Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

Risk Factors - HTH

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. “Risk Factors” in this Annual Report and in our other filings with the SEC. If any of these events or risks or uncertainties occur, our business, business plan, financial condition, liquidity and results of operations may vary materially from those results expressed in our forward-looking statements. All subsequent written and oral forward-looking statements concerning our business attributable to us or any person acting on our behalf are expressly qualified in their entirety by the cautionary statements above. We do not undertake any obligation to update any forward-looking statement, whether written or oral, relating to the matters discussed in this Annual Report except to the extent required by law.

3

RISK FACTOR SUMMARY

The following is a summary of material risks we are exposed to in the course of our business activities and which could have an adverse effect on our business or consolidated results of operations or financial condition. We caution that the following list of factors is not exhaustive, and new factors may emerge, or changes to the foregoing factors may occur, that could impact our business. This summary does not contain all of the information that may be important to you and should be read together with the more detailed discussion of risks within Item 1A, “Risk Factors,” and Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” herein.

Risks Related to our Business

Our allowances for credit losses for loans and debt securities may prove inadequate, or we may be negatively affected by credit risk exposures. Also, future additions to our allowance for credit losses will reduce our future earnings.
Adverse developments affecting the financial services industry, such as bank failures or concerns involving liquidity, may have a material effect on the Company’s operations.
Our operational systems and networks have been, and will continue to be, subject to an increasing risk of continually evolving cybersecurity or other technological risks, which could result in a loss of customer business, financial liability, regulatory penalties, damage to our reputation or the disclosure of confidential information.
Our banking segment is subject to risk arising from conditions in the commercial real estate market and may be adversely affected by weaknesses in the commercial real estate market.
Our business and results of operations may be adversely affected by unpredictable economic, market and business conditions.
Our business is subject to interest rate risk, and fluctuations in interest rates may adversely affect our earnings, capital levels and overall results.
Inflationary pressures and rising prices may affect our results of operations and financial condition.
Our mortgage origination business is subject to fluctuations based upon seasonal and other factors and, as a result, our results of operations for any given quarter may not be indicative of the results that may be achieved for the full fiscal year.
We are heavily reliant on technology, and a failure to effectively implement new technological solutions or enhancements to existing systems or platforms could adversely affect our business operations and the financial results of our operations.
Our geographic concentration may magnify the adverse effects and consequences of any regional or local economic downturn.
An adverse change in real estate market values may result in losses in our banking segment and otherwise adversely affect our profitability.
Our risk management processes may not fully identify and mitigate exposure to the various risks that we face, including interest rate, credit, liquidity and market risk.
Our hedging strategies may not be successful in mitigating our exposure to interest rate risk.
Our bank lending, margin lending, stock lending, securities trading and execution and mortgage purchase businesses are all subject to credit risk.
We depend on our computer and communications systems and an interruption in service would negatively affect our business.
Climate change and certain regulations and responses thereto could adversely affect our business and performance, including indirectly through impacts on our customers.
We are heavily dependent on dividends from our subsidiaries.
Our broker-dealer business is subject to various risks associated with the securities industry.
Market fluctuations could adversely impact our broker-dealer business.
Our investment advisory business may be affected if our investment products perform poorly.
Our existing correspondents may choose to perform their own clearing services or move their clearing business to one of our competitors or exit the business.

4

Several of our broker-dealer segment’s product lines rely on favorable tax treatment, and changes in federal tax law could impact the attractiveness of these products to our customers.
Our mortgage origination segment is subject to investment risk on loans that it originates.
If we fail to develop, implement and maintain an effective system of internal control over financial reporting, the accuracy and timing of our financial reporting in future periods may be adversely affected.
We ultimately may write-off goodwill and other intangible assets resulting from business combinations.
The value of our mortgage servicing rights portfolio fluctuates due to changes in interest rates, which may increase the volatility of our earnings.
The accuracy of our financial statements and related disclosures could be affected if we are exposed to actual conditions different from the judgments, assumptions or estimates used in our critical accounting estimates.
We are dependent on our management team, and the loss of members of our existing management team or other key employees could impair our relationship with customers and adversely affect our business and financial results.
We are subject to losses due to fraudulent and negligent acts.
Negative publicity regarding us, or financial institutions in general, could damage our reputation and adversely impact our business and results of operations.
We are subject to legal claims and litigation, including potential securities law liabilities, any of which could have a material adverse effect on our business.

Risks Related to Our Indebtedness

Our indebtedness may affect our ability to operate our business, and may have a material adverse effect on our financial condition and results of operations. We may incur additional indebtedness, including secured indebtedness.
We may not be able to generate sufficient cash to service all of our indebtedness, and may be forced to take other actions to satisfy our obligations under our indebtedness that may not be successful.
A reduction in our credit rating could adversely affect us or the holders of our securities.
The indenture governing the 2035 Subordinated Notes contain, and any instruments governing future indebtedness would likely contain, restrictions that limit our flexibility in operating our business.

Legal and Regulatory Risks

We are subject to extensive supervision and regulation that could restrict our activities and impose financial requirements or limitations on the conduct of our business and limit our ability to generate income.
We may be subject to more stringent capital requirements in the future.
The CFPB has issued “ability-to-repay” and “qualified mortgage” rules that may have a negative impact on our loan origination process and foreclosure proceedings, which could adversely affect our business, operating results, and financial condition.

Risks Related to Our Common Stock

We may issue shares of preferred stock or additional shares of common stock to complete an acquisition or effect a combination or under an employee incentive plan after consummation of an acquisition or business combination, which would dilute the interests of our stockholders and likely present other risks.
Our common stock price may experience substantial volatility, which may affect your ability to sell our common stock at an advantageous price.
Existing circumstances may result in several of our directors having interests that may conflict with our interests.
Our rights and the rights of our stockholders to take action against our directors and officers are limited.
Our charter and bylaws contain provisions that could discourage acquisition bids or merger proposals, which may adversely affect the market price of our common stock.
There can be no assurance that we will continue to declare cash dividends or repurchase stock.

5

PART I

Item 1. Business.

General

Hilltop Holdings Inc. is a diversified, Texas-based financial holding company incorporated in Maryland and registered under the Bank Holding Company Act of 1956, as amended (the “Bank Holding Company Act”). Our primary line of business is to provide business and consumer banking services from offices located throughout Texas through the Bank. We also provide an array of financial products and services through our broker-dealer and mortgage origination segments. We endeavor to build and maintain a strong financial services company through organic growth as well as acquisitions, which we may make using available capital, excess liquidity and, if necessary or appropriate, additional equity or debt financing sources. The following includes additional details regarding the financial products and services provided by each of our two primary business units.

PCC. PCC is a financial holding company that provides, through its subsidiaries, traditional banking and wealth, investment and treasury management services primarily in Texas and residential mortgage loans throughout the United States.

Securities Holdings. Securities Holdings is a holding company that provides, through its subsidiaries, investment banking and other related financial services, including municipal advisory, sales, trading and underwriting of taxable and tax-exempt fixed income securities, clearing, securities lending, structured finance and retail brokerage services throughout the United States.

At December 31, 2025, on a consolidated basis, we had total assets of $15.8 billion, total deposits of $10.9 billion, total loans, including loans held for sale, of $9.2 billion and stockholders’ equity of $2.2 billion.

Our common stock is listed on the New York Stock Exchange (“NYSE”) and NYSE Texas under the symbol “HTH.”

Our principal office is located at 6565 Hillcrest Avenue, Dallas, Texas 75205, and our telephone number at that location is (214) 855-2177. Our internet address is www.hilltop.com. Our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act are available on our website, free of charge, at http://ir.hilltop.com/ under the tab “Filings” as soon as reasonably practicable after we electronically file such reports with, or furnish them to, the Securities and Exchange Commission (the “SEC”). The references to our website in this Annual Report are inactive textual references only. The information on our website is not incorporated by reference into this Annual Report. The SEC maintains a public website, www.sec.gov, which includes information about and the filings of issuers that file electronically with the SEC.

Business Segments

Under accounting principles generally accepted in the United States (“GAAP”), our business units are comprised of three reportable business segments organized primarily by the core products offered to the segments’ respective customers: banking, broker-dealer, and mortgage origination. These segments reflect the manner in which operations are managed and the criteria used by our chief operating decision maker, our President and Chief Executive Officer, to evaluate segment performance, develop strategy and allocate resources.

6

The following graphic reflects our current business segments.

Graphic

Corporate includes certain activities not allocated to specific business segments. These activities include holding company financing and investing activities, merchant banking investment opportunities, and management and administrative services to support the overall operations of the Company. Hilltop’s merchant banking investment activities include the identification of attractive opportunities for capital deployment in companies engaged in non-financial activities through its merchant bank subsidiary, Hilltop Opportunity Partners LLC.

For more financial information about each of our business segments, see Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” herein. See also Note 27 in the notes to our consolidated financial statements included under Item 8, “Financial Statements and Supplementary Data.

Banking

The banking segment includes the operations of the Bank, which, at December 31, 2025, had $12.7 billion in assets and total deposits of $11.0 billion. The primary sources of our deposits are residents of and businesses located in Texas. At December 31, 2025, the Bank employed approximately 1,030 people.

The table below sets forth a distribution of the banking segment’s loans, classified by portfolio segment. The banking segment’s loan portfolio included $1.3 billion in warehouse lines of credit extended to PrimeLending and its affiliated business arrangements (“ABAs”), of which $0.9 billion was drawn at December 31, 2025. Amounts advanced against the warehouse lines of credit are included in the table below, but are eliminated from net loans on our consolidated balance sheets.

7

Our lending policies seek to establish an asset portfolio that will provide a return on stockholders’ equity sufficient to maintain capital to assets ratios that meet or exceed established regulations. In support of that goal, we have designed our underwriting standards to determine:

that our borrowers possess sound ethics and competently manage their affairs;
that we know the source of the funds the borrower will use to repay the loan;
that the purpose of the loan makes economic sense; and
that we identify relevant risks of the loan and determine that the risks are acceptable.

We implement our underwriting standards according to the facts and circumstances of each particular loan request, as discussed below.

Business Banking. Our business banking customers primarily consist of real estate (including construction and land development), wholesale/retail trade, healthcare, institutions of higher education, agribusiness and energy companies. We provide these customers with extensive banking services, such as online banking, business check cards and other add-on services as determined on a customer-by-customer basis. Our treasury management services, which are designed to reduce the time, burden and expense of collecting, transferring, disbursing and reporting cash, are also available to our business customers. We offer our business banking customers term loans, commercial real estate loans, lines of credit, equipment loans, letters of credit, agricultural loans and other lending products.

Commercial and industrial loans are primarily made within Texas and are underwritten on the basis of the borrower’s ability to service the debt from cash flow from an operating business. In general, commercial and industrial loans involve more credit risk than residential and commercial real estate loans and, therefore, usually yield a higher return. The increased risk in commercial and industrial loans results primarily from the type of collateral securing these loans, which typically includes accounts receivable, equipment and inventory. Additionally, increased risk arises from the expectation that commercial and industrial loans generally will be serviced principally from operating cash flow of the business, and such cash flows are dependent upon successful business operations. Historical trends have shown these types of loans to have higher delinquencies than mortgage loans. As a result of the additional risk and complexity associated with commercial and industrial loans, such loans require more thorough underwriting and servicing than loans to individuals. To manage these risks, our policy is to attempt to secure commercial and industrial loans with both the assets of the borrowing business and other additional collateral and guarantees that may be available. In addition, depending on the size of the credit, we actively monitor the financial condition of the borrower by analyzing the borrower’s financial statements and assessing certain financial measures, including cash flow, collateral value and other appropriate credit factors. We also have processes in place to analyze and evaluate on a regular basis our exposure to industries, products, market changes and economic trends.

The Bank offers term financing on commercial real estate that includes retail, office, multi-family, industrial and warehouse properties. Commercial mortgage lending can involve high principal loan amounts, and the repayment of these loans is dependent, in large part, on a borrower’s ongoing business operations or on income generated from the properties that are leased to third parties. Accordingly, we apply the measures described above for commercial and industrial loans to our commercial real estate lending, with increased emphasis on analysis of collateral values. As a general practice, the Bank requires its commercial mortgage loans to (i) be secured with first lien positions on the underlying property, (ii) maintain adequate equity margins, (iii) be serviced by businesses operated by an established management team and (iv) be guaranteed by the principals of the borrower. The Bank seeks lending opportunities where cash flow from the collateral provides adequate debt service coverage and/or the guarantor’s net worth is comprised of assets other than the project being financed.

The Bank’s mortgage warehouse lending activities consist of asset-based lending in which the Bank provides short-term, revolving lines of credit to independent mortgage bankers (“IMBs”). IMBs are generally small businesses, with mortgage loan origination and servicing as their sole or primary business. IMBs use the funds from their lines of credit to provide home loans to prospective and existing homeowners. When the IMBs subsequently sell the loans to institutional investors in the secondary market—typically within 30 days of closing the transaction—the proceeds from the sale are used to pay down and therefore replenish their lines of credit.

8

The Bank also offers construction financing for commercial, retail, office, industrial, warehouse, single-family and multi-family developments. Construction loans involve additional risks because loan funds are advanced upon the security of a project under construction, and the project is of uncertain value prior to its completion. If the Bank is forced to foreclose on a project prior to completion, it may not be able to recover the entire unpaid portion of the loan. Additionally, the Bank may be required to fund additional amounts to complete a project and may have to hold the property for an indeterminate period of time. Because of uncertainties inherent in estimating construction costs, the market value of the completed project and the effects of governmental regulation on real property, it can be difficult to accurately evaluate the total funds required to complete a project and the related loan-to-value ratio. As a result of these uncertainties, construction lending often involves the disbursement of substantial funds with repayment dependent, in part, on the success of the ultimate project rather than the ability of a borrower or guarantor to repay the loan. In the future, events such as these bank failures or negative news or the public perception thereof, could have an adverse effect on our financial condition and results of operations, either directly or through an adverse impact on certain of our customers. The Bank generally requires that the subject property of a construction loan for commercial real estate be pre-leased because cash flows from the completed project provide the most reliable source of repayment for the loan. Loans to finance these projects are generally secured by first liens on the underlying real property. The Bank conducts periodic completion inspections, either directly or through an agent, prior to approval of periodic draws on these loans.

In addition to the real estate lending activities described above, a portion of the Bank’s real estate portfolio consists of one-to-four family residential mortgage loans typically collateralized by owner occupied properties. These residential mortgage loans are generally secured by a first lien on the underlying property and have maturities up to 30 years. These loans are shown in the loans held for investment table above as “1-4 family residential.

Personal Banking. The Bank offers a broad range of personal banking products and services for individuals. Similar to its business banking operations, the Bank also provides its personal banking customers with a variety of add-on features such as check cards, safe deposit boxes, online banking, bill pay, overdraft privilege services and access to automated teller machine (ATM) facilities throughout the United States. The Bank offers a variety of deposit accounts to its personal banking customers including savings, checking, interest-bearing checking, money market and certificates of deposit.

The Bank loans to individuals for personal, family and household purposes, including lines of credit, home improvement loans, home equity loans, and loans for purchasing and carrying securities.

Private Banking and Investment Management. The Bank’s private banking team personally assists high net worth individuals and their families with their banking needs, including depository, credit, asset management, and trust and estate services. The Bank offers trust and asset management services in order to assist these customers in managing, and ultimately transferring, their wealth.

The Bank provides personal trust, investment management and employee benefit plan administration services, including estate planning, management and administration, investment portfolio management and employee benefit account and individual retirement account services.

Broker-Dealer

The “Hilltop Broker-Dealers” include the operations of Hilltop Securities, a broker-dealer subsidiary registered with the SEC and the Financial Industry Regulatory Authority, Inc. (“FINRA”) and a member of the NYSE, Momentum Independent Network, an introducing broker-dealer subsidiary that is also registered with the SEC and FINRA, and Hilltop Securities Asset Management, LLC. Hilltop Securities and Momentum Independent Network are both registered with the Commodity Futures Trading Commission (“CFTC”) as non-guaranteed introducing brokers and as members of the National Futures Association (“NFA”). Additionally, Hilltop Securities Asset Management, LLC, Hilltop Securities and Momentum Independent Network are investment advisers registered with the SEC under the Investment Advisers Act of 1940, as amended, (the “Advisers Act”). At December 31, 2025, Hilltop Securities had total assets of $2.9 billion and net capital of $220.6 million, which was $214.4 million in excess of its minimum net capital requirement of $6.1 million. At December 31, 2025, the Hilltop Broker-Dealers employed approximately 790 people and maintained 39 locations in 16 states.

Our broker-dealer segment has four primary lines of business: (i) public finance services, (ii) structured finance, (iii) fixed income services, and (iv) wealth management, which includes retail, clearing services and securities lending.

9

These lines of business and the respective services provided reflect the current manner in which the broker-dealer segment’s operations are managed.

Public Finance Services. The public finance services line of business assists public entities nationwide, including cities, counties, school districts, utility districts, tax increment zones, special districts, state agencies and other governmental entities, in originating, syndicating and distributing securities of municipalities and political subdivisions. In addition, the public finance services line of business provides specialized advisory and investment banking services for airports, convention centers, healthcare institutions, institutions of higher education, housing, industrial development agencies, toll road authorities, and public power and utility providers.

Additionally, through its arbitrage rebate, treasury management and government investment pools management departments, the public finance services line of business provides state and local governments with advice and guidance with respect to arbitrage rebate compliance, portfolio management and local government investment pool administration.

Structured Finance. The structured finance line of business provides advisory services and product expertise related to derivatives for U.S. Agency to-be-announced (“TBA”) and commodities. The business line participates in programs in which it issues forward purchase commitments of mortgage-backed products to certain non-profit housing clients and sells TBA mortgage-backed securities. The structured finance business line also specializes in the sales and trading of mortgage-backed, asset-backed and commercial mortgage-backed securities. Additionally, this business line provides agricultural insurance through Hilltop Securities Insurance Agency Inc., whereby we act as an agent in these transactions and retain no underwriting risk with regard to the sale of insurance products.

Fixed Income Services. The fixed income services line of business specializes in sales, trading and underwriting of U.S. government and government agency bonds, corporate bonds, municipal bonds and structured products to support sales and other client activities. In addition, the fixed income services line of business provides asset and liability management advisory services to community banks.

Wealth Management. The wealth management line of business is comprised of our retail, clearing services and securities lending groups.

Retail. The retail group acts as a securities broker for retail customers in the purchase and sale of securities, options, and futures contracts that are traded on various exchanges or in the over-the-counter market through our employee-registered representatives or independent contractor arrangements. We extend margin credit on a secured basis to our retail customers to facilitate securities transactions. Through Hilltop Securities Insurance Agency Inc. we hold insurance licenses to facilitate the sale of insurance and annuity products by Hilltop Securities and Momentum Independent Network advisors to retail clients. We act as an agent in these transactions and retain no underwriting risk related to these insurance and annuity products. In addition, through our investment management team, the retail group provides a number of advisory programs that offer advisors a wide array of products and services for their advisory businesses and clients. In most cases, we charge commissions to our clients in accordance with an established commission schedule, subject to certain discounts based upon the client’s level of business, the trade size and other relevant factors. The Momentum Independent Network advisors may also contract directly with third-party carriers to sell specified insurance products to their customers. The commissions received from these third-party carriers are paid directly to the advisor. At December 31, 2025, we employed 90 registered representatives in 20 retail brokerage offices and had contracts with 150 independent retail representatives for the administration of their securities business.

Clearing Services. The clearing services group offers fully disclosed clearing services to FINRA- and SEC-registered member firms for trade execution and clearance as well as back office services such as record keeping, trade reporting, accounting, general back-office support, securities and margin lending, reorganization assistance and custody of securities. At December 31, 2025, we provided services to 93 financial organizations, including correspondent firms, correspondent broker-dealers, registered investment advisers, discount and full-service brokerage firms, and institutional firms.

Securities Lending. The securities lending group performs activities that include borrowing and lending securities for other broker-dealers, lending institutions, and internal clearing and retail operations. These activities involve borrowing securities to cover short sales and to complete transactions in which customers have failed to deliver securities by the required settlement date, and lending securities to other broker-dealers for similar purposes.

10

Mortgage Origination

Our mortgage origination segment operates through a wholly owned subsidiary of the Bank, PrimeLending, which is a residential mortgage banker licensed to originate and close loans in all 50 states and the District of Columbia. PrimeLending primarily originates its mortgage loans through a retail channel, with additional lending through its ABAs. During 2025, funded loan volume through ABAs was approximately 14% of the mortgage origination segment’s total loan volume. At December 31, 2025, our mortgage origination segment operated from over 170 locations in 46 states, originating 30.2%, 7.8% and 5.6%, respectively, of its mortgage loans (by dollar volume) from its Texas, California and South Carolina locations. The mortgage lending business is subject to variables that can impact loan origination volume, including seasonal and interest rate fluctuations.​Our mortgage origination business is subject to several variables that can impact loan origination volume, including seasonal and interest rate fluctuations. Historically, the mortgage origination segment has experienced increased loan origination volume from purchases of homes during the spring and summer months, when more people tend to move and buy or sell homes. As a result, the results of operations for any single quarter in the mortgage origination segment are not necessarily indicative of the results that may be achieved for a full fiscal year. ​As a result of these variables, our results of operations for any single quarter are not necessarily indicative of the results that may be achieved for a full fiscal year.

A decrease in mortgage interest rates tends to result in increased loan origination volume from refinancings, while an increase in mortgage interest rates tends to result in decreased loan origination volume from refinancings. Changes in mortgage interest rates have historically had a lesser impact on home purchases volume than on refinancing volume.

PrimeLending handles loan processing, underwriting and closings in-house. Mortgage loans originated by PrimeLending are funded through warehouse lines of credit maintained with the Bank. PrimeLending sells substantially all mortgage loans it originates to various investors in the secondary market. In addition, the mortgage origination segment originates loans on behalf of the Bank. PrimeLending’s determination of whether to retain or release servicing on mortgage loans it sells is impacted by, among other things, changes in mortgage interest rates, refinancing and market activity, and balance sheet positioning at Hilltop. Loan volumes to be originated on behalf of and retained by the banking segment are evaluated each quarter. Loans sold to and retained by the Bank during 2025, 2024 and 2023 were $185.4 million, $124.3 million and $140.3 million, respectively. Loan volumes to be originated on behalf of and retained by the banking segment are expected to be impacted by, among other things, an ongoing review of the prevailing mortgage rates, balance sheet positioning at Hilltop and the banking segment’s outlook for commercial loan growth. PrimeLending may, from time to time, manage its mortgage servicing rights (“MSR”) assets through different strategies, including varying the percentage of mortgage loans sold servicing released and opportunistically selling MSR assets. As mortgage loans are sold in the secondary market, PrimeLending pays down its warehouse lines of credit with the Bank. Loans sold are subject to certain standard indemnification provisions with investors, including the repurchase of loans sold and the repayment of sales proceeds to investors under certain conditions.

Our mortgage lending underwriting strategy, driven in large measure by secondary market investor standards, seeks primarily to originate conforming loans. Our underwriting practices include:

granting loans on a sound and collectible basis;
obtaining a balance between maximum yield and minimum risk;
ensuring that primary and secondary sources of repayment are adequate in relation to the amount of the loan; and
ensuring that each loan is properly documented and, if appropriate, adequately insured.

PrimeLending also acts as a primary servicer for loans originated prior to sale and loans sold with servicing retained.

PrimeLending, including its ABAs, had a staff of approximately 1,300 people, including approximately 800 mortgage loan officers, as of December 31, 2025 that produced $8.9 billion in closed mortgage loan volume during 2025, 85.9% of which related to home purchases volume. PrimeLending offers a variety of loan products catering to the specific needs of borrowers seeking purchase or refinancing options, including 30-year and 15-year fixed rate conventional mortgages, adjustable rate mortgages, jumbo loans, new construction loans, and Federal Housing Administration (“FHA”), Veterans Affairs (“VA”), and United States Department of Agriculture loans. Mortgage loans originated by PrimeLending are secured by a first lien on the underlying property. PrimeLending does not currently originate subprime loans (which it defines to be conventional and government loans that (i) are ineligible for sale to the Federal National Mortgage Association (“FNMA”), Federal Home Loan Mortgage Corporation (“FHLMC”) or Government National Mortgage Association (“GNMA”), or (ii) do not comply with approved investor-specific underwriting guidelines).

11

Geographic Dispersion of our Businesses

The Bank provides traditional banking and wealth, investment and treasury management services. The Bank has a presence in the large metropolitan markets in Texas and conducts substantially all of its banking operations in Texas.

Our broker-dealer services are provided through Hilltop Securities and Momentum Independent Network, which conduct business nationwide, with 82% of the broker-dealer segment’s net revenues during 2025 generated through locations in Texas, New York and California.

PrimeLending provides residential mortgage origination products and services from over 170 locations in 46 states. During 2025, an aggregate of 67% of PrimeLending’s origination volume was concentrated in ten states, with 44% concentrated in Texas, California and South Carolina, collectively. Other than these ten states, none of the states in which PrimeLending operated during 2025 represented more than 2% of PrimeLending’s origination volume.

Employees and Human Capital Resources

At December 31, 2025 we employed approximately 3,500 full-time employees and less than 50 part-time employees. Our employees are not represented by any collective bargaining group. Management believes that we have good relations with our employees.

We encourage and support the growth and development of our employees and, wherever possible, seek to fill positions by promotion and transfer from within the organization. Continual learning and career development are advanced through annual performance and development conversations with employees, internally developed training programs, customized corporate training engagements and seminars, conferences, and other training events employees are encouraged to attend in connection with their job duties.

Employee retention helps us operate efficiently and achieve one of our business objectives, which is being a high-level service provider. We believe our commitment to our core values (integrity, collaboration, adaptability, respect and excellence) as well as actively prioritizing concern for our employees’ well-being, supporting our employees’ career goals, offering competitive wages and providing valuable fringe benefits aids in the retention of our top-performing employees. At December 31, 2025, approximately 39% of our current staff had been with us for ten years or more.

During 2025, women represented over 54% of Hilltop’s workforce, and 10% of the overall executive management team. During 2025, 35% of our employees fell within the minority classification and approximately 38% of our employees were below the age of 45.

Hilltop has three employee-based councils, namely the Culture Council, Diversity Momentum Council and Women Momentum Council, each devoted to driving employee engagement and sponsoring events across the enterprise to promote social networking amongst all employees.

We are committed to offering transparency into our business activities and providing our stakeholders with key data supporting our sustainability. For more information, see our current Environmental, Social and Governance, or ESG, and Sustainability Report, available on our website at https://hilltop.com/ under the tab “Who We Are – ESG & Sustainability.” The references to our website in this Annual Report are inactive textual references only. The information on our website is not incorporated by reference into this Annual Report.

Competition

We face significant competition in the business segments in which we operate and the geographic markets we serve. Many of our competitors have substantially greater financial resources, lending limits and branch networks than we do, and offer a broader range of products and services. Many of our competitors have substantially greater resources to invest in technological improvements.

12

Our banking segment primarily competes with national, regional and community banks within the various markets where the Bank operates. The Bank also faces competition from many other types of financial institutions, including savings and loan associations, credit unions, finance companies, pension trusts, mutual funds, insurance companies, brokerage and investment banking firms, asset-based non-bank lenders, government agencies and certain other non-financial institutions. The Bank also faces competition from many other types of financial institutions, including savings and loan associations, savings banks, finance companies and credit unions. The ability to attract and retain skilled lending professionals is critical to our banking business. The ability to attract and retain skilled mortgage origination professionals is critical to our mortgage origination business. Competition for deposits and in providing lending products and services to consumers and businesses in our market area continues to be competitive and pricing is important. Competition for deposits and lending services is also increasing from internet-based competitors and fintech companies. Other factors encountered in competing for deposits are convenient office locations, interest rates and fee structures of products offered. Direct competition for deposits also comes from other commercial bank and thrift institutions, money market mutual funds and corporate and government securities that may offer more attractive rates than insured depository institutions are willing to pay. Direct competition for savings deposits also comes from other commercial bank and thrift institutions, money market mutual funds and corporate and government securities that may offer more attractive rates than insured depository institutions are willing to pay. Competition for loans is based on factors such as interest rates, loan origination fees and the range of services offered by the provider. Competition for loans is based on factors such as interest rates, loan origination fees and 46 Table of Contentsthe range of services offered by the provider. Competition for loans is based on factors such as interest rates, loan origination fees and 46 Table of Contentsthe range of services offered by the provider.

Within our broker-dealer segment, we face significant competition based on a number of factors, including price, perceived expertise, quality of advice, reputation, range of services and products, technology, innovation and local presence. Competition for recruiting and retaining securities traders, investment bankers, and other financial advisors is intense. Our broker-dealer business competes directly with numerous other financial advisory and investment banking firms, broker-dealers and banks, including large national and major regional firms and smaller niche companies, some of whom are not broker-dealers and, therefore, are not subject to the broker-dealer regulatory framework. Further, our broker-dealer segment competes with discount brokerage firms, including fintech startups, that do not offer equivalent services but offer discounted prices and certain free services.

Our competitors in the mortgage origination business include large financial institutions as well as independent mortgage banking companies, commercial banks, savings banks, savings and loan associations and fintech companies. Our mortgage origination segment competes on a number of factors including customer service, quality and range of products and services offered, price, reputation, interest rates, closing process and duration, and loan origination fees. The ability to attract and retain skilled mortgage origination professionals is critical to our mortgage origination business. We seek to distinguish ourselves from our competitors through our commitment to personalized customer service and responsiveness to customer needs while providing a range of competitive mortgage loan products and services.

We seek to distinguish ourselves from our competitors through our commitment to personalized customer service and responsiveness to customer needs while providing a range of competitive loan and deposit products and other financial services.

Overall, competition among providers of financial products and services continues to increase as technological advances, including artificial intelligence and automation, have lowered the barriers to entry for financial technology companies, with consumers having the opportunity to select from a growing variety of traditional and nontraditional alternatives, including online checking, savings and brokerage accounts, online lending, online insurance underwriters, crowdfunding, digital wallets, and money transfer services. The ability of non-banking financial institutions to provide services previously limited to commercial banks has intensified competition. Because non-banking financial institutions are not subject to many of the same regulatory restrictions as banks and bank holding companies, they can often operate with greater flexibility and lower cost structures.

Government Supervision and Regulation

General

We are subject to extensive regulation under federal and state laws and by various governmental and other regulatory authorities. The regulatory framework is intended primarily for the protection of depositors, clients, and the deposit insurance fund (the “DIF”) of the Federal Deposit Insurance Corporation (the “FDIC”), and not for the protection of our stockholders or creditors. In many cases, the applicable regulatory authorities have broad enforcement power over bank holding companies, banks and their subsidiaries, including the power to impose substantial fines and other penalties for violations of laws and regulations. The following discussion describes the material elements of the regulatory framework that applies to us and our subsidiaries. References in this Annual Report to applicable statutes and regulations are brief

13

summaries thereof, do not purport to be complete, and are qualified in their entirety by reference to such statutes and regulations. A change in any of these laws or regulations may have a material effect on our business and the business of our subsidiaries. Political developments, including the change in administration of the United States federal government, have added additional uncertainty in the implementation, scope and timing of regulatory reforms.

Bank Holding Companies and Financial Holding Companies

Hilltop and PCC are both bank holding companies that have elected to be financial holding companies (“FHCs”) registered under the Bank Holding Company Act, as amended by the Gramm-Leach-Bliley Act (“Gramm-Leach-Bliley Act”). Hilltop and PCC are each subject to supervision, regulation and examination by the Federal Reserve Board. The Dodd-Frank Act, Gramm-Leach-Bliley Act, the Bank Holding Company Act and other federal laws subject financial and bank holding companies to particular restrictions on the types of activities in which they may engage and to a range of supervisory requirements and activities, including regulatory enforcement actions for violations of laws and regulations.

Scope of Permissible Activities. Under the Bank Holding Company Act, Hilltop and PCC generally may not acquire a direct or indirect interest in, or control 5% or more of, the voting shares of any company that is not a bank, bank holding company, or a company that engages in activities other than those that are closely related to banking or managing or controlling banks. In approving acquisitions or the addition of activities, the Federal Reserve Board considers, among other things, whether the acquisition or the additional activities can reasonably be expected to produce benefits to the public, such as greater convenience, increased competition, or gains in efficiency, that outweigh such possible adverse effects as undue concentration of resources, decreased or unfair competition, conflicts of interest or unsound banking practices.

If a bank holding company has elected to become an FHC, such as Hilltop and PCC, it may engage in a broader set of

activities, including insurance underwriting and broker-dealer services as well as activities that are jointly determined by

the Federal Reserve and the U.S. Treasury to be financial in nature or incidental to such financial activity. FHCs may also engage in activities that are determined by the Federal Reserve Board to be complementary to financial activities. To maintain FHC status, the bank holding company and all subsidiary depository institutions must be “well managed” and “well capitalized.” Additionally, all subsidiary depository institutions must have received at least a “satisfactory” rating on their most recent Community Reinvestment Act (“CRA”) examination. Failure to meet these requirements may result in limitations on activities and acquisitions. Depending on the size and type of activity conducted, FHCs, such as Hilltop or PCC, may need to provide the Federal Reserve with prior notice or post notice of engaging in a new permissible nonbanking activity or acquisitions of entities engaged in permissible nonbanking activities.

Acquisitions by Bank Holding Companies. The Bank Holding Company Act requires every bank holding company to obtain the prior approval of the Federal Reserve Board before it may acquire all or substantially all of the assets of any bank, or ownership or control of any voting shares of any bank, if after such acquisition it would own or control, directly or indirectly, more than 5% of the voting shares of such bank. In approving bank acquisitions by bank holding companies, the Federal Reserve Board is required to consider, among other things, the financial and managerial resources and future prospects of the bank holding company and the banks concerned, the convenience and needs of the communities to be served, and various competitive factors. In addition, the Dodd-Frank Act requires the Federal Reserve Board to consider “the risk to the stability of the U.S. banking or financial system” when evaluating acquisitions of banks and nonbanks under the Bank Holding Company Act. With respect to interstate acquisitions, the Dodd-Frank Act amends the Bank Holding Company Act by raising the standard by which interstate bank acquisitions are permitted from a standard that the acquiring bank holding company be “adequately capitalized” and “adequately managed” to the higher standard of being “well capitalized” and “well managed.

Control Acquisitions. The Change in Bank Control Act prohibits a person or group of persons from acquiring “control” of a bank holding company unless the Federal Reserve Board has been notified and has not objected to the transaction. As a general matter, an investor is deemed to control a depository institution or other company if the investor owns or controls 25% or more of any class of voting stock or 33% or more of the total equity of such other company, and in certain other circumstances, an investor may be presumed to control a depository institution or other company if the investor owns or controls less than 25% or more of any class of voting stock.

14

Regulatory Restrictions on Dividends; Source of Strength. Bank holding companies are required to serve as source of financial and managerial strength to their subsidiary depository institutions by providing capital, liquidity and other support in times of financial stress. It is the policy of the Federal Reserve Board that bank holding companies should pay cash dividends on common stock only out of income available over the past year and only if prospective earnings retention is consistent with the organization’s expected future needs and financial condition.

In acting as a source of financial strength to its banking subsidiaries, a bank holding company is expected commit resources to their support, even during times when a holding company may not otherwise be inclined to provide it. As discussed herein, a bank holding company, in certain circumstances and subject to certain limitations, could be required to guarantee the capital plan of an undercapitalized banking subsidiary.

Safe and Sound Banking Practices. Bank holding companies are not permitted to engage in unsafe and unsound banking practices and bank holding companies and their subsidiaries are subject to periodic reporting requirements,

examinations, and prior notice or approvals from the Federal Reserve Board.

The Federal Reserve Board’s Regulation Y, generally requires a holding company to give the Federal Reserve Board prior notice of any redemption or repurchase of its equity securities, if the consideration to be paid, together with the consideration paid for any repurchases or redemptions in the preceding year, is equal to 10% or more of the company’s consolidated net worth. In addition, bank holding companies are required to consult with the Federal Reserve Board prior to making any redemption or repurchase, even within the foregoing parameters. The Federal Reserve Board may oppose the transaction if it believes that the transaction would constitute an unsafe or unsound practice or would violate any law or regulation. Depending upon the circumstances, the Federal Reserve Board could take the position that paying a dividend would constitute an unsafe or unsound banking practice.

The Federal Reserve Board has broad authority to prohibit activities of bank holding companies and their nonbanking subsidiaries that represent unsafe and unsound banking practices or that constitute violations of laws or regulations, and can assess civil money penalties for certain activities conducted on a knowing or reckless basis, if those activities caused a substantial loss to a depository institution. The penalties can be as high as $2.5 million for each day the activity continues.

Capital Adequacy Requirements and BASEL III. Hilltop and PlainsCapital, which includes the Bank and PrimeLending, are subject to capital adequacy requirements under the comprehensive capital framework for U.S. banking organizations known as “Basel III”. Basel III, which reformed the existing frameworks under which U.S. banking organizations historically operated, became effective January 1, 2015 and was fully phased in as of January 1, 2019. Basel III was developed by the Basel Committee on Banking Supervision and adopted by the federal banking agencies. On July 27, 2023, the federal banking agencies issued a proposal, referred to as “Basel III Endgame,” that would result in significant changes to the U.S. regulatory capital rules for banking organizations with total consolidated assets of $100 billion or more. Since neither Hilltop, nor any of its banking organization subsidiaries, would surpass the $100 billion threshold, a discussion of such proposal is not included herein.

The federal banking agencies’ risk-based capital and leverage ratios are minimum supervisory ratios generally applicable to banking organizations that meet certain specified criteria, assuming that they have the highest regulatory rating. Banking organizations not meeting these criteria are expected to operate with capital positions well above the minimum ratios. The federal bank regulatory agencies may set capital requirements for a particular banking organization that are higher than the minimum ratios when circumstances warrant. Federal Reserve Board guidelines also provide that banking organizations experiencing internal growth or making acquisitions will be expected to maintain strong capital positions substantially above the minimum supervisory levels, without significant reliance on intangible assets.

Under Basel III, total capital consists of two tiers of capital, Tier 1 and Tier 2. Tier 1 capital consists of common equity Tier 1 capital and additional Tier 1 capital. Below is a list of certain significant components that comprise the tiers of capital for Hilltop and PlainsCapital under Basel III.

15

Common equity Tier 1 capital:

includes common stockholders’ equity (such as qualifying common stock and any related surplus, undivided profits, disclosed capital reserves that represent a segregation of undivided profits and foreign currency translation adjustments, excluding changes in other comprehensive income (loss) and treasury stock);
includes certain minority interests in the equity capital accounts of consolidated subsidiaries; and
excludes goodwill and various intangible assets.

Additional Tier 1 capital:

includes certain qualifying minority interests not included in common equity Tier 1 capital;
includes certain preferred stock and related surplus;
includes certain subordinated debt; and
excludes 50% of the insurance underwriting deduction.

Tier 2 capital:

includes allowance for credit losses, up to a maximum of 1.25% of risk-weighted assets;
includes minority interests not included in Tier 1 capital; and
excludes 50% of the insurance underwriting deduction.

The following table summarizes the Basel III requirements.

In order to avoid limitations on capital distributions, including dividend payments, stock repurchases and certain discretionary bonus payments to executive officers, Basel III also implemented a capital conservation buffer, which requires a banking organization to hold a buffer above its minimum risk-based capital requirements. This buffer helps to ensure that banking organizations conserve capital when it is most needed, allowing them to better weather periods of economic stress. The buffer is measured relative to risk-weighted assets.

The rules also prohibit a banking organization from making distributions or discretionary bonus payments during any quarter if its eligible retained income is negative in that quarter and its capital conservation buffer ratio was less than 2.5% at the beginning of the quarter. A banking organization with a buffer greater than 2.5% would not be subject to limits on capital distributions or discretionary bonus payments; however, a banking organization with a buffer of less than 2.5% would be subject to increasingly stringent limitations as the buffer approaches zero. The eligible retained income of a banking organization is defined as its net income for the four calendar quarters preceding the current calendar quarter, based on the organization’s quarterly regulatory reports, net of any distributions and associated tax effects not already reflected in net income. When the rules were fully phased-in in 2019, the minimum capital requirements plus the capital conservation buffer should have exceeded the prompt corrective action well-capitalized thresholds.

During 2025, our eligible retained income was positive and our capital conservation buffer was greater than 2.5%, and therefore, we were not subject to limits on capital distributions or discretionary bonus payments. We anticipate similar results during 2026.

16

At December 31, 2025, Hilltop had a total capital to risk-weighted assets ratio of 22.20%, Tier 1 capital to risk-weighted assets ratio of 19.70% and a common equity Tier 1 capital to risk-weighted assets ratio of 19.70%. Hilltop’s actual capital amounts and ratios in accordance with Basel III exceeded the regulatory capital requirements including conservation buffer in effect at the end of the period.

At December 31, 2025, PlainsCapital had a total capital to risk-weighted assets ratio of 15.60%, Tier 1 capital to risk-weighted assets ratio of 14.49% and a common equity Tier 1 capital to risk-weighted assets ratio of 14.49%. Accordingly, PlainsCapital’s actual capital amounts and ratios in accordance with Basel III resulted in it being considered “well-capitalized” and exceeded the regulatory capital requirements including conservation buffer in effect at the end of the period.

Phase-in of Current Expected Credit Losses Accounting Standard. In June 2016, the Financial Accounting Standards Board issued an update to the accounting standards for credit losses that included the Current Expected Credit Losses (“CECL”) methodology, which replaces the existing incurred loss methodology for certain financial assets. CECL became effective January 1, 2020. In December 2018, the federal bank regulatory agencies approved a final rule modifying their regulatory capital rules and providing an option to phase-in, over a period of three years, the day-one regulatory capital effects resulting from the implementation of CECL. The final rule also revises the agencies’ other rules to reflect the update to the accounting standards. In March 2020, in connection with the economic uncertainties associated with the effects of the pandemic, the agencies’ issued an additional transition option that permitted banking institutions to mitigate the estimated cumulative regulatory capital effects from CECL over a five-year transitionary period through December 31, 2024. We elected to exercise this option for phase-in. As of January 1, 2025, Hilltop and PlainsCapital had fully captured the day-one regulatory capital effects resulting from the implementation of CECL.

Volcker Rule. Section 619 of the Dodd-Frank Act, known as the “Volcker Rule,” restricts “banking entities” such as Hilltop, PCC and the Bank, from engaging in proprietary trading and sponsoring or investing in “covered funds,” which include many private equity and hedge funds, subject to certain exceptions or exemptions. The federal banking agencies, together with the SEC and CFTC, have published a number of rules to implement and provide greater clarity and certainty about the activities prohibited by the Volcker Rule and to improve supervision and implementation of the Volcker Rule based on the agencies’ experience implementing these provisions.

PlainsCapital Bank

The Bank is a Texas state-chartered bank that is a member of the Federal Reserve System. As a result, the Bank is subject to various requirements and restrictions under the laws of the United States, and to regulation, supervision and regular examination by the Texas Department of Banking. and the Federal Reserve Board. The Bank is also an insured depository institution and, therefore, subject to regulation by the FDIC, although the Federal Reserve Board is the Bank’s primary federal regulator. The Bank is subject to the supervisory and enforcement authority by the CFPB with respect to federal consumer protection laws, including laws relating to fair lending and the prohibition of unfair, deceptive or abusive acts or practices in connection with the offer, sale or provision of consumer financial products and services.

The Federal Reserve Board, the Texas Department of Banking, the CFPB and the FDIC have the power to enforce compliance with applicable banking statutes and regulations. Such requirements and restrictions include requirements to maintain reserves against deposits, restrictions on the nature and amount of loans that may be made and the interest that may be charged thereon and restrictions relating to investments and other activities of the Bank.

Restrictions on Transactions with Affiliates. Transactions between the Bank and its affiliates, including Hilltop, PrimeLending, and PCC, are subject to Sections 23A and 23B of the Federal Reserve Act, as implemented by the Federal Reserve Board’s Regulation W.

In general, Section 23A imposes limits on the amount of such transactions, and also requires certain levels of collateral for loans to affiliated parties. It also limits the amount of advances to third parties that are collateralized by the securities or obligations of Hilltop or its subsidiaries. Section 23B generally requires that certain transactions between the Bank

17

and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other nonaffiliated persons.

Loans to Insiders. The restrictions on loans to directors, executive officers, principal shareholders and their related interests (collectively referred to herein as “insiders”) contained in the Federal Reserve Act and Regulation O apply to all insured institutions and their subsidiaries and holding companies. These restrictions include conditions that must be met before insider loans can be made, limits on loans to an individual insider and an aggregate limitation on all loans to insiders and their related interests. These loans cannot exceed the institution’s total unimpaired capital and surplus, and the Federal Reserve Board may determine that a lesser amount is appropriate. Insiders are subject to enforcement actions for knowingly accepting loans in violation of applicable restrictions.

Restrictions on Distribution of Subsidiary Bank Dividends and Assets. Dividends paid by the Bank have provided a substantial part of PCC’s operating funds, and for the foreseeable future, it is anticipated that dividends paid by the Bank to PCC will continue to be PCC’s and Hilltop’s principal source of operating funds. Capital adequacy requirements serve to limit the amount of dividends that may be paid by the Bank. Pursuant to the Texas Finance Code, a Texas banking association may not pay a dividend that would reduce its outstanding capital and surplus unless it obtains the prior approval of the Texas Banking Commissioner. Additionally, the FDIC and the Federal Reserve Board have the authority to prohibit Texas state banks from paying a dividend when they determine the dividend would be an unsafe or unsound banking practice. As a member of the Federal Reserve System, the Bank must also comply with the dividend restrictions with which a national bank would be required to comply. Those provisions are generally similar to those imposed by the state of Texas. Among other things, the federal restrictions require that if losses have at any time been sustained by a bank equal to or exceeding its undivided profits then on hand, no dividend may be paid.

In the event of a liquidation or other resolution of an insured depository institution, the claims of depositors and other general or subordinated creditors are entitled to a priority of payment over the claims of holders of any obligation of the institution to its stockholders, including any depository institution holding company (such as PCC and Hilltop) or any stockholder or creditor thereof.

Branching. The establishment of a bank branch must be approved by the Texas Department of Banking and the Federal Reserve Board, which consider a number of factors, including financial history, capital adequacy, earnings prospects, character of management, needs of the community and consistency with corporate powers. The regulators will also consider the applicant’s CRA record. Under the Dodd-Frank Act, de novo interstate branching by banks is permitted if, under the laws of the state where the branch is to be located, a state bank chartered in that state would be permitted to establish a branch.

Prompt Corrective Action. The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) establishes a system under which federal banking regulators have broad powers to take prompt corrective action to resolve the problems of undercapitalized financial institutions. Under this system, the federal banking regulators have established five capital categories (“well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” and “critically undercapitalized”) in which all institutions are placed. Federal banking regulators are required to take various mandatory supervisory actions and are authorized to take other discretionary actions with respect to institutions in the three undercapitalized categories. The severity of the action depends upon the capital category in which the institution is placed. Generally, subject to a narrow exception, the banking regulator must appoint a receiver or conservator for an institution that is critically undercapitalized. The federal banking agencies have specified by regulation the relevant capital level for each category.

An institution that is categorized as “undercapitalized,” “significantly undercapitalized” or “critically undercapitalized” is required to submit an acceptable capital restoration plan to its appropriate federal banking agency. A bank holding company must guarantee that a subsidiary depository institution meets its capital restoration plan, subject to various limitations. The controlling holding company’s obligation to fund a capital restoration plan is limited to the lesser of 5% of an undercapitalized subsidiary’s assets at the time it became undercapitalized or the amount required to meet regulatory capital requirements. An undercapitalized institution is also generally prohibited from increasing its average total assets, making acquisitions, establishing any branches or engaging in any new line of business, except under an accepted capital restoration plan or with approval of the applicable federal banking agency. The regulations also

18

establish procedures for downgrading an institution to a lower capital category based on supervisory factors other than capital. PlainsCapital was classified as “well capitalized” at December 31, 2025.

FDIC Insurance Assessments. The FDIC has adopted a risk-based assessment system for insured depository institutions that takes into account the risks attributable to different categories and concentrations of assets and liabilities. The FDIC establishes an initial base deposit insurance assessment for banks with $10 billion or more in assets using a scorecard that is generally based on a supervisory evaluation that the institution’s primary federal regulator provides to the FDIC and information that the FDIC determines to be relevant to the institution’s financial condition and the risk posed to the deposit insurance fund. Institutions assigned to higher risk classifications pay assessments at higher rates than institutions assigned to lower risk classifications. The FDIC may terminate its insurance of deposits if it finds that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC.

The FDIC is required to maintain a designated reserve ratio of the DIF to insured deposits in the United States. The Dodd-Frank Act required the FDIC to assess insured depository institutions to achieve a DIF ratio of at least 1.35% by September 30, 2020, which was accomplished on November 28, 2018. However, extraordinary growth in insured deposits in 2020 caused the DIF ratio to fall below 1.35%. Accordingly, on October 24, 2022, the FDIC published a final rule to increase the initial base deposit insurance assessment rate schedules by 2 basis points beginning the first quarterly assessment period of 2023 (i.e., January 1 through March 31, 2023). The increase in assessment rate schedules increased the likelihood that the DIF ratio will reach the statutory minimum of 1.35% by the statutory deadline of September 30, 2028. The Bank accrued $7.0 million of DIF assessments during 2025.

The Dodd-Frank Act permanently increased the standard maximum deposit insurance amount to $250,000. The FDIC insurance coverage limit applies per depositor, per insured depository institution for each account ownership category.

Community Reinvestment Act. The CRA requires that federal banking regulators (in the Bank’s case, the Federal Reserve Board) evaluate the record of, and assign a rating to each financial institution in meeting the credit needs of its local community, including low and moderate-income neighborhoods. Regulatory agencies are required to consider these ratings when evaluating a bank’s application to engage in certain transactions, such as mergers, acquisitions and establishment of branches. Failure to adequately meet these criteria could impose additional requirements and limitations on the Bank. Additionally, the Bank must publicly disclose the terms of various CRA-related agreements.

The Bank received a “satisfactory” CRA rating in connection with its most recent CRA performance evaluation. A CRA rating of less than “satisfactory” adversely affects a bank’s ability to establish new branches and impairs a bank’s ability to commence new activities that are “financial in nature” or acquire companies engaged in these activities. See “Risk Factors — We are subject to extensive supervision and regulation that could restrict our activities and impose financial requirements or limitations on the conduct of our business and limit our ability to generate income.47 Table of Contents​We are subject to extensive supervision and regulation that could restrict our activities and impose financial requirements or limitations on the conduct of our business and limit our ability to generate income.

Federal Laws Applicable to Consumer Transactions. The loan operations of the Bank are also subject to federal laws and implementing regulations applicable to consumer transactions, such as the Truth In Lending Act, the Home Mortgage Disclosure Act, the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Fair Debt Collection Practices Act, the Service Members Civil Relief Act, the Right to Financial Privacy Act, the Trust in Savings Act and the Electronic Funds Transfer Act. Interest and other charges collected or contracted for by the Bank are subject to state usury laws and federal laws concerning interest rates.

Capital Requirements. The Federal Reserve Board and the Texas Department of Banking monitor the capital adequacy of PlainsCapital by using a combination of risk-based guidelines and leverage ratios. The agencies consider PlainsCapital’s capital levels when taking action on various types of applications and when conducting supervisory activities related to the safety and soundness of individual banks and the banking system. For additional discussion on capital requirements, see the section entitled “Government Supervision and Regulation — Bank Holding Companies and Financial Holding Companies — Capital Adequacy Requirements and Basel III” earlier in this Item 1.

Anti-tying Restrictions. Subject to various exceptions, banks are generally prohibited from tying the provision of certain services, such as extensions of credit, to certain other services offered by a bank holding company or its affiliates.

19

Brokered Deposits. Under FDICIA, banks may be restricted in their ability to accept brokered deposits, depending on their capital classification. “Well capitalized” banks are permitted to accept brokered deposits, but banks that are not “well capitalized” are generally not permitted to accept such deposits. The FDIC may, on a case-by-case basis, permit banks that are “adequately capitalized” to accept brokered deposits if the FDIC determines that acceptance of such deposits would not constitute an unsafe or unsound banking practice with respect to such bank. The FDIC also exempts a capped amount of reciprocal deposits from being considered as brokered deposits for certain insured depository institutions. As of December 31, 2025, PlainsCapital was “well capitalized” and therefore not subject to limitations with respect to its brokered deposits.

Federal Home Loan Bank System. The Federal Home Loan Bank (“FHLB”) system, of which the Bank is a member, consists of regional FHLBs governed and regulated by the Federal Housing Finance Board. The FHLBs serve as reserve or credit facilities for member institutions within their assigned regions. The reserves are funded primarily from proceeds derived from the sale of consolidated obligations of the FHLB system. The FHLBs make loans (i.e., advances) to members in accordance with policies and procedures established by the FHLB and the boards of directors of each regional FHLB.

As a system member, according to currently existing policies and procedures, the Bank is entitled to borrow from the FHLB of its respective region and is required to own a certain amount of capital stock in the FHLB. The Bank is in compliance with the stock ownership rules with respect to such advances, commitments and letters of credit and home mortgage loans and similar obligations. All loans, advances and other extensions of credit made by the FHLB to the Bank are secured by a portion of the respective mortgage loan portfolio, certain other investments and the capital stock of the FHLB held by the Bank.

Anti-terrorism and Money Laundering Legislation. The Anti-Money Laundering Act of 2020 (the “AML 2020 Act”) was enacted as part of the National Defense Authorization Act for Fiscal Year 2021. The AML 2020 Act is the most significant revision to the anti-money laundering (“AML”) laws since the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism of 2001, as amended (the “USA PATRIOT Act”). The AML 2020 Act clarifies and streamlines the Currency and Foreign Transactions Reporting Act of 1970, as amended, (the “Bank Secrecy Act”) and AML obligations in the following ways: requires U.S. entities and entities doing business in the United States to report into a national registry maintained by the Financial Crimes Enforcement Network (“FinCEN”) certain beneficial ownership information, subject to exceptions; modernizes the statutory definition of “financial institution” to include (i) entities that provide services involving “value that substitutes for currency,” which includes stored value and virtual currencies and (ii) any person engaged in the trade of antiquities, including an advisor, consultant or any other person who deals in the sale of antiquities; enhances penalties for Bank Secrecy Act and AML violations, including clawback of bonuses; increases AML whistleblower awards and expands whistleblower protections; requires the Secretary of the Treasury to establish and update every four years National AML Priorities, which are incorporated into the Bank Secrecy Act compliance programs at financial institutions subject to the Bank Secrecy Act; among other amendments. Implementing regulations concerning certain provisions of the AML 2020 Act have been proposed by FinCEN, but not all have been finalized. On September 29, 2022, FinCEN issued a final rule establishing a beneficial ownership information reporting requirement under the Corporate Transparency Act (“CTA”), which was passed as part of the AML 2020 Act. The rule, which became effective January 1, 2024, requires certain entities that are registered to do business in the United States to report information about their beneficial owners—the persons who ultimately own or control the company—to FinCEN. Currently, the CTA’s reporting requirements apply only to foreign-formed entities that are registered to do business in the United States.

The Bank is subject to the USA PATRIOT Act, the Bank Secrecy Act and rules and regulations of FinCEN and the Office of Foreign Assets Control. These statutes and related rules and regulations impose requirements and limitations on specific financial transactions and account relationships intended to guard against money laundering and terrorism financing. The Bank has established a customer identification program pursuant to Section 326 of the USA PATRIOT Act and the Bank Secrecy Act, including obtaining beneficial ownership information on new legal entity customers and otherwise has implemented policies and procedures intended to comply with the foregoing rules until such time as FinCEN adopts final regulations implementing the CTA, which is part of the AML 2020 Act.

20

We cannot predict whether or in what form any proposed regulation or statute will be adopted or the extent to which our business may be affected by any new regulation or statute.

Incentive Compensation Guidance. Section 956 of the Dodd-Frank Act requires federal regulatory agencies, including the Federal Reserve Board, to jointly prescribe regulations or guidelines with respect to incentive-based compensation practices at certain financial institutions that have $1 billion or more in assets. On June 21, 2010, the Federal Reserve Board, the Office of the Comptroller of the Currency, and the FDIC to jointly issued comprehensive final guidance on incentive compensation policies (the “Incentive Compensation Guidance”) intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The Incentive Compensation Guidance sets expectations for banking organizations concerning their incentive compensation arrangements and related risk-management, control and governance processes. The Incentive Compensation Guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon three primary principles: (i) balanced risk-taking incentives, (ii) compatibility with effective controls and risk management, and (iii) strong corporate governance. Any deficiencies in compensation practices that are identified may be incorporated into the organization’s supervisory ratings, which can affect its ability to make acquisitions or perform other actions. In addition, under the Incentive Compensation Guidance, a banking organization’s federal regulator may initiate enforcement action if the organization’s incentive compensation arrangements pose a risk to the safety and soundness of the organization.

Privacy. Under the Gramm-Leach-Bliley Act, financial institutions are required to disclose their policies for collecting and protecting confidential information. Customers generally may prevent financial institutions from sharing nonpublic personal financial information with nonaffiliated third parties except under narrow circumstances, such as the processing of transactions requested by the consumer or when the financial institution is jointly sponsoring a product or service with a nonaffiliated third-party. Additionally, financial institutions generally may not disclose consumer account numbers to any nonaffiliated third-party for use in telemarketing, direct mail marketing or other marketing to consumers. Federal agencies have adopted regulations implementing the Gramm-Leach-Bliley Act, including the SEC’s Regulation S-P. Recently, the SEC adopted amendments to Regulation S-P, effective starting on December 3, 2025, expanding the requirements imposed on covered financial institutions, including by requiring the adoption of an incident response program, requiring covered institutions to provide notice in the event of certain data breaches within a specified time period, and imposing additional requirements regarding the engagement and oversight of service providers. The Bank and all of its subsidiaries have established policies and procedures to comply with the privacy provisions of the Gramm-Leach-Bliley Act.

In addition, PrimeLending’s lending activities across the country subject PrimeLending to additional state laws regarding the storage, sharing, use, disclosure, processing and protection of personal information, personally identifiable information, and user data as well as cybersecurity-related laws and requirements. Several states have adopted laws requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs. Additionally, nineteen states have passed comprehensive consumer privacy laws, including the California Consumer Privacy Act of 2018, as amended the Virginia Consumer Data Protection Act, and the Colorado Privacy Act, among others. These laws impose legal and operational obligations on covered businesses where applicable, and afford rights to state residents with respect to the privacy of their personal information, where applicable. For more information about the cybersecurity risks we face, see Item 1A., “Risk Factors — Our operational systems and networks have been, and will continue to be, subject to an increasing risk of continually evolving cybersecurity or other technological risks, which could result in a loss of customer business, financial liability, regulatory penalties, damage to our reputation or the disclosure of confidential information.

21

Broker-Dealer

The Hilltop Broker-Dealers are broker-dealers registered with the SEC, FINRA, all 50 U.S. states and the District of Columbia. Hilltop Securities is a member of various securities exchanges and is also registered in Puerto Rico and the U.S. Virgin Islands. Much of the regulation of broker-dealers, however, has been delegated to self-regulatory organizations, principally FINRA, the Municipal Securities Rulemaking Board and national securities exchanges. These self-regulatory organizations adopt rules (which are subject to approval by the SEC) for governing its members and the industry. Broker-dealers are also subject to federal securities laws and SEC rules, as well as the laws and rules of the states in which a broker-dealer conducts business. While the SEC, the states, and the exchanges may conduct regulatory examinations, the Hilltop Broker-Dealers are members of, and are primarily subject to regulation, supervision and regular examination by FINRA. References to the Hilltop Broker-Dealers under the heading “Broker-Dealer” shall not include Hilltop Securities Asset Management, LLC unless it is otherwise named or the context otherwise includes it.

The regulations to which broker-dealers are subject cover all aspects of the securities business, including, but not limited to, sales and trade practices, net capital requirements, record keeping and reporting procedures, relationships and conflicts with customers, the handling of cash and margin accounts, experience and training requirements for certain employees, the conduct of investment banking and research activities and the conduct of registered persons, directors, officers and employees. Broker-dealers are also subject to the privacy and anti-money laundering laws and regulations discussed herein. Additional legislation, changes in rules promulgated by the SEC, securities exchanges, self-regulatory organizations or states or changes in the interpretation or enforcement of existing laws and rules often directly affect the method of operation and profitability of broker-dealers. The SEC, FINRA, securities exchanges, self-regulatory organizations and states may conduct administrative and enforcement proceedings that can result in censure, fine, profit disgorgement, monetary penalties, suspension, revocation of registration or expulsion of broker-dealers, their registered persons, officers or employees. The principal purpose of regulation and discipline of broker-dealers is the protection of customers and the securities markets rather than protection of creditors and stockholders of broker-dealers.

Limitation on Businesses. The businesses that the Hilltop Broker-Dealers may conduct are limited by its agreements with, and its oversight by, FINRA, other regulatory authorities (including self-regulatory organizations) and federal and state law. Participation in new business lines, including trading of new products or participation on new exchanges or in new countries often requires governmental, FINRA and/or exchange approvals, which may take significant time and resources. References to the Hilltop Broker-Dealers under the heading “Broker-Dealer” shall not include Hilltop Securities Asset Management, LLC unless it is otherwise named or the context otherwise includes it. In addition, the Hilltop Broker-Dealers are operating subsidiaries of Hilltop, which means their activities are further limited by those that are permissible for financial holding companies and subsidiaries of financial holding companies, and as a result, the Hilltop Broker-Dealers and Hilltop may be prevented from entering into new businesses that may be profitable in a timely manner, if at all.

Net Capital Requirements. The SEC, FINRA and various other regulatory authorities have stringent rules and regulations with respect to the maintenance of specific levels of net capital by regulated entities. Rule 15c3-1 of the Exchange Act (the “Net Capital Rule”) requires that a broker-dealer maintain minimum net capital. Generally, a broker-dealer’s net capital is net worth plus qualified subordinated debt less deductions for non-allowable (or non-liquid) assets and other adjustments and operational charges. At December 31, 2025, the Hilltop Broker-Dealers were in compliance with applicable net capital requirements.

The SEC, CFTC, FINRA and other regulatory organizations impose rules that require notification when net capital falls below certain predefined thresholds. These rules also dictate the ratio of debt-to-equity in the regulatory capital composition of a broker-dealer, and constrain the ability of a broker-dealer to expand its business under certain circumstances. If a broker-dealer fails to maintain the required net capital, it may be subject to censure, fine, monetary penalties and other regulatory sanctions, including suspension, revocation of registration or expulsion by the SEC or applicable regulatory authorities, and suspension, revocation or expulsion by these regulators could ultimately lead to the broker-dealer’s liquidation. Additionally, the Net Capital Rule and certain FINRA rules impose requirements that may have the effect of prohibiting or limiting a broker-dealer from distributing or withdrawing capital and requiring prior notice to, and/or approval from, the SEC and FINRA for certain capital withdrawals.

22

Compliance with the net capital requirements may limit our operations and require a greater use of capital. Such rules require that a certain percentage of our assets be maintained in relatively liquid form and therefore act to restrict our ability to withdraw capital from our broker-dealer entities, which in turn may limit our ability to pay dividends, repay debt or redeem or purchase shares of our outstanding common stock. Any change in such rules or the imposition of new rules affecting the scope, coverage, calculation or amount of capital requirements, or a significant operating loss or any unusually large charge against capital, could adversely affect our ability to pay dividends, repay debt, meet our debt covenant requirements or to expand or maintain our operations. In addition, such rules may require us to make substantial capital contributions into one or more of the Hilltop Broker-Dealers in order for such subsidiaries to comply with such rules, either in the form of cash or subordinated loans made in accordance with the requirements of all applicable net capital rules.

Customer Protection Rule. As noted above in Net Capital Requirements, the Hilltop Broker-Dealers that hold customers’ funds and securities are subject to the SEC’s customer protection rule (Rule 15c3-3 under the Exchange Act), which generally provides that such broker-dealers maintain physical possession or control of all fully-paid securities and excess margin securities carried for the account of customers and maintain certain reserves of cash or qualified securities.

The SEC recently adopted amendments to Rule 15c3-3, which became effective as of March 14, 2025, and have a compliance date of June 30, 2026. The amendments will require certain broker-dealers that hold customer cash and securities to perform their reserve computations for accounts of customers and proprietary accounts of broker-dealers daily rather than weekly as is currently required under Rule 15c3-3. Hilltop Securities currently performs its reserve computation on a weekly basis. With the above noted amendment, Hilltop Securities may be moving to a daily reserve computation frequency. Momentum Independent Network is exempt from the computation for determination of reserve requirements and information relating to the possession or control requirements pursuant to 15c3-3 under paragraph (k)(2)(ii) of that Rule. A carrying broker-dealer with “average total credits” under Rule 15c3-3 equal to or greater than $500 million will be required to compute its reserve daily (and must make any necessary reserve deposit by 10 a.m. local time on the second following business day after the required daily computation). The first 12-month determination must be made beginning with the January 1, 2025 FOCUS Report and ending with the December 31, 2025 FOCUS Report. If a carrying broker-dealer meets the $500 million threshold of average total credits over such 12 months, then it must commence computing its reserve on a daily basis no later than six months thereafter (i.e., beginning no later than June 30, 2026). The SEC also adopted a corresponding amendment to Rule 15c3-1 to permit such broker-dealers to reduce aggregate debit items (i.e., customer-related receivables) by 2% rather than 3% as part of the computation. A carrying broker-dealer (including ones below the $500 million threshold) also may voluntarily perform a daily customer reserve computation and apply the 2% debit reduction, provided it notifies its designated examining authority (such as FINRA) in writing at least 30 calendar days prior to beginning the daily customer reserve computation that applies the 2% debit reduction.

Securities Investor Protection Corporation (“SIPC”). The Hilltop Broker-Dealers are subject to the Securities Investor Protection Act and belong to SIPC, whose primary function is to provide financial protection for the customers of failing brokerage firms. SIPC provides protection for customers up to $500,000, of which a maximum of $250,000 may be in cash.

Anti-Money Laundering. The Hilltop Broker-Dealers must also comply with anti-money laundering laws such as the USA PATRIOT Act and other related laws, rules and regulations discussed herein, including FINRA AML requirements, designed to fight international money laundering and to block terrorist access to the U.S. financial system. We are required to have systems and procedures to ensure compliance with such laws and regulations. On August 28, 2024, FinCEN, a division of the Department of Treasury, also issued a new rule imposing anti-money laundering requirements on investment advisers registered with the SEC with respect to their investment advisory businesses. The requirements are similar but not identical to the AML requirements for broker-dealers. The rule is scheduled to go into effect in January 2028. Hilltop Securities Asset Management, LLC, Hilltop Securities and Momentum Independent Network will evaluate how the new AML rule affects their respective businesses.

Bulk Data Rule. The U.S. Department of Justice issued a rule entitled the Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which places additional restriction on certain data transactions involving countries of concern (e.g., China, Russia, Iran) and covered individuals (i.e.,

23

individuals and entities who are designated as such by the U.S. Attorney General or considered “foreign persons” and are majority owned by, organized under the laws of, a primary resident in, or a contractor of, a covered person or country of concern, as applicable) that may impact certain business activities such as vendor engagements, sale or sharing of data, employment of certain individuals, and investor agreements.

CFTC Oversight. Hilltop Securities and Momentum Independent Network are registered as introducing brokers with the CFTC and NFA. The CFTC also has net capital regulations (CFTC Rule 1.17) that must be satisfied. Our futures business is also regulated by the NFA, a registered futures association. Violation of the rules of the CFTC, the NFA or the commodity exchanges could result in remedial actions including fines, registration restrictions or terminations, trading prohibitions or revocations of commodity exchange memberships.

Investment Advisory Activity. Hilltop Securities Asset Management, LLC, Hilltop Securities and Momentum Independent Network are registered with, and subject to oversight and inspection by, the SEC as investment advisers under the Advisers Act. The investment advisory business of our subsidiaries is subject to significant federal regulation, including with respect to wrap fee programs, the management of client accounts, the safeguarding of client assets, client fees and disclosures, transactions among affiliates and recordkeeping and reporting procedures. Legislation and changes in regulations promulgated by the SEC or changes in the interpretation or enforcement of existing laws and regulations often directly affect the method of operation and profitability of investment advisers. The SEC may conduct administrative and enforcement proceedings that can result in censure, fine, profit disgorgement, monetary penalties, suspension, revocation of registration or expulsion of the investment advisory business of our subsidiaries, our officers or employees.

Volcker Rule. Provisions of the Volcker Rule and the final rules implementing the Volcker Rule also restrict certain activities provided by the Hilltop Broker-Dealers, including proprietary trading and sponsoring or investing in “covered funds.

Regulation S-P. The SEC has adopted amendments to Regulation S-P that took effect on December 3, 2025. These amendments impose operationally challenging notification requirements and deadlines and obligations to implement written policies and procedures to govern oversight of service providers that will likely increase associated compliance costs for Hilltop Broker-Dealers.

Regulation Best Interest (“Regulation BI”) and Form CRS Relationship Summary (“Form CRS”). Beginning June 2020, the “best interest” standard requires a broker-dealer to make recommendations of securities transactions, or investment strategies involving securities, to a retail customer without putting its financial interests ahead of the interests of a retail customer. Form CRS requires SEC-registered investment advisers (“RIAs”) and broker-dealers to deliver to retail investors a succinct, plain English summary about the relationship and services provided by the firm and the required standard of conduct associated with the relationship and services. Regulation BI heightens the standard of care for broker-dealers when making investment recommendations and imposes disclosure, conduct and policy and procedural obligations that could impact the compensation our wealth management line of business and its representatives receive for selling certain types of products, particularly those that offer different compensation across different share classes (such as mutual funds and variable annuities). In addition, Regulation BI prohibits a broker-dealer and its associated persons from using the term “adviser” or “advisor” if the broker-dealer is not an RIA or the associated person is not a supervised person of an RIA. Furthermore, the U.S. Department of Labor as well as several states have proposed regulations or taken other actions pertaining to conduct standards for investment advisers and broker-dealers that may result in additional requirements related to our business.

Changing Regulatory Environment. The regulatory environment in which the Hilltop Broker-Dealers (including Hilltop Securities Asset Management, LLC) operate is subject to frequent change. Our business, financial condition and operating results may be adversely affected as a result of new or revised legislation or regulations imposed by the U.S. Congress, the SEC, FINRA or other U.S. and state governmental and regulatory authorities. The business, financial condition and operating results of the Hilltop Broker-Dealers also may be adversely affected by changes in the interpretation and enforcement of existing laws and rules by these governmental and regulatory authorities. In the current era of heightened regulation of financial institutions, the Hilltop Broker-Dealers can expect to incur increasing compliance costs, along with the industry as a whole.

24

Mortgage Origination

PrimeLending and the Bank are subject to a number of laws, rules and regulations with respect to originating, processing, selling and servicing mortgage loans and the issuance and sale of mortgage-backed securities, including regulations and rules issued by the CFPB, FHA, VA, FNMA, FHLMC and GNMA. Those rules and regulations, among other things, prohibit discrimination and establish underwriting guidelines, which include provisions for inspections and appraisals, require credit reports on prospective borrowers and fix maximum loan amounts, and, with respect to VA loans, fix maximum interest rates. Mortgage origination activities are subject to, among others, the Equal Credit Opportunity Act, Fair Housing Act, Federal Truth-in-Lending Act, Secure and Fair Enforcement of Mortgage Licensing Act, Home Mortgage Disclosure Act, Fair Credit Reporting Act and the Real Estate Settlement Procedures Act and the regulations promulgated thereunder which, among other things, prohibit discrimination and require the disclosure of certain basic information to borrowers concerning credit terms and settlement costs. PrimeLending and the Bank are also subject to the Dodd-Frank Act, which includes provisions regarding a customer’s ability to repay, restrictions on variable-rate lending, loan officers’ compensation, risk retention, and disclosure requirements. The Dodd-Frank Act also clarifies that applicable state laws, rules and regulations related to the origination, processing, selling and servicing of mortgage loans continue to apply to PrimeLending. PrimeLending and the Bank are also subject to regulation by the Texas Department of Banking with respect to, among other things, the establishment of maximum origination fees on certain types of mortgage loan products.

The regulatory environment related to mortgage origination, processing, selling and servicing is subject to frequent change. Our business, financial condition and operating results may be adversely affected as a result of new or revised legislation or regulations. Any additional regulatory requirements affecting our mortgage origination operations will result in increased compliance costs and may impact revenue.

Item 1A. Risk Factors.

The following discussion sets forth what management currently believes are the material regulatory, market and economic, liquidity, legal and business and operational risks and uncertainties that could impact our business, results of operations and financial condition. The occurrence of any of the following risks, as well as other risks and uncertainties, including those not currently known to us, could negatively impact our business, results of operations and financial condition and could cause the trading price of our common stock to decline and you could lose all or part of your investment.

Risks Related to our Business

Our allowances for credit losses for loans and debt securities may prove inadequate or we may be negatively affected by credit risk exposures. Also, future additions to our allowance for credit losses will reduce our future earnings.

As a lender, we are exposed to the risk that we could sustain losses because our borrowers may not repay their loans in accordance with the terms of their loans. We maintain allowances for credit losses for loans and debt securities to provide for defaults and nonperformance, which represent an estimate of expected losses over the remaining contractual lives of the loan and debt security portfolios. This estimate is the result of our continuing evaluation of specific credit risks and loss experience, current loan and debt security portfolio quality, present economic, political and regulatory conditions, industry concentrations, reasonable and supportable forecasts for future conditions and other factors that may indicate losses. The determination of the appropriate levels of the allowances for loan and debt security credit losses inherently involves a high degree of subjectivity and judgment and requires us to make estimates of current credit risks and future trends, all of which may undergo material changes. Generally, our nonperforming loans and other real estate owned (“OREO”) reflect operating difficulties of individual borrowers and weaknesses in the economies of the markets we serve.

If management’s assumptions and projections prove to be incorrect, however, the estimate of fair value may be higher than the actual fair value and we may suffer losses in excess of those estimated. Further, the allowance for credit losses established for new loans may prove to be inadequate to cover actual losses, especially if economic conditions worsen.

25

While Bank management endeavors to estimate the allowance to cover anticipated losses over the lives of our loan and debt security portfolios, no underwriting and credit monitoring policies and procedures that we could adopt to address credit risk could provide complete assurance that we will not incur unexpected losses. These losses could have a material adverse effect on our business, financial condition, results of operations and cash flows. In addition, federal regulators periodically evaluate the adequacy of our allowance for credit losses and may require us to increase our provision for credit losses or recognize further loan charge-offs based on judgments different from those of Bank management. Any such increase in our provision for (reversal of) credit losses or additional loan charge-offs could have a material adverse effect on our results of operations and financial condition.

Adverse developments affecting the financial services industry, such as bank failures or concerns involving liquidity, may have a material effect on the Company’s operations.

Historically, high-profile bank failures have increased market uncertainty and concerns regarding the liquidity adequacy of the banking sector as a whole. During these times, the speed and ease with which news and social media commentary spread led depositors to withdraw or attempt to withdraw their funds from these and other financial institutions and caused the stock prices of many financial institutions to become volatile. Although we were not directly affected by these historical bank failures, in the future, events such as these bank failures or negative news or the public perception thereof, could have an adverse effect on our financial condition and results of operations, either directly or through an adverse impact on certain of our customers. Although we were not directly affected by these bank failures, the resulting speed and ease in which news, including social media commentary, led depositors to withdraw or attempt to withdraw their funds from these and other financial institutions as well as caused the stock prices of many financial institutions to become volatile.

Our operational systems and networks have been, and will continue to be, subject to an increasing risk of continually evolving cybersecurity or other technological risks, which could result in a loss of customer business, financial liability, regulatory penalties, damage to our reputation or the disclosure of confidential information.

We rely heavily on communications and information systems to conduct our business and maintain the security of confidential information and complex transactions, which subjects us to an increasing risk of cyber incidents and threats of cyber-attacks from these activities due to a combination of new technologies and the increasing use of the Internet to conduct financial transactions, including the usage of artificial intelligence and automation, as well as a potential failure, interruption or breach in the security of these systems, including those that could result from attacks or planned changes, upgrades and maintenance of these systems. Such cyber incidents, which are becoming increasingly sophisticated through the use of techniques and tools-including artificial intelligence that circumvent security controls, evade detection and remove forensic evidence, or other disruption or failure in our information systems, could result in failures or disruptions in our customer relationship management, securities trading, general ledger, deposits, computer systems, electronic underwriting servicing or loan origination systems; or unauthorized disclosure of confidential and non-public information maintained within our systems. We also utilize relationships with third parties to aid in a significant portion of our information systems, communications, data management and transaction processing. These third parties with which we do business may also be sources of cybersecurity or other technological risks, including operational errors, system interruptions or breaches, unauthorized disclosure of confidential information and misuse of intellectual property, and have experienced cyber-attacks. Evolving technologies and the increased use of artificial intelligence and automation by third parties further increase the risk of cyber-attacks and threats of cyber-attacks against us or those third parties that we depend upon. If our third-party service providers encounter any of these issues, we could be exposed to disruption of service, reputational damages, and litigation risk, any of which could have a material adverse effect on our business.

During the second quarter in 2023, a third-party vendor of the Bank confirmed that data specific to the Bank’s customers was likely obtained in a security incident targeting the vendor’s instance of the MOVEit Transfer Application. As a result of this, an unauthorized party likely obtained information in the vendor’s possession about substantially all of the Bank’s customers, including social security numbers and account numbers. Hilltop Securities was notified by the same vendor that certain of its data was also likely obtained in the incident; however, based on the review conducted to date, we do not have indication that protected or confidential information was present within the information obtained related to Hilltop Securities. Given the widespread use of the MOVEit Transfer Application, additional vendors of ours may have been impacted. We have incurred, and may continue to incur, expenses related to this incident, and we remain subject to risks and uncertainties as a result of the incident, including litigation and additional regulatory scrutiny.

26

The increased prevalence of cybersecurity incidents and threats thereof across a range of industries has resulted in increased legislative and regulatory scrutiny over cybersecurity and calls for additional data privacy laws and regulations at both the state and federal levels. For example, in 2018, the State of California adopted the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (“CCPA”) in 2023, which imposes requirements on companies operating in California and provides consumers with a private right of action if covered companies suffer a data breach related to their failure to implement reasonable security measures. Other state privacy laws with similarities to the CCPA, such as the Texas Data Privacy and Security Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Oregon Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the Utah Consumer Privacy Act, the Virginia Consumer Data Privacy Act, came into force in 2023 and 2024. Nineteen states have enacted comprehensive consumer data privacy laws, all of which will have come into force by 2026. Additionally, under the Gramm-Leach-Bliley Act of 1999 and Regulation S-P, financial institutions are required to protect the privacy and security of non-public personal information. Other state privacy laws with similarities to the CCPA/CPRA, such as the Texas Data Privacy and Security Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Oregon Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the Utah Consumer Privacy Act, the Virginia Consumer Data Privacy Act, came into force in 2023 and 2024. Iowa, Indiana, 31 Table of Contentsand Tennessee have each recently passed their own general consumer privacy laws, which are expected to come into force later in 2025 and 2026, and there have been ongoing discussions and proposals in the US Congress with respect to new federal data privacy and security laws to which we would become subject if enacted. The SEC adopted amendments to Regulation S-P, effective starting on December 3, 2025 that expand the requirements imposed on covered financial institutions, including by requiring the adoption of an incident response program, requiring covered institutions to provide notice in the event of certain data breaches within a specified time period, and imposing additional requirements regarding the engagement and oversight of service providers.

These newly effective, upcoming and evolving laws and regulations could result in increased operating expenses or increase our exposure to the risk of litigation or regulatory inquiries or proceedings.

Although we devote significant resources to maintain and regularly upgrade our systems and networks to safeguard critical business applications, there is no guarantee that these measures or any other measures can provide absolute security. Our computer systems, software and networks may be adversely affected by cyber incidents such as unauthorized access; loss or destruction of data (including confidential client information); account takeovers; unavailability of service; computer viruses or other malicious code; cyber-attacks; ransomware; cyber extortions; and other events. In addition, our protective measures may not promptly detect intrusions, and we may experience losses or incur costs or other damage related to intrusions that go undetected or go undetected for significant periods of time, at levels that adversely affect our financial results or reputation. Further, because the methods used to cause cyber-attacks change frequently, or in some cases cannot be recognized until launched, we may be unable to implement preventative measures or proactively address these methods until they are discovered. Further, because the methods used to cause cyber attacks change frequently, or in some cases cannot be recognized until launched, we may be unable to implement preventative measures or proactively address these methods until they are discovered. Cyber threats may derive from human error, fraud or malice on the part of employees or third parties, or may result from accidental technological failure. Additional challenges are posed by external extremist parties, including foreign state actors, in some circumstances, as a means to promote political ends. If one or more of these events occurs, it could result in the disclosure of confidential client or customer information, damage to our reputation with our clients, customers and the market, customer dissatisfaction, additional costs such as repairing systems or adding new personnel or protection technologies for us and our customers, including credit monitoring, regulatory penalties, fines, remediation costs, exposure to litigation and other financial losses to both us and our clients and customers. If one or more of these events occurs, it could result in the disclosure of confidential client or customer information, damage to our reputation with our clients, customers and the market, customer dissatisfaction, additional costs such as repairing systems or adding new personnel or protection technologies, regulatory penalties, fines, remediation costs, exposure to litigation and other financial losses to both us and our clients and customers. Such events could also cause interruptions or malfunctions in our operations. We maintain cyber risk insurance, but this insurance may not be sufficient to cover all of our losses from any future breaches of our systems.

We continue to evaluate our cybersecurity program and will consider incorporating new practices as necessary to meet the expectations of regulatory agencies in light of such cybersecurity guidance and regulatory actions and settlements for cybersecurity-related failures and violations by other industry participants. Such procedures include management-level engagement and corporate governance, risk management and assessment, technical controls, incident response planning, vulnerability testing, vendor management, intrusion detection monitoring, patch management and staff training. Even if we implement these procedures, however, we cannot assure you that we will be fully protected from a cybersecurity incident, the occurrence of which could adversely affect our reputation and financial condition.

Our banking segment is subject to risk arising from conditions in the commercial real estate market and may be adversely affected by weaknesses in the commercial real estate market.

As of December 31, 2025, commercial real estate loans comprised approximately 41% of our banking segment’s loan portfolio. Commercial real estate loans generally involve a greater degree of credit risk than residential real estate loans because they typically have larger balances and are more affected by adverse conditions in the economy. Because

27

payments on loans secured by commercial real estate often depend upon the successful operation and management of the properties by third-party lessees and the businesses which operate from within them, repayment of such loans may be affected by factors outside the borrower’s control, such as adverse conditions in the real estate market or the economy or changes in government regulations. A failure by the banking segment to have adequate risk management policies, procedures and controls could result in an increased rate of delinquencies in, and increased losses from, our portfolio, which, accordingly, could have a material adverse effect on the Company’s business, financial condition and results of operations.

Our business and results of operations may be adversely affected by unpredictable economic, market and business conditions.

Our business and results of operations are affected by general economic, market and business conditions. The credit quality of our loan portfolio necessarily reflects, among other things, the general economic conditions in the areas in which we conduct our business. Our continued financial success depends to a degree on factors beyond our control, including:

national and local economic conditions, such as the level and volatility of short-term and long-term interest rates, inflation, home prices, unemployment and under-employment levels, energy prices, bankruptcies, household income and consumer spending;
the availability and cost of capital and credit;
incidence of customer fraud; and
federal, state and local laws affecting these matters.

The deterioration of any of these conditions, as we have experienced with past economic downturns, could adversely affect our consumer and commercial businesses and securities portfolios, our level of loan charge-offs and provision for credit losses, the carrying value of our deferred tax assets, the investment portfolio of our insurance segment, our capital levels and liquidity, our securities underwriting business and our results of operations.

Several factors could pose risks to the financial services industry, including tightening monetary policies by central banks, rising energy prices, trade wars, restrictions and tariffs (and uncertainty related thereto); slowing growth in emerging economies; geopolitical matters, including international political unrest, disturbances and conflicts; acts of war and terrorism; pandemics; changes in interest rates; regulatory uncertainty; continued infrastructure deterioration; low oil prices; disruptions in global or national supply chains; and natural disasters. Each of these factors may adversely affect our fees and costs.

Over the last several years, there have been several instances where there has been uncertainty regarding the ability of Congress and the President collectively to reach agreement on federal budgetary and spending matters. A period of failure to reach agreement on these matters, particularly if accompanied by an actual or threatened government shutdown, may have an adverse impact on the U.S. economy. Additionally, a prolonged government shutdown may inhibit our ability to evaluate borrower creditworthiness and originate and sell certain government-backed loans.

Our business is subject to interest rate risk, and fluctuations in interest rates may adversely affect our earnings, capital levels and overall results.

The majority of our assets are monetary in nature and, as a result, we are subject to significant risk from changes in interest rates. Between August 2019 and March 2020, the Federal Open Market Committee of the Federal Reserve Board decreased its target range for the federal funds rate by 200 basis points, while between March 2022 and December 2023, it raised the target range for the federal funds rate by 525 basis points. Between September 2024 and December 2025, the Federal Reserve Board decreased its target range for the federal funds rate by 175 basis points. Changes in interest rates have in the past and may continue to impact our net interest income in our banking segment in the future as well as the valuation of our assets and liabilities in each of our segments. Earnings in our banking segment are significantly dependent on our net interest income, which is the difference between interest income on interest-earning assets, such as loans and securities, and interest expense on interest-bearing liabilities, such as deposits and borrowings. We expect to periodically experience “gaps” in the interest rate sensitivities of our banking segment’s assets and liabilities, meaning

28

that either our interest-bearing liabilities will be more sensitive to changes in market interest rates than our interest-earning assets, or vice versa. In either event, if market interest rates should move contrary to our position, this “gap” may work against us, and our results of operations and financial condition may be adversely affected. Given the potential for an adverse impact on our net interest income associated with interest rate cycle transitions, we periodically evaluate our current “gap” position and determine whether a repositioning of the banking segment’s balance sheet is appropriate. Asymmetrical changes in interest rates, such as if short-term rates increase or decrease at a faster rate than long-term rates, can affect the slope of the yield curve. A continued inversion of the yield curve, as measured by the difference between 10-year U.S. Treasury bond yields and 3-month yields, could adversely impact the net interest income of our banking segment as the spread between interest-earning assets and interest-bearing liabilities becomes further compressed.

As of December 31, 2025, approximately 61% of our loans were advanced to our customers on a variable or adjustable-rate basis and approximately 39% of our loans were advanced to our customers on a fixed-rate basis. As a result, an increase in interest rates could result in increased loan defaults, foreclosures and charge-offs and could necessitate further increases to the allowance for credit losses, any of which could have a material adverse effect on our business, financial condition or results of operations. Alternatively, a decrease in interest rates could negatively impact our margins and profitability. Certain of our variable rate loans only provide for resets of interest rates periodically, which can result in significant periods of time between resets in loan rates, which can negatively impact our margins and profitability. Further, a portion of our adjustable rate loans have interest rate floors at or above the loan's contractual interest rate. As of December 31, 2025, approximately 10% of our total loans’ rates are floored, with most expected to reprice to the loan’s contractual rate at the next reset date. The inability of our loans to adjust downward can contribute to increased income in periods of declining interest rates, although this result is subject to the risks that borrowers may refinance these loans during periods of declining interest rates. Also, when loans are at their floors, there is a further risk that our interest income may not increase as rapidly as our cost of funds during periods of increasing interest rates which could have a material adverse effect on our results of operations.

If we need to offer higher interest rates on checking accounts to maintain current clients or attract new clients, our interest expense will increase, perhaps materially. Furthermore, if we fail to offer interest in a sufficient amount to keep these demand deposits, our core deposits may be reduced, which would require us to obtain funding in other ways or risk slowing our future asset growth.

An increase in the absolute level of interest rates may also, among other things, adversely affect the demand for loans and our ability to originate loans. In particular, if mortgage interest rates increase, the demand for residential mortgage loans and the refinancing of residential mortgage loans will likely decrease, which will have an adverse effect on our income generated from mortgage origination activities. Conversely, a decrease in the absolute level of interest rates, among other things, may lead to prepayments in our loan and mortgage-backed securities portfolios as well as increased competition for deposits. Accordingly, changes in the general level of market interest rates may adversely affect our net yield on interest-earning assets, loan origination volume and our overall results.

Our broker-dealer segment holds securities, principally fixed-income bonds, to support sales, underwriting and other customer activities. If interest rates increase, the value of debt securities held in the broker-dealer segment’s inventory would decrease. Rapid or significant changes in interest rates could adversely affect the segment’s bond sales, trading and underwriting activities. Further, the profitability of our margin and stock lending businesses depends to a great extent on the difference between interest income earned on loans and investments of customer cash balances and the interest expense paid on customer cash balances and borrowings.

In addition, we hold securities that may be sold in response to changes in market interest rates, changes in securities’ prepayment risk, increases in loan demand, general liquidity needs and other similar factors. Such securities are classified as available for sale and are carried at estimated fair value, which may fluctuate with changes in market interest rates. The effects of an increase in market interest rates may result in a decrease in the value of our available for sale investment portfolio.

Market interest rates are affected by many factors outside of our control, including inflation, recession, unemployment, money supply, political factors, international disorder and instability in domestic and foreign financial markets. We may

29

not be able to accurately predict the likelihood, nature and magnitude of such changes or how and to what extent such changes may affect our business. We also may not be able to adequately prepare for, or compensate for, the consequences of such changes. Any failure to predict and prepare for changes in interest rates, or adjust for the consequences of these changes, may adversely affect our earnings and capital levels and overall results of operations and financial condition.

Inflationary pressures and rising prices may affect our results of operations and financial condition.

Inflation rose sharply at the end of 2021 and continued rising into 2025 at elevated levels. While there has been moderation of inflation compared to recent years, the overall rate of inflation remains above the U.S. Federal Reserve’s target levels. Small to medium-sized businesses may be impacted more during periods of high inflation as they are not able to leverage economics of scale to mitigate cost pressures compared to larger businesses. Consequently, the ability of our business customers to repay their loans may deteriorate, and in some cases this deterioration may occur quickly, which would adversely impact our results of operations and financial condition. Similarly, rising interest rates will negatively impact our mortgage business by making home mortgages more expensive for home buyers and by making mortgage refinancing transactions less likely, which would adversely impact our results of operations and financial condition in PrimeLending. Furthermore, a prolonged period of inflation could cause wages and other costs to Hilltop and its subsidiaries to increase, which could adversely affect our results of operations and financial condition.

Our mortgage origination business is subject to fluctuations based upon seasonal and other factors and, as a result, our results of operations for any given quarter may not be indicative of the results that may be achieved for the full fiscal year.

Our mortgage origination business is subject to several variables that can impact loan origination volume, including seasonal and interest rate fluctuations. We typically experience increased loan origination volume from purchases of homes during the second and third calendar quarters, when more people tend to move and buy or sell homes. In addition, an increase in the general level of interest rates may, among other things, adversely affect the demand for mortgage loans and our ability to originate mortgage loans. In particular, if mortgage interest rates increase, the demand for residential mortgage loans and the refinancing of residential mortgage loans will likely decrease, which will have an adverse effect on our mortgage origination activities. Conversely, a decrease in the general level of interest rates, among other things, may lead to increased competition for mortgage loan origination business.

As a result of these variables, our results of operations for any single quarter are not necessarily indicative of the results that may be achieved for a full fiscal year.

We are heavily reliant on technology, and a failure to effectively implement new technological solutions or enhancements to existing systems or platforms could adversely affect our business operations and the financial results of our operations.

Like most financial services companies, we significantly depend on technology to deliver our products and services and to otherwise conduct business. The financial services industry is continually undergoing rapid technology change with frequent introductions of new technology-driven products and services, including increased usage of artificial intelligence and automation.​The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology-driven products and services, including increased usage of artificial intelligence and automation. To remain technologically competitive and operationally efficient, we have either begun the significant investment in or have plans to invest in new technological solutions, substantial core system upgrades and other technology enhancements within each of our operating segments and corporate. Many of these solutions and enhancements have a significant duration, include phased implementation schedules, are tied to critical systems, and require substantial internal and external resources for design and implementation. Many of our competitors have greater resources to develop these and other new technologies without reliance on third-party vendors or developers, which can reduce their costs and exposure to third-party risks, which could put us at a competitive disadvantage.

Additionally, any implementation by us of certain new technologies, such as artificial intelligence, machine learning and other large language models and similar technologies, can expose us to new or increased operational risks, including risks related to our system of internal controls. The implementation of these new technologies may have unintended consequences due to their limitations or failure to use and implement them effectively. Although we take steps to mitigate

30

the risks and uncertainties associated with these solutions and initiatives, we may encounter significant adverse developments in the completion and implementation of these initiatives.

The ultimate effect of any adverse development could damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny, or expose us to civil litigation and possible financial liability, any of which could materially affect us, including our control environment, operating efficiency, and results of operations.

Our geographic concentration may magnify the adverse effects and consequences of any regional or local economic downturn.

We conduct our banking operations primarily in Texas. At December 31, 2025, an aggregate of 76% of the real estate loans in our loan portfolio, and included within the commercial real estate and 1-4 family residential portfolio segments, were secured by properties in Texas. Specifically, 32%, 17%, 6% and 5% of the real estate loans were secured by properties located within the Dallas-Fort Worth, Austin, Houston and San Antonio markets, respectively. Substantially all of these loans are made to borrowers who live and conduct business in Texas. Accordingly, economic conditions in Texas have a significant impact on the ability of the Bank’s customers to repay loans, the value of the collateral securing loans, our ability to sell the collateral upon any foreclosure, and the stability of the Bank’s deposit funding sources. Natural disasters, such as Hurricane Harvey in 2017 and Winter Storm Uri in 2021, may also have an adverse impact on the foregoing conditions. Moreover, natural disasters, such as Hurricane Harvey in 2017 and Winter Storm Uri, in 2021 may also have an adverse impact on local economic conditions. Further, low crude oil prices may have a more profound effect on the economy of energy-dominant states such as Texas. The Bank has loans extended to businesses that depend on the energy industry including those within the exploration and production, oilfield services, pipeline construction, distribution and transportation sectors. If crude oil prices were to be depressed for an extended period, the Bank could experience weaker energy loan demand and increased losses within its energy and Texas-related loan portfolios.

In addition, mortgage origination fee income is dependent to a significant degree on economic conditions in Texas and California. During 2025, 30.2% and 7.8% of our mortgage loans originated (by dollar volume) were collateralized by properties located in Texas and California, respectively. Also, in our broker-dealer segment, 76% of public finance services net revenues were from entities located in Texas, and 88% of retail brokerage service net revenues were generated through locations in Texas and California. Any regional or local economic downturn that affects Texas or, to a lesser extent, California, whether caused by recession, inflation, unemployment, changing oil prices, natural disasters, supply chain disruptions or other factors, may affect us and our profitability more significantly and more adversely than our competitors that are less geographically concentrated, and could have a material adverse effect on our results of operations and financial condition.

An adverse change in real estate market values may result in losses in our banking segment and otherwise adversely affect our profitability.

At December 31, 2025, 66% of the loan portfolio of our banking segment was comprised of loans with commercial or residential real estate as the primary component of collateral. The real estate collateral in each case provides a source of repayment in the event of default by the borrower and may deteriorate in value during the time the credit is extended. A decline in commercial or residential real estate values generally, and in Texas specifically, could impair the value of the collateral underlying a significant portion of the Bank’s loan portfolio and our ability to sell the collateral upon any foreclosure. In the event of a default with respect to any of these loans, the amounts we receive upon sale of the collateral may be insufficient to recover the outstanding principal and interest on the loan. As a result, our results of operations and financial condition may be materially adversely affected by a decrease in real estate market values.

Our risk management processes may not fully identify and mitigate exposure to the various risks that we face, including interest rate, credit, liquidity and market risk.

Our risk management techniques and strategies (as well as those available to the market generally) may not be fully effective in mitigating our risk exposure in all economic market environments or against all types of risk. For example, we might fail to identify or anticipate particular risks, or the systems that we use, and that are used within our business segments generally, may not be capable of identifying certain risks. Certain of our strategies for managing risk are based upon observed historical market behavior. We apply statistical and other tools to these observations to quantify our risk exposure. We apply statistical and other tools to these observations to quantify 36 Table of Contentsour risk exposure. Any failures in our risk management techniques and strategies to accurately identify and quantify our risk

31

exposure could limit our ability to manage risks. In addition, any risk management failures could cause our losses to be significantly greater than the historical measures indicate. Further, our quantified modeling does not take all risks into account. As a result, we also take a qualitative approach in reducing our risk, although our qualitative approach to managing those risks could also prove insufficient, exposing us to material unanticipated losses.

Our hedging strategies may not be successful in mitigating our exposure to interest rate risk.

We use derivative financial instruments, primarily consisting of interest rate swaps, to limit our exposure to interest rate risk within the banking and mortgage origination segments. No hedging strategy can completely protect us, and the derivative financial instruments we elect may not have the effect of reducing our interest rate risk. Poorly designed strategies, improperly executed and documented transactions, inaccurate assumptions or the failure of a counterparty to fulfill its obligations could actually increase our risks and losses. In addition, hedging strategies involve transaction and other costs. Our hedging strategies and the derivatives that we use may not adequately offset the risks of interest rate volatility and could result in or magnify losses, which could have an adverse effect on our financial condition and results of operations.

Our bank lending, margin lending, stock lending, securities trading and execution and mortgage purchase businesses are all subject to credit risk.

We are exposed to credit risk in all areas of our business. The Bank is exposed to the risk that its loan customers may not repay their loans in accordance with their terms, the collateral securing the loans may be insufficient, or its credit loss reserve may be inadequate to fully compensate the Bank for the outstanding balance of the loan plus the costs to dispose of the collateral. Further, our mortgage warehousing activities subject us to credit risk during the period between funding by the Bank and when the mortgage company sells the loan to a secondary investor.

Our broker-dealer business is subject to credit risk if securities prices decline rapidly because the value of our collateral could fall below the amount of the indebtedness it secures. In rapidly appreciating markets, credit risk increases due to short positions. Our securities lending business as well as our securities trading and execution businesses subject us to credit risk if a counterparty fails to perform or if collateral securing its obligations is insufficient. In securities transactions, we are subject to credit risk during the period between the execution of a trade and the settlement by the customer.

Significant failures by our customers, including correspondents, or clients to honor their obligations, or increases in their rates of default, together with insufficient collateral and reserves, could have a material adverse effect on our business, financial condition, results of operations or cash flows.

We depend on our computer and communications systems and an interruption in service would negatively affect our business.

Our businesses rely on electronic data processing and communications systems. The effective use of technology allows us to better serve customers and clients, increases efficiency and reduces costs. Our continued success will depend, in part, upon our ability to successfully maintain, secure and upgrade the capability of our systems, our ability to address the needs of our clients by using technology to provide products and services that satisfy their demands and our ability to retain skilled information technology employees. Significant malfunctions or failures of our computer systems, computer security, software or any other systems in the trading process (e.g., record retention and data processing functions performed by third parties, and third-party software, such as Internet browsers) could cause delays in customer trading activity. Such delays could cause substantial losses for customers and could subject us to claims from customers for losses, including litigation claiming fraud or negligence. In addition, if our computer and communications systems fail to operate properly, regulations would restrict our ability to conduct business. Any such failure could prevent us from collecting funds relating to customer and client transactions, which would materially impact our cash flows. Any computer or communications system failure or decrease in computer system performance that causes interruptions in our operations could have a material adverse effect on our business, financial condition, results of operations or cash flows.

32

Climate change and certain regulations and responses thereto could adversely affect our business and performance, including indirectly through impacts on our customers.

Concerns over the long-term impacts of climate change have led, and will continue to lead, to governmental efforts in the United States to mitigate those impacts. Consumers and businesses also may change their behavior as a result of these concerns. We and our customers will need to respond to new laws and regulations, as well as consumer and business preferences resulting from climate change concerns. We and our customers may face cost increases, asset value reductions and operating process changes. The impact on our customers will likely vary depending on their specific attributes, including reliance on or role in carbon intensive activities. Within Texas, where our banking operations are primarily located and in which we have a significant presence for our broker-dealer and mortgage origination segments, a shift in the current state of the energy industry reflecting a transition from carbon intensive activities to low-carbon or “green” technologies and processes could have a more profound impact on our customers, consumer behavior and the economy. Among the impacts to us could be a drop in demand for our products and services, particularly in certain sectors. In addition, we could face reductions in creditworthiness on the part of some customers or in the value of assets securing loans. Our efforts to take these risks into account in making lending and other decisions may not be effective in protecting us from the negative impact of new laws and regulations or changes in consumer or business behavior.

We are heavily dependent on dividends from our subsidiaries.

We are a financial holding company engaged in the business of managing, controlling and operating our subsidiaries. Hilltop conducts limited material business other than activities incidental to holding stock in PCC, the Bank and Securities Holdings. As a result, we rely substantially on the profitability of, and dividends from, these subsidiaries to pay our operating expenses and to pay interest on our debt obligations and to pay dividends to our stockholders. PCC, the Bank and Securities Holdings are subject to significant regulatory restrictions limiting their ability to declare and pay dividends to us. The Bank and Securities Holdings are subject to significant regulatory restrictions limiting their ability to declare and pay dividends to us. Accordingly, if the Bank and Securities Holdings are unable to make cash distributions to us, then we may be unable to satisfy our operating expense obligations or make interest payments on our debt obligations or pay dividends to our stockholders.

Our broker-dealer business is subject to various risks associated with the securities industry.

Our broker-dealer business is subject to uncertainties that are common in the securities industry. These uncertainties include:

intense competition in the securities industry;
the volatility of domestic and international financial, bond and stock markets;
extensive governmental regulation;
litigation; and
substantial fluctuations in the volume and price level of securities.

As a result of such uncertainties, the revenues and operating results of our broker-dealer segment may vary significantly from quarter to quarter and from year to year. Unfavorable financial or economic conditions could reduce the number and size of transactions in which we provide financial advisory, underwriting and other services. Disruptions in fixed income and equity markets could lead to a decline in the volume of transactions executed for customers and, therefore, to declines in revenues from commissions and clearing services. In addition, the Hilltop Broker-Dealers are operating subsidiaries of Hilltop, which means that their activities are limited to those that are permissible for subsidiaries of a bank holding company.

Market fluctuations could adversely impact our broker-dealer business.

Our broker-dealer segment is subject to risks as a result of fluctuations in the securities markets. Our securities trading and underwriting activities involve the purchase and sale of securities as a principal, which subjects our capital to significant risks. Market conditions could limit our ability to sell securities purchased or to purchase securities sold in such transactions. If interest rates increase, the value of debt securities we hold in our inventory would decrease. Rapid or significant market fluctuations could adversely affect our business, financial condition, results of operations and cash flow.

33

In addition, during periods of market disruption, it may be difficult to value certain assets if comparable sales become less frequent or market data becomes less observable. Certain classes of assets or loan collateral that were in active markets with significant observable data may become illiquid due to the current financial environment. In such cases, asset valuations may require more estimation and subjective judgment.

Our investment advisory business may be affected if our investment products perform poorly.

Poor investment returns and declines in client assets in our investment advisory business, due to either general market conditions or underperformance (relative to our competitors or to benchmarks) by investment products, may affect our ability to retain existing assets, prevent clients from transferring their assets out of products or their accounts, or inhibit our ability to attract new clients or additional assets from existing clients. Any such poor performance could adversely affect our investment advisory business and the advisory fees that we earn on client assets.

Our existing correspondents may choose to perform their own clearing services or move their clearing business to one of our competitors or exit the business.

As the operations of our correspondents grow, our correspondents may consider the option of performing clearing functions themselves, in a process referred to as “self-clearing.” The option to convert to self-clearing operations may become more attractive as the transaction volume of a broker-dealer grows. The cost of implementing the necessary infrastructure may eventually be offset by the elimination of per transaction processing fees that would otherwise be paid to a clearing firm. Additionally, performing their own clearing services allows self-clearing broker-dealers to retain their customers’ margin balances, free credit balances and securities for use in margin lending activities. Furthermore, our correspondents may decide to use the clearing services of one of our competitors or exit the business. Any significant loss of correspondents due to self-clearing, moving their clearing business to a competitor or exiting the business could have a material adverse effect on our business, financial condition, results of operations or cash flows.

Several of our broker-dealer segment’s product lines rely on favorable tax treatment, and changes in federal tax law could impact the attractiveness of these products to our customers.

We offer a variety of services and products, such as individual retirement accounts and municipal bonds, which rely on favorable federal income tax treatment to be attractive to our customers. Should favorable tax treatment of these products be eliminated or reduced, sales of these products could be materially impacted, which could have a material adverse effect on our business, financial condition, results of operations or cash flows.

Our mortgage origination segment is subject to investment risk on loans that it originates.

We intend to sell, and not hold for investment, substantially all residential mortgage loans that we originate through PrimeLending. At times, however, we may originate a loan or execute an interest rate lock commitment (“IRLC”) with a customer pursuant to which we agree to originate a mortgage loan on a future date at an agreed-upon interest rate without having identified a purchaser for such loan. An identified purchaser may also decline to purchase a loan for a variety of reasons. In these instances, we will bear interest rate risk on an IRLC until, and unless, we are able to find a buyer for the loan underlying such IRLC and the risk of investment on a loan until, and unless, we are able to find a buyer for such loan. In addition, in the event of a breach of any representation or warranty concerning a loan, an agency, investor or other third-party could, among other things, require us to repurchase the full amount of the loan or seek indemnification for losses from us, even if the loan is not in default. Further, if a customer defaults on a mortgage payment shortly after the loan is originated, the purchaser of the loan may have a put right, whereby the purchaser can require us to repurchase the loan at the full amount that it paid. During periods of market downturn, we may choose to hold mortgage loans when the identified purchasers have declined to purchase such loans because we may not obtain an acceptable substitute bid price for such loan. The failure of mortgage loans that we hold on our books to perform adequately could have a material adverse effect on our financial condition, liquidity and results of operations. Moreover, if a property securing a mortgage loan on which we own the servicing rights is damaged, including from flooding, we may be responsible for repairs for uninsured damage.

34

If we fail to develop, implement and maintain an effective system of internal control over financial reporting, the accuracy and timing of our financial reporting in future periods may be adversely affected.

The Sarbanes-Oxley Act and related rules and regulations require that management report annually on the effectiveness of our internal control over financial reporting and assess the effectiveness of our disclosure controls and procedures on a quarterly basis. Effective internal controls are necessary for us to provide timely and reliable financial reports and effectively prevent fraud. We have identified control deficiencies that constituted a material weakness in our internal controls and procedures in the past and may experience a material weakness in future years. If we fail to maintain adequate internal controls, our financial statements may not accurately reflect our financial condition. Any material misstatements could require a restatement of our consolidated financial statements, cause us to fail to meet our reporting obligations or cause investors to lose confidence in our reported financial information, leading to a decline in the market value of our securities and we could be subject to sanctions or investigations by the SEC or other regulatory authorities. Any material misstatements could require a restatement of our consolidated financial statements, cause us to fail to meet our reporting obligations or cause investors to lose confidence in our reported financial information, leading to a decline in the market value of our securities.

We ultimately may write-off goodwill and other intangible assets resulting from business combinations.

As a result of purchase accounting in connection with acquisitions, our consolidated balance sheet at December 31, 2025, included goodwill of $267.4 million and other intangible assets, net of accumulated amortization, of $5.6 million. On an ongoing basis, we evaluate whether facts and circumstances indicate any impairment of value of intangible assets. As circumstances change, we may not realize the value of these intangible assets. If we determine that a material impairment has occurred, we will be required to write-off the impaired portion of intangible assets, which could have a material adverse effect on our results of operations in the period in which the write-off occurs. We have goodwill and intangibles balances recorded in connection with acquisitions in our banking, broker-dealer and mortgage origination segments, which we periodically review for impairment. These assets are sensitive to any significant changes in related results of operations of the underlying businesses.

In light of continuing macroeconomic challenges in the mortgage industry, including tight housing inventories and mortgage interest rate levels, our mortgage origination segment experienced lower-than-forecasted operating results during 2025. Given the potential impacts of the operating performance of our reporting segments and overall economic conditions, actual results may differ materially from our current estimates as the scope of such impacts evolves or if the duration of business disruptions is longer than currently anticipated.

We further considered the amount by which fair value exceeded book value in the most recent quantitative analysis and sensitivities performed. At the conclusion of the annual assessment, we determined that as of October 1, 2025 it was more likely than not that the fair value of goodwill and other intangible assets exceeded their respective carrying values. We continue to monitor developments regarding future operating performance of our reportable business segments, overall economic conditions, market capitalization, and any other triggering events or circumstances that may indicate an impairment in the future.

To the extent future operating performance of our reporting segments remains challenged and below forecasted projections, significant assumptions such as expected future cash flows or the risk-adjusted discount rate used to estimate fair value are adversely impacted, or upon the occurrence of what management would deem to be a triggering event that could, under certain circumstances, cause us to perform impairment tests on our goodwill and other intangible assets, an impairment charge may be recorded for that period. In the event that we conclude that all or a portion of our goodwill and other intangible assets are impaired, a non-cash charge for the respective amount of such impairment would be recorded to earnings. Such a charge would have no impact on tangible capital or regulatory capital.

The value of our mortgage servicing rights portfolio fluctuates due to changes in interest rates, which may increase the volatility of our earnings.

As a result of our mortgage servicing business, we have a portfolio of MSR assets, which we grew to historically elevated levels before selling the vast majority of our MSR assets, and at December 31, 2025, the mortgage origination segment’s MSR asset had a fair value of $17.5 million. An MSR is the right to service a mortgage loan – collect principal, interest and escrow amounts – for a fee. An MSR is the right to service a mortgage loan – collect principal, 40 Table of Contentsinterest and escrow amounts – for a fee. We measure and carry all of our residential MSR assets using the fair value measurement method. Fair value is determined as the present value of estimated future net servicing income, calculated based on a

35

number of variables, including assumptions about the likelihood of prepayment by borrowers, and as a result, the value of our MSR assets fluctuates due to changes in interest rates, which may increase volatility of earnings.

The rising interest rate environment that began in 2022 and continued through 2023 resulted in an increased valuation of the MSR asset, however one of the principal risks associated with MSR assets is that in a declining interest rate environment, they will likely lose a substantial portion of their value as a result of higher than anticipated prepayments. Moreover, if prepayments are greater than expected, the cash we receive over the life of the mortgage loans would be reduced. The mortgage origination segment uses derivative financial instruments, including U.S. Treasury bond futures and options, as a means to mitigate market risk associated with MSR assets. However, no hedging strategy can protect us completely, and hedging strategies may fail because they are improperly designed, improperly executed and documented or based on inaccurate assumptions and, as a result, could actually increase our risks and losses. An increasing size of our MSR portfolio may increase our interest rate risk and correspondingly, the volatility of our earnings, especially if we cannot adequately hedge the interest rate risk relating to our MSR assets.

If we increase the size of our MSR portfolio, it could result in us carrying significant asset balances. This could result in a reduction in our liquidity and cause a reduction in our capital ratios. The combination of these impacts along with other impacts, could cause us to not have sufficient liquidity or capital.

All income related to retained servicing, including changes in the value of the MSR asset, is included in noninterest income. Depending on the interest rate environment and market trends related to MSR sales, it is possible that the fair value of our MSR asset may be reduced in the future. If such changes in fair value significantly reduce the carrying value of our MSR asset, our financial condition and results of operations would be negatively affected. If we increase the size of our MSR assets in the future, these risks could increase.

The accuracy of our financial statements and related disclosures could be affected if we are exposed to actual conditions different from the judgments, assumptions or estimates used in our critical accounting estimates.

The preparation of financial statements and related disclosure in conformity with GAAP requires us to make judgments, assumptions and estimates that affect the amounts reported in our consolidated financial statements and accompanying notes. Our critical accounting estimates, which are included in this Annual Report, describe those significant accounting policies and methods used in the preparation of our consolidated financial statements that we consider “critical” because they involve a significant level of estimation uncertainty and have had or are reasonably likely to have a material impact on our financial condition or results of operation. As a result, if future events differ significantly from the judgments, assumptions and estimates in our critical accounting policies, such events or assumptions could have a material impact on our audited consolidated financial statements and related disclosures.

From time to time, the Financial Accounting Standards Board and the SEC change the financial accounting and reporting standards or the interpretation of such standards that govern the preparation of our financial statements. These changes are beyond our control, can be difficult to predict, may require extraordinary efforts or additional costs to implement and could materially impact how we report our financial condition and results of operations. Additionally, we may be required to apply a new or revised standard retrospectively, resulting in the restatement of prior period financial statements in material amounts.

We are dependent on our management team, and the loss of members of our existing management team or other key employees could impair our relationship with customers and adversely affect our business and financial results.

Our success is dependent, to a large degree, upon the continued service and skills of our existing management team and other key employees with long-term customer relationships. Our business and growth strategies are built primarily upon our ability to retain employees with experience and business relationships within their respective segments. The loss of one or more of these key personnel could have an adverse impact on our business because of their skills, knowledge of the market, years of industry experience and the difficulty of finding qualified replacement personnel. In addition, we currently do not have non-competition agreements with certain members of management and other key employees. If any of these personnel were to leave and compete with us, our business, financial condition, results of operations and growth could suffer.

36

A decline in the market for municipal advisory services could adversely affect our business and results of operations.

Our broker-dealer segment has historically earned a material portion of its revenues from advisory fees paid to it by its clients, in large part upon the successful completion of the client’s transaction. New issuances in the municipal market by cities, counties, school districts, state and other governmental agencies, airports, healthcare institutions, institutions of higher education and other clients that the public finance services line of business serves can be subject to significant fluctuations based on factors such as changes in interest rates, property tax bases, budget pressures on certain issuers caused by uncertain economic times and other factors. New issuances in the municipal market by cities, counties, school districts, state and other governmental agencies, airports, healthcare institutions, institutions of 41 Table of Contentshigher education and other clients that the public finance services line of business serves can be subject to significant fluctuations based on factors such as changes in interest rates, property tax bases, budget pressures on certain issuers caused by uncertain economic times and other factors. A decline in the market for municipal advisory services due to the factors listed above could have an adverse effect on our business and results of operations.

We are subject to losses due to fraudulent and negligent acts.

Our banking and mortgage origination businesses expose us to fraud risk from our loan and deposit customers and the parties they do business with, as well as from our employees, contractors and vendors. We rely heavily upon information supplied by third parties, including the information contained in credit applications, property appraisals, title information, equipment pricing and valuation, and employment and income documentation, in deciding which loans to originate and the terms of those loans. If any of the information upon which we rely is misrepresented, either fraudulently or negligently, and the misrepresentation is not detected prior to funding, the value of the collateral may be significantly lower than expected, the source of repayment may not exist or may be significantly impaired, or we may fund a loan that we would not have funded or on terms we would not have extended. While we have underwriting and operational controls in place to help detect and prevent such fraud, no such controls are effective to detect or prevent all fraud. Whether a misrepresentation is made by the applicant, another third-party or one of our own employees, we may bear the risk of loss associated with the misrepresentation. We have experienced losses resulting from fraud in the past, including loan, wire transfer, document and check fraud, and identity theft. We maintain fraud insurance, but this insurance may not be sufficient to cover all of our losses from any fraudulent acts.

Our broker-dealer activities also expose us to fraud risks. When acting as an underwriter, our broker-dealer segment may be liable jointly and severally under federal, state and foreign securities laws for false and misleading statements concerning the securities, or the issuer of the securities, that it underwrites. We are sometimes brought into lawsuits in connection with our correspondent clearing business based on actions of our correspondents. In addition, we may act as a fiduciary in other capacities that could expose us to liability under such laws or under common law fiduciary principles.

Negative publicity regarding us, or financial institutions in general, could damage our reputation and adversely impact our business and results of operations.

Our ability to attract and retain customers and conduct our business could be adversely affected to the extent our reputation is damaged. Reputational risk, or the risk to our business, earnings and capital from negative public opinion regarding our company, or financial institutions in general (such as historic high-profile bank failures), is inherent in our business. Reputational risk, or the risk to our business, earnings and capital from negative public opinion regarding our company, or financial institutions in general (such as the bank failures in the first half of 2023), is inherent in our business. Adverse perceptions concerning our reputation or financial institutions in general could lead to difficulties in generating and maintaining accounts as well as in financing them. In particular, such negative perceptions could lead to decreases in the level of deposits that consumer and commercial customers and potential customers choose to maintain with us. Negative public opinion could result from actual or alleged conduct in any number of activities or circumstances, including lending or foreclosure practices; sales practices; corporate governance and potential conflicts of interest; ethical failures or fraud, including alleged deceptive or unfair lending or pricing practices; regulatory compliance; protection of customer information; cyber-attacks, whether actual, threatened, or perceived; negative news about us or the financial institutions industry generally; general company performance; or actions taken by government regulators and community organizations in response to such activities or circumstances. Evolving federal and state scrutiny of account onboarding, offboarding, and access to banking services could also increase our compliance and reputational risks and we could face criticism or penalties if regulators find our account actions insufficiently supported or discriminatory. Conflicting standards and rising public attention to alleged “debanking” may increase complaint volume, compliance costs, and reputational exposure and any of these developments could materially affect our business, financial condition, or results of operations.​The following discussion sets forth what management currently believes could be the material regulatory, market and economic, liquidity, legal and business and operational risks and uncertainties that could impact our business, results of operations and financial condition. Furthermore, our failure to address, or the perception that we have failed to address, any of the foregoing issues appropriately could impact our ability to keep and attract customers and/or

37

employees and could expose us to litigation and/or regulatory action, which could have an adverse effect on our business and results of operations.

In addition, regulators, investors, customers and the general public are increasingly focused on environmental, social and governance (“ESG”) practices and disclosures, and views about ESG are diverse and rapidly changing and have become a consideration in investment decisions. These shifts in investing priorities may result in adverse effects on the trading price of our common stock if investors determine that we have not made sufficient progress on ESG matters. We could also face potential negative ESG-related publicity in traditional media or social media if stockholders or other stakeholders determine that we have not adequately considered or addressed ESG matters. At the same time, certain stakeholders have increasingly expressed or pursued opposing views, legislation, and investment expectations with respect to ESG initiatives, including the enactment or proposal of “anti-ESG” legislation or policies.

Both advocates and opponents of certain ESG matters are increasingly resorting to a range of activism forms, including media campaigns and litigation, to advance their perspectives. To the extent we are subject to such activism, or we are unsuccessful in navigating competing stakeholder perspectives, it may require us to incur costs or may otherwise adversely impact our ability to attract and retain customers and employees, and our financial condition and results of operations.

We are subject to legal claims and litigation, including potential securities law liabilities, any of which could have a material adverse effect on our business.

We face significant legal risks in each of the business segments in which we operate, and the volume of legal claims and amount of damages and penalties claimed in litigation and regulatory proceedings against financial service companies remains high. These risks often are difficult to assess or quantify, and their existence and magnitude often remain unknown for substantial periods of time. Substantial legal liability or significant regulatory action against us or any of our subsidiaries could have a material adverse effect on our results of operations or cause significant reputational harm to us, which could seriously harm our business and prospects. Further, regulatory inquiries and subpoenas, other requests for information, or testimony in connection with litigation may require incurrence of significant expenses, including fees for legal representation and fees associated with document production. These costs may be incurred even if we are not a target of the inquiry or a party to the litigation. Any financial liability or reputational damage could have a material adverse effect on our business, which, in turn, could have a material adverse effect on our financial condition and results of operations.

Further, in the normal course of business, our broker-dealer segment has been subject to claims by customers and clients alleging unauthorized trading, churning, mismanagement, suitability of investments, breach of fiduciary duty or other alleged misconduct by our employees or brokers. We are sometimes brought into lawsuits based on allegations concerning our correspondents. As underwriters, we are subject to substantial potential liability for material misstatements and omissions in prospectuses and other communications with respect to underwritten offerings of securities. Prolonged litigation producing significant legal expenses or a substantial settlement or adverse judgment could have a material adverse effect on our business, financial condition, results of operations or cash flows.

Because we may use a substantial portion of our remaining excess capital to make acquisitions or effect a business combination, we may become subject to risks inherent in pursuing and completing any such acquisitions or business combination.

We may make acquisitions or effect business combinations with a substantial portion of our remaining excess capital. We may not, however, be able to identify suitable targets, consummate acquisitions or effect a combination on commercially acceptable terms or, if consummated, successfully integrate personnel and operations.

The success of any acquisition or business combination will depend upon, among other things, the ability of management and our employees to integrate personnel, operations, products and technologies effectively, to attract, retain and motivate key personnel and to retain customers and clients of targets. It is possible that the integration process could result in the loss of key employees, the disruption of ongoing business or inconsistencies in standards, controls, procedures and policies that adversely affect our ability to maintain relationships with clients, customers, depositors and

38

employees. In addition, the integration of certain operations will require the dedication of significant management resources, which may temporarily distract management’s attention from our day-to-day business. Any inability to realize the full extent, or any, of the anticipated cost savings and financial benefits of any acquisitions we make, as well as any delays encountered in the integration process, could have an adverse effect on our business and results of operations, which could adversely affect our financial condition and cause a decrease in our earnings per share or decrease or delay the expected accretive effect of the acquisitions and contribute to a decrease in the price of our common stock. In addition, any acquisition or business combination we undertake may consume available cash resources, result in potentially dilutive issuances of equity securities and divert management’s attention from other business concerns. Even if we conduct extensive due diligence on a target business that we acquire or with which we merge, our diligence may not surface all material issues that may adversely affect a particular target business, and we may be forced to later write-down or write-off assets, restructure our operations or incur impairment or other charges that could result in our reporting losses. Consequently, we also may need to make further investments to support the acquired or combined company and may have difficulty identifying and acquiring the appropriate resources.

We may enter, through acquisitions or a business combination, into new lines of business or initiate new service offerings subject to the restrictions imposed upon us as a regulated financial holding company. Accordingly, there is no basis for you to evaluate the possible merits or risks of the particular target business with which we may combine or that we may ultimately acquire.

Subject to the restrictions imposed upon us as a regulated financial holding company, we may also use excess capital to make investments in companies engaged in non-financial activities. These investments could decline in value and are likely to be substantially less liquid than exchange-listed securities, if we are able to sell them at all. If we are required to sell these investments quickly, we may receive significantly less value than if we could otherwise have sold them. Losses on these investments could have an adverse impact on our profitability, results of operations and financial condition.

We may be subject to environmental liabilities in connection with the foreclosure on real estate assets securing the loan portfolio of our banking segment.

Hazardous or toxic substances or other environmental hazards may be located on the real estate that secures our loans. If we acquire such properties as a result of foreclosure, or otherwise, we could become subject to various environmental liabilities. For example, we could be held liable for the cost of cleaning up or otherwise addressing contamination at or from these properties. We could also be held liable to a governmental entity or third-party for property damage, personal injury or other claims relating to any environmental contamination at or from these properties. In addition, we could be held liable for costs relating to environmental contamination at or from our current or former properties. We may not detect all environmental hazards associated with these properties. If we ever became subject to significant environmental liabilities, our business, financial condition, liquidity and results of operations could be harmed.

Risks Related to Our Indebtedness

Our indebtedness may affect our ability to operate our business and may have a material adverse effect on our financial condition and results of operations. We may incur additional indebtedness, including secured indebtedness.

At December 31, 2025, on a consolidated basis, we had total deposits of $10.9 billion and other indebtedness of $0.8 billion, including $150.0 million aggregate principal amount of our 2035 Subordinated Notes. Our indebtedness could have important consequences, such as:

limiting our ability to obtain additional financing to fund our working capital needs, acquisitions, capital expenditures or other debt service requirements or for other purposes;
limiting our ability to use operating cash flow in other areas of our business because we must dedicate a substantial portion of these funds to service debt;
limiting our ability to compete with other companies who are not as highly leveraged, as we may be less capable of responding to adverse economic and industry conditions;
restricting us from making strategic acquisitions, developing properties or pursuing business opportunities;

39

restricting the way in which we conduct our business because of financial and operating covenants in the agreements governing our and certain of our subsidiaries’ existing and future indebtedness, including, in the case of certain indebtedness of subsidiaries, certain covenants that restrict the ability of such subsidiaries to pay dividends or make other distributions to us;
exposing us to potential events of default (if not cured or waived) under financial and operating covenants contained in our or our subsidiaries’ debt instruments that could have a material adverse effect on our business, financial condition and operating results;
increasing our vulnerability to a downturn in general economic conditions or a decrease in pricing of our products; and
limiting our ability to react to changing market conditions in our industry and in our customers’ industries.

In addition to our debt service obligations, our operations require substantial investments on a continuing basis. Our ability to make scheduled debt payments, to refinance our obligations with respect to our indebtedness and to fund capital and non-capital expenditures necessary to maintain the condition of our operating assets and properties, as well as to provide capacity for the growth of our business, depends on our financial and operating performance, which, in turn, is subject to prevailing economic conditions and financial, business, competitive, legal and other factors.

Subject to the restrictions in the indentures governing the 2035 Subordinated Notes, we may incur significant additional indebtedness, including secured indebtedness. If new debt is added to our current debt levels, the risks described above could increase.

We may not be able to generate sufficient cash to service all of our indebtedness, including the 2035 Subordinated Notes, and may be forced to take other actions to satisfy our obligations under our indebtedness that may not be successful.

Our ability to satisfy our debt obligations will depend upon, among other things:

our future financial and operating performance, which will be affected by prevailing economic conditions and financial, business, regulatory and other factors, many of which are beyond our control; and
our future ability to refinance the 2035 Subordinated Notes, which depends on, among other things, our compliance with the covenants in the indentures governing the 2035 Subordinated Notes.

We cannot assure you that our business will generate sufficient cash flow from operations, or that we will be able to obtain financing in an amount sufficient to fund our liquidity needs.

If our cash flows and capital resources are insufficient to service our indebtedness, including the 2035 Subordinated Notes, we may be forced to reduce or delay capital expenditures, sell assets, seek additional capital or restructure or refinance our indebtedness, including the 2035 Subordinated Notes. These alternative measures may not be successful and may not permit us to meet our scheduled debt service obligations, including our obligations under the 2035 Subordinated Notes. Our ability to restructure or refinance our debt will depend on the condition of the capital markets and our financial condition at such time. Any refinancing of our debt could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations. In addition, the terms of existing or future debt agreements may restrict us from adopting some of these alternatives. In the absence of such operating results and resources, we could face substantial liquidity problems and might be required to dispose of material assets or operations, sell equity and/or negotiate with our lenders and other creditors to restructure the applicable debt in order to meet our debt service and other obligations. We may not be able to consummate those dispositions for fair market value or at all. The indentures governing the 2035 Subordinated Notes may restrict, or market or business conditions may limit, our ability to avail ourselves of some or all of these options. The indentures governing the Subordinated Notes may restrict, or market or business conditions may limit, our ability to avail ourselves of some or all of these options. Furthermore, any proceeds that we could realize from any such dispositions may not be adequate to meet our debt service obligations then due.

40

A reduction in our credit rating could adversely affect us or the holders of our securities.

The credit rating agencies rating our indebtedness regularly evaluate us, and credit ratings are based on a number of factors, including our financial strength and ability to generate earnings, as well as factors not entirely within our control, including conditions affecting the financial services industry and the economy and changes in rating methodologies. There can be no assurance that we will maintain our current credit rating. A downgrade of our credit rating could adversely affect our access to liquidity and capital, and could significantly increase our cost of funds, trigger additional collateral or funding requirements and decrease the number of investors and counterparties willing to lend to us or purchase our securities. This could affect our growth, profitability and financial condition, including liquidity.

The indenture governing the 2035 Subordinated Notes contain, and any instruments governing future indebtedness would likely contain, restrictions that limit our flexibility in operating our business.

The indenture governing the 2035 Subordinated Notes contain, and any instruments governing future indebtedness would likely contain, a number of covenants that impose significant operating and financial restrictions on us, including restrictions on our ability to, among other things:

dispose of, or issue voting stock of, certain subsidiaries; or
incur or permit to exist any mortgage, pledge, encumbrance or lien or charge on the capital stock of certain subsidiaries.

Any of these restrictions could limit our ability to plan for or react to market conditions and could otherwise restrict corporate activities. Any failure to comply with these covenants could result in a default under the indenture governing the 2035 Subordinated Notes. Upon a default, holders of the 2035 Subordinated Notes have the ability ultimately to force us into bankruptcy or liquidation, subject to the indenture governing the 2035 Subordinated Notes. Upon a default, holders of the Subordinated Notes have the ability ultimately to force us into bankruptcy or liquidation, subject to the indentures governing the Subordinated Notes. In addition, a default under the indenture governing the 2035 Subordinated Notes could trigger a cross default under the agreements governing our existing and future indebtedness. Our operating results may not be sufficient to service our indebtedness or to fund our other expenditures, and we may not be able to obtain financing to meet these requirements.

Risks Related to our Industry

The soundness of other financial institutions could adversely affect our business.

Our ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty and other relationships. We have exposure to many different counterparties and we routinely execute transactions with counterparties in the financial services industry, including brokers and dealers, commercial banks, credit unions, investment banks, mutual and hedge funds, and other institutional clients. As a result, defaults by, or even negative speculation about, one or more financial services institutions, or the financial services industry in general, have led to market-wide liquidity problems in the past and could lead to losses or defaults by us or by other institutions. For example, past high-profile bank failures created additional financial pressure and uncertainty for other financial institutions and led to increased regulatory scrutiny in the industry. For example, bank failures during the first half of 2023 put additional financial pressure and uncertainty on other financial institutions and led to increased regulatory scrutiny in the industry. Similar bank failures, or the perception thereof, could adversely affect our operations. Many of these transactions expose us to credit risk in the event of default of our counterparty or client. In addition, our credit risk may be exacerbated when we hold collateral that cannot be realized or is liquidated at prices not sufficient to recover the full amount of the receivable due to us. Any such losses could be material and could materially and adversely affect our business, financial condition, results of operations or cash flows.

We face strong competition from other financial institutions and financial service companies, which may adversely affect our operations and financial condition.

Our banking segment primarily competes with national, regional and community banks within various markets where the Bank operates. The banking business in Texas has remained competitive over the past several years, and we expect the level of competition we face to further increase. The Bank also faces competition from many other types of financial institutions, including savings and loan associations, savings banks, finance companies and credit unions. A number of these banks and other financial institutions have substantially greater resources and lending limits, larger branch systems

41

and a wider array of banking services than we do. We also compete with other providers of financial services, such as money market mutual funds, brokerage and investment banking firms, consumer finance companies, pension trusts, governmental organizations and increasingly fintech companies, each of which may offer more favorable financing than we are able to provide. We face competition for deposits and in providing lending products and services to consumers and businesses in our market area. Other factors encountered in competing for savings deposits include convenient office locations, interest rates and fee structures of products offered. Other factors encountered in competing for savings deposits are convenient office locations, interest rates and fee structures of products offered. Direct competition for savings deposits also comes from other commercial bank and thrift institutions, money market mutual funds and corporate and government securities that may offer more attractive rates than insured depository institutions are willing to pay. Competition for loans is based on factors such as interest rates, loan origination fees and the range of services offered by the provider. Competition for loans is based on factors such as interest rates, loan origination fees and 46 Table of Contentsthe range of services offered by the provider. Competition for loans is based on factors such as interest rates, loan origination fees and 46 Table of Contentsthe range of services offered by the provider. Our profitability depends on our ability to compete effectively in these markets. This competition may reduce or limit our margins on banking services, reduce our market share and adversely affect our results of operations and financial condition.

Our broker-dealer business competes directly with numerous other financial advisory and investment banking firms, broker-dealers and banks, including large national and major regional firms and smaller niche companies, some of whom are not broker-dealers and, therefore, not subject to the broker-dealer regulatory framework. In addition to competition from firms currently in the industry, there has been increasing competition from others offering financial services, including automated trading and other services based on technological innovations. Our broker-dealer business competes on the basis of a number of factors, including the quality of advice and service, technology, product selection, innovation, reputation, client relationships and price. Increased pressure created by any current or future competitors, or by competitors of our broker-dealer business collectively, could reduce revenue and loss of market share and could materially and adversely affect our business and results of operations. Increased pressure created by any current or future competitors, or by competitors of our broker-dealer business collectively, could materially and adversely affect our business and results of operations. Further, as a strategic response to changes in the competitive environment, our broker-dealer business may from time to time make certain pricing, service or marketing decisions that also could materially and adversely affect our business and results of operations.

Our mortgage origination business faces vigorous competition from banks and other financial institutions, including large financial institutions as well as independent mortgage banking companies, commercial banks, savings banks and savings and loan associations. Our mortgage origination segment competes on a number of factors including customer service, quality and range of products and services offered, price, reputation, interest rates, closing process and duration, and loan origination fees.

Overall, competition among providers of financial products and services continues to increase as technological advances, including the rise of artificial intelligence and automation, have lowered the barriers to entry for financial technology companies, with consumers having the opportunity to select from a growing variety of traditional and nontraditional alternatives, including online checking, savings and brokerage accounts, online lending, online insurance underwriters, crowdfunding, digital wallets, and money transfer services. The ability of non-banking financial institutions to provide services previously limited to commercial banks has intensified competition. Because non-banking financial institutions are not subject to many of the same regulatory restrictions as banks and bank holding companies, they can often operate with greater flexibility and lower cost structures. This competition could result in the loss of customer deposits and brokerage accounts and lower mortgage originations which could have a material adverse effect on our financial condition and results of operations.

Legal and Regulatory Risks

Acquisitions may be delayed, impeded, or prohibited due to regulatory issues.

Acquisitions by financial institutions are subject to approval by a variety of federal and state regulatory agencies. The process for obtaining these required regulatory approvals can vary materially depending on a number of factors that are not in our control, including the leadership of the relevant agencies. The process for obtaining these required regulatory approvals has become substantially more difficult in recent years. Regulatory approvals could be delayed, impeded, restrictively conditioned or denied due to existing or new regulatory issues we have, or may have, with regulatory agencies, including, without limitation, issues related to the Bank Holding Company Act, the Bank Merger Act, Bank Secrecy Act compliance, CRA issues, fair lending laws, fair housing laws, consumer protection laws, unfair, deceptive, or abusive acts or practices regulations and other similar laws and regulations. Regulatory approvals could be delayed, impeded, restrictively conditioned or denied due to existing or new regulatory issues we have, or may have, with regulatory agencies, including, without limitation, issues related to the Bank Holding Company Act, the Bank Merger Act, Bank Secrecy Act compliance, Community Reinvestment Act issues, fair lending laws, fair housing laws, consumer protection laws, unfair, deceptive, or abusive acts or practices regulations and other similar laws and regulations. We may fail to pursue, evaluate or complete strategic and competitively significant acquisition opportunities as a result of our inability, or perceived or anticipated inability, to obtain regulatory approvals in a timely manner, under reasonable conditions or at all. Difficulties

42

associated with potential acquisitions that may result from these factors could have a material adverse effect on our business, financial condition and results of operations.

We are subject to extensive supervision and regulation that could restrict our activities and impose financial requirements or limitations on the conduct of our business and limit our ability to generate income.

We are subject to extensive federal and state regulation and supervision, including that of the Federal Reserve Board, the Texas Department of Banking, the FDIC, the CFPB, the SEC and FINRA. Banking regulations are primarily intended to protect depositors’ funds, federal deposit insurance funds and the banking system as a whole, not stockholders or other debt holders. Likewise, regulations promulgated by the SEC and FINRA are primarily intended to protect the securities markets and customers of broker-dealer businesses rather than stockholders or other debt holders. Additionally, the Bank is subject to the CFPB’s supervisory and enforcement authority with respect to federal consumer financial laws.

These regulations affect our lending practices, capital structure, capital requirements, investment practices, brokerage and investment advisory activities, dividends and growth, among other things. Failure to comply with laws, regulations or policies could result in enforcement actions, money damages, civil money penalties or reputational damage, as well as sanctions and supervisory actions by regulatory agencies that could subject us to significant restrictions on or suspensions of our business and our ability to expand through acquisitions or branching. Further, our clearing contracts generally include automatic termination provisions that are triggered in the event we are suspended from any of the national exchanges of which we are a member for failure to comply with the rules or regulations thereof. While we have implemented policies and procedures designed to prevent any such violations of rules and regulations, such violations may occur from time to time, which could have a material adverse effect on our financial condition and results of operations.

The U.S. Congress, state legislatures, and federal and state regulatory agencies frequently revise banking and securities laws, regulations and policies. For example, several aspects of the Dodd-Frank Act have affected our business, including, without limitation, increased capital requirements, increased mortgage regulation, restrictions on proprietary trading in securities, restrictions on investments in hedge funds and private equity funds, executive compensation restrictions, potential federal oversight of the insurance industry and disclosure and reporting requirements. It remains difficult to predict how current or potential changes to applicable rules and regulations will affect our business. Compliance with new or changing laws and regulations has resulted and likely will continue to result in additional costs, which could be significant and may adversely impact our results of operations, financial condition, and liquidity. Compliance with new laws and regulations has resulted and likely will continue to result in additional costs, which could be significant and may adversely impact our results of operations, financial condition, and liquidity.

The Bank received a “satisfactory” CRA rating in connection with its most recent CRA performance evaluation. A CRA rating of less than “satisfactory” adversely affects a bank’s ability to establish new branches and impairs a bank’s ability to commence new activities that are “financial in nature” or acquire companies engaged in these activities. Other regulatory exam ratings or findings also may adversely impact our ability to branch, commence new activities or make acquisitions.

We cannot predict whether or in what form any other proposed regulations or statutes will be adopted or the extent to which our business may be affected by any new regulation or statute. These changes become less predictable, yet more likely to occur, following the transition of power from one presidential administration to another, especially as occurred in 2025, when it involves a change in the governing political party. New agency leaders have different priorities and, as a result, there have been and will be a number of proposed changes to regulations, guidance or supervisory tactics that impact our business. Any such changes could subject our business to additional costs, limit the types of financial services and products we may offer and increase the ability of non-banks to offer competing financial services and products, among other things. Additionally, under the current U.S. administration, a level of heightened uncertainty exists with respect to the future of the CFPB, including its structure, staffing, and responsibilities. It remains uncertain whether, or to what extent, changes at the CFPB will impact our business and the overall regulatory environment. We cannot predict whether future executive or legislative actions regarding the CFPB, consumer laws, and related regulations may impact the industry generally, including potential actions that state or other federal regulators may take in response to such executive or legislative actions.

43

We may be subject to more stringent capital requirements in the future.

We are subject to regulatory requirements specifying minimum amounts and types of capital that we must maintain. From time to time, the regulators change these regulatory capital adequacy guidelines. After the recent withdrawal of a previously proposed rule, the federal banking agencies are considering additional changes to the Basel III capital requirements. It is not clear how the proposed rule, if any, will impact Hilltop, PCC or the Bank. If we fail to meet the minimum capital guidelines and other regulatory requirements as applicable to us, we or our subsidiaries may be restricted in the types of activities we may conduct, and we may be prohibited from taking certain capital actions, such as paying dividends and repurchasing or redeeming capital securities.​48 Table of ContentsIf we fail to meet the minimum capital guidelines and other regulatory requirements as applicable to us, we or our subsidiaries may be restricted in the types of activities we may conduct, and we may be prohibited from taking certain capital actions, such as paying dividends and repurchasing or redeeming capital securities.

Failure to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators that, if undertaken, could have an adverse material effect on our financial condition and results of operations. The application of more stringent capital requirements for Hilltop, PCC and the Bank could, among other things, adversely affect our results of operations and growth, require the raising of additional capital, restrict our ability to pay dividends or repurchase shares and result in regulatory actions if we were to be unable to comply with such requirements. The application of more stringent capital requirements for Hilltop and PlainsCapital could, among other things, adversely affect our results of operations and growth, require the raising of additional capital, restrict our ability to pay dividends or repurchase shares and result in regulatory actions if we were to be unable to comply with such requirements.

Periodically, the SEC adopts amendments to Rules 15c3-1 and 15c3-3 under the Exchange Act related to our broker-dealer segment. The implementation of any new requirements from these amendments may increase our cost of regulatory compliance.

The CFPB has issued “ability-to-repay” and “qualified mortgage” rules that may have a negative impact on our loan origination process and foreclosure proceedings, which could adversely affect our business, operating results, and financial condition.

The CFPB’s “qualified mortgage” rule requires mortgage lenders to consider consumers’ ability to repay home loans before extending them credit. The rule describes certain minimum requirements for lenders making ability-to-repay determinations, but does not dictate that they follow particular underwriting models. Lenders are presumed to have complied with the ability-to-repay rule if they issue “qualified mortgages,” which are generally defined as mortgage loans prohibiting or limiting certain risky features. Loans that do not meet the ability-to-repay standard can be challenged in court by borrowers who default and the absence of ability-to-repay status can be used against a lender in foreclosure proceedings. Any loans that we make outside of the “qualified mortgage” criteria, including the newly created “seasoned qualified mortgage” criteria could expose us to an increased risk of liability and reduce or delay our ability to foreclose on the underlying property. Any increases in compliance and foreclosure costs caused by the rule could negatively affect our business, operating results and financial condition.

Risks Related to Our Common Stock

We may issue shares of preferred stock or additional shares of common stock to complete an acquisition or effect a combination or under an employee incentive plan after consummation of an acquisition or business combination, which would dilute the interests of our stockholders and likely present other risks.

The issuance of shares of preferred stock or additional shares of common stock:

may significantly dilute the equity interest of our stockholders;
may subordinate the rights of holders of common stock if preferred stock is issued with rights senior to those afforded our common stock;
could cause a change in control if a substantial number of shares of common stock are issued, which may affect, among other things, our ability to use our net operating loss carry forwards; and
may adversely affect prevailing market prices for our common stock.

Our board of directors, in its sole discretion, may designate and issue one or more series of preferred stock from the authorized and unissued shares of preferred stock. Subject to limitations imposed by law or our articles of incorporation,

44

our board of directors is empowered to determine the designation and number of shares constituting each series of preferred stock, as well as any designations, qualifications, privileges, limitations, restrictions or special or relative rights of additional series. The rights of preferred stockholders may supersede the rights of common stockholders. Preferred stock could be issued with voting and conversion rights that could adversely affect the voting power of the shares of our common stock. The issuance of preferred stock could also result in a series of securities outstanding that would have preferences over the common stock with respect to dividends and in liquidation.

Our common stock price may experience substantial volatility, which may affect your ability to sell our common stock at an advantageous price.

Price volatility of our common stock may affect your ability to sell our common stock at an advantageous price. Market price fluctuations in our common stock may arise due to acquisitions, dispositions or other material public announcements, including those regarding dividends or changes in management, along with a variety of additional factors, including, without limitation, other risks identified in “Forward-looking Statements” and these “Risk Factors.” In addition, the stock markets in general, including the NYSE, have experienced extreme price and trading fluctuations. These fluctuations have resulted in volatility in the market prices of securities that often have been unrelated or disproportionate to changes in operating performance. These broad market fluctuations may adversely affect the market price of our common stock.

Existing circumstances may result in several of our directors having interests that may conflict with our interests.

A director who has a conflict of interest with respect to an issue presented to our board will have no inherent legal obligation to abstain from voting upon that issue. We do not have provisions in our bylaws or charter that require an interested director to abstain from voting upon an issue, and we do not expect to add provisions in our charter and bylaws to this effect. Although each director has a duty to act in good faith and in a manner he or she reasonably believes to be in our best interests, there is a risk that, should interested directors vote upon an issue in which they or one of their affiliates has an interest, their vote may reflect a bias that could be contrary to our best interests. In addition, even if an interested director abstains from voting, the director’s participation in the meeting and discussion of an issue in which he or she has, or companies with which he or she is associated have, an interest could influence the votes of other directors regarding the issue.

Our rights and the rights of our stockholders to take action against our directors and officers are limited.

We are organized under Maryland law, which provides that a director or officer has no liability in that capacity if he or she performs his or her duties in good faith, in a manner he or she reasonably believes to be in our best interests and with the care that an ordinarily prudent person in a like position would use under similar circumstances. In addition, our charter eliminates our directors’ and officers’ liability to us and our stockholders for money damages, except for liability resulting from actual receipt of an improper benefit or profit in money, property or services or active and deliberate dishonesty established by a final judgment and that is material to the cause of action. Our bylaws require us to indemnify our directors and officers for liability resulting from actions taken by them in those capacities to the maximum extent permitted by Maryland law. As a result, our stockholders and we may have more limited rights against our directors and officers than might otherwise exist under common law. In addition, we may be obligated to fund the defense costs incurred by our directors and officers.

Our charter and bylaws contain provisions that could discourage acquisition bids or merger proposals, which may adversely affect the market price of our common stock.

Authority to Issue Additional Shares. Under our charter, our board of directors may issue up to an aggregate of ten million shares of preferred stock without stockholder action. The preferred stock may be issued, in one or more series, with the preferences and other terms designated by our board of directors that may delay or prevent a change in control of us, even if the change is in the best interests of stockholders. At December 31, 2025, no shares of preferred stock were outstanding.

Banking Laws. Any change in control of our company is subject to prior regulatory approval under the Bank Holding Company Act or the Change in Bank Control Act, which may delay, discourage or prevent an attempted acquisition or change in control of us.

45

FINRA. Any change in control (as defined under FINRA rules) of any of the Hilltop Broker-Dealers, including through acquisition, is subject to prior regulatory approval by FINRA which may delay, discourage or prevent an attempted acquisition or other change in control of such broker-dealers.

Restrictions on Calling Special Meeting, Cumulative Voting and Director Removal. Our bylaws include a provision prohibiting holders that do not or have not owned, continuously for at least one year as of the record date of such proposed meeting, capital stock representing at least 15% of the shares entitled to be voted at such proposed meeting, from calling a special meeting of stockholders. Our bylaws include a provision prohibiting holders that do not or have not owned, continuously for at least one year as of the record date of such proposed 50 Table of Contentsmeeting, capital stock representing at least 15% of the shares entitled to be voted at such proposed meeting, from calling a special meeting of stockholders. Our charter does not provide for the cumulative voting in the election of directors. In addition, our charter provides that our directors may only be removed for cause and then only by an affirmative vote of at least two-thirds of the votes entitled to be cast in the election of directors. Any amendment to our charter relating to the removal of directors requires the affirmative vote of two-thirds of all of the votes entitled to be cast on the matter. These provisions of our bylaws and charter may delay, discourage or prevent an attempted acquisition or change in control of us.

There can be no assurance that we will continue to declare cash dividends or repurchase stock.

In October 2016, we announced that our board of directors authorized a dividend program under which we intend to pay quarterly dividends on our common stock, subject to quarterly declarations by our board of directors. During 2025, we declared and paid cash dividends of $0.72 per common share.

In January 2025, our board of directors authorized a stock repurchase program through January 2026, pursuant to which we were authorized to repurchase, in the aggregate, up to $100.0 million of our outstanding common stock, which authorization was increased to $135.0 million in July 2025, and to $185.0 million in October 2025. During 2025, we paid $184.0 million to repurchase an aggregate of 5,705,205 shares of our common stock at an average price of $32.26 per share pursuant to the stock repurchase program. These shares were returned to the pool of authorized but unissued shares of common stock.

In January 2026, our board of directors authorized a new stock repurchase program through January 2027, pursuant to which we are authorized to repurchase, in the aggregate, up to $125.0 million of our outstanding common stock.

Our share repurchases in excess of issuances may be subject to a 1% nondeductible excise tax enacted by the Inflation Reduction Act of 2022, subject to certain limitations.

Any future declarations, amount and timing of any dividends and/or the amount and timing of such stock repurchases are subject to capital availability and the discretion of our board of directors, which must evaluate, among other things, whether cash dividends and/or stock repurchases are in the best interest of our stockholders and are in compliance with all applicable laws and any agreements containing provisions that limit our ability to declare and pay cash dividends and/or repurchase stock. Our ability to pay dividends and/or repurchase stock will depend upon, among other factors, our cash balances and potential future capital requirements for strategic transactions, including acquisitions, the ability of our subsidiaries to pay dividends to Hilltop, capital adequacy requirements and other regulatory restrictions on us and our subsidiaries, policies of the Federal Reserve Board, equity and debt service requirements senior to our common stock, earnings, financial condition, the general economic and regulatory climate and other factors beyond our control that our board of directors may deem relevant. In addition, the amount we spend and the number of shares we are able to repurchase under our stock repurchase program may further be affected by a number of other factors, including the stock price and blackout periods in which we are restricted from repurchasing shares. Our dividend payments and/or stock repurchases may change from time to time, and we cannot provide assurance that we will continue to declare dividends and/or repurchase stock in any particular amounts or at all. A reduction in or elimination of our dividend payments, our dividend program and/or stock repurchases could have a negative effect on our stock price.

An investment in our common stock is not an insured deposit.

An investment in our common stock is not a bank deposit and is not insured or guaranteed by the FDIC, SIPC or any other government agency. Accordingly, you should be capable of affording the loss of any investment in our common stock.

46

Item 1B. Unresolved Staff Comments.

None.

Item 1C. Cybersecurity.

Risk Management and Strategy

Hilltop recognizes the critical importance of protecting company data and the information systems that collect, process and maintain data, and we have developed an enterprise-wide program for assessing, identifying and managing material cybersecurity risks and threats. The systems we utilize include safeguards that are designed to protect against or mitigate possible threats, as well as controls designed to address accountability, availability, integrity and confidentiality of the data. The systems we utilize include safeguards to protect against or mitigate possible threats, as well as controls designed to ensure accountability, availability, integrity and confidentiality of the data. We have implemented security measures to guard against unauthorized access, alteration, disclosure or destruction of data and systems, including accidental loss and destruction. Security measures are implemented to guard against unauthorized access, alteration, disclosure or destruction of data and systems, including accidental loss and destruction. Our program is supported by management and the board of directors.

Organizational Model

Our Information Security Department is comprised of four primary functions:

Information Security Risk assesses technology risks and controls, evaluates application systems’ conformance to internally defined and approved security standards, coordinates audits and examinations for Information Technology (“IT”) and Information Security, as well as tracks open risk issues and exceptions.
IT Security defines security policies and standards, conducts security awareness and training, evaluates security configuration and assesses vulnerability risk.
Security Operations utilizes security solutions to detect and respond to security threats and supports the end-user security needs. We recognize the critical importance of developing, implementing, and maintaining robust cybersecurity measures to safeguard our information systems and protect the confidentiality, integrity and availability of our data.
Security Engineering plans, builds, and maintains technical controls and solutions that enhance our security posture that mitigate risk to the enterprise while assuring the integrity of the engineering design process. Within the Security Engineering department we maintain our Identity and Access Management team to ensure appropriate access to our systems is granted on a least-privileged basis through recurring User Access Reviews.

Managing Material Cybersecurity Risks

As a part of our overall risk management strategy, Information Security Risk conducts risk assessments on the technology environment as well as application systems implemented to support the various business functions of Hilltop based on the Gramm-Leach-Bliley Act guidance. Risks are identified from the Enterprise Risk Management and Internal Audit assessments of IT and Information Security. Information Security then quantifies the incidents and risks that have been identified and reports to the Operations & Strategy Committee, which is comprised of executives from across the enterprise representing disciplines including compliance, regulatory, information technology, risk, finance, and operations, if they meet certain thresholds. The necessary controls are identified to address the risk and this control evaluation contributes to the assessment of the residual risk value. In 2024 and 2025, additional assessments were completed utilizing the FFIEC Cybersecurity Assessment Tool and the Ransomware Self-Assessment Tool for the enterprise. In 2024, additional assessments were completed utilizing the FFIEC Cybersecurity Assessment Tool and the Ransomware Self-Assessment Tool for the enterprise.

Engage Third-Parties on Risk Management

Recognizing the complexity and evolving nature of cybersecurity threats, Hilltop engages with a range of external experts, including cybersecurity assessors, consultants and auditors in evaluating and testing our risk management systems. These partnerships enable us to leverage specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our collaboration with these third-parties includes regular audits, threat assessments, and consultation on security enhancements. In particular, each year we

47

engage a firm to perform internal and external penetration testing. We do not allow the same firm to be engaged for more than three years in an effort to obtain diversity in methods of testing. Additionally, at least every two years, we engage a firm to perform a red-team exercise for a simulated cybersecurity event.

Service Provider Oversight

HTH Procurement processes contract requests, contract renewals and onboard of vendors. Such process creates a single point of entry for all sourcing and contract requests. Vendors who match certain inherent risk levels are then sent to Vendor Risk Management (“VRM”) for further review and due diligence. Vendors who host Non-Public Personally Identifiable Information or vendors who we deem materially critical, regardless of risk, are managed by VRM. The VRM’s due diligence process is risk-based and serves as a verification and analysis tool to assist in the evaluation of risk associated with new vendor relationships and ongoing reviews of inherently high-risk and vital vendors. VRM also is tasked with monitoring managed vendors business continuity and disaster recovery processes.

VRM considers specific factors in performing their due diligence based on the risk profile of the high-risk and vital vendor and services being performed. The specific factors include, but are not limited to, a review of the vendor’s:

Information security and related controls (third-party audit);
Existence of disaster recovery and business continuity program and testing;
Financial status, including reviews of financial statements; and
Geographic location (country risk).

Material findings are reported to the Operations & Strategy Committee. A report of these vendors also is provided to the Risk Committee of the board of directors, which provides updates to the full board of directors.

Risks from Cybersecurity Threats

We face a number of cybersecurity risks in connection with our business. We do not currently believe that any current cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected, or are reasonably likely to materially affect, Hilltop, including its business strategy, results of operations or financial condition. For more information about the cybersecurity risks we face, see Item 1A., “Risk Factors — Our operational systems and networks have been, and will continue to be, subject to an increasing risk of continually evolving cybersecurity or other technological risks, which could result in a loss of customer business, financial liability, regulatory penalties, damage to our reputation or the disclosure of confidential information.”

Governance

The board of directors is acutely aware of the critical nature of managing risks associated with cybersecurity threats. To address the significance of these threats to our operations, customers and stockholders, we have established oversight mechanisms to ensure effective management, oversight and governance in managing risks associated with cybersecurity threats.

Board of Directors Oversight

Our board of directors and the Risk Committee of the board of directors oversee an enterprise-wide approach to risk management, including cybersecurity risks, intended to support the achievement of organizational objectives, including strategic objectives, to improve long-term organizational performance and enhance stockholder value. The Risk Committee is central to the board of directors’ oversight of cybersecurity risks and bears the primary responsibility for this function. The Risk Committee is composed of board members with significant experience in risk management assisting them to oversee cybersecurity risks. The Risk Committee is composed of board members with diverse expertise including, risk management assisting them to oversee cybersecurity risks. The Risk Committee receives regular reports from our Chief Information Security Officer (“CISO”) and provides updates to the full board of directors at each regular meeting of the board of directors. The Risk Committee also reviews all information security plans and policies, which are then recommended to the full board of directors for its review and approval.

48

Management’s Role Managing Risk

Our CISO keeps the Risk Committee informed on cybersecurity risks and developments. Our CISO provides comprehensive briefings to the Risk Committee on a regular basis, with a minimum frequency of four times per year. These briefings encompass a broad range of topics, including:

Current cybersecurity landscape and emerging threats;
Status of ongoing cybersecurity initiatives and strategies;
Incident reports and learnings from any cybersecurity events;
Vulnerability management, including software patching, reviews of risk accepted vulnerabilities (remediated, renewed and top risks) and trends related thereto; and
Compliance with regulatory requirements and industry standards.

In addition to Risk Committee meetings, our CISO generally meets with executive management weekly to provide updates regarding current activities and areas of focus. In the event of a potential or actual cybersecurity event, the CISO immediately notifies the General Counsel at which point the information security incident response plan is activated if warranted. The information security incident response plan provides the procedures for responding, including personnel required to be informed and updated. The board of directors is informed promptly in the event such incident is, or is reasonably expected to have, a material impact on operations or financial condition. We also conduct cybersecurity tabletop exercises each year to ensure our processes and procedures align with our technical controls, and to ensure that the organization is prepared for a security-related event.

Primary responsibility for assessing, monitoring and managing our cybersecurity risks rests with our CISO. Our CISO has over twenty years of experience in the field of cybersecurity and brings a wealth of expertise to his role. With over twenty years of experience in the field of cybersecurity, our CISO brings a wealth of expertise to his role. His background includes extensive experience in all facets of information technology and information security. His background includes extensive experience in all facets of information technology and information security and is well-recognized within the industry.

Our CISO is responsible for our Information Security Program and our information security leaders report directly to our CISO. We also maintain a standing committee, the Information Security Governance Committee, which consists of certain members of executive management, our CISO and information security leaders. Our Information Security Governance Committee allows for direct management reporting for IT Risk management, audit/examination report(s) review, and oversight of our Information Security strategy and program, and daily Security Operations.

Monitor Cybersecurity Incidents

Our CISO is continually informed about the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge acquisition is crucial for the effective prevention, detection, mitigation and remediation of cybersecurity incidents. To assist our information security team in such knowledge acquisition, we subscribe to certain services that provide us alerts on security incidents and threats. Our CISO oversees the implementation of, and the processes for, the regular monitoring of our information systems. This includes the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. As previously noted, in the event of a cybersecurity incident, the information security incident response plan is enacted. This plan includes immediate actions to mitigate the impact of and remediate the incident.

Recently Filed
Click on a ticker to see risk factors
Ticker * File Date
HTH an hour ago
HASI an hour ago
OSCR an hour ago
HCSG an hour ago
MTH an hour ago
MORN an hour ago
DOV an hour ago
PLD an hour ago
CPS an hour ago
EQR an hour ago
VRTX an hour ago
JPM an hour ago
NEE an hour ago
WY an hour ago
HR an hour ago
AON an hour ago
ROKU an hour ago
KMI an hour ago
FROG an hour ago
VRT an hour ago
EXAS an hour ago
UBER an hour ago
AMGN an hour ago
TRUP an hour ago
NTGR an hour ago
INSP an hour ago
LEA 2 hours ago
AAP 2 hours ago
LSCC 2 hours ago
NWL 2 hours ago
TRIP 2 hours ago
OM 2 hours ago
WAB 2 hours ago
TEX 2 hours ago
RHI 2 hours ago
GPI 3 hours ago
HBAN 3 hours ago
FCX 3 hours ago
AGCO 3 hours ago
PII 3 hours ago
CHRW 3 hours ago
CSL 3 hours ago
WEX 3 hours ago
ATMU 4 hours ago
MHO 4 hours ago
ITW 4 hours ago
SXT 4 hours ago
AXTA 4 hours ago
TROW 5 hours ago
DCH 5 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard