation processes; and prepare for the transition risks to the bank associated with the adjustment to a low-carbon economy and related changes in laws, regulations, governmental policies, technology, and consumer behavior and expectations.

In 2023, the OCC, the FDIC and the FRB jointly finalized principles for climate-related financial risk management for banking organizations with more than $100 billion in total assets. Although these risk management principles do not apply to the Bank directly based upon our current size, the regulators have indicated that all banks, regardless of their size, may have material exposures to climate-related financial and other risks that require prudent management. Although these risk management principles, if adopted as proposed, would not apply to the Bank directly based upon our current size, the regulators have indicated that all banks, regardless of their size, may have material exposures to climate-related financial and other risks that require prudent management. As climate-related supervisory guidance is further formalized, and relevant risk areas and corresponding control expectations are further refined, we may be required to expend significant capital and incur compliance, operating, maintenance and remediation costs in order to conform to such requirements. As climate-related supervisory guidance is formalized, and relevant risk areas and corresponding control expectations are further refined, we may be required to expend significant capital and incur compliance, operating, maintenance and remediation costs in order to conform to such requirements. The Trump Administration has publicly discussed rolling back federal initiatives to address climate change. Accordingly, it is uncertain at this time whether these risk management expectations will continue to be applied to relevant banking organizations.

In addition, states in which we conduct business have taken, or are considering taking, similar actions on climate-related financial risks.20 Table of ContentsIn addition, states in which we conduct business have taken, or are considering taking, similar actions on climate-related financial risks. In consideration of the anticipated shift in federal climate-related initiatives, it is possible that the states in which we operate may be more active than in previous years in establishing and enforcing climate-related risk management expectations for financial institutions.

Incentive Compensation Policies and Restrictions. In July 2010, the federal banking agencies issued guidance on sound incentive compensation policies that applies to all banking organizations supervised by the agencies (thereby including both Sterling Bancorp and Sterling Bank). Pursuant to the guidance, to be consistent with safety and soundness principles, a banking organization’s incentive compensation arrangements should: (1) provide employees with incentives that appropriately balance risk and reward; (2) be compatible with effective controls and risk management; and (3) be supported by strong corporate governance including active and effective oversight by the banking organization’s board of directors. Monitoring methods and processes used by a banking organization should be commensurate with the size and complexity of the organization and its use of incentive compensation.

The Dodd-Frank Act requires the federal banking agencies and the SEC to establish joint regulations or guidelines for specified regulated entities, such as us, having at least $1 billion in total assets, to prohibit incentive-based payment arrangements that encourage inappropriate risk-taking by providing an executive officer, employee, director or principal shareholder with excessive compensation, fees, or benefits or that could lead to material financial loss to the entity. On May 6, 2024, the FDIC, the OCC and the FHFA issued a notice of proposed rulemaking to address incentive-based compensation arrangements. The proposed rule includes general qualitative requirements applicable to all covered financial institutions as well as additional requirements for financial institutions with total consolidated assets of $50 billion or more. The general qualitative requirements include (1) prohibiting incentive-based compensation arrangements that encourage inappropriate risks; (2) prohibiting incentive arrangements that encourage inappropriate risks that could lead to a material financial loss; (3) establishing requirements for performance measures to appropriately balance risk and reward; (4) requiring board oversight of incentive compensation arrangements; and (5) appropriate recordkeeping. The prospects and timing for the adoption of the proposed rule remain uncertain because both the Federal Reserve and the SEC have not joined the proposal. Additionally, as noted above, President Trump has issued multiple Executive Orders addressing federal agency rulemaking priorities and processes that may have the effect of inhibiting or delaying future rulemaking activity, including in this area.

Pursuant to the SEC rule adopted in 2022 and the related Nasdaq listing rule approved by the SEC thereafter, we adopted an incentive-based compensation recovery (or “clawback”) policy to recover incentive-based compensation from current or former executive officers in the event of material noncompliance with any financial reporting requirement under the securities laws. A copy of our clawback policy has previously been filed with the SEC.

The FRB will review, as part of its standard, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as Sterling Bancorp, that are not “large, complex banking organizations.” These reviews will be tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies will be incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-

19

management control or governance processes, pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

The scope and content of the federal banking agencies’ policies on executive compensation may continue to evolve in the near future. It cannot be determined at this time whether compliance with such policies will adversely affect our ability to hire, retain and motivate our key employees.

Impact of Presidential and Congressional Elections on Recent Rulemaking. Control of the White House and the U.S. Congress shifted to the Republican Party in January 2025 as a result of the November 2024 Presidential and Congressional elections. President Trump and many Republican members of Congress have advocated for a significant reduction of financial services regulation, potentially including amendments to the Dodd-Frank Act and other federal banking laws, and structural changes to the CFPB. The new Administration and Congress may also cause broader economic changes due to shifts in governing ideology and governing style. In consideration of these factors, it is possible, though uncertain, that Congress and/or the relevant federal agencies may seek to roll back or modify some or much of the rulemaking and regulatory guidance issued under the Biden administration, particularly the actions taken in the past year. Of note, since assuming office, President Trump has issued multiple Executive Orders addressing federal agency rulemaking priorities and processes as part of a broader deregulation and government efficiency initiative. In light of these actions, future rulemaking initiatives, as well as the agencies’ priorities regarding enforcement of existing rules, regulations and orders, is uncertain at this time.

Further, the FDIC, OCC and CFPB have experienced changes in leadership under the new Administration; however, the timing and impact of each such change in leadership on the regulatory, enforcement and supervisory priorities of each agency are not fully known at this time. It is therefore unclear at the present time what effect the aforementioned changes will have on the banking industry.

Other Regulations

Interest and other charges collected or contracted for by Sterling Bank are subject to state usury laws and federal laws concerning interest rates. Loan operations are also subject to state and federal laws applicable to credit transactions, such as the:

Truth-In-Lending Act, governing disclosures of credit terms to consumer borrowers;
Home Mortgage Disclosure Act of 1975, requiring financial institutions to provide information to enable the public and public officials to determine whether a financial institution is fulfilling its obligation to help meet the housing needs of the community it serves. Notably, the EGRRCPA exempted banks that originate fewer than 500 open-end and 500 closed-end mortgages from Home Mortgage Disclosure Act’s expanded data disclosures;
Fair Debt Collection Act, governing the manner in which consumer debts may be collected by collection agencies;
Truth in Savings Act; governing disclosure of information about deposit accounts to customers;
Fair Credit Reporting Act of 1978, governing the use and provision of information to credit reporting agencies; and
Rules and regulations of the various federal and state agencies charged with the responsibility of implementing such federal and state laws.

The deposit operations of Sterling Bank also are subject to, among others, the:

Right to Financial Privacy Act, which imposes a duty to maintain confidentiality of consumer financial records and prescribes procedures for complying with administrative subpoenas of financial records;
Check Clearing for the 21st Century Act (also known as Check 21), which gives substitute checks, such as digital check images and copies made from that image, the same legal standing as the original paper check; and

20

Electronic Funds Transfer Act and Regulation E promulgated thereunder, which govern automatic deposits to and withdrawals from deposit accounts and customers’ rights and liabilities arising from the use of automated teller machines and other electronic banking services.

Federal Home Loan Bank System

Sterling Bank is a member of the FHLB system, which consists of 11 regional FHLBs. The FHLB provides a central credit facility primarily for member institutions. The Bank is required to acquire and hold shares of capital stock in the FHLB of Indianapolis and was in compliance with this requirement at December 31, 2024. Based on redemption provisions of the FHLB of Indianapolis, the stock has no quoted market value and is carried at cost. The Bank reviews for impairment, based on the ultimate recoverability, the cost basis of the FHLB of Indianapolis stock.

Federal Reserve Bank System

Sterling Bank is a member of its regional Federal Reserve Bank. As a covered savings association, the Bank is required to acquire and hold shares of capital stock of the Federal Reserve Bank of Chicago and was in compliance with this requirement at December 31, 2024. Based on the redemption provisions of the Federal Reserve Bank of Chicago, the stock has no quoted market value and is carried at cost. The Bank reviews for impairment, based on the ultimate recoverability, the cost basis of the Federal Reserve Bank of Chicago stock. The Bank reviews for impairment, based on the ultimate recoverability, the cost basis of the FHLB of Indianapolis stock.

Business Continuity Management

The Company is required to implement and maintain business continuity and disaster recovery plans to ensure its resilience and continued operations in the event of significant business disruptions related to cybersecurity events, natural disasters, pandemics, and other potentially catastrophic events. Such plans generally focus on banks’ critical business functions and are intended to be aligned with banking organizations’ risk profiles and roles within the overall financial services sector. Plans must contain proactive measures to safeguard banking organizations’ employees, customers, information systems, networks and facilities and establish response and recovery procedures in the event of significant business disruptions. Plans must contain proactive measures to safeguard banking organizations’ employees, customers and products and establish response procedures in the event of significant business disruptions.

Holding Company Regulation

Sterling Bancorp is a unitary thrift holding company subject to regulation and supervision by the FRB. The FRB has enforcement authority over Sterling Bancorp and its non-savings institution subsidiaries. Among other things, this authority permits the FRB to restrict or prohibit activities that are determined to be a risk to Sterling Bancorp.

As a unitary thrift holding company, Sterling Bancorp’s activities are limited to those activities permissible by law for financial holding companies. A financial holding company may engage in activities that are financial in nature, incidental to financial activities or complementary to a financial activity. Such activities include lending and other activities permitted for bank holding companies under Section 4(c)(8) of the Bank Holding Company Act of 1956, as amended, insurance and underwriting equity securities.

21

Federal law prohibits a unitary thrift holding company, directly or indirectly, or through one or more subsidiaries, from acquiring more than 5% of another savings institution or unitary thrift holding company without prior written approval of the FRB, and from acquiring or retaining control of any depository institution. In evaluating applications by holding companies to acquire savings institutions, the FRB must consider such things as the financial and managerial resources and future prospects of the company and institution involved, the effect of the acquisition on and the risk to the DIF, the convenience and needs of the community and competitive factors. A unitary thrift holding company may not acquire a savings institution in another state and hold the target institution as a separate subsidiary unless it is a supervisory acquisition under Section 13(k) of the Federal Deposit Insurance Act or the law of the state in which the target is located authorizes such acquisitions by out-of-state companies.

Notwithstanding Sterling Bancorp’s status as a unitary thrift holding company, as a company that controls a depository institution that has elected to be treated as a covered savings association, Sterling Bancorp generally is treated as a bank holding company for regulatory purposes.

Capital Requirements. As a unitary thrift holding company, Sterling Bancorp is subject to consolidated regulatory capital requirements that are similar to those that apply to Sterling Bank. As discussed above, the Company and the Bank presently are subject to the minimum Tier 1 leverage ratio requirement established under the CBLR framework. See “—Federal Banking Regulation—Capital Requirements. See”—Federal Banking Regulation—Capital Requirements.

The Dodd-Frank Act extended the source of strength doctrine to unitary thrift holding companies. The FRB has promulgated regulations implementing the source of strength policy that require holding companies to act as a source of strength to their subsidiary depository institutions by providing capital, liquidity and other support in times of financial stress.

The FRB has issued a policy statement regarding the payment of dividends and the repurchase of shares of common stock by bank holding companies and unitary thrift holding companies. In general, the policy provides that dividends should be paid only out of current earnings and only if the prospective rate of earnings retention by the holding company appears consistent with the organization’s capital needs, asset quality and overall financial condition. Regulatory guidance provides for prior regulatory consultation with respect to capital distributions in certain circumstances such as where the company’s net income for the past four quarters, net of dividends previously paid over that period, is insufficient to fully fund the dividend or the company’s overall rate of earnings retention is inconsistent with the company’s capital needs and overall financial condition. The ability of a holding company to pay dividends may be restricted if a subsidiary bank becomes undercapitalized. The policy statement also states that a holding company should inform the FRB supervisory staff prior to redeeming or repurchasing common stock or perpetual preferred stock if the holding company is experiencing financial weaknesses or if the repurchase or redemption would result in a net reduction, as of the end of a quarter, in the amount of such equity instruments outstanding compared with the beginning of the quarter in which the redemption or repurchase occurred. We are currently required to obtain the approval of the FRB prior to declaring any cash dividend on our capital stock or engaging in any repurchase of our common stock. We are also required to obtain the approval of the FRB prior to issuing any debt.

Change in Control Regulations

Under the Change in Bank Control Act, no person may acquire control of a unitary thrift holding company such as Sterling Bancorp unless the FRB has been given 60 days prior written notice and has not issued a notice disapproving the proposed acquisition, taking into consideration certain factors, including the financial and managerial resources of the acquirer and the competitive effects of the acquisition. Control, as defined under federal law, means ownership, control of or holding irrevocable proxies representing more than 25% of any class of voting stock, control in any manner of the election of a majority of the institution’s directors, or a determination by the regulator that the acquirer has the power, directly or indirectly, to exercise a controlling influence over the management or policies of the institution. Acquisition of more than 10% of any class of a unitary thrift holding company’s voting stock constitutes a rebuttable determination of control under the regulations under certain circumstances including where, as in our case, the company has registered securities under Section 12 of the Securities Exchange Act of 1934 (the “Exchange Act”). Acquisition of more than 10% of any class of a unitary thrift holding company’s voting stock constitutes a rebuttable determination of control under the regulations under certain circumstances including where, as in our case, the company has registered securities under Section 12 of the Securities Exchange Act of 1934.In addition, federal regulations provide that no company may acquire control of a unitary thrift holding company without the prior approval of the FRB.

In addition, federal regulations provide that no company may acquire control of a unitary thrift holding company without the prior approval of the FRB. Any company that acquires such control becomes subject to registration, examination and regulation by the FRB.

22

Under the Federal Reserve’s regulations implementing the Bank Holding Company Act of 1956, as amended, and HOLA, control determinations are made according to a rules-based methodology. Presumptions of control generally are based on ownership of voting equity and total equity in a company, director representation and ability to elect directors, director and management interlocks, contractual rights to determine management or operational decisions, and business relationships. The regulations establish a general three-prong test for determining whether a company controls a bank or savings association. The final rule establishes a general three-prong test for determining whether a company controls a bank or savings association. Pursuant to this test, a company controls another company if the first company, directly or indirectly or acting through one or more other persons, (i) owns, controls or has power to vote 25% or more of any class of voting securities of the second company, (ii) controls in any manner the election of a majority of the directors of the other company, or (iii) based on the facts and circumstances of the investment, directly or indirectly exercises a controlling influence over the management or policies of the other company.

The regulations also include rebuttable presumptions of control based on a tiered framework focused on equity ownership, business relationships, control over the election of directors, director and senior management interlocks, as well as business terms and contractual arrangements.The final rule includes rebuttable presumptions of control based on a tiered framework focused on equity ownership, business relationships, control over the election of directors, director and senior management interlocks, as well as business terms and contractual arrangements. In addition to the rebuttable presumptions under the tiered framework, the regulations establish other rebuttable presumptions of control and non-control focused on prior control relationships, management agreements, investment adviser arrangements, consolidation under generally accepted accounting principles, and equity ownership levels. In addition to the rebuttable presumptions under the tiered framework, the final rule includes other rebuttable presumptions of control and non-control focused on prior control relationships, management agreements, investment adviser arrangements, consolidation under generally accepted accounting principles, and equity ownership levels. As a general matter, the tiers will vary based on percentage of voting ownership with additional requirements to qualify for the rebuttable presumption at voting ownership levels of 5% or greater, 10% or greater, and 15% or greater.

On September 17, 2024, the FDIC, the OCC and the DOJ, each announced new rules and policy statements impacting their bank merger review processes. Among these actions, the FDIC approved a final statement of policy on bank merger transactions and the OCC approved a final rule updating the agency’s regulations for business combinations involving national banks and federal savings associations. The OCC’s final rule modifies its procedures for reviewing bank merger applications under the Bank Merger Act applications, including the elimination of the expedited bank merger review and the streamlined application procedures. The OCC’s final rule also includes a new policy statement that addresses the substantive standards that it will use to evaluate bank merger applications, including indicators that point in favor of likely approval or rejection. The FDIC's statement of policy adopts a principles-based approach and clarifies its policies and expectations in the evaluation of bank merger transactions subject to FDIC approval under the Bank Merger Act. However, Acting FDIC Chairman Travis Hill has indicated the possibility of withdrawing the new statement of policy, and it is unclear whether the OCC under anticipated new leadership will reconsider its new regulation and policy statement.

Concurrent with the FDIC and OCC announcements, the DOJ withdrew from its 1995 Bank Merger Guidelines and announced that it would consider bank mergers under its 2023 Merger Guidelines, which are not industry specific, as well as under a separate, recently adopted bank merger addendum.

AVAILABLE INFORMATION

Our Internet address is www.sterlingbank.com. We will make available free of charge in the investor relations section of our website our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to those reports as soon as reasonably practicable after such materials are electronically filed with (or furnished to) the SEC. Information contained on our website is not incorporated by reference into this Annual Report on Form 10-K. In addition, the SEC maintains an Internet site, sec.gov, that includes filings of and information about issuers that file electronically with the SEC.

23

ITEM 1A. RISK FACTORS

We face a number of significant risks and uncertainties in connection with our operations. Our business and the results of our operations could be materially adversely affected by the factors described below. The risks described below are not the only risks facing our operations. Risks and uncertainties not currently known to us or that we currently deem to be immaterial also could have a material adverse impact on our business and results of operations.

Risks Related to the Transaction

The pendency of the Transaction may adversely affect our business, financial condition, and results of operations.

Uncertainty about the effect of the Transaction on our associates, clients, and other parties may have an adverse effect on our business, financial condition, and results of operations regardless of whether the Transaction is completed. These risks to our business include the following, among others, all of which may be exacerbated by a delay in the completion of the Transaction: (i) the impairment of our ability to attract, retain, and motivate our employees; (ii) the diversion of significant management time and attention from ongoing business operations towards the completion of the Transaction; (iii) difficulties maintaining relationships with clients, suppliers and other business partners; (iv) delays or deferments of certain business decisions by our clients, suppliers and other business partners; (v) the inability to pursue alternative business opportunities or make appropriate changes to our business because the Transaction requires us to, subject to certain exceptions, conduct business in the ordinary course of business and to not engage in certain kinds of transactions prior to the completion of the Transaction without the prior written consent of EverBank, even if such actions could prove beneficial; (vi) litigation relating to the Transaction and the costs and uncertainties related thereto; and (vii) the incurrence of significant costs, expenses, and fees for professional services and other Transaction costs in connection with the Transaction.

Regulatory approvals may not be received, may take longer than expected, or may impose conditions that are not presently anticipated.

The completion of the Transaction is conditioned on the receipt of all required regulatory approvals, the continuation of such regulatory approvals in full force and effect, the expiration of any applicable waiting periods relating to such regulatory approvals, and the absence of any material burdensome condition from such regulatory approvals. Even if the required regulatory approvals are received, the approvals may impose terms, conditions, limitations, obligations, or costs, may place restrictions on the conduct of our business or the conduct of EverBank’s business after the closing, or may require changes to the terms of the Transaction. There can be no assurance that regulators will not impose any such terms, conditions, limitations, obligations, restrictions or changes or that such terms, conditions, limitations, obligations, restrictions or changes will not have the effect of delaying the completion of the Transaction. In addition, there can be no assurance that any such terms, conditions, limitations, obligations, restrictions or changes will not result in the termination of the Stock Purchase Agreement and abandonment of the Transaction.

The Federal Reserve and the OCC take into consideration a number of factors when reviewing bank merger and acquisition proposals under the Bank Holding Company Act of 1956 and the Bank Merger Act, respectively. These factors include the effect of the transaction on competitiveness in affected banking markets, the financial and managerial resources of the companies and banks involved (including consideration of the capital adequacy, liquidity, and earnings performance, as well as the competence, experience and integrity of the officers, directors and principal shareholders, and the records of compliance with applicable laws and regulations) and future prospects of the combined organization. The Federal Reserve and the OCC also consider the effectiveness of the applicant in combatting money laundering, the convenience and needs of the communities to be served, as well as the extent to which the proposal would result in greater or more concentrated risks to the stability of the U.S. banking or financial system. Neither the Federal Reserve nor the OCC may approve a proposal that would have significant adverse effects on competition or on the concentration of resources in any banking market. On March 13, 2025, the Company received approval for the Transaction from the Office of the Comptroller of the Currency. The Transaction remains subject to the receipt of approval from the Board of Governors of the Federal Reserve System.

24

The Stock Purchase Agreement may be terminated in accordance with its terms, and the Transaction may not be completed.

The Stock Purchase Agreement is subject to a number of conditions which must be fulfilled in order to complete the Transaction. Those conditions include: (i) the approval of the Stock Purchase Agreement, the Transaction and the Plan of Dissolution by the affirmative vote of a majority of all the votes entitled to be cast on such matters by holders of our common stock (which approval was obtained at a special meeting of shareholders held on December 18, 2024), (ii) the absence of any law, statute, rule, regulation, executive order, decree, ruling, injunction (whether temporary, preliminary or permanent) or other order which has the effect of restraining, enjoining or otherwise prohibiting or making illegal the consummation of the Transaction, and (iii) the receipt of the regulatory approvals with respect to the Stock Purchase Agreement, the Transaction and the bank merger by the Federal Reserve and the OCC as described above. In addition, EverBank’s obligation to complete the Transaction is also subject to the following conditions: (i) the sale by the Bank of its portfolio of residential tenant-in-common loans to Bayview and receipt by the Bank of the purchase price specified in such agreement and (ii) the average daily closing balance of the Bank’s deposits for the monthly period ending on the last day of the month before closing is not less than 85% of the average daily closing balance of such deposits for the monthly period ending on July 31, 2024. Each party’s obligation to complete the Transaction is also subject to certain additional conditions, including (a) subject to certain exceptions, the accuracy of the representations and warranties of the other party and (b) performance in all material respects by the other party of its obligations under the Stock Purchase Agreement. On March 13, 2025, the Company received approval for the Transaction from the Office of the Comptroller of the Currency. The Transaction remains subject to the receipt of approval from the Board of Governors of the Federal Reserve System.

These conditions to the closing may not be fulfilled in a timely manner or at all, and, accordingly, the Transaction may not be completed. In addition, the parties can mutually decide to terminate the Stock Purchase Agreement at any time, before or after the shareholder approval. Also, either EverBank or we may elect unilaterally to terminate the Stock Purchase Agreement in certain circumstances.

Failure to complete the Transaction could negatively impact us.

If the Transaction is not completed for any reason, including as a result of the failure to obtain all needed regulatory approvals or if terminated by either party if the closing has not occurred on or before June 30, 2025, unless otherwise extended, there may be various adverse consequences and we may experience negative reactions from the financial markets and from our clients and associates. As a result, we may experience a decrease in the demand for our financial products, a deterioration in the credit quality of the loans extended to customers affected by the foregoing circumstances, changes in loan repayment speeds or increased deposit outflows, any of which could have a material adverse impact on our business, financial condition and results of operations.

For example, our business may be impacted adversely by the failure to pursue other beneficial opportunities due to the focus of management on the Transaction. Additionally, termination of the Transaction would likely have a negative effect on our market price. We also could be subject to litigation related to any failure to complete the Transaction or to proceedings commenced against us to perform our obligations under the Transaction. If the Stock Purchase Agreement is terminated under certain circumstances, we would be required to pay to EverBank a termination fee of up to $9,135,000.

Additionally, we expect to incur substantial expenses in connection with the negotiation and completion of the transactions contemplated by the Stock Purchase Agreement, as well as the costs and expenses of all filing and other fees paid in connection with the Transaction. If the Transaction is not completed, we would have to pay a large portion of these expenses without realizing the expected benefits of the Transaction.

We will be subject to business uncertainties and contractual restrictions while the Transaction is pending.

Uncertainty about the effect of the Transaction on associates and clients may have an adverse effect on us. These uncertainties may impair our ability to attract, retain and motivate key personnel pending completion of the Transaction, and could cause clients and others that deal with us to seek to change existing business relationships with us. In addition, subject to certain exceptions, we have agreed to operate our business in the ordinary course prior to the closing, and we are restricted from making certain acquisitions and taking other specified actions without the consent of EverBank. These restrictions may prevent us from pursuing attractive business opportunities that may arise prior to the completion of the Transaction.

25

The Stock Purchase Agreement contains provisions that could discourage a potential competing acquiror that might be willing to pay more to acquire or merge with us.

The Stock Purchase Agreement contains provisions that restrict our ability to, among other things, initiate, solicit, knowingly encourage or knowingly facilitate, inquiries or proposals with respect to, or, subject to certain exceptions generally related to the exercise of fiduciary duties by our board of directors, engage in any negotiations concerning, or provide any confidential or nonpublic information or data relating to, any alternative acquisition proposals. These provisions, which include a termination fee of up to $9,135,000 payable by us under certain circumstances, might discourage a potential competing acquiror that might have an interest in acquiring the Company, the Bank or a significant part of the Bank’s assets from considering or proposing that acquisition even if it were prepared to pay a consideration with a higher per share price to our shareholders than what is contemplated in the Transaction, or might result in a potential competing acquiror proposing to pay a lower per share price to acquire us than it might otherwise have proposed to pay.

Shareholder litigation could prevent or delay the completion of the Transaction or otherwise negatively impact our business and operations.

One or more of our shareholders may file lawsuits against us and/or our directors and officers in connection with the Transaction. One of the conditions to the closing is the absence of any law, statute, rule, regulation, executive order, decree, ruling, injunction (whether temporary, preliminary or permanent) or other order which has the effect of restraining, enjoining or otherwise prohibiting or making illegal the consummation of the Transaction. If any plaintiff were successful in obtaining an injunction prohibiting us from completing the Transaction, then such injunction may delay or prevent the effectiveness of the Transaction and could result in significant costs to us, including any cost associated with the indemnification of our directors and officers. If a shareholder lawsuit is filed in connection with the Transaction, we may incur costs in connection with the defense or settlement of such lawsuit. Such litigation could have an adverse effect on our financial condition and results of operations and could prevent or delay the completion of the Transaction.

In November 2024, the Company received a books and records demand (the “Books and Records Demand”) from a purported Company shareholder pursuant to the Michigan Business Corporation Act which requests an array of documents for the purported purposes of investigating the decisions that led to, and other information with respect to, the Company’s execution of the Stock Purchase Agreement. Should such purported shareholder commence an action against the Company, there is no assurance that we would be successful in any defense thereof. Any such action may have a material adverse impact on our financial condition and results of operation and on the total amount of liquidating distributions to shareholders pursuant to the Plan of Dissolution.

Risks Related to the Plan of Dissolution

We cannot assure you as to the timing, amount, or number of distributions, if any, to be made to our shareholders pursuant to the Plan Dissolution.

Our current intention is that the Company would file a certificate of dissolution with the Michigan Department of Licensing and Regulatory Affairs upon the closing of the Transaction; however, the Company’s board of directors would retain the discretion to determine not to proceed with the dissolution in its sole discretion and, if it does proceed with the dissolution, would have discretion as to the timing of the filing of the certificate of dissolution. No further shareholder approval would be required to effect the dissolution. However, if the board of directors determines prior to complete distribution of the Company’s assets that the dissolution is not in the Company’s best interest or in the best interest of our shareholders, the board of directors may, in its sole discretion, abandon the dissolution and terminate the Plan of Dissolution, subject to approval by the Company’s shareholders. Revocation of the dissolution would require the board of directors to adopt a resolution revoking dissolution which would then require shareholder approval under Michigan law.

Under the Michigan Business Corporation Act (the “MBCA”), a dissolved corporation continues its existence after dissolution for such period as is necessary to complete the winding down of its affairs, including the payment of its debts, obligations and other liabilities and the distribution of its remaining assets to its shareholders. Any action, suit or proceeding begun by or against the corporation before or during the wind down period does not terminate by reason of the dissolution, and for the purpose of any such action, suit or proceeding, the corporation will continue beyond the dissolution until any related final judgments, orders or decrees are rendered, without the necessity for any special direction by the applicable court. A dissolved corporation must pay or make provision

26

for the payment (or reservation of funds as security for payment) of its debts, obligations and liabilities and claims against the corporation in accordance with the applicable provisions of the MBCA before the distribution of remaining assets to the corporation’s shareholders.

Any distribution to our shareholders will not occur until after the certificate of dissolution is filed, and we cannot predict with certainty the timing, amount, or number of any such distributions, or whether any such distributions will occur, as uncertainties as to the ultimate amount and scope of our liabilities, the operating costs and amounts to be set aside for claims, debts, obligations and provisions during the dissolution and wind down process, and the related timing to complete the wind down of our affairs, make it impossible to predict with certainty the actual net cash amount, if any, that will ultimately be available for distribution to shareholders or the timing of any such distributions. Among other things, our potential liabilities that may require provision could include those relating to indemnification obligations, if any, to third parties or to our current and former officers and directors, and to resolve any shareholder or other litigation that may emerge, including in connection with the Books and Records Demand. Examples of uncertainties that could reduce the value of distributions to our shareholders include: the incurrence by the Company of expenses relating to the dissolution being different than estimated; unanticipated costs relating to the defense, satisfaction or settlement of lawsuits or other claims that may be threatened against us or our current or former directors or officers; amounts necessary to resolve claims of any creditors or other third parties; and delays in the dissolution and wind down process.

If it was determined by a court that we failed to make adequate provision for expenses, debts, obligations and liabilities or if the amount required to be paid in respect of such expenses, debts, obligations and liabilities exceeded the amount available from the reserve, a creditor could seek an injunction against the making of liquidating distributions under the Plan of Dissolution on the grounds that the amounts to be distributed were needed to provide for the payment of expenses and liabilities. Any such action could delay, substantially diminish or negate the cash distributions contemplated to be made to shareholders under the Plan of Dissolution.

In addition, as we wind down, we will continue to incur expenses from operations, including directors’ and officers’ insurance, severance payments, payments to service providers and any continuing employees or consultants, taxes, legal, accounting and consulting fees, costs associated with maintaining the listing of our common stock, and/or its delisting, and expenses related to our filing obligations with the SEC and/or others, which will reduce any amounts available for distribution to our shareholders. As a result, we cannot assure you as to the amounts, if any, that may ultimately be distributable or distributed to our shareholders if the Transaction is completed and the board of directors proceeds with the dissolution.

It is the current intent of the board of directors that any cash will first be used to pay our outstanding current liabilities and obligations (including all transaction expenses incurred in connection with the negotiation and consummation of the Stock Purchase Agreement and any claims or demands received by the Company on behalf of any of its shareholders), and then will be retained to pay ongoing corporate and administrative costs and expenses associated with winding down the Company, liabilities and potential liabilities relating to or arising out of any litigation matters and potential liabilities relating to our indemnification obligations, if any, to our service providers, or to our current and former officers and directors, before such cash, if any remains, will be available for distribution to shareholders.

The board of directors will determine, in its sole discretion, the timing and number of the distributions of the remaining amounts, if any, to our shareholders in the dissolution. We can provide no assurance as to if or when any such distributions will be made, and we cannot provide any assurance as to the amounts, if any, that may ultimately be distributable or distributed to our shareholders in any such distributions, if any are to be made. Shareholders may receive substantially less than the amount that we currently estimate that they may receive, or they may receive no distribution at all.

Our shareholders may be liable to third parties for part or all of the amount received from us in our liquidating distributions if cash reserves are inadequate.

If the dissolution becomes effective, we are required to establish a cash reserve designed to satisfy any additional claims and obligations that may arise. Any reserve may not be adequate to cover all of our claims and obligations. Under the MBCA, in the event we fail to create an adequate reserve for the payment of expenses and liabilities and amounts have been distributed to the shareholders under the Plan of Dissolution, creditors may be able to pursue claims against shareholders directly to the extent that they have claims co-extensive with such shareholders’ receipt of liquidating distributions. Accordingly, in such event, a shareholder could be required to return part or all of the distributions previously made to such shareholder, and a shareholder could ultimately receive nothing from us under the Plan of Dissolution. Moreover, if a shareholder has paid taxes on amounts previously received, a repayment of all or a

27

portion of such amount could result in a situation in which a shareholder may incur a net tax cost if the repayment of the amount previously distributed does not cause a commensurate reduction in taxes payable in an amount equal to the amount of the taxes paid on amounts previously distributed.

Our shareholders of record will not be able to buy or sell shares of our common stock after we close our stock transfer books at the effective time of the dissolution.

If the board of directors determines to proceed with the dissolution, we intend to close our stock transfer books and discontinue recording transfers of our common stock at the effective time of the dissolution. After we close our stock transfer books, we will not record any further transfers of our common stock on our books except at our sole discretion by will, intestate succession, or operation of law. Therefore, shares of our common stock will not be freely transferable after the effective time. As a result of the closing of the stock transfer books, all liquidating distributions in the dissolution will likely be made to the same shareholders of record as the shareholders of record as of the effective time.

We plan to initiate steps to exit from certain reporting requirements under the Exchange Act, which may substantially reduce publicly available information about us. If the exit process is protracted, we will continue to bear the expense of being a public reporting company despite having no source of revenue.

Our common stock is currently registered under the Exchange Act, which requires that we, and our officers and directors with respect to Section 16 of the Exchange Act, comply with certain public reporting and proxy statement requirements thereunder. Compliance with these requirements is costly and time consuming. We plan to initiate steps to exit from such reporting requirements in order to curtail expenses; however, such process may be protracted and we may continue to be required to file Current Reports on Form 8-K to disclose material events, including those related to the dissolution, and other reports. Accordingly, we may continue to incur expenses that will reduce any amount available for distribution, including expenses of complying with public company reporting requirements and paying our service providers, among others. If our reporting obligations cease, publicly available information about us will be substantially reduced.

The loss of key personnel could adversely affect our ability to efficiently dissolve, delist, liquidate, and wind down.

We intend to rely on a few individuals in key management roles and contractor support to dissolve, delist from Nasdaq, liquidate our remaining assets, and wind down operations. Loss of one or more of these key individuals, or inability to contract with essential personnel, could hamper the efficiency or effectiveness of these processes, and may substantially increase the cost of the dissolution as we may need to rely on the services of third party restructuring and consulting firms to assist with the wind down and dissolution.

28

Risks Related to the Economy and Financial Markets

As a business operating in the financial services industry, our business, financial condition and results of operations may be adversely affected in numerous and complex ways by economic conditions and fiscal and monetary policies and regulations of the federal government and the FRB.

Our business and operations, which primarily consist of lending money to customers in the form of loans, borrowing money from customers in the form of deposits and investing in securities, are sensitive to general business and economic conditions in the United States. Our business and operations, which primarily consist of lending money to customers in the form of loans, borrowing money from customers in the form of deposits and investing in securities, are sensitive to general business and economic conditions in the United States. If the U.S. economy weakens, our growth and profitability from our lending, deposit and investment operations could be constrained. Uncertainty about the federal fiscal policymaking process, the medium- and long-term fiscal outlook of the federal government and future tax rates is a concern for businesses, consumers and investors in the United States. In addition, economic conditions in foreign countries could affect the stability of global financial markets, which could hinder U.S. economic growth. Weak economic conditions are characterized by deflation or elevated inflation, fluctuations in debt and equity capital markets, a lack of liquidity and/or depressed or inflated prices in the secondary market for mortgage loans, increased delinquencies on mortgage, consumer and commercial loans, residential and commercial real estate price declines and lower home sales and commercial activity.

In particular, interest rates are highly sensitive to many factors that are beyond our control, including global, domestic and local economic conditions and the policies of various governmental and regulatory agencies and, specifically, the Federal Reserve. Throughout 2022 and 2023, the FOMC raised the target range for the federal funds rate on eleven separate occasions, citing factors including the hardships caused by the ongoing Russia-Ukraine conflict, continued global supply chain disruptions and imbalances, and increased inflationary pressure. In the third and fourth quarters of 2024, however, the FOMC pivoted and lowered the federal funds rate from 5.50% to 4.50% based principally on reduced levels of inflation and labor market factors. At its January 29, 2025 meeting, the FOMC decided to maintain the target range for the federal funds rate at 4.25% to 4.50%.

As of December 31, 2024, various economic indicators suggested that real GDP had expanded solidly throughout 2024. The unemployment rate had increased, on net, but remained low relative to historic norms. Consumer price inflation, as measured by the 12-month change in the price index for personal consumption expenditures, had moved lower compared to its peak level in 2023, approaching the Federal Reserve’s 2 percent inflation objective. Against the backdrop of restrictive monetary policy, the U.S. economy had stronger-than-expected GDP growth, loosening of tight labor markets and falling inflation in 2024. While this positive growth may continue in 2025, some economists are projecting that, due to emerging policy risks such as stricter immigration policies and trade tariffs, the U.S. economy may be flat or experience a modest decrease in gross domestic output in 2025. For instance, the U.S. Bureau of Economic Analysis projects that real GDP will decrease modestly in 2025. Any such downturn in economic output, especially domestically and in the regions in which we operate, may adversely affect our asset quality, deposit levels, loan demand and results of operations.

As a result of the economic and geopolitical factors discussed above, financial institutions also face heightened credit risk, among other forms of risk.29 Table of ContentsAs a result of the economic and geopolitical factors discussed above, financial institutions also face heightened credit risk, among other forms of risk. Of note, because we have a significant amount of real estate loans, decreases in real estate values could adversely affect the value of property used as collateral, which, in turn, can adversely affect the value of our loan and investment portfolios. Adverse economic developments, specifically including inflation-related impacts, may have a negative effect on the ability of our borrowers to make timely repayments of their loans or to finance future home purchases. According to the Federal Reserve's November 2024 Financial Stability Report, several economic indicators suggest that commercial real estate prices still remain high relative to fundamentals while market delinquency rates are elevated. However, the outlook for commercial real estate remains dependent on the broader economic environment and, specifically, how major subsectors respond to a high interest rate environment and continued higher prices for commodities, goods and services. The outlook for commercial real estate remains dependent on the broader economic environment and, specifically, how major subsectors respond to a rising interest rate environment and higher prices for commodities, goods and services. In any case, credit performance over the medium- and long-term is susceptible to economic and market forces and therefore forecasts remain uncertain; however, some degree of instability in the commercial real estate markets is expected in the coming quarters as loans continue to be refinanced in markets with higher vacancy rates under current economic conditions. Instability and uncertainty in the commercial and residential real estate markets, as well as in the broader commercial and retail credit markets, could have a material adverse effect on our financial condition and results of operations.

29

Significant changes to the size, structure, powers and operations of the federal government may cause economic disruptions that could, in turn, adversely impact our business, results of operations and financial condition.

The Trump Administration has commenced efforts to implement significant changes to the size and scope of the federal government and reform its operations to achieve stated goals that include reducing the federal budget deficit and national debt, improving the efficiency of government operations, and promoting innovation and economic growth. To date, these efforts have been carried out through a mix of executive actions aimed at eliminating or modifying federal agency and federal program funding, reducing the size of the federal workforce, reducing or altering the scope of activities conducted by, and possibly eliminating, various federal agencies and bureaus, and encouraging the use of artificial intelligence and other advanced technologies within the public and private sectors. These changes, if implemented and taken as a whole, may have varied effects on the economy that are difficult to predict. For instance, the delivery of government services and the distribution of federal program funds and benefits may be disrupted or, in some cases, eliminated as a result of funding cuts or recasting of federal agency mandates. Further, a substantial reduction of the federal workforce could adversely affect regional and local economies, both directly and indirectly, in geographies with significant concentrations of federal employees and contractors. It is possible that such comprehensive changes to the federal government may be materially adverse to the regional and local economies where we conduct business and to our customers, which, in turn, could be materially adverse to our business, financial condition and results of operations.

Macroeconomic and geopolitical challenges and uncertainties affecting the stability of regions and countries around the globe could have a negative impact on our business, financial condition and results of operations.

Our business and operations are also sensitive to global business and economic conditions. Accordingly, macroeconomic and geopolitical challenges, uncertainties and volatility occurring across the globe may have a negative impact on our business and results of operations. These conditions include short-term and long-term interest rates, inflation, money supply, political issues, ramifications of conflicts including the Russia-Ukraine conflict, Israeli-Palestinian conflict, the recent coup in Syria and other conflicts and government turmoil in the Middle East and Europe, legislative and regulatory changes, fluctuations in both debt and equity capital markets, broad trends in industry and finance, the strength of the United States economy, and uncertainty in financial markets globally, all of which are beyond our control.

For additional information, see “—Risks Related to Interest Rates.

In addition, economic trade and political tensions between the United States and China pose a risk to our business and customers. A substantial number of our customers have economic and cultural ties to China and are likely to feel the effects of adverse economic and political conditions in China, including the effects of rising inflation or slowing growth and volatility in the real estate and stock markets in China and other regions. United States and global economic and trade policies, military tensions and unfavorable global economic conditions may adversely impact the Chinese economy. US and global economic and trade policies, military tensions and unfavorable global economic conditions may adversely impact the Chinese economy. As a result, we may experience a decrease in the demand for our financial products, a deterioration in the credit quality of the loans extended to customers affected by the foregoing circumstances, changes in loan repayment speeds or increased deposit outflows. As a result, we may experience a decrease in the demand for our financial products, a deterioration in the credit quality of the loans extended to customers affected by the foregoing circumstances, changes in loan repayment speeds or increased deposit outflows, any of which could have a material adverse impact on our business, financial condition and results of operations.

Each of the developments described above, or any combination of them, could adversely affect our business, financial condition and results of operations.

Changes in U.S. trade policies, including the imposition of tariffs and retaliatory tariffs, may adversely impact our business, financial condition, and results of operations.

The Trump Administration, during its first term from 2017 to 2021, imposed certain tariffs and retaliatory tariffs, as well as other trade restrictions on products and materials that our customers import or export. President Trump again has signaled that his new Administration will impose tariffs and retaliatory tariffs against U.S. trading partners. During his election campaign, President Trump indicated that he would impose a 25% tariff against all goods imported from Canada and Mexico, a 60% tariff on goods from China and a blanket tariff of 10% to 20% on other imports to the U.S. On February 1, 2025, President Trump issued an Executive Order imposing tariffs at various levels on imports from Canada, Mexico, and China. The newly imposed tariffs have resulted in immediate threats of retaliatory tariffs against U.S. goods and resulted in discussions with the countries which have delayed many of the U.S. imposed tariffs while discussions with each trading partner continue.

30

The above and other potential tariffs and trade restrictions may cause the prices of our customers' products to increase, which could reduce demand for such products, or reduce our customers’ margins, and adversely impact their revenues, financial results, and ability to service debt. This in turn could adversely affect our financial condition and results of operations. In addition, to the extent changes in the political environment have a negative impact on us or on the markets in which we operate our business, our results of operations and financial condition could be materially and adversely impacted in the future. The discontinuation of LIBOR may result in uncertainty or differences in the calculation of the applicable interest rate or payment amount depending on the terms of the governing instruments and may also increase operational and other risks to us and the industry. At this time, it remains unclear what the U.S. government or foreign governments will or will not do with respect to additional tariffs that may be imposed or international trade agreements and policies.

Volatility in the banking sector, triggered by the failures of several larger banks in 2023, has resulted in agency rulemaking activities and changes in agency policies and priorities that could subject the Company and the Bank to enhanced government regulation and supervision.

After the significant bank failures that occurred in 2023, the federal banking agencies enhanced their scrutiny of the banks’ risk management practices, including liquidity risk management. The agencies concluded that a significant contributing factor to the failures of such institutions was the concentration of uninsured deposits, coupled with inadequate prudential regulation and supervision of regional banking organizations, poor management and inadequate risk management practices. Accordingly, the agencies enacted or proposed a variety of regulations and issued supervisory guidance to address these issues, including proposed Basel III “endgame” regulations, bank merger guidelines, long-term debt requirements, corporate governance and risk management standards for larger institutions, restrictions on banks’ acceptance of brokered deposits, and funding and liquidity risk management. Continued regulatory concern over possible future bank failures may lead to further governmental initiatives intended to prevent future bank failures and stem significant deposit outflows from the banking sector, including (i) legislation aimed at preventing similar future bank runs and failures and stabilizing confidence in the banking sector over the long term, (ii) agency rulemaking to modify and enhance relevant regulatory requirements, specifically with respect to liquidity risk management, deposit concentrations, capital adequacy, stress testing and contingency planning, and safe and sound banking practices, and (iii) enhancement of the agencies’ supervision and examination policies and priorities. However, the prospects and timing of these regulatory changes under the new Presidential Administration and Congress are unclear at this time.

Our customer activity is affected by changes in the state of the general economy and the financial markets, a slowdown or downturn of which could adversely affect demand for our loan services and our results of operations.

Our customer activity is intrinsically linked to the health of the economy generally and of the financial markets specifically. In addition to the economic factors discussed above, a downturn in the real estate or commercial markets generally, which might occur as a result of, among other things, an increase in unemployment, a decrease in real estate values, declining savings or a slowdown in housing demand, could cause our customers and potential customers to exit the market for real estate or commercial loans. In addition to the economic factors discussed above, a downturn in the real estate or commercial markets generally, which might occur as a result of, among other things, an increase in unemployment, further disruptions to the supply chain, a decrease in real estate values or a slowdown in housing demand, could cause our customers and potential customers to exit the market for real estate or commercial loans. As a result, we believe that fluctuations, disruptions, instability or downturns in the general economy and the financial markets could disproportionately affect demand for our residential and commercial loan products. If such conditions occur and persist, our business and financial results, including our liquidity and our ability to fulfill our debt obligations, could be materially adversely affected.

Fiscal challenges facing the U.S. government could negatively impact financial markets which, in turn, could have an adverse effect on our financial position or results of operations.

Federal budget deficit concerns and the potential for political conflict over legislation to fund U.S. government operations and raise the U.S. government’s debt limit may increase the possibility of a default by the U.S. government on its debt obligations, related credit-rating downgrades, or an economic recession in the United States. Many of our investment securities are issued by the U.S. government and government agencies and sponsored entities. As a result of uncertain domestic political conditions, including potential future federal government shutdowns, the possibility of the federal government defaulting on its obligations for a period of time due to debt ceiling limitations or other unresolved political issues, investments in financial instruments issued or guaranteed by the federal government pose liquidity risks. As a result of uncertain domestic political conditions, including the possibility of the federal government defaulting on its obligations for a period of time due to debt ceiling limitations or other unresolved political issues, investments in financial instruments issued or guaranteed by the federal government pose liquidity risks. In connection with prior political disputes over U.S. fiscal and budgetary issues leading to the U.S. government shutdown in 2011, S&P lowered its long term sovereign credit rating on the U.S. from AAA to AA+. In 2023, Congress narrowly averted two separate government shutdowns by passing continuing resolutions. Again in 2024, Congress averted two more government shutdowns at the last minute. In part due to repeated debt- limit political standoffs and last-minute resolutions, in 2023 Fitch downgraded the U.S. long-term foreign-currency issuer default rating to AA+ from AAA, and the rating remained unchanged as of December 31, 2024. A further downgrade, or a downgrade by other rating agencies, as well as sovereign debt issues facing the governments of other countries, could have a material adverse impact on financial markets and economic conditions in the U.S. and worldwide.

31

Risks Related to Credit

Changes in economic conditions, including continued inflation and the possibility of a recession, could cause an increase in delinquencies and nonperforming assets, including loan charge offs, which could depress our net income and growth.

Our loan portfolio includes primarily secured real estate loans, demand for which may decrease and delinquencies of which may increase during economic downturns as a result of, among other things, an increase in unemployment, a decrease in real estate values, an increase in interest rates and a slowdown in housing. Significant ongoing financial risk continues to affect economic conditions in the United States as a whole and in the markets that we serve, including the risk of a recession. As a result of the economic uncertainty and should the economy worsen, we could experience higher delinquencies and loan charge offs, as well as increases in nonaccrual loans and loan modifications, which would reduce our net income and adversely affect our financial condition. In addition, a decline in real estate values as a result of adverse developments in the markets we serve could reduce the value of the real estate collateral securing our real estate loans, which could cause some of our real estate loans to be inadequately collateralized or affect our ability to sell such collateral upon foreclosure without a loss or additional losses. Furthermore, to the extent that real estate collateral is obtained through foreclosure, the costs of holding and marketing the real estate collateral, as well as the ultimate values obtained from disposition, could reduce our net income and adversely affect our financial condition.

Our concentration in residential real estate loans exposes us to risks.

At December 31, 2024 and 2023, one-to-four family residential real estate loans amounted to $849 million and $1.1 billion, or 73% and 80%, respectively, of our total gross loans.At December 31, 2022 and 2021, one-to-four family residential real estate loans amounted to $1.4 billion and $1.7 billion, or 84% and 83%, respectively, of our total gross loans, and we intend to continue this type of lending in the foreseeable future. Our nonperforming residential real estate loans increased from $9.0 million at December 31, 2023 to $13.2 million at December 31, 2024. Residential mortgage lending is generally sensitive to regional and local economic conditions that significantly impact the ability of borrowers to meet their loan payment obligations, making loss levels difficult to predict. For example, in our residential lending markets in California, the current unemployment rate is higher than the national average. If borrowers are unable to meet their loan repayment obligations, our results of operations would be materially and adversely affected. In addition, a decline in residential real estate values as a result of an economic downturn in the markets we serve would reduce the value of the real estate collateral securing these types of loans. Such declines in real estate values could cause some of our residential mortgages to be inadequately collateralized, which would expose us to a risk of loss if we sought to recover on defaulted loans by selling the real estate collateral.

Our commercial real estate loans are subject to credit risks, including changes in operating cash flows from the underlying properties or businesses, that may adversely impact our results of operations and financial condition.

At December 31, 2024, our commercial real estate loans totaled $296.5 million, or 26% of our total gross loans.At December 31, 2022, our commercial real estate loans totaled $223.2 million, or 13% of our total gross loans. Commercial real estate loans generally have more risk than residential real estate loans and generally have a larger average size compared to other types of loans, so losses incurred on a small number of commercial loans could have a disproportionate and material adverse impact on our financial condition and results of operations. The repayment of commercial real estate loans is often more sensitive than other types of loans to adverse conditions in the real estate market or the general business climate and economy because it is dependent on the successful operation or development of the property or business involved. In addition, the collateral for commercial real estate loans is generally less readily marketable than for residential real estate loans, and its value may be more difficult to determine. A primary repayment risk for commercial real estate loans is the interruption or discontinuation of operating cash flows from the properties or businesses involved, which may be influenced by economic events, changes in governmental regulations, vacancies or other events not under the control of the borrower. Adverse developments affecting commercial real estate values in our market areas could increase the credit risk associated with these loans, impair the value of property pledged as collateral for these loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses.

Commercial real estate markets have been facing downward pressure since 2022 due in large part to higher interest rates, declining property values and a slowed transaction market. Accordingly, the federal banking agencies, including the OCC, have expressed concerns over weaknesses in the current commercial real estate market and have applied increased scrutiny to institutions with commercial real estate loan portfolios that are growing quickly or are large relative to an institution’s total capital. To address supervisory expectations regarding financial institutions’ handling of commercial real estate borrowers experiencing financial difficulties, in June 2023, the federal banking agencies issued an interagency policy statement addressing prudent commercial real estate loan accommodations, changes in accounting principles, and revisions and additions to commercial real estate loan workouts. Our failure to implement adequate risk management controls for commercial real estate credit underwriting and servicing, as well as related accounting processes, could adversely affect our business in this area.

32

A substantial majority of our loans and operations are in California, and therefore our business is particularly vulnerable to a downturn in the local economies in which we operate.

Unlike larger financial institutions that are more geographically diversified, a large portion of our business is concentrated primarily in the state of California, specifically in the San Francisco and Los Angeles metropolitan areas. Unlike larger financial institutions that are more geographically diversified, a large portion of our business is concentrated primarily in the state of California, specifically in the San Francisco and Los Angeles areas. As of December 31, 2024, approximately 75% of our loan portfolio was based in California with concentrations in the San Francisco and Los Angeles metropolitan areas of 52% and 23%, respectively. If the local California economies, and particularly local real estate markets, decline, the rates of delinquencies, defaults, foreclosures, bankruptcies and losses in our loan portfolio would likely increase. Similarly, catastrophic natural events such as earthquakes or wildfires, such as the wildfires that recently impacted Southern California, could have a disproportionate effect on our financial condition. Similarly, catastrophic natural events such as earthquakes or wildfires could have a disproportionate effect on our financial condition. More, an ongoing financial slowdown within the technology industry may pose unique financial hardships to the San Francisco Bay Area due to industry concentration in the region, thus impacting the overall regional economy. As a result of this lack of geographic diversification in our loan portfolio, a downturn in the local economies generally and in real estate markets specifically could significantly reduce our profitability and growth and have a material adverse effect on our results of operations and financial condition.

Our allowance for credit losses may not be sufficient to cover losses in our loan portfolio, and any resulting increase in our allowance for credit losses or loan charge offs could decrease our net income.Our allowance for loan losses may not be sufficient to cover losses in our loan portfolio, and any resulting increase in our allowance for loan losses or loan charge offs could decrease our net income.

As of January 1, 2023, we adopted the current expected credit loss model for accounting for the estimate of credit losses related to financial assets measured at amortized cost, including loan receivables and other contracts, such as off-balance sheet credit exposure, specifically, loan commitments and standby letters of credit, financial guarantees and other similar instruments. Under the current expected credit loss model, the allowance for credit losses is established based upon our current estimate of expected lifetime credit losses, for which we use relevant available information related to past events, current conditions and reasonable and supportable forecasts. In determining the total allowance for credit losses, we calculate the quantitative portion of the allowance for credit losses using the Probability of Default/Probability of Attrition model, which is a logistic regression model, and add the qualitative adjustments to the model results along with the results from any individual loan assessments.

The determination of the appropriate level of allowance for credit losses is subject to various assumptions and judgments and requires us to make significant estimates of current credit risks and the collectability of loans, the value of real estate and other assets serving as collateral for the repayment of loans and future trends, all of which are subject to material changes. If our assumptions and estimates prove to be incorrect, the allowance for credit losses may not cover current expected credit losses in the loan portfolio at the date of the financial statements. If our assumptions and estimates prove to be incorrect, the allowance for loan losses may not cover incurred losses in the loan portfolio at the date of the financial statements. Significant increases to the allowance for credit losses would materially decrease net income. Significant additions to the allowance for loan losses would materially decrease net income. Nonperforming loans may increase, and nonperforming or delinquent loans may adversely affect future performance. In addition, federal regulators periodically review the allowance for credit losses and may require an increase in the allowance for credit losses or the recognition of further loan charge offs. In addition, federal regulators periodically review the allowance for loan losses and may require an increase in the allowance for loan losses or the recognition of further loan charge offs. Any significant increase in our allowance for credit losses or loan charge offs as required by these regulatory agencies could have a material adverse effect on our results of operations and financial condition. Any significant increase in our allowance for loan losses or loan charge offs as required by these regulatory agencies could have a material adverse effect on our results of operations and financial condition.

Risks Related to Interest Rates

Future changes in interest rates could reduce our net interest income and otherwise negatively impact our financial condition and results of operations.

The majority of our banking assets are monetary in nature and subject to risk from changes in interest rates. Like most financial institutions, our net income and cash flows depend to a great extent upon the level of our net interest income, or the difference between the interest income we earn on loans, investments and other interest earning assets and the interest we pay on interest-bearing liabilities, such as deposits and borrowings. Changes in interest rates can increase or decrease our net interest income, which makes up a majority of our income, because different types of assets and liabilities may react differently, and at different times, to market interest rate changes.

33

To help address the impact of the COVID-19 pandemic on the economy and financial markets, in March 2020 the FOMC reduced the benchmark federal funds rate to a target range of 0% – 0.25%, and the yields on 10- and 30-year Treasury notes declined to historic lows. However, in light of elevated inflation, a strong labor market and supply chain disruptions at the time, the FOMC significantly increased the target range for the federal funds rate from 0.00% – 0.25% to 5.25% – 5.50% over the period from March 2022 to July 2023, as the FOMC believed such increases in the target range would be appropriate to return target inflation to 2% over time. As of January 29, 2025, the date of the FOMC’s most recent meeting, the target range for the federal funds rate was 4.25% to 4.50%, which is down from the recent peak of 5.25% to 5.50% prior to the FOMC meeting in September 2024. It remains uncertain whether the FOMC will further reduce the target range for the federal funds rate to stimulate economic activity and promote job growth or leave the rate at its relatively elevated level for an additional prolonged period of time.

Like many savings institutions, our liabilities generally have shorter contractual maturities than our assets. Like many savings institutions, our liabilities generally have shorter contractual maturities than our assets. When interest-bearing liabilities mature or reprice more quickly, or to a greater degree than interest earning assets in a period, an increase in interest rates could reduce net interest income or adversely affect our overall balance sheet mix or liquidity. When interest-bearing liabilities mature or reprice more quickly, or to a greater degree than interest earning assets in a period, an increase in interest rates could reduce net interest income. Similarly, rising interest rates could also reduce the demand for certain loans or cause certain borrowers to repay loans slower. A decrease in the general level of interest rates may affect us through, among other things, increased prepayments on our loan portfolio and mortgage-backed securities as borrowers refinance their debt to reduce their borrowing costs, a decrease in demand for our deposit products resulting in withdrawals of deposits from the Bank or a combination of the foregoing that may result in a further decrease of our balance sheet. A decrease in the general level of interest rates may affect us through, among other things, increased prepayments on our loan portfolio and mortgage-backed securities as borrowers refinance their debt to reduce their borrowing costs. To limit the extent of deposit withdrawals and maintain liquidity in a declining rate environment, we may need to maintain deposit rates at levels higher than the prevailing market rates, thus adversely impacting our net interest income. A decrease in interest rates can also create reinvestment risk that we may not be able to reinvest prepayments at rates that are comparable to the rates we earned on the prepaid loans or securities and repricing risk that our loans and debt securities may reprice at a faster pace than we may be able to reprice our deposits without significantly affecting the demand for our deposit products. The first rule replaces the strict 43 percent debt-to-income threshold for QM loans and provides that, in addition to existing requirements, a loan receives a conclusive presumption that the consumer had the ability to repay if the annual percentage rate does not exceed the average prime offer rate for a comparable transaction by 1.5 percentage points or more as of the date the interest rate is set. Furthermore, an inverted interest rate yield curve, where short-term interest rates (which are usually the rates at which financial institutions borrow funds) are higher than long-term interest rates (which are usually the rates at which financial institutions lend funds for fixed-rate loans) can reduce our net interest margin and create financial risk for financial institutions like us. Also impacting our net interest income and net interest rate spread is the level of prepayment activity on our mortgage-related assets. Mortgage prepayment rates will vary due to a number of factors, including the regional economy where the mortgage loan or the underlying mortgages of the mortgage-backed security were originated, seasonal factors, demographic variables, prevailing market interest rates, related mortgage refinancing opportunities and competition. Generally, the level of prepayment activity directly affects the yield earned on those assets, as the payments received on the interest-earning assets will be reinvested at the prevailing market interest rate. In a high interest rate environment, prepayment rates tend to decrease and, therefore, the yield earned on our existing mortgage-related assets may remain constant or increase; however, were interest rates to fall, prepayments could increase, which could decrease the yield earned on our mortgage-related assets. This could adversely affect our net interest margin and, therefore, our net interest income.

The interest we earn on our assets is primarily from our residential real estate loans, which comprises 73% of our total gross loans at December 31, 2024 and 49% of the interest earned from all of our interest-earning assets for the year ended December 31, 2024. At December 31, 2024, 98% of our residential real estate loan portfolio and 87% of our total loan portfolio were adjustable-rate loans.The interest we earn on our assets is primarily from our residential real estate loans, which comprises 84% of our total gross loans at December 31, 2022 and 71% of the interest earned from all of our interest-earning assets for the year ended December 31, 2022.We offer fixed-rate and adjustable-rate mortgage loans with terms of up to 30 years; however, across our loan portfolio, interest rates and payments generally adjust annually after a one-, three-, five- or seven-year initial fixed period. To that end, 69% of our adjustable-rate residential real estate loans’ repricing dates are currently scheduled to occur within the next 12 months, 25% after 12 months and up to 60 months, and 6% thereafter. Accordingly, our existing loan portfolio may reprice into the prevailing lower market rates in a lower interest rate environment.

Accordingly, changes in the level of market interest rates affect our net yield on interest-earning assets, demand for loans and deposits, and our overall results.41 Table of ContentsAccordingly, changes in the level of market interest rates affect our net yield on interest earning assets, loan origination volume and our overall results. We expect the operating environment to remain very challenging as the FRB continues to focus their efforts on the economy. We cannot predict future FRB actions or other factors that may cause interest rates to change. If we were to experience a decreasing interest rate environment where our cost of funds decreased slower than the yields on our loan portfolio, it may adversely affect our net interest income, net interest spread and net interest margin, and may cause us to change our operating leverage model or portfolio mix to compensate. If we were to experience a rising interest rate environment where our cost of funds increased faster than the yields on our loan portfolio, it may adversely affect our net interest income, net interest spread and net interest margin, and may cause us to change our operating leverage model or portfolio mix to compensate. Although our asset-liability management strategy is designed to control and mitigate exposure to the risks related to changes in market interest rates, those rates are affected by many factors outside of our control, including governmental monetary policies, inflation, deflation, recession, changes in unemployment, the money supply, geopolitical conflicts and instability in domestic and foreign financial markets. Such changes in interest rates could materially and adversely affect our results of operations and overall profitability.

34

An accelerated decrease in interest rates could reduce our net interest income and otherwise negatively impact our financial condition and results of operations.

Our balance sheet is currently in an asset-sensitive position. In the event of a significant decrease of the target federal funds rate by the FOMC in response to improved inflation outlook, we may not be able to lower our deposit rates at a similar pace in order to avoid significant deposit withdrawals as customers seek the highest yield possible for their funds. A significant, rapid decrease in interest rates could affect (i) the demand of our deposit products; (ii) our liquidity position if our depositors were to withdraw their funds; (iii) the expected yield of our loan portfolio and debt securities; (iv) the average duration of our loan portfolio and debt securities; (v) the fair value of our financial assets and liabilities; and (vi) our balance sheet mix and composition. In addition, the lack of robust loan originations will inhibit our ability to reinvest loan prepayments that occur as interest rates decline in interest earning assets at the higher end of the yield curve, thus either narrowing our interest rate spread and net interest margin or resulting in further significant decline in the size of our balance sheet. As a result, interest income may decline much more quickly in response to market rate declines than our interest expense, which would reduce our net interest income and adversely impact our financial condition and results of operations.

Risks Related to Liquidity

A lack of liquidity could adversely affect our financial condition and results of operations and result in regulatory limits being placed on the Company.

Liquidity is essential to our business. We rely on our ability to generate deposits and effectively manage the repayment and maturity schedules of our investment securities to ensure that we have adequate liquidity to fund our operations. We rely on our ability to generate deposits and effectively manage the repayment and maturity schedules of our loans to ensure that we have adequate liquidity to fund our operations. An inability to raise funds through deposits, borrowings, the sale of loans and other sources could have a substantial negative effect on our liquidity. Our most important source of funds is deposits. Deposit balances can decrease when customers perceive alternative investments as providing a better risk/return tradeoff. If customers move money out of deposits such as money market funds, we will lose a relatively low-cost source of funds, increasing our funding costs and reducing our net interest income and net income. Moreover, depending on the capitalization and regulatory treatment of depository institutions, including whether an institution is subject to a supervisory prompt corrective action directive, certain additional regulatory restrictions and prohibitions may apply, including restrictions on growth, restrictions on interest rates paid on deposits, restrictions or prohibitions on payment of dividends and restrictions on the acceptance of brokered deposits. In the event such restrictions on interest rates paid on deposits become applicable to us, we may need to reduce our interest rates paid on a segment of our deposits, which could result in deposit withdrawals. In addition, as of December 31, 2024, approximately 23% of our total deposits are not FDIC-insured, and a significant portion of those deposits could be withdrawn in the event of volatile economic conditions. Significant deposit withdrawals could materially reduce our liquidity, and, in such an event, we may be required to replace such deposits with higher cost borrowings.

Other primary sources of funds consist of cash flows from operations, from the repayment of loans and from the maturities and principal receipts of investment securities.Other primary sources of funds consist of cash flows from operations and sales of investment securities, and proceeds from the issuance and sale of our equity securities. Additional liquidity is provided by our ability to borrow from the FHLB of Indianapolis or our ability to sell portions of our loan portfolio. We also may borrow funds from third-party lenders, such as other financial institutions. Our access to funding sources in amounts adequate to finance or capitalize our activities, or on terms that are acceptable to us, could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry. Our access to funding sources could also be affected by a decrease in the ability to sell mortgage portfolios as a result of a downturn in our markets or by one or more adverse regulatory actions against us. A lack of liquidity could also attract increased regulatory scrutiny and potential restraints imposed on us by regulators.

Any decline in available funding could adversely impact our ability to originate loans, invest in securities, meet our expenses or fulfill obligations such as repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition and results of operations.

35

We are currently disqualified from the small offering and private placement safe harbor exemptions otherwise available under the federal securities laws, which may adversely affect our ability to offer or sell our securities and raise capital in an efficient manner.

As a result of the guilty plea and criminal conviction pursuant to our Plea Agreement with the DOJ, we fall within the “bad actor” disqualification provisions of Regulation A and Regulation D under the Securities Act. These provisions prohibit an issuer from offering or selling securities in a private placement in reliance on Regulation A for certain small offerings and Regulation D for certain private placement transactions for a period of up to ten years under certain circumstances if, among other things, the issuer has been convicted of any felony or misdemeanor, or other “disqualifying event” under the rule. The SEC or the court may waive such disqualification upon a showing of good cause that disqualification is not necessary under the circumstances for which the safe harbor exemptions are being denied. Absent a waiver, we will be restricted in our ability to raise capital in a private placement in reliance on Regulation A or Regulation D, although we would remain eligible as an SEC registrant to access the equity capital markets through an SEC-registered offering or through another exemption from the registration requirements. We have submitted to the SEC a waiver request from the “bad actor” disqualifications. There is no assurance that the SEC will grant this request. If the SEC were to deny our waiver request, we will be limited in our ability to raise capital through a private placement under Regulation A or Regulation D. The application of the “bad actor” disqualifications to us could make capital raising more costly or inhibit our ability to raise capital. Reduced or more costly access to capital could inhibit our ability to pursue certain strategic alternatives for adding new products and services and potentially grow our balance sheet. Reduced or more costly access to capital is particularly critical to our ability to pursue certain strategic alternatives because the Bank reduced its excess capital when it distributed $90.0 million as a dividend to the Company in 2023 to fund the redemption of the Subordinated Notes and the restitution payment due under the Plea Agreement, both of which reduced the Bank’s excess capital and which otherwise could have supported future growth. Reduced access to capital also could adversely impact our ability to comply with regulatory capital requirements in the event of adverse economic circumstances in which we were to incur financial losses. Therefore, the failure to obtain a waiver of the “bad actor” disqualification could have an adverse impact on our business, financial condition and results of operations.

We rely on external financing to fund our operations, and the failure to obtain such financing on favorable terms, or at all, in the future could materially and adversely impact our growth strategy and prospects.44 Table of ContentsWe rely on external financing to fund our operations, and the failure to obtain such financing on favorable terms, or at all, in the future could materially and adversely impact our growth strategy and prospects.

We rely in part on advances from the FHLB and brokered deposits to fund our operations. Although we consider such sources of funds adequate for our current needs, we may need to issue additional debt or equity in the future to (i) restore capital that has been depleted due to adverse results from and costs to defend government investigations and litigation, (ii) restore capital that may be depleted in the future due to other risks identified herein, and (iii) fund future growth. Although we consider such sources of funds adequate for our current needs, we may need to seek additional debt or equity capital in the future to restore capital that may be depleted due to losses related to adverse results from government investigations and litigation, adverse economic conditions and other risks identified herein, as well as to fund future growth. The sale of equity or equity-related securities in the future may be dilutive to our shareholders, and debt financing arrangements may require us to pledge some of our assets and enter into various affirmative and negative covenants, including limitations on operational activities and financing alternatives. Future financing sources, if sought, might be unavailable to us or, if available, could be on terms unfavorable to us and may require regulatory approval. In addition, we currently are required to obtain the prior approval of the FRB in order for the Company to issue any new debt. If financing sources are unavailable or are not available on favorable terms or we are unable to obtain regulatory approval, our capital base, growth strategy and future prospects could be materially and adversely impacted.

36

If the market for the sale of our mortgage loans to the secondary market were to significantly contract, or if purchasers were to lose confidence in the quality of our loans, our net income would be negatively affected and our ability to manage our balance sheet would be materially and adversely affected.

From time to time, we manage our liquidity and balance sheet risk by selling loans in our mortgage portfolio into the secondary market. If the market for our mortgages were to contract or our counterparties were to lose confidence in our asset quality, we would lose a key piece of our liquidity strategy and would need to find alternative means to manage our liquidity that may be less effective. In addition, in connection with residential mortgages packaged for sale in the secondary market, we make representations and warranties, which, if breached, may require us to repurchase such loans, substitute other loans or indemnify the purchasers of such loans for actual losses incurred in respect of such loans. To avoid the uncertainty of audits and inquiries by third-party investors in Advantage Loan Program loans sold to the secondary market, beginning at the end of the second quarter of 2020, we commenced making offers to each of those investors to repurchase 100% of our previously sold Advantage Loan Program loans. As of December 31, 2024, we had repurchased such loans with an aggregate unpaid principal balance of $309.1 million and had outstanding commitments to repurchase an additional $11.1 million through July 2025. At December 31, 2024, the unpaid principal balance of residential mortgage loans sold under the Advantage Loan Program that were subject to potential repurchase obligations for breach of representations and warranties totaled $20.8 million. As of December 31, 2022, we had repurchased such loans with an aggregate unpaid principal balance of $309.1 million and had outstanding commitments to repurchase an additional $21.3 million through July 2025. At December 31, 2022, the unpaid principal balance of residential mortgage loans sold under the Advantage Loan Program that were subject to potential repurchase obligations for breach of representations and warranties totaled $43.3 million. If we experience loan repurchase demands in excess of what we have anticipated, our liquidity, capital ratios and financial condition may be materially and adversely affected.

The proportion of our deposit account balances that exceed FDIC insurance limits may expose the Bank to enhanced liquidity risk in times of financial distress.

In the aftermath of the significant bank failures that occurred in 2023, the federal banking agencies have enhanced their scrutiny of banks’ liquidity risk management. The agencies concluded that a significant contributing factor to the failures of the institutions in 2023 was the proportion of the deposits held by each institution that exceeded FDIC insurance limits. Noting that uninsured deposits accounted for nearly 47 percent of domestic deposits in 2021, the FDIC stated that large concentrations of uninsured deposits increase the potential for bank runs and can threaten financial stability. In the months preceding and following these failures, many large depositors withdrew deposits in excess of applicable deposit insurance limits and deposited these funds in other financial institutions and, in many instances, moved these funds into money market mutual funds or other similar securities accounts in an effort to diversify the risk of further bank failure(s).

Uninsured deposits historically have been viewed by the FDIC as less stable than insured deposits. According to statements made by the FDIC staff and the leadership of the federal banking agencies, customers with larger uninsured deposit account balances often are small- and mid-sized businesses that rely upon deposit funds for payment of operational expenses and, as a result, are more likely to closely monitor the financial condition and performance of their depository institutions. As a result, we may experience a decrease in the demand for our financial products, a deterioration in the credit quality of the loans extended to customers affected by the foregoing circumstances, changes in loan repayment speeds or increased deposit outflows, any of which could have a material adverse impact on our business, financial condition and results of operations. As a result, in the event of financial distress, uninsured depositors historically have been more likely to withdraw their deposits.

To that end, the federal banking agencies, including the FDIC and OCC, issued an interagency policy statement in July 2023 to underscore the importance of robust liquidity risk management and contingency funding planning. In the policy statement, the regulators noted that banks should maintain actionable contingency funding plans that take into account a range of possible stress scenarios, assess the stability of their funding and maintain a broad range of funding sources, ensure that collateral is available for borrowing, and review and revise contingency funding plans periodically and more frequently as market conditions and strategic initiatives change. As of December 31, 2024, approximately 23% of our total deposits of $2.0 billion were not insured by the FDIC. If a significant portion of our deposits were to be withdrawn within a short period of time such that additional sources of funding would be required to meet withdrawal demands, we may be unable to obtain funding at favorable terms, which may have an adverse effect on our net interest margin. Obtaining adequate funding to meet our deposit obligations may be more challenging during periods of elevated prevailing interest rates, such as the present, and our ability to attract depositors during a time of actual or perceived distress or instability in the marketplace may be limited. Further, interest rates paid for borrowings generally exceed the interest rates paid on deposits, and this spread may be exacerbated by higher prevailing interest rates.

37

In addition, because the fair value of our available for sale investment securities decreases when interest rates increase, after-tax proceeds resulting from the sale of such assets may be diminished during periods when interest rates are elevated. At December 31, 2024, our accumulated other comprehensive loss related to unrealized net losses on investment securities was $13.5 million, which currently does not impact our regulatory capital ratios. However, should we sell all or a material portion of our investment securities portfolio to increase liquidity in the face of depositor withdrawals in the current interest rate environment, we may recognize significant losses that would, in turn, reduce our regulatory capital position. Under such circumstances, we may access funding from sources such as the FRB’s discount window to manage our liquidity risk and mitigate the risk to our regulatory capital position.

The occurrence of any of these events could materially and adversely affect our business, results of operations or financial condition. Any of these could have a material adverse effect on our business, financial condition or results of operations.

Risks Related to Our Highly Regulated Industry

Our business is limited by the highly regulated environment in which we operate and could be adversely affected by the extensive laws and regulations that govern our activities, operations, corporate governance and accounting principles, or changes in any of them.

As a unitary thrift holding company, we are subject to extensive examination, supervision and comprehensive regulation by various federal agencies that govern almost all aspects of our operations. These laws and regulations, among other things, prescribe minimum capital requirements, impose limitations on the business activities in which we can engage, limit the dividend or distributions that the Bank can pay to us, restrict the ability of institutions to guarantee our debt and impose certain specific accounting requirements on us. These laws and regulations are not intended to protect our shareholders. Rather, these laws and regulations are intended to protect customers, depositors, the DIF and the overall financial stability of the United States. Compliance with these laws and regulations is difficult and costly, and changes to these laws and regulations often impose additional compliance costs. Our failure to comply with these laws and regulations, even if the failure follows good faith effort or reflects a difference in interpretation, could subject us to restrictions on our business activities, fines and other penalties, any of which could materially adversely affect our results of operations, capital base and the price of our securities. Further, any new laws, rules and regulations could make compliance more difficult or expensive.

The Dodd-Frank Act may continue to affect our business, governance structure, financial condition or results of operations.35 Table of ContentsThe Dodd-Frank Act may continue to affect our business, governance structure, financial condition or results of operations.

The Dodd-Frank Act, among other things, imposed new capital requirements on thrift holding companies; changed the base for FDIC insurance assessments to a bank’s average consolidated total assets minus average tangible equity, rather than upon its deposit base; permanently raised the current standard deposit insurance limit to $250,000; and expanded the FDIC’s authority to raise insurance premiums. The Dodd-Frank Act also established the CFPB as an independent entity within the FRB, which was granted broad rulemaking, supervisory and enforcement authority over consumer financial products and services, including deposit products, residential mortgages, home-equity loans and credit cards and contains provisions on mortgage-related matters, such as steering incentives, determinations as to a borrower’s ability to repay and prepayment penalties. The Dodd-Frank Act also established the CFPB as an independent entity within the FRB, which has broad rulemaking, supervisory and enforcement authority over consumer financial products and services, including deposit products, residential mortgages, home-equity loans and credit cards and contains provisions on mortgage-related matters, such as steering incentives, determinations as to a borrower’s ability to repay and prepayment penalties. Although the applicability of certain elements of the Dodd-Frank Act is limited to institutions with more than $10 billion in assets, there can be no guarantee that such applicability will not be extended in the future or that regulators or other third parties will not seek to impose such requirements on institutions with less than $10 billion in assets, such as the Company. The Dodd-Frank Act has had and may continue to have a material impact on our operations, particularly through increased regulatory burden and compliance costs.

The CFPB has adopted strict enforcement policies in respect of the fair lending laws and the prohibition against unfair, deceptive and abusive acts and practices. The CFPB has adopted strict enforcement policies in respect of the fair lending laws and the prohibition against unfair, deceptive and abusive acts and practices.

The CFPB was granted broad rulemaking authority to administer the provisions of the Dodd-Frank Act regarding financial institutions that offer covered financial products and services to consumers.The CFPB has broad rulemaking authority to administer the provisions of the Dodd-Frank Act regarding financial institutions that offer covered financial products and services to consumers. The CFPB was directed under the Dodd-Frank Act to write rules identifying practices or acts that are unfair, deceptive or abusive in connection with any transaction with a consumer for a consumer financial product or service, or the offering of a consumer financial product or service.

38

The CFPB pursued a more aggressive enforcement policy with respect to a range of regulatory compliance matters under the Biden Administration, specifically including fair lending, credit reporting, loan servicing, financial institution sales and marketing practices, and financial institution consumer fee and account management practices. CFPB enforcement actions may serve as precedent for how the CFPB interprets and enforces consumer protection laws, including practices or acts that are deemed to be unfair, deceptive or abusive, with respect to all supervised institutions, which may result in the imposition of higher standards of compliance with such laws. In addition, with the recent change in Administration, there have been, and likely will continue to be, corresponding changes in the leadership and senior staff of the CFPB. The Trump Administration has taken steps to halt the CFPB’s operations and receipt of funds, pause supervision, enforcement and rulemaking activity, drastically reduce staff, and terminate the CFPB’s agreements with service providers. Certain of the Administration’s actions are subject to ongoing litigation; however, in any event, significant changes to the agency’s policies, tactics and interpretations are expected. In addition, the new Administration and Congress may seek to fundamentally restructure the CFPB and/or limit the scope and reach of the CFPB’s authority. The extent and timing of any such changes and any resulting impact on our business and financial results cannot be predicted at this time.

There is likely no immediate impact arising from the above-described developments because the Bank has suspended the origination of residential loans.There is likely no immediate impact arising from this shift in enforcement policy and regulatory guidance from the CFPB because the Bank has suspended the origination of residential loans. However, should the Bank recommence residential lending, the CFPB’s policies and guidance would likely increase the Bank’s compliance costs or result in additional compliance risk. However, should the Bank recommence residential lending, the CFPB’s policies and guidance would likely increase the Bank’s compliance costs or result in additional compliance risk.

We are subject to stringent capital requirements.

We are subject to the regulatory capital rules implemented by the U.S. federal banking agencies in accordance with Basel III regulatory capital reforms and the Dodd-Frank Act. The regulatory capital rules are generally applicable to all U.S. banks as well as to unitary thrift holding companies with assets over $1 billion, such as the Company. The regulatory capital rules establish minimum regulatory capital ratios, including a common equity Tier 1 capital ratio, and require maintenance of a capital conservation buffer. The rules prescribe criteria that capital instruments must meet in order to be considered additional Tier 1 and Tier 2 capital for the purposes of the above requirements.

In order to be a well capitalized depository institution under the regulatory capital rules, an institution must maintain a common equity Tier 1 capital ratio of 6.5% or more; a Tier 1 capital ratio of 8% or more; a total capital ratio of 10% or more; and a leverage ratio of 5% or more.36 Table of ContentsIn order to be a well capitalized depository institution under the regulatory capital rules, an institution must maintain a common equity Tier 1 capital ratio of 6.5% or more; a Tier 1 capital ratio of 8% or more; a total capital ratio of 10% or more; and a leverage ratio of 5% or more. Institutions must also maintain a capital conservation buffer consisting of common equity Tier 1 capital. Institutions must also maintain a CCB consisting of common equity Tier 1 capital. Further, qualifying community banking organizations may elect to utilize the CBLR framework, which provides a simplified measure of capital adequacy. In order to qualify for the CBLR framework, a community banking organization must have (i) a Tier 1 leverage ratio of greater than 9.0%, (ii) less than $10 billion in total consolidated assets, and (iii) limited amounts of off-balance-sheet exposure and trading assets and liabilities. The Company and the Bank have each elected to comply with the CBLR framework, effective as of January 1, 2023. Although we have benefitted from this election in terms of our ability to add a variety of assets to our consolidated balance sheet without the need to evaluate the highly complicated regulatory risk weight weighting system, our election may require us to maintain an overall higher capital base, potentially limiting our future total growth opportunities. The Company and the Bank have each elected to comply with the CBLR framework, effective as of January 1, 2023. Although we will benefit from this election in terms of our ability to add a variety of assets to our consolidated balance sheet without the need to evaluate the highly complicated regulatory risk weight weighting system, we may be required to maintain an overall higher capital base, potentially limiting our future total growth opportunities.

The failure to meet applicable regulatory capital requirements could result in one or more of our regulators placing limitations or conditions on our activities, including our growth initiatives, or restricting the commencement of new activities, and could materially adversely affect customer and investor confidence, our costs of funds and FDIC insurance costs, our ability to pay dividends on our common stock, our ability to make acquisitions, and our business, results of operations and financial condition, generally.

We face risks related to the adoption of future legislation and potential changes in federal regulatory agency policies and priorities.The Company faces risks related to the adoption of future legislation and potential changes in federal regulatory agency leadership, policies and priorities.

Congress may enact legislation from time to time that affects the regulation of the financial services industry, and state legislatures may enact legislation from time to time affecting the regulation of financial institutions chartered by or operating in those states. Federal and state regulatory agencies also periodically propose and adopt changes to their regulations or change the manner in which existing regulations are applied. The substance or impact of pending or future legislation or regulation, or the application thereof, cannot be predicted, although enactment of the proposed legislation could impact the regulatory structure under which we operate and may significantly increase our costs, impede the efficiency of our internal business processes, require us to increase our regulatory capital and modify our business strategy, and limit our ability to pursue business opportunities in an efficient manner.

39

As a result of the 2024 Presidential and Congressional elections, Republicans are currently able to set the policy agenda both legislatively and in the regulatory agencies that have rulemaking and supervisory authority over the financial services industry generally and the Bank specifically. However, the Republican Party holds slim majorities in each of the Senate and the House of Representatives. Accordingly, the prospects for the enactment of major banking reform legislation under the new Congress are unclear at this time. The prospects for the enactment of major banking reform legislation under the current Congress are unclear at this time.

The recent turnover of the Presidential Administration has resulted in numerous changes in the leadership and senior staffs of the OCC, the FDIC, the CFPB, the SEC and the Treasury Department. These changes are expected to impact the rulemaking, supervision, examination and enforcement priorities and policies of the agencies, including the possible reversal of a number of final and proposed rules and policy statements promulgated under the Biden Administration. The potential impact of any changes in agency personnel, policies and priorities on the financial services sector, including the Bank, cannot be predicted at this time. The potential impact of any changes in agency personnel, policies and priorities on the financial services sector, including Sterling Bancorp and the Bank, cannot be predicted at this time.

We are subject to the CRA and fair lending laws, and failure to comply with these laws could lead to material penalties.37 Table of ContentsWe are subject to the CRA and fair lending laws, and failure to comply with these laws could lead to material penalties.

The CRA, the Equal Credit Opportunity Act, the Fair Housing Act and other fair lending laws and regulations impose nondiscriminatory lending requirements on financial institutions. The CRA requires the OCC, in connection with its examination of a federally chartered savings association, to assess the institution’s record of meeting the credit needs of its community and to take such record into account in its evaluation of certain applications by such institution. All institutions insured by the FDIC must publicly disclose their rating. As discussed in “Item 1. Business - Supervision and Regulation - Federal Banking Regulation - CRA and Fair Lending Laws,” in October 2023, the federal banking agencies issued a joint final rule to revise the regulations implementing CRA. The Bank is considered a “large bank” under the final rule and therefore will be evaluated under new lending, retail services and products, community development financing and community development services tests in respect of our compliance with the statute and rule. The final rule also imposes certain data reporting requirements that will apply to the Bank. Implementation of the final rule has been stayed pending the resolution of litigation against the federal banking agencies challenging their authority to adopt the final rule; however, in the event that the final rule is upheld in its current form, we expect to incur increased compliance costs, and we may be exposed to compliance-related risks after the final rule has been implemented in full.

The fair lending laws prohibit discrimination in the provision of banking services on the basis of prohibited factors including, among others, race, color, national origin, gender, and religion. The fair lending laws prohibit discrimination in the provision of banking services on the basis of prohibited factors including, among others, race, color, national origin, gender, and religion. The enforcement of these laws has been an increasing focus for the CFPB, the Department of Housing and Urban Development and other regulators. The enforcement of these laws has been an increasing focus for the CFPB, HUD and other regulators. Under the fair lending laws, we may be liable if our policies result in a disparate treatment of or have a disparate impact on a protected class of applicants or borrowers and may also be subject to investigation by the DOJ. A successful challenge to our institution’s performance under the CRA or fair lending laws and regulations could result in a wide variety of sanctions, including the required payment of damages and civil money penalties, injunctive relief, imposition of restrictions on mergers and acquisitions activity and restrictions on expansion activity. Private parties may also have the ability to challenge our performance under fair lending laws in private class action litigation.

Federal regulators periodically examine our business, and we may be required to remediate adverse examination findings.

The FRB and the OCC periodically examine our business operations, including our sales practices, supervisory procedures and internal controls, recordkeeping practices and financial position, to determine our compliance with applicable laws and regulations and to protect the solvency and safety and soundness of our organization. If, as a result of an examination, a federal banking agency were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, interest rate risk and liquidity or other aspects of any of our operations had become unsatisfactory, or that we were in violation of any law or regulation, it may take a number of different remedial actions as it deems appropriate. These actions include, among others, the power to enjoin unsafe or unsound practices, to require affirmative action to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil monetary penalties against our officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate our deposit insurance and place us into receivership or conservatorship. If we become subject to any regulatory actions, it could have a material adverse effect on our business, results of operations, financial condition and growth prospects.

40

The FRB or OCC may require us to commit capital resources to support the Bank.

As a matter of policy, the FRB expects bank holding companies and unitary thrift holding companies to act as a source of financial and managerial strength for their subsidiary banks and to commit resources to support such subsidiary banks.As a matter of policy, the FRB expects a unitary thrift holding company to act as a source of financial and managerial strength for a subsidiary bank and to commit resources to support such subsidiary bank. The Dodd-Frank Act codified the FRB’s policy on serving as a source of financial strength. As a result of the Bank’s election to operate as a covered savings association, Sterling Bancorp is treated as a bank holding company for most regulatory purposes; however, the source of strength applies to Sterling Bancorp in any case. Under the source of strength doctrine, the FRB may require a unitary thrift holding company to make capital injections into a troubled subsidiary bank and may charge the unitary thrift holding company with engaging in unsafe and unsound practices for failure to commit resources to a subsidiary bank. A capital injection may be required at times when the holding company may not have the resources to provide it and therefore may be required to borrow the funds or raise capital. Any loans by a holding company to its subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of the subsidiary bank. In the event of a unitary thrift’s bankruptcy, the bankruptcy trustee will assume any commitment by the holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank. Moreover, bankruptcy law provides that claims based on any such commitment will be entitled to a priority of payment over the claims of the institution’s general unsecured creditors, including the holders of its note obligations. Thus, any borrowing that must be done by the Company to make a required capital injection becomes more difficult and expensive and could have an adverse effect on our business, financial condition and results of operations. The requirement that we serve as a source of strength to our Bank may be exacerbated by OCC requirements to maintain certain capital requirements at the bank level and we may not be able to access the necessary funds to do so, which would further materially adversely affect our business, financial condition and results of operations.

Recent actions by the U.S. government regarding competition in the financial services and technology sectors may adversely impact our business.

In 2024, the FDIC, the OCC and the DOJ announced changes to their bank merger review processes in 2024 in response to President Biden’s Executive Order on Promoting Competition in the American Economy. The FDIC approved a final statement of policy on bank merger transactions and the OCC approved a final rule updating the agency’s regulations for business combinations involving national banks and federal savings associations. The OCC’s final rule modifies its procedures for reviewing bank merger applications under the Bank Merger Act applications, including the elimination of the expedited bank merger review and the streamlined application procedures. The OCC’s final rule also includes as an appendix a policy statement which includes a list of characteristics of a merger transaction that the OCC would consider to be consistent or inconsistent with approval. The FDIC and the OCC take a similar risk-based approach to bank merger transactions, although there are some differences in how the FDIC and the OCC would consider each statutory factor under the Bank Merger Act. Each agency applies varying levels of enhanced scrutiny to transactions involving or resulting in institutions with $50 billion or more in total assets. However, Acting FDIC Chairman Travis Hill has announced the FDIC’s withdrawal of this statement of policy, and it is unclear whether the OCC will consider its new regulation and policy statement.

In addition, the DOJ withdrew from the 1995 Bank Merger Guidelines and announced that it would consider bank mergers under its 2023 Merger Guidelines, which includes a bank merger addendum. The new Chairman of the FTC has indicated that the 2023 Merger Guidelines will, until further notice, remain in effect.

With regard to CFPB rulemaking activity addressing financial transaction data portability, in October 2023, the CFPB announced a proposed rule regarding personal financial data rights that is designed to promote data portability and “open banking.” The adoption of a final rule, which is uncertain given the change in Administration and leadership of the CFPB, could result in increased volatility of consumer accounts and expose the Company to additional operational, strategic, regulatory and compliance risks.

41

Risks Related to Competition

Strong competition within our market areas or with respect to our products and pricing may limit our growth and profitability.

Competition in the banking and financial services industry is intense. In our market area, we compete with commercial banks, savings institutions, mortgage brokerage firms, credit unions, finance companies, mutual funds, insurance companies, brokerage and investment banking firms and unregulated or less regulated non-banking entities, operating locally and elsewhere. Many of these competitors have substantially greater resources and higher lending limits than we have and offer certain services that we do not or cannot provide. In addition, some of our competitors offer loans with lower interest rates on more attractive terms than loans we offer and/or deposit accounts with higher interest rates than we offer. Competition also makes it increasingly difficult and costly to attract and retain qualified employees. Our profitability depends upon our continued ability to successfully compete in our market areas. If we must raise interest rates paid on deposits or lower interest rates charged on our loans, our net interest margin and profitability could be adversely affected.

Our ability to grow in the future relies in part on growth in the communities we serve and our ability to develop relationships in particular locations, and we expect to continue to face strong competition from competitors in all of our markets.Our strategy for future growth relies in part on growth in the communities we serve and our ability to develop relationships in particular locations, and we expect to continue to face strong competition from competitors in all of our markets. If we fail to compete effectively against our competitors, we may be unable to expand our market share in our existing markets, and we may be unable to retain our existing market share in key growth markets or in those markets in which we have traditionally had a strong presence. Failure to protect our market share on a regional level or to grow our market share in key growth markets and product categories could have a material adverse effect on our overall market share and on our profitability. Furthermore, we suspended all residential loan originations in early 2023.

Our modest size makes it more difficult to compete with other financial institutions, which are generally larger and able to achieve economies of scale and can more easily afford to invest in the marketing and technologies needed to attract and retain customers and to offer better pricing for the type of products and services we provide. Because our principal source of income is the net interest income we earn on our loans and investments after deducting interest paid on deposits and other sources of funds, our ability to generate the revenues needed to cover our expenses and finance such investments is limited by the size of our loan and investment portfolios. Accordingly, we are not always able to offer new products and services as quickly as our competitors. As a smaller institution, we are also disproportionately affected by the continually increasing costs of compliance with new banking and other regulations.

We are a community bank, and our reputation is critical to the success of our business but may continue to be affected by negative publicity.

We are a community bank, and our reputation is one of the most valuable components of our business. Negative publicity over the past five years regarding the Advantage Loan Program, including our criminal conviction for securities fraud pursuant to the terms of the Plea Agreement, has caused substantial damage to our reputation in the communities we serve, and the outcome of the government investigations may further damage our reputation. Significant harm to our reputation can arise from various other sources, including officer, director or employee misconduct; actual or perceived unethical behavior; conflicts of interest; security breaches; litigation or regulatory outcomes; compensation practices; failing to deliver minimum or required standards of service and quality; failing to address customer and agency complaints; compliance failures; unauthorized release of personal, proprietary, sensitive or confidential information due to cyberattacks or otherwise; perception of our ESG practices and disclosures; and the activities of our clients, customers and counterparties, including vendors. Actions by the financial services industry generally or by institutions or individuals in the industry also can adversely affect our reputation indirectly, by association. In addition, adverse publicity or negative information posted on social media, whether or not factually correct, may affect our business prospects. All of these could adversely affect our growth, results of operations and financial condition.

42

Our guilty plea and criminal conviction pursuant to the Plea Agreement may harm our reputation, harm our ability to engage with certain third parties and disqualify us from certain safe harbor exemptions from offering or selling our securities, and the failure to comply with the terms of the Plea Agreement may subject us to further prosecution.

In July 2023, the Company was convicted of one count of securities fraud primarily relating to disclosures with respect to the Advantage Loan Program contained in the Company’s 2017 Registration Statement for its initial public offering and its immediately following Annual Reports on Form 10-K filed in March 2018 and March 2019, all in accordance with the Plea Agreement entered into earlier in the year. In addition to the reputational risk and the negative publicity we have already received regarding the Advantage Loan Program, our criminal conviction pursuant to the Plea Agreement may cause further damage to our reputation in the communities we serve. Recent negative publicity regarding the Advantage Loan Program has caused substantial damage to our reputation in the communities we serve and the outcome of the pending government investigations may further damage our reputation. Further, our criminal conviction pursuant to the Plea Agreement may cause third parties, including certain quasi-governmental agencies or exchanges, to elect to cease doing business with us, where they have the discretion to do such. Any such damage to our reputation and our ability to conduct business with third parties could materially adversely affect our business, results of operations and financial condition.

In addition, as a result of the guilty plea and criminal conviction pursuant to our Plea Agreement with the DOJ, we fall within the “bad actor” disqualification provisions of Regulation A and Regulation D under the Securities Act, which prohibit an issuer from offering or selling securities in a private placement that rely on such exemptions. See “-Risks Related to Liquidity” for further detail. Furthermore, if the Company were to breach the Plea Agreement, the Company would be subject to prosecution for any known or newly discovered criminal violations, including additional charges. In such an event, our ability to develop or introduce new loan products would once again be curtailed and become uncertain, which would have an adverse impact on our business and results of operations.

We must keep pace with technological change to remain competitive and introduce new products and services. We must keep pace with technological change to remain competitive and introduce new products and services.

Financial products and services have become increasingly technologically driven. Our ability to meet the needs of our customers competitively and introduce new products in a cost-efficient manner is dependent on the ability to keep pace with technological advances, to invest in new technology as it becomes available, establish and implement adequate risk management processes related to new technology and to obtain and maintain related essential personnel. Many of our competitors have already implemented critical technologies and have greater resources to invest in technology than we do and may be better equipped to market new technologically driven products and services. In addition, we may not have the same ability to rapidly respond to technological innovations as our competitors do. Furthermore, the introduction of new technologies and products by financial technology companies and financial technology platforms, including the potential utilization of blockchain technology to provide alternative high speed payment systems and the adoption of artificial intelligence, may adversely affect our ability to obtain new customers and successfully grow our business. Furthermore, the introduction of new technologies and products by financial technology companies and financial technology platforms, including the potential utilization of blockchain technology to provide alternative high speed payment systems, may adversely affect our ability to obtain new customers and successfully grow our business. The increased demand for, and availability of, alternative payment systems and currencies not only increases competition for such services, but has created a more complex operating environment that, in certain cases, may require additional or different controls to manage fraud, operational, legal and compliance risks. The financial services industry could become even more competitive as a result of legislative and regulatory changes and continued consolidation. For example, in recent years, the OCC has begun to accept applications from financial technology companies to become special purpose national banks. The ability to keep pace with technological change is important, and the failure to do so, due to cost, proficiency or otherwise, could have a material adverse impact on our business and therefore on our financial condition and results of operations.

43

Consumers may decide not to use banks to complete their financial transactions.

Technology and other changes are allowing parties to complete financial transactions through alternative methods that historically have involved banks. For example, consumers can now maintain funds that would have historically been held as bank deposits in brokerage accounts, mutual funds or general-purpose reloadable prepaid cards. Consumers can also complete transactions, such as paying bills and/or transferring funds directly without the assistance of banks.

Transactions utilizing digital assets, including cryptocurrencies, stablecoins and other similar assets have increased substantially. Certain characteristics of digital asset transactions, such as the speed with which such transactions can be conducted, the ability to transact without the involvement of regulated intermediaries and the ability to engage in transactions across multiple jurisdictions are appealing to certain consumers, notwithstanding the various risks posed by such transactions. Accordingly, digital asset service providers—which, at present, are not subject to the extensive regulation as banking organizations and other financial institutions—have become active competitors for our customers’ banking business. Further, the initiative by the CFPB to promote “open and decentralized banking” through its proposal of a personal financial data rights regulation could lead to greater competition for products and services among banks and nonbanks alike. The process of eliminating banks as intermediaries, known as “disintermediation,” could result in the loss of fee income and the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the lower cost of deposits as a source of funds could have a material adverse effect on our financial condition and results of operations.

Other Risks Related to Our Business

Our future success depends on our ability to identify, attract and retain key employees and other qualified personnel.

We have undergone significant effort to strategically hire new employees and retain existing employees, while also continuing to explore exiting certain unproductive or ancillary activities. However, we may not be successful in retaining our key employees, or replacing contract employees or departed employees, and the unexpected loss of services of one or more of our officers or directors could have a material adverse effect on our business because of their skills, knowledge of our market and financial products, years of industry experience and the difficulty of finding qualified replacement personnel. We recognize that the banking industry is competitive and replacing executive officers and key employees may be difficult and may take an extended period of time because of the limited number of individuals in our industry with the breadth of skills and experience required to successfully manage, develop and grow in the banking industry. If we fail to identify and develop or recruit successors, we are at risk of being harmed by the departures of key employees.

We face risks related to our operational, technological and organizational infrastructure.

Our ability to grow and compete, including to develop and deliver new products that meet the needs of our existing customers and attract new ones, is dependent on our ability to build or acquire the necessary operational and technological infrastructure and to manage the cost of that infrastructure as we expand. Our ability to run our business in compliance with applicable laws and regulations is also dependent on that infrastructure. Operational risk can manifest itself in many ways, such as errors related to failed or inadequate processes, faulty or disabled computer systems, fraud by employees or outside persons and exposure to external events, and we are dependent on our operational infrastructure to help manage these risks. In addition, we are heavily dependent on the strength and capability of our technology systems, which we use both to interface with our customers and to manage our internal financial records and other systems. Any shortcomings in our technology systems subjects us to risk of misconduct by our employees that may go undetected.

We monitor our operational and technological capabilities and make modifications and improvements when we believe it will be cost effective to do so. If we experience difficulties, fail to comply with banking regulations or keep up with increasingly sophisticated technologies, our operations could be interrupted. If an interruption were to continue for a significant period of time, our business, financial condition and results of operations could be adversely affected, perhaps materially. Even if we are able to replace them, it may be at a higher cost to us, which could materially adversely affect our business, financial condition and results of operations.

44

Third-party vendors provide key components of our business infrastructure and our technology framework, such as internet connections, network access and core application processing. While we have selected these third-party vendors carefully in accordance with supervisory requirements, we do not control their actions. While we have selected these third party vendors carefully in accordance with supervisory requirements, we do not control their actions. Any problems caused by these third parties, including as a result of their not providing us their services for any reason or their performing their services poorly, could adversely affect our ability to deliver products and services to our customers and otherwise to conduct our business. Replacing these third-party vendors could also entail significant delay and expense. Replacing these third party vendors could also entail significant delay and expense. These third-party vendors are also subject to the same cyber risks and other risks that we encounter. These third-party risks continue to be an area of supervisory focus, so we will need to ensure the proper framework is in place to address them.

If our enterprise risk management framework is not effective at mitigating risk and loss to us, we could suffer unexpected losses and our results of operations could be materially adversely affected.

Our enterprise risk management framework seeks to achieve an appropriate balance between risk and return, which is critical to optimizing shareholder value. We have established processes and procedures intended to identify, measure, monitor, report and analyze the types of risk to which we are subject, including credit, liquidity, operational, regulatory, compliance and reputational risks. However, as with any risk management framework, there are inherent limitations to our risk management strategies as there may exist, or develop in the future, risks that we have not appropriately anticipated or identified. If our risk management framework proves ineffective, we could suffer unexpected losses and our business and results of operations could be materially adversely affected.

We face significant operational risks because the financial services business involves a high volume of transactions and increased reliance on technology, including risk of loss related to cybersecurity or privacy breaches.46 Table of ContentsWe face significant operational risks because the financial services business involves a high volume of transactions and increased reliance on technology, including risk of loss related to cybersecurity or privacy breaches.

We operate in diverse markets and rely on the ability of our employees and systems to process a high number of transactions and to collect, process, transmit and store significant amounts of confidential information regarding our customers, employees and others, as well as our own business, operations, plans and strategies. Operational risk is the risk of loss resulting from our operations, including but not limited to, the risk of fraud by employees or persons outside our Company, the execution of unauthorized transactions, errors relating to transaction processing and technology, systems failures or interruptions, breaches of our internal control systems and compliance requirements, and business continuation and disaster recovery. Operational risk is the risk of loss resulting from our operations, including but not limited to, the risk of fraud by employees or persons outside our company, the execution of unauthorized transactions, errors relating to transaction processing and technology, systems failures or interruptions, breaches of our internal control systems and compliance requirements, and business continuation and disaster recovery. We face an increasing number of regulations and regulatory scrutiny related to our information technology systems, and security or privacy breaches with respect to our data could result in regulatory fines, reputational harm and customer losses, any of which would significantly impact our financial condition. As cybersecurity threats are inherently difficult to predict and can take many forms, insurance coverage may not be available for losses associated with cyberattacks or information security breaches, or where available, such losses may exceed insurance limits. In addition, we may not be able to rely on indemnification or another source of third-party recovery in the event of a breach of such functions.

In addition, we outsource some of our data processing to certain third-party providers. If these third-party providers encounter difficulties, including as a result of cyberattacks or information security breaches, or if we have difficulty communicating with them, our ability to adequately process and account for transactions could be affected, and our business operations could be materially and adversely affected.

45

Although we have implemented and intend to continue to implement and enhance security technology and establish operational procedures to prevent such damage, there can be no assurance that these security measures will be successful in deterring or mitigating the effects of every cyberthreat that we face. In addition, advances in computer capabilities, new discoveries in the field of cryptography, quantum computing, artificial intelligence or other developments could result in a compromise or breach of the algorithms we and our third-party service providers use to protect client transaction data, other customer data and employee data. In addition, advances in computer capabilities, new discoveries in the field of cryptography, quantum computing or other developments could result in a compromise or breach of the algorithms we and our third-party service providers use to protect client transaction data, other customer data and employee data. Any successful cyberattack or other information security breach involving the misappropriation, loss or other unauthorized disclosure of sensitive or confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business. Any successful cyber-attack or other information security breach involving the misappropriation, loss or other unauthorized disclosure of confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business. Any successful cyberattack may also subject the Company to regulatory investigations, litigation or enforcement, or require the payment of regulatory fines or penalties or undertaking costly remediation efforts with respect to third parties affected by a cybersecurity incident, all or any of which could adversely affect the Company’s business, financial condition or results of operations and damage its reputation.

Cyberattacks, including those targeting critical infrastructure sectors, have become more frequent and sophisticated.

Risk related to cybersecurity remains elevated as cyberattacks evolve and have a greater and more pervasive economic impact. Critical infrastructure sectors, including financial services, increasingly have been the targets of cyberattacks, including attacks emanating from foreign countries such as the attack on the information technology company SolarWinds, which affected many Fortune 500 companies as well as U.S. government agencies. We have previously experienced cyberattacks on our business, none of which have had a material effect on our business or operations, and expect to continue to be the target of future cyberattacks.

Cyberattacks involving large financial institutions, including distributed denial of service attacks designed to disrupt external customer-facing services, nation state cyberattacks and ransomware attacks designed to deny organizations access to key internal resources or systems or other critical data, and targeted social engineering and phishing email and text message attacks designed to allow unauthorized persons to obtain access to an institution’s information systems and data or that of its customers, are becoming more common and increasingly sophisticated and can be difficult to prevent. Cyberattacks involving large financial institutions, including denial of service attacks designed to disrupt external customer-facing services, nation state cyberattacks and ransomware attacks designed to deny organizations access to key internal resources or systems, and targeted social engineering and email attacks designed to allow unauthorized persons to obtain access to an institution’s information systems and data or that of its customers are becoming more common and increasingly sophisticated and can be difficult to prevent. In particular, there has been an observed increase in the number of distributed denial of service and ransomware attacks against the financial sector over the past year, which increase is believed to be partially attributable to politically motivated attacks as well as financial demands coupled with extortion. In addition, other recent threat trends have shown more sophisticated cyberattacks on financial systems throughout the United States, with an increase in business email compromises targeting executives.47 Table of ContentsCurrent threat trends have shown more sophisticated cyberattacks on financial systems throughout the United States, with an increase in business email compromises targeting executives in the past six months. Reports of ransomware incidents specifically have increased in recent years and information technology software supply chain attacks, including those involving financial institutions, also have increased during this period, some of which have resulted in temporary, but impactful, disruptions to the functioning of critical infrastructure sectors or the operations of specific financial institutions. Threat actors continue to exploit publicly known software vulnerabilities and weak authentication controls used by large numbers of banking organizations to conduct malicious cyber activities. These types of attacks have resulted in increased supply chain and third-party risk. In addition, cybersecurity risks for financial institutions have evolved as a result of the use of new technologies, devices and delivery channels to transmit data and conduct financial transactions. The adoption of new products, services and delivery channels contribute to a more complex operating environment, which increases operational risk and presents the potential for additional structural vulnerabilities. As such, a single cyberattack is now able to compromise hundreds of organizations and affect a significant number of consumers. In addition, the adoption of remote and hybrid work environments has subjected institutions to additional cybersecurity vulnerabilities and risks.

Any successful cyberattack or other security breach involving the misappropriation, loss, leak or other unauthorized disclosure of sensitive or confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business.Any successful cyberattack or other security breach involving the misappropriation, loss or other unauthorized disclosure of confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business. Any successful cyberattack may also subject us to regulatory investigations, litigation or enforcement, or require the payment of regulatory fines or penalties or undertaking of costly remediation efforts with respect to third parties affected by a cybersecurity incident, all or any of which could adversely affect our business, financial condition or results of operations and damage its reputation. Additionally, any failure by us to communicate cyberattacks or other security breaches appropriately to relevant parties could result in regulatory and reputational risk.

46

Other potential attacks have attempted to obtain unauthorized access to sensitive or confidential information or destroy data, often through the introduction of computer viruses or malware, cyberattacks and other means. To date and to the best of our knowledge, none of these types of attacks have had a material effect on our business or operations. Such security attacks can originate from a wide variety of sources, including persons who are involved with organized crime or who may be linked to terrorist organizations or hostile foreign governments. Those same parties may also attempt to fraudulently induce employees, customers or other users of our systems to disclose sensitive information in order to gain access to our data or that of our customers or clients. We are also subject to the risk that our employees may intercept and transmit unauthorized sensitive, confidential or proprietary information. We are also subject to the risk that our employees may intercept and transmit unauthorized confidential or proprietary information. An interception, misuse or mishandling of personal, sensitive, confidential or proprietary information being sent to or received from a customer or third party could result in legal liability, remediation costs, regulatory action and reputational harm. An interception, misuse or mishandling of personal, confidential or proprietary information being sent to or received from a customer or third party could result in legal liability, remediation costs, regulatory action and reputational harm.

We have operational risk associated with third-party vendors and other financial institutions.

We rely upon certain third-party vendors to provide products and services necessary to maintain our day-to-day operations. Accordingly, our operations are exposed to the risk that these vendors might not perform in accordance with applicable contractual arrangements or service level agreements. The failure of an external vendor to perform in accordance with applicable contractual arrangements or service level agreements could be disruptive to our operations and could have a material adverse effect on our financial condition or results of operations and/or damage our reputation. Further, third-party vendor risk management continues to be a point of regulatory emphasis. A failure to follow applicable regulatory guidance in this area could expose us to regulatory sanctions.

The commercial soundness of many financial institutions may be closely interrelated as a result of credit, trading, execution of transactions or other relationships between the institutions. As a result, concerns about, or a default or threatened default by, one institution could lead to significant market-wide liquidity and credit problems, losses or defaults by other institutions. This risk is sometimes referred to as “systemic risk” and may adversely affect financial intermediaries, such as clearing agencies, clearing houses, banks, securities firms and exchanges with which we interact on a daily basis, and, therefore, could adversely affect us.

Any of these operational or other risks could result in our diminished ability to operate one or more of our businesses, financial loss, potential liability to customers, inability to secure insurance, reputational damage and regulatory intervention and could materially adversely affect us.

We depend on the accuracy and completeness of information provided by customers and counterparties.

In deciding whether to extend credit or enter into other transactions with customers and counterparties, we may rely on information furnished to us by, or on behalf of, customers and counterparties, including financial statements and other financial information. We also may rely on representations of customers and counterparties as to the accuracy and completeness of that information. In deciding whether to extend credit, we may rely upon our customers’ representations that their financial statements are accurate. We also may rely on customer representations and certifications, or other audit or accountants’ reports, with respect to the business and financial condition of our commercial clients. Our financial condition, results of operations, financial reporting and reputation could be materially adversely affected if we rely on materially misleading, false, inaccurate or fraudulent information.

We could be adversely affected by the soundness of other financial institutions and other third parties we rely on.

Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. We have exposure to many different industries and counterparties, and routinely execute transactions with counterparties in the financial services industry, including banks, brokers and dealers, investment banks and other institutional entities. Many of these transactions expose us to credit risk in the event of a default by a counterparty or client. In addition, our credit risk may be exacerbated when our collateral cannot be foreclosed upon or is liquidated at prices not sufficient to recover the full amount of the credit due.

Adherence to our internal policies and procedures by our employees is critical to our performance.

Our internal policies and procedures are a critical component of our corporate governance and, in some cases, compliance with applicable regulations. We adopt internal policies and procedures to guide management and employees regarding the operation and conduct of our business. Any deviation or non-adherence to these internal policies and procedures, such as the conduct leading to the termination of the Advantage Loan Program, whether intentional or unintentional, could have a detrimental effect on our management, operations or financial condition.

47

We and our borrowers in our California communities may be adversely affected by wildfires, earthquakes, floods or other natural disasters, and our business continuity and disaster recovery plans may not adequately protect us from a serious disaster.

The majority of our branches are located in the San Francisco and Los Angeles, California metropolitan areas, which in the past have experienced severe earthquakes, floods and wildfires, such as the wildfires that recently impacted Southern California.The majority of our branches are located in the San Francisco and Los Angeles, California areas, which in the past have experienced both severe earthquakes and wildfires. We do not carry earthquake insurance on our properties. Earthquakes, wildfires or other natural disasters could severely disrupt our operations, and have a material adverse effect on our business, results of operations, financial condition and prospects. In addition, our customers and loan collateral may be severely impacted by such events, resulting in losses.

If a natural disaster, power outage or other event occurred that prevented us from using all or a significant portion of our branches, that damaged critical infrastructure or that otherwise disrupted operations, it may be difficult or, in certain cases, impossible, for us to continue our business for a substantial period of time in the San Francisco and/or Los Angeles, California metropolitan areas.49 Table of ContentsIf a natural disaster, power outage or other event occurred that prevented us from using all or a significant portion of our branches, that damaged critical infrastructure or that otherwise disrupted operations, it may be difficult or, in certain cases, impossible, for us to continue our business for a substantial period of time in the San Francisco and/or Los Angeles, California areas. The disaster recovery and business continuity plan that we have in place currently is limited and is unlikely to prove adequate in the event of a serious disaster or similar event. We may incur substantial expenses as a result of the limited nature of our disaster recovery and business continuity plans, which, particularly when taken together with our lack of earthquake insurance, could have a material adverse effect on our business.

We are subject to ESG and DEI risks that could adversely affect our reputation and the market price of our securities.

We are subject to a variety of risks arising from ESG/DEI matters. ESG/DEI matters include among other things, climate change, human capital, and human rights. Risks arising from such matters may adversely affect, among other things, our reputation and the market price of our securities. Risks arising from ESG matters may adversely affect, among other things, our reputation and the market price of our securities. While we engage in various initiatives to help manage our ESG/DEI profile and respond to stakeholder expectations, which continue to evolve, such initiatives can be costly and may not have the desired effect. For example, many of these initiatives leverage methodologies, standards, and data that continue to evolve. As with other companies, our approach to such matters also evolves, and we cannot guarantee that our approach will align with the expectations or preferences of any particular stakeholder. Moreover, stakeholder expectations are not uniform, and both opponents and proponents of various ESG- and DEI-related matters have increasingly resulted in a range of activism to advocate for their positions. For example, in the last several years, certain state attorneys general, treasurers, and legislators have taken various actions to impact the extent to which ESG/DEI principles are considered by financial institutions, including to require or prohibit the consideration of various ESG/DEI matters in certain contexts.

In addition to the potential for broader “anti-ESG/DEI” policies and laws, on January 21, 2025, President Trump issued an Executive Order requiring all federal agencies to terminate any policies, programs, mandates, guidance, regulations, and other actions and orders establishing DEI-based preferences, and to enforce federal civil rights laws to combat such preferences, mandates, policies, programs and activities of entities operating in the private sector. Further, the Executive Order directs federal agencies to take appropriate action to discourage private sector DEI-based initiatives. To this end, federal agencies are required to submit recommendations to the Trump Administration identifying, among other things, (i) proposed plans or measures to deter DEI-based programs in the private sector, (ii) publicly-traded corporations and other private sector entities that could be considered for civil compliance investigations, (iii) appropriate sources of litigation, and (iv) potential regulatory action or guidance. While the enforceability of the Executive Order and the steps that various federal agencies may take in response to it are uncertain at this time, the Executive Order signals a material shift in federal DEI policy that reasonably can be expected to have implications for the private sector, including the banking industry. In this regard, any scrutiny by federal government authorities of the Corporation’s human capital and strategic businesses practices, or those of the banking sector generally, may have a material adverse effect on us. Please refer to Item 1 – Business – Human Capital Matters.

Additionally, certain disclosure rules that had been advanced or were under consideration by the SEC in the last few years (e.g., disclosure rules regarding climate risk, human capital management, and board diversity) may be abandoned by new leadership at the SEC, new regulations might be implemented that limit ESG shareholder proposals that may be considered, and Congress may continue to conduct investigations into corporations’ ESG initiatives and priorities.

In response to potential “anti-ESG/DEI” regulations, investigations, and sentiment, it is possible that proponents of ESG/DEI measures will become galvanized and increase their efforts to compel or pressure corporations to advance such initiatives both at the state level and the private investor level. For example, states may enact laws requiring enhanced ESG/DEI disclosures, and there may be a rise in pro-ESG/DEI shareholder activism or public relations campaigns aimed at influencing corporations to adopt ESG/DEI initiatives.

48

Navigating varying expectations of policymakers and other stakeholders has inherent costs, and any failure to successfully navigate such expectations may expose the Company to negative publicity, shareholder activism, and litigation or other engagement from pro- and anti-ESG/DEI stakeholders, as well as the potential for civil investigations and enforcement by federal governmental authorities. The Company could be required to incur significant costs responding to any such activity and the Company’s relationships and reputation with its existing and prospective customers and third parties with which we do business could be affected as well. This, in turn, could have an adverse effect on our ability to attract and retain customers and employees and could have a negative impact on the market price for the Company’s securities. Certain of our customers, suppliers, or other stakeholders are also subject to such expectations and risks, which may result in additional or augmented risks to us.

Climate change and related legislative and regulatory initiatives may materially affect the Company’s business and results of operations.

The current and anticipated effects of climate change are creating an increasing level of concern for the state of the global environment. As a result, political and social attention to the issue of climate change has increased. Various policymakers have adopted, or are considering adopting, requirements for companies to undertake various actions, such as disclosures, regarding climate and other environmental and social matters. For example, California has adopted laws requiring in-scope companies to provide certain climate-related information, including GHG emissions and climate-related financial risks and related management strategies, and similar laws are being considered in other states. Such requirements are not uniform and may be unevenly interpreted or applied (including the potential for novel interpretations of existing laws), which may increase the cost and complexity of compliance and any related risks. Simultaneously, some policymakers have adopted, or are considering adopting, requirements to constrain consideration of various environmental and social matters by financial institutions and other companies. Expectations on such matters continue to evolve quickly, including in some instances due to company size, sector, or otherwise. The new Trump Administration has publicly discussed rolling back federal initiatives to address climate change, and has already taken several such actions by executive order. These activities may increase the likelihood that certain individual states will address climate change risks. U.S. financial regulatory authorities recently have sharpened their focus on the risks posed by climate change to the financial sector and the institutions within it. In October 2021, the Financial Stability Oversight Council, whose members include the federal banking agencies (including the OCC), published a report on climate-related financial risk. On October 21, 2021, the Financial Stability Oversight Council (“FSOC”), whose members include the federal banking agencies (including the OCC), published a report on climate-related financial risk. In that report the Financial Stability Oversight Council concluded, for the first time, that climate change represents an emerging and increasing threat to U.S. financial stability. Accordingly, Financial Stability Oversight Council has recommended that its member agencies accelerate their existing efforts to further assess climate-related risks to financial stability, enhance financial institutions’ climate-related disclosure obligations, improve upon the availability of and access to actionable climate-related data for use in measuring and assessing climate-related financial risk, and expand upon existing capacity and expertise to ensure that climate-related financial risks are identified and managed properly. Accordingly, FSOC has recommended that its member agencies accelerate their existing efforts to further assess climate-related risks to financial stability, enhance financial institutions’ climate-related disclosure obligations, improve upon the availability of and access to actionable climate-related data for use in measuring and assessing climate-related financial risk, and expand upon existing capacity and expertise to ensure that climate-related financial risks are identified and managed properly.

Consistent with the objectives outlined above, the leadership of each of the OCC, FRB and the U.S. Treasury Department has emphasized that climate-related risks are faced by banking organizations of all types and sizes, specifically including physical and transition risks; is in the process of enhancing supervisory expectations regarding banks’ risk management practices; and has indicated increased expectations for larger financial institutions to measure, monitor and manage climate-related risk as part of their enterprise risk management processes. In October 2023, the federal banking agencies issued interagency guidance on principles for climate-related financial risk management for banks with total assets of over $100 billion. The largest banks are encouraged to address the climate-related risks that they face by accounting for the effects of climate change in stress testing scenarios and systemic risk assessments, revising expectations for credit portfolio concentrations based on climate-related factors, evaluating the impact of climate change on their borrowers, considering possible changes to underwriting criteria to account for climate-related risks to mortgaged properties, incorporating climate-related financial risk into their internal reporting and monitoring and escalation processes, planning for transition risk posed by the adjustments to a low-carbon economy and investing in climate-related initiatives and lending to communities disproportionately impacted by the effects of climate change. The largest banks are being encouraged by their regulators to address the climate-related risks that they face by accounting for the effects of climate change in stress testing scenarios and systemic risk assessments, revising expectations for credit portfolio concentrations based on climate-related factors, evaluating the impact of climate change on their borrowers, considering possible changes to underwriting criteria to account for climate-related risks to mortgaged properties, incorporating climate-related financial risk into their internal reporting and monitoring and escalation processes, planning for transition risk posed by the adjustments to a low-carbon economy and investing in climate-related initiatives and lending to communities disproportionately impacted by the effects of climate change. To the extent that these initiatives lead to the promulgation of new regulations or supervisory guidance applicable to us, we would expect to experience increased compliance costs and other compliance-related risks.

49

Certain measures may also result in the imposition of taxes and fees, the required purchase of emission credits and the implementation of significant operational changes, each of which may require the Company to upend significant capital and incur compliance, operating, maintenance and remediation costs. The lack of empirical data surrounding the credit and other financial risks posed by climate change render it impossible to predict how specifically climate change may impact our financial condition and results of operations; however, the physical effects of climate change may also directly impact and present certain unique risks to us. Specifically, unpredictable and more frequent weather disasters may adversely impact the value of real property securing the loans in our portfolios. Further, the effects of climate change may negatively impact regional and local economic activity, which could lead to an adverse effect on our customers and impact our ability to raise and invest capital in potentially impacted communities. Overall, climate change, its effects and the resulting, unknown impact could have a material adverse effect on our financial condition and results of operations.

Adverse conditions internationally could adversely affect our customers and business.

Many of our customers are recent immigrants or foreign nationals. U.S. and global economic policies, military tensions, and unfavorable global economic conditions may adversely impact the economies in which our customers have family or business ties. A significant deterioration of economic conditions internationally, and in Asia in particular, could expose us to, among other things, economic and transfer risk, and we could experience an outflow of deposits by those of our customers with connections to Asia. In addition, foreign currency restrictions, particularly on the movement of cash from abroad, could adversely affect many of our customers, including with respect to their ability to repay loans. Adverse economic conditions abroad, and in China or Taiwan in particular, may also negatively impact the profitability and liquidity of our customers with ties to these regions.

Changes in the valuation of our securities portfolio could hurt our profits and reduce our shareholders’ equity.

Our securities portfolio may be impacted by fluctuations in market value, potentially reducing accumulated other comprehensive income (loss) and/or net income. Fluctuations in market value may be caused by changes in market interest rates, lower market prices for securities and limited investor demand.

At December 31, 2024, we owned available for sale debt securities with a carrying value of $338.1 million, which largely consisted of our positions in obligations of the U.S. government and government-sponsored enterprises. Our available for sale debt securities are stated at fair value, with unrealized gains and losses reported in accumulated other comprehensive income (loss), which is a component of shareholders’ equity. We evaluate our investment securities on at least a quarterly basis, and more frequently when economic and market conditions warrant such an evaluation. For available for sale debt securities in an unrealized loss position, we assess whether we intend to sell, or it is more likely than not that we will be required to sell, the security before recovery of its amortized cost basis. If either of the criteria regarding intent or requirement to sell is met, the security’s amortized cost basis is written down to fair value through income. Because of changing economic and market conditions affecting issuers, we may be required to record an allowance for credit losses related to these securities. This could have a material impact on our results of operations.

Our critical accounting policies and estimates, risk management processes and controls rely on analytical and forecasting techniques and models, management judgments and assumptions about matters that are uncertain and may not accurately predict future events.52 Table of ContentsOur critical accounting policies and estimates, risk management processes and controls rely on analytical and forecasting techniques and models, management judgments and assumptions about matters that are uncertain and may not accurately predict future events.

Our accounting policies and methods are fundamental to how we record and report our financial condition and results of operations. Our management must exercise judgment in selecting and applying many of these accounting policies and methods, so they comply with accounting principles generally accepted in the United States of America (“U.S. GAAP”) and reflect management’s judgment of the most appropriate manner in which to report our financial condition and results of operations. In some cases, management must select the accounting policy or method to apply from two or more alternatives, any of which may be reasonable under the circumstances, yet which may result in our reporting materially different results than would have been reported under a different alternative.

50

Certain accounting policies are critical to presenting our financial condition and results of operations. They require management to make difficult, subjective or complex judgments about matters that are uncertain. Materially different amounts could be reported under different conditions or using different assumptions or estimates. These critical accounting policies include the allowance for credit losses and the fair value of financial instruments. These critical accounting policies include the allowance for loan losses, legal contingencies and litigation accruals and the fair value of financial instruments. Because of the uncertainty of estimates involved in these matters, we may be required to significantly increase the allowance for credit losses or sustain credit losses that are significantly higher than the allowance for credit losses provided or reduce the carrying value of an asset measured at fair value. Because of the uncertainty of estimates involved in these matters, we may be required to significantly increase the allowance for loan losses or sustain loan losses that are significantly higher than the reserve provided or reduce the carrying value of an asset measured at fair value. Any of these could have a material adverse effect on our business, financial condition or results of operations.

Our internal controls, disclosure controls, processes and procedures and corporate governance policies and procedures are based in part on certain assumptions and can provide only reasonable (not absolute) assurances that the objectives of the system are met. Any failure or circumvention of our controls, processes and procedures or failure to comply with regulations related to controls, processes and procedures could necessitate changes in those controls, processes and procedures, which may increase our compliance costs, divert management attention from our business or subject us to regulatory actions and increased regulatory scrutiny. Any of these could have a material adverse effect on our business, financial condition or results of operations.

Risks Related to Governance Matters

The Seligman family, directly and through the family’s trusts, has influenced and has the ability to continue to influence our operations and to control the outcome of matters submitted for shareholder approval and may have interests that differ from those of our other shareholders.

Scott J. Seligman and others of his family were the original founders of the Bank, and Mr. Seligman has had a variety of senior roles and positions over the course of many years. Prior to 2000, he served as a member of the Bank’s board and as chief executive officer of the Bank. After 2000 and through December 31, 2019, he served as a consulting director to the board of the Bank and retained the title of vice president of the Company. In these roles, Mr. Seligman participated in the conduct of the affairs of the Bank and had a significant influence over the Bank’s operations. In addition, Mr. Seligman previously caused the Bank to engage in various transactions with other Seligman-controlled businesses. Mr. Seligman resigned from his positions as consulting director to the board of the Bank and as vice president of the Company, effective December 31, 2019.

Trustees of the trusts established by and for the benefit of Scott J. Seligman have voting and dispositive power over approximately 47% of our common stock, effectively giving such trusts and Mr. Seligman control over the outcome of the shareholder votes on most matters. The trustee of the trusts created by Sandra Seligman has voting and dispositive power over approximately 18% of our common stock, and Seth Meltzer has voting and dispositive power, individually or through trust, over approximately 4% of our common stock. Minority stockholders, therefore, cannot decide the outcome of a stockholder vote without the support of any of Scott J. Seligman, Sandra Seligman, and/or Seth Meltzer.

Certain provisions of our corporate governance documents and Michigan law could discourage, delay or prevent a merger or acquisition at a premium price.

Our second amended and restated articles of incorporation contain provisions that may make the acquisition of our Company more difficult without the approval of our board of directors. These include provisions that, among other things:

permit the board to issue up to 10 million shares of preferred stock, with any rights, preferences and privileges as they may determine (including the right to approve an acquisition or other change in control);
provide that the authorized number of directors may be fixed only by the board in accordance with our second amended and restated bylaws;
do not provide for cumulative voting rights (therefore allowing the holders of a majority of the shares entitled to vote in any election of directors to elect all of the directors standing for election);
provide that all vacancies and newly created directorships may be filled by the affirmative vote of at least 80% of directors then in office, even if less than a quorum;

51

prohibit removal of directors without cause;
prohibit shareholders from calling special meetings of shareholders;
require unanimous consent for shareholders to take action by written consent without approval of the action by our board;
provide that shareholders seeking to present proposals before a meeting of shareholders or to nominate candidates for election as directors at a meeting of shareholders must provide advance notice in writing and also comply with specified requirements related to the form and content of a shareholder’s notice;
require at least 80% supermajority shareholder approval to alter, amend or repeal certain provisions of our third amended and restated articles of incorporation; and
require at least 80% supermajority shareholder approval in order for shareholders to adopt, amend or repeal certain provisions of our second amended and restated bylaws.

These provisions may frustrate or prevent any attempts by our shareholders to replace or remove our current management by making it more difficult for shareholders to replace members of the board of directors, which is responsible for appointing members of our management. Any matters requiring the approval of our shareholders will require the approval of the Seligman family and their trustees, which may have interests that differ from those of our other shareholders.

In addition, the 2017 Omnibus Equity Incentive Plan and the 2020 Omnibus Equity Incentive Plan each provide that restricted stock awards become fully vested in the event of a change in control and permit the board of directors or a committee thereof to accelerate, vest or cause the restrictions to lapse with respect to other outstanding awards including stock options, in the event of, or immediately prior to, a change in control. Such vesting or acceleration could discourage the acquisition of our Company.

We could also become subject to certain anti-takeover provisions under Michigan law which may discourage, delay or prevent someone from acquiring us or merging with us, whether or not an acquisition or merger is desired by or beneficial to our shareholders. If a corporation’s board of directors chooses to opt-in to certain provisions of Michigan Law, such corporation may not, in general, engage in a business combination with any beneficial owner, directly or indirectly, of 10% of the corporation’s outstanding voting shares unless the holder has held the shares for five years or more or, among other things, the board of directors has approved the business combination. Our board of directors has not elected to be subject to this provision but could do so in the future. Any provision of our second amended and restated articles of incorporation or amended and restated bylaws or Michigan law that has the effect of delaying or deterring a change in control could limit the opportunity for our shareholders to receive a premium for their shares and could also affect the price that some investors are willing to pay for our common stock otherwise.

The exclusive forum provision in our second amended and restated bylaws could limit our shareholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers or other employees.

Our second amended and restated bylaws provides that the courts of the State of Michigan located in Oakland County and the U.S. District for the Eastern District of Michigan shall be the sole and exclusive forum for (i) any action or proceeding brought on our behalf, (ii) any derivative action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers, or employees to us or our shareholders, (iii) any action asserting a claim arising pursuant to any provision of the Michigan Business Corporation Act (as it may be amended from time to time), or (iv) any action asserting a claim against us governed by the State of Michigan’s internal affairs doctrine. Any person or entity purchasing or otherwise acquiring any interest in shares of our common stock shall be deemed to have notice of and consented to the provisions of our second amended and restated articles of incorporation described above. This choice of forum provision may limit a shareholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers or other employees, which may discourage such lawsuits against us and our directors, officers and other employees. Alternatively, if a court were to find these provisions of our second amended and restated bylaws inapplicable to, or unenforceable in respect of, one or more of the specified types of actions or proceedings, we may incur additional costs associated with resolving such matters in other jurisdictions, which could adversely affect our business, financial condition or results of operations.

52

Our ability to pay dividends is restricted by applicable law and regulations and depends on the success of both Sterling Bancorp, Inc. and the Bank.

Our ability to pay cash dividends is restricted by the applicable provisions of Michigan law and the rules and regulations of the OCC and the FRB.Our ability to pay cash dividends is restricted by the terms of our subordinated notes as well as applicable provisions of Michigan law and the rules and regulations of the OCC and the FRB. Under Michigan law, Sterling Bancorp, Inc. is prohibited from paying cash dividends if, after giving effect to the dividend, (i) it would not be able to pay its debts as they become due in the usual course of business or (ii) its total assets would be less than the sum of its total liabilities plus the preferential rights upon dissolution of shareholders with preferential rights on dissolution that are superior to those receiving the dividend, and we are currently required to obtain the prior approval of the FRB in order to pay any dividends to our shareholders.

Sterling Bancorp, Inc. is a separate and distinct legal entity from the Bank that receives substantially all of its revenue through the Bank. Dividends from the Bank are the principal source of funds used by Sterling Bancorp, Inc. to pay cash dividends. Our current capital plan contemplates we will not pay dividends to holders of our common stock during 2025. Any future determination to pay dividends to holders of our common stock will depend on our results of operations, financial condition, capital requirements, banking regulations and contractual restrictions, at both Sterling Bancorp, Inc. and the Bank and on a consolidated basis, and any other factors that our board of directors may deem relevant, and we can provide no assurance that we will pay any dividends to our shareholders prior to the completion of the Transaction or in the event the Transaction is terminated. and the Bank and on a consolidated basis, and any other factors that our board of directors may deem relevant, and we can provide no assurance that we will pay any dividends to our shareholders in the future. The Bank is required to seek the non-objection of the FRB to pay dividends to the Company and, under certain circumstances, may be required to obtain the prior approval of the OCC.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 1C. CYBERSECURITY

Cybersecurity Risk Management and Strategy

We have established an Information Security department within our Risk Management department that is independent of the Information Technology department. Furthermore, we have a documented Information Security Strategy that guides the Information Security teams and business departments across the Company. The Information Security Strategy incorporates the external landscape, risk assessments, Company’s strategy, information technology strategy and other inputs.

Our appetite for cybersecurity risk is established within our enterprise risk appetite. We undertake an information technology risk assessment annually. This assessment considers our information assets, the potential threats/risks to those assets and the effectiveness of existing controls to identify and assess inherent and residual levels of information security risks. This assessment also identifies any control gaps that may exist and informs appropriate mitigation strategies to conform to our appetite for cybersecurity risk. Remediation plans for any identified gaps are monitored by management quarterly. Results from this risk assessment may affect changes in the Information Security Strategy and information security budget. Annually, we engage a third-party audit firm specializing in information technology audits to review the risk assessment and our Information Security Program overall as part of our information technology general controls audit.

We have previously experienced cybersecurity incidents, from time to time. These incidents have not materially affected our business strategy, results of operations or financial condition. We are not currently aware of any cybersecurity incidents that would have a material effect on our business strategy, results of operations or financial condition.

We use a security framework to guide our overall security posture, which has helped us develop and enhance our Information Security Policy, Incident Response Policy and Business Continuity Policy. These policies guide us in our effort to manage and control information technology risk and to define and communicate information security responsibilities and accountability throughout the Company. These policies also set the requirements to help ensure that we safeguard our data and information systems to reduce risk and minimize the effect of potential incidents. These policies are supported by written standards and procedures that ensure conformity with the policies that the board of directors has set forth.

53

Pursuant to our Incident Response Policy, we have adopted a written Incident Response Plan that documents employee and management responsibilities, incident classifications and the procedures to be followed during a cybersecurity incident. The Incident Response Plan is tested annually through a tabletop exercise led by a third-party vendor who assists in developing and executing the exercise.

We have a documented Third-Party Risk Management Policy and Program to ensure that our vendor relationships are assessed, monitored and documented appropriately. It is our policy to exercise appropriate oversight and risk management of the activities conducted through significant third-party relationships, taking into consideration the nature, magnitude, complexity and risk potential of the arrangement. Vendors are monitored for cybersecurity issues during the initial onboarding processes and on an ongoing basis. We may review or require a SOC 2 Type 2 report, cybersecurity controls, cyber insurance and monitoring frequency depending on our assessment of the risk of any vendor.

Management performs ongoing monitoring of the Information Security Program with a range of reports and tools that are commensurate with our risk profile. These reports and tools ensure the program continues to comply with all policies related to information technology risk and information security.

We have engaged a third-party provider that manages and monitors our Security Operations Center, including our firewall and intrusion detection and prevention system. Additionally, management has engaged a separate vendor to monitor and manage endpoint detection and response applications on all Company devices, including workstations, laptops and servers.

Additional controls include vulnerability scanning, identity and access management, mobile device management and other various security controls. We also conduct periodic phishing tests and social awareness training for all employees, which include how to report and escalate suspected incidents.

Information security metrics are reported quarterly to the Information Technology Steering Committee, the Enterprise Risk Management Committee and the Board Risk Committee to provide evidence of the effectiveness of these controls and tools. Any identified specific gaps in the controls are sent to management quarterly until resolved.

Cybersecurity Governance

Cybersecurity risks and activities are reported quarterly to the Information Technology Steering Committee and the Enterprise Risk Management Committee. The Bank’s chief risk officer and interim chief information officer are part of the Information Technology Steering and Enterprise Risk Management Committees. The Bank’s interim chief information officer has over 30 years of experience managing technology.

We have also employed a chief information security officer who reports to the chief executive officer. The chief information security officer is responsible for information security, information technology risk management, vendor management and business continuity programs. The chief information security officer holds a graduate degree in cybersecurity and numerous information security certifications, including certified information systems security professional, certified information security manager, certified cloud security professional and qualified technology expert. Additionally, the chief information security officer has worked in the information security field for over 20 years within several financial institutions, implementing cybersecurity strategies, programs, policies and procedures.

Our Board Risk Committee generally meets quarterly and is responsible for overseeing cybersecurity risk and our information security program, including cybersecurity, and ensuring the continued development of the program as the Company grows and cyber and information risk exposures change. At each Board Risk Committee meeting, the chief information security officer presents information security metrics and any updates to the Information Security Program. New and changing cybersecurity risks are discussed when needed. The chair of the Board Risk Committee also serves as a board member and previously served as the chair and interim chief executive officer of the Information Systems Audit and Control Association. As a board member of the Information Systems Audit and Control Association, she is a member of their Audit and Risk Committee, Compensation and Human Capital Committee and Governance and Nominating Committee. All cybersecurity-related policies are reviewed and approved annually by the chief information security officer, Enterprise Risk Management Committee, Board Risk Committee and the board of directors.

54

Recently Filed
Click on a ticker to see risk factors
Ticker * File Date
FETH 57 minutes ago
UBCP an hour ago
NXL an hour ago
FCCO an hour ago
FRBP an hour ago
CDIX an hour ago
PBT 2 hours ago
MRC 2 hours ago
FSEN 2 hours ago
AIRS 2 hours ago
DTI 3 hours ago
FUSB 3 hours ago
GNE 3 hours ago
SFDL 3 hours ago
CSBB 3 hours ago
WEYS 4 hours ago
NHHS 4 hours ago
ANKM 4 hours ago
SBT 4 hours ago
CBAN 5 hours ago
NECB 5 hours ago
CFBK 5 hours ago
ACNB 5 hours ago
MNSB 7 hours ago
NWFL 7 hours ago
ALRS 7 hours ago
LWAY 7 hours ago
ASTH 8 hours ago
MHH 8 hours ago
GNTY 9 hours ago
HLLY 9 hours ago
BTBT 10 hours ago
RMBL 19 hours ago
JYNT 20 hours ago
HBIO 21 hours ago
TPTA 21 hours ago
TFSA 21 hours ago
RGEN 21 hours ago
PRPL 21 hours ago
BLND 23 hours ago
PHLT 23 hours ago
ATYR 23 hours ago
STRO 23 hours ago
CVKD 23 hours ago
ATLC 23 hours ago
TCX 23 hours ago
RCMT 23 hours ago
AAWH 23 hours ago
BRLT 23 hours ago
FDBC 23 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard