Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

Risk Factors - MCBS

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. Risk Factors for a further discussion of risks related to cybersecurity and Item 1C. Cybersecurity for a further discussion of risk management strategies and governance processes related to cybersecurity.

Item 1A. Risk Factors

In addition to the other information contained in this Form 10-K, you should carefully consider the risks described below, as well as the risk factors and uncertainties discussed in our other public filings with the SEC under the caption “Risk Factors” in evaluating us and our business and making or continuing an investment in our stock. Our operations and financial results are subject to various risks and uncertainties, including, but not limited to, the material risks described below. Many of these risks are beyond our control although efforts are made to manage those risks while simultaneously optimizing operational and financial results. The occurrence of any of the following risks, as well as risks of which we are currently unaware or currently deem immaterial, could materially and adversely affect our assets, business, cash flows, condition (financial or otherwise), liquidity, prospects, results of operations and the trading price of our common stock. It is impossible to predict or identify all such factors and, as a result, you should not consider the following factors to be a complete discussion of the risks, uncertainties and assumptions that could materially and adversely affect our assets, business, cash flows, condition (financial or otherwise), liquidity, prospects, results of operations and the trading price of our common stock.

In addition, certain statements in the following risk factors constitute forward-looking statements. Please refer to the section entitled “Cautionary Note Regarding Forward-Looking Statements” beginning on page 3 of this Annual Report.

Risks Related to Our Business

A decline in general business and economic conditions and any regulatory responses to such conditions could have a material adverse effect on our business, financial position, results of operations and growth prospects.

Our business and operations are sensitive to general business and economic conditions in the United States, generally, and particularly in the states of Alabama, Florida, Georgia, New Jersey, New York, Texas and Virginia. Unfavorable or uncertain economic and market conditions could lead to credit quality concerns related to borrower repayment ability and collateral protection as well as reduced demand for the products and services we offer. If the national, regional and local economies experience worsening economic conditions (including persistent inflation), elevated levels of unemployment, adverse effects of the U.S. government’s failure to raise its debt ceiling (including defaulting on its debt obligations or experiencing credit downgrades) or as a result of trade wars and/or tariffs, fluctuations in debt and equity capital markets, increased delinquencies on mortgage, commercial and consumer loans, residential and commercial real estate price declines, and lower home sales and commercial activity, our growth and profitability could be constrained. In addition, economic stress may result in heightened regulatory and supervisory scrutiny or more conservative regulatory expectations, which could limit our ability to grow, deploy capital or return capital to shareholders.

We face strong competition from financial services companies and other companies that offer commercial and retail banking services, which could harm our business. We face strong competition from financial services companies and other companies that offer commercial and retail banking services, which could harm our business.

Many of our competitors offer the same, or a wider variety of, the banking and related financial services we offer within our market areas. These competitors include national banks, regional banks and other community banks, including banks similar to us that primarily serve distinct or multi-ethnic communities. In many instances these national and regional banks have greater resources than we do, and the smaller community banks may have stronger ties in local markets than we do, which may put us at a competitive disadvantage. We also face competition from many other types of financial institutions, including fintech companies, savings associations, finance companies, brokerage firms, insurance companies,

24

credit unions, mortgage banks and other financial intermediaries. Further, our credit union competitors benefit from competitive advantages, including the credit union exemption from paying federal income tax and can, therefore, more aggressively price many products and services. In addition, a number of out-of-state financial intermediaries have opened production offices or otherwise solicit deposits in our market areas. We also compete with many forms of payments offered by both bank and non-bank providers, including a variety of new and evolving alternative payment mechanisms, systems and products, such as aggregators and web-based and wireless payment platforms or technologies, digital or “crypto” currencies, prepaid systems and payment services targeting users of social networks, communications platforms and online gaming. Competition is increasingly focused on digital capabilities, customer experience, speed, and convenience, and failure to meet evolving customer expectations may adversely affect our competitive position. Some competitors may be willing to accept lower returns, assume greater risk, or offer more favorable pricing and terms than we are willing or able to provide, which could place downward pressure on our margins. In addition, some competitors may offer banking and payment services through embedded or platform-based models that reduce the need for customers to maintain traditional banking relationships. Our future success may depend, in part, on our ability to use technology competitively to offer products and services that provide convenience to customers and create additional efficiencies in our operations. If we are unable to match the pace of technological change or the level of investment made by larger or more technologically advanced competitors, we may experience customer attrition or reduced growth opportunities. Further, as a result of the GENIUS Act, passed in 2025 to provide a regulatory framework for stablecoins in the U.S., increased competition may emerge from issuers of stablecoins and providers of related technology.

Increased competition in our markets may result in reduced loans, deposits and commissions and brokers’ fees, gains on sales, servicing fees, as well as reduced net interest margin and profitability. Competition may also increase pressure on compensation and make it more difficult to attract and retain experienced banking and mortgage lending personnel. If we are unable to attract and retain banking and mortgage loan customers and expand our sales market for such loans, we may be unable to continue to grow our business, and our financial condition and results of operations may be adversely affected. If we are unable to attract and retain 24 Table of Contentsbanking and mortgage loan customers and expand our sales market for such loans, we may be unable to continue to grow our business, and our financial condition and results of operations may be adversely affected.

Fluctuations in interest rates have impacted net interest income and may otherwise negatively impact our financial condition and results of operations.

Our earnings and financial condition are dependent to a large degree upon net interest income, which is the difference, or spread, between interest earned on loans, securities and other interest-earning assets and interest paid on deposits, borrowings and other interest-bearing liabilities. When market rates of interest change, the interest we receive on our assets and the interest we pay on our liabilities fluctuates. This may cause decreases in our spread and may adversely affect our earnings and financial condition.

Interest rates are highly sensitive to many factors including, without limitation: the rate of inflation; economic conditions; federal monetary policies; and stability of domestic and foreign markets. Interest rates remained elevated during 2024, with the Federal Reserve slowly decreasing interest rates beginning in the fourth quarter of 2024 through the fourth quarter of 2025. Further changes in interest rates and monetary policy reportedly are dependent upon the Federal Reserve’s assessment of economic data as it becomes available. Increasing interest rates can have a negative impact on our business by reducing the amount of money our customers borrow or by adversely affecting their ability to repay outstanding loan balances that may increase due to adjustments in their variable rates which may lead to an increase in nonperforming assets and a reduction of income recognized, which could compress our net interest margin and adversely affect liquidity

In addition, in a rising interest rate environment we may have to offer more attractive interest rates to depositors to compete for deposits, or pursue other sources of liquidity, such as wholesale funds. Conversely, decreasing interest rates reduce our yield on our variable rate loans and on our new loans, which reduces our net interest income. In addition, lower interest rates may reduce our realized yields on investment securities which would reduce our net interest income and cause downward pressure on net interest margin in future periods. Higher income volatility from changes in interest rates and spreads to benchmark indices could result in a decrease in net interest income and a decrease in current fair market values of our assets. Fluctuations in interest rates impact both the level of income and expense recorded on most of our assets and liabilities and the market value of all interest-earning assets and interest-bearing liabilities, which in turn could have a material adverse effect on our net income, operating results, or financial condition. Fluctuations in interest rates impacts both the level of income and expense recorded on most of our assets and liabilities and the market value of all interest-earning assets and interest-bearing liabilities, which in turn could have a material adverse effect on our net income, operating results, or financial condition.

25

Although we have implemented procedures we believe will reduce the potential effects of changes in interest rates on our net interest income, these procedures may not always be successful as some of these effects are outside of our control. Our interest rate risk management models and assumptions may not accurately predict or fully mitigate the impact of future interest rate changes, particularly during periods of elevated volatility, and a prolonged period of volatile and unstable market conditions would likely increase our funding costs and negatively affect market risk mitigation strategies.

Inflation could negatively impact our business, our profitability and our stock price.

Prolonged periods of inflation may impact our profitability by negatively impacting our fixed costs and expenses, including increasing funding costs and expense related to talent acquisition and retention, and negatively impacting the demand for our products and services. Additionally, inflation may lead to a decrease in consumer and clients purchasing power and negatively affect the need or demand for our products and services. If significant inflation continues, our business could be negatively affected by, among other things, increased default rates leading to credit losses which could decrease our appetite for new credit extensions. These inflationary pressures could result in missed earnings and budgetary projections causing our stock price to suffer. Additionally, the timing and magnitude of inflation’s effects may be difficult to predict and could persist or intensify depending on economic conditions and policy responses

Negative developments in the banking industry could adversely affect our current and projected business operations and our financial condition and results of operations.

Bank failures and related negative media attention may generate significant market trading volatility among publicly traded bank holding companies and, in particular, regional banks like the Company. These developments have and may continue to negatively impact customer confidence in regional banks, which could prompt customers to maintain their deposits with larger financial institutions or otherwise relocate funds. Rapid changes in customer behavior, including accelerated deposit withdrawals facilitated by digital banking channels, could increase liquidity pressures. If we were required to sell a portion of our securities portfolio to address liquidity needs, we may incur losses, including as a result of the negative impact of rising interest rates on the value of our securities portfolio, which could negatively affect our earnings and our capital. If we were required to sell a portion of our securities portfolio to address liquidity needs, we may incur losses, including as a result of the negative impact of rising 25 Table of Contentsinterest rates on the value of our securities portfolio, which could negatively affect our earnings and our capital. While we have taken actions to improve our funding, there is no guarantee that such actions will be successful or sufficient in the event of sudden liquidity needs.

Negative developments in the banking industry may also prompt changes in regulatory and supervisory expectations or actions, including increased examination scrutiny, higher capital or liquidity requirements, or restrictions on growth or capital distributions, which could further constrain our operations and financial flexibility. In addition, bank failures have and could in the future prompt the FDIC to increase deposit insurance costs. Increases in funding, deposit insurance, or other costs as a result of these types of events have and could in the future materially adversely affect our financial condition and results of operations. Further, the disruption following these types of events have and could in the future generate significant market trading volatility among publicly traded bank holdings companies and, in particular, regional banks like the Company.

Liquidity risks could affect operations and jeopardize our business, financial condition, and results of operations.

Liquidity is essential to our business. An inability to raise funds through deposits, borrowings, the sale of loans and/or investment securities and through other sources could have a substantial negative effect on our liquidity. Our most important source of funds consists of our customer deposits. Such deposit balances can decrease when customers perceive alternative investments, such as the stock market, as providing a better risk/return tradeoff. If customers move money out of bank deposits and into other investments, we could lose a relatively low cost source of funds, which would require us to seek wholesale funding alternatives in order to continue to grow, thereby increasing our funding costs and reducing our net interest income and net income. Moreover, competition among U.S. banks and non-banks for customer deposits is intense and may increase the cost of deposits (particularly in an elevated rate environment) or prevent new deposits and may otherwise negatively affect our ability to grow our deposit base. In addition, our access to deposits may be affected by the liquidity and/or cash flow needs of depositors, which may be exacerbated in an inflationary, recessionary, or elevated rate environment. This may cause our deposit accounts to decrease in the future, and any such decrease could have a material adverse impact on our sources of funding.

26

Other primary sources of funds consist of cash from operations, paydown of our existing loan portfolio and sale of loans to investors. Additional liquidity is provided by our ability to borrow from the Federal Reserve Bank of Atlanta and the Federal Home Loan Bank of Atlanta. Recently proposed changes to the Federal Home Loan Bank system could adversely impact the Company’s access to Federal Home Loan Bank borrowings or increase the cost of such borrowings. We also may borrow from third-party lenders from time to time. Our access to funding sources in amounts adequate to finance or capitalize our activities or on terms that are acceptable to us could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry. Our access to funding sources could also be affected by a decrease in the level of our business activity as a result of a downturn in our primary market area or by one or more adverse regulatory actions against us. Our access to funding sources could also be affected 26 Table of Contentsby a decrease in the level of our business activity as a result of a downturn in our primary market area or by one or more adverse regulatory actions against us. .

Any decline in available funding could adversely impact our ability to continue to implement our strategic plan, including our ability to originate loans, invest in securities, meet our expenses, or to fulfill obligations such as repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition and results of operations.

Our business depends on our ability to successfully manage our asset quality and credit risk.

We are subject to the risk of losses resulting from the failure of borrowers, guarantors and related parties to pay us the interest and principal amounts due on their loans. Although we maintain well-defined credit policies and credit underwriting and monitoring and collection procedures, these policies and procedures may not prevent losses, as some of these risks are outside of our control, particularly during periods in which the local, regional or national economy suffers a general decline. The future effects of the continued elevated inflationary and interest rate environment on economic activity could negatively affect the collateral values associated with our existing loans, the ability to liquidate the real estate collateral securing our residential and commercial real estate loans, our ability to maintain loan origination volume and to obtain additional financing, the future demand for or profitability of our lending and services, and the financial condition and credit risk of our customers. Further, in the event of delinquencies, regulatory changes and policies designed to protect borrowers may slow or prevent us from making our business decisions or may result in a delay in our taking certain remediation actions, such as foreclosure. If borrowers fail to repay their loans, our financial condition and results of operations would be adversely affected. Additionally, potential future actions such as the proposed consumer credit card interest rate cap may lead to unprofitable products, especially for riskier borrowers, and could lead to cutting credit lines or eliminating cards, increased reliance on fees and increased debt burdens for those needing credit the most, thereby having the potential to negatively impact bank asset quality

Because a significant portion of our loan portfolio is comprised of commercial and residential real estate loans, negative changes in the economy affecting real estate values and liquidity could impair the value of collateral securing our real estate loans and result in loan and other losses.

At December 31, 2025, approximately 97.6% of our loan portfolio was comprised of loans with real estate as a primary or secondary component of collateral. As a result, adverse developments affecting real estate values in our market areas could increase the credit risk associated with our real estate loan portfolio. The market value of real estate can fluctuate significantly in a short period of time as a result of market conditions in the geographic area in which the real estate is located. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio, significantly impair the value of property pledged as collateral on loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses, which could result in losses that would adversely affect credit quality, profitability, financial condition, and results of operations. Such declines and losses would have a material adverse impact on our business, results of operations and growth prospects. In addition, if hazardous or toxic substances are found on properties pledged as collateral, the value of the real estate could be impaired. If we foreclose on and take title to such properties, we may be liable for remediation costs, as well as for personal injury and property damage. Environmental laws may also require us to incur substantial expenses to address unknown liabilities and may materially reduce the affected property’s value or limit our ability to use or sell the affected property.

27

The residential mortgage loans that we originate consist primarily of non-conforming residential mortgage loans which may be considered less liquid and riskier.

The residential mortgage loans that we originate consist primarily of non-conforming residential mortgage loans, which are typically considered to have a higher degree of risk and are less liquid than conforming residential mortgage loans. We attempt to address this enhanced risk through our underwriting process, including requiring larger down payments and, in some cases, six months principal, interest, taxes and insurance reserves for individuals with no credit score.

Small Business Administration lending is an important part of our business. Our SBA lending program is dependent upon the U.S. federal government, and we face specific risks associated with originating SBA loans.

Our SBA lending program is dependent upon the U.S. federal government. As an approved participant in the SBA Preferred Lender’s Program (an “SBA Preferred Lender”), we enable our clients to obtain SBA loans more efficiently. The SBA periodically reviews the lending operations of participating lenders to assess, among other things, whether the lender exhibits prudent risk management. When weaknesses are identified, the SBA may request corrective actions or impose enforcement actions, including revocation of the lender’s SBA Preferred Lender status. If we lose our status as an SBA Preferred Lender, we may lose some or all of our customers to lenders who are SBA Preferred Lenders, and as a result we could experience a material adverse effect to our financial results. Any changes to the SBA program, including but not limited to changes to the level of guarantee provided by the federal government on SBA loans, changes to program specific rules impacting volume eligibility under the guaranty program, as well as changes to the program amounts authorized by Congress or funding for the SBA program may also have a material adverse effect on our business. Because a significant portion of our SBA lending activity depends on government guarantees and program support, changes in policy, funding priorities or political conditions could disproportionately affect this line of business. In addition, any default by the U.S. government on its obligations or any prolonged government shutdown could, among other things, impede our ability to originate SBA loans or sell such loans in the secondary market, which could materially and adversely affect our business, results of operations and financial condition.

The SBA’s 7(a) Loan Program is the SBA’s primary program for helping start-up and existing small businesses, with financing guaranteed for a variety of general business purposes. Typically, we sell the guaranteed portion of our SBA 7(a) loans in the secondary market. These sales result in premium income for us at the time of sale and create a stream of future servicing income, as we retain the servicing rights to these loans. For the reasons described above, we may not be able to continue originating these loans or selling them in the secondary market. Furthermore, even if we are able to continue to originate and sell SBA 7(a) loans in the secondary market, we might not continue to realize premiums upon the sale of the guaranteed portion of these loans or the premiums may decline due to economic and competitive factors. When we originate SBA loans, we incur credit risk on the non-guaranteed portion of the loans, and if a customer defaults on a loan, we share any loss and recovery related to the loan pro-rata with the SBA. If the SBA establishes that a loss on an SBA guaranteed loan is attributable to significant technical deficiencies in the manner in which the loan was originated, funded or serviced by us, the SBA may seek recovery of the principal loss related to the deficiency from us. Generally, we do not maintain reserves or loss allowances for such potential claims and any such claims could materially and adversely affect our business, financial condition or results of operations.

The non-guaranteed portion of SBA loans that we retain on our balance sheet, as well as the guaranteed portion of SBA loans that we sell, could expose us to various credit and default risks.

We generally retain the non-guaranteed portions of the SBA loans that we originate. The non-guaranteed portion of SBA loans have a higher degree of credit risk and risk of loss as compared to the guaranteed portion of such loans. When we sell the guaranteed portion of SBA loans in the ordinary course of business, we are required to make certain representations and warranties to the purchaser about the SBA loans and the manner in which they were originated. Under these agreements, we may be required to repurchase the guaranteed portion of the SBA loan if we have breached any of these representations or warranties, in which case we may record a loss. In addition, if repurchase and indemnity demands increase on loans that we sell from our portfolio, our liquidity, results of operations and financial condition could be adversely affected.

28

We may not be able to meet our unfunded credit commitments, or adequately reserve for losses associated with our unfunded credit commitments.

A commitment to extend credit is a formal agreement to lend funds to a client as long as there is no violation of any condition established under the agreement. The actual borrowing needs of our customers under these credit commitments have historically been lower than the contractual amount of the commitments. The actual borrowing needs of our customers under these credit commitments 28 Table of Contentshave historically been lower than the contractual amount of the commitments. A significant portion of these commitments expire without being drawn upon. Because of the credit profile of our customers, we typically have a substantial amount of total unfunded credit commitments, which is not reflected on our balance sheet. Actual borrowing needs of our customers may exceed our expected funding requirements, especially during a challenging economic environment when our client companies may be more dependent on our credit commitments due to the lack of available credit elsewhere, the increasing costs of credit, or the limited availability of financings from other sources. Such conditions could result in multiple borrowers drawing on their commitments at the same time, increasing our funding needs and placing additional pressure on our liquidity. The timing and amount of draws on unfunded commitments are difficult to predict and may be correlated with periods of economic stress, when our access to funding sources may also be constrained. Any failure to meet our unfunded credit commitments in accordance with the actual borrowing needs of our customers may have a material adverse effect on our business, financial condition, results of operations or reputation.

We use brokered deposits which may be an unstable and/or expensive deposit source to fund earning asset growth.

We use brokered deposits, as a source of funding to support our asset growth and augment deposits generated from our branch network, which are our principal source of funding. We have established policies and procedures with respect to the use of brokered deposits, which require, among other things, that (i) we limit the amount of brokered deposits as a percentage of total assets, and (ii) our asset liability committee monitors our use of brokered deposits on a regular basis, including interest rates and the total volume of such deposits in relation to our total assets. In the event that our funding strategies call for the use of brokered deposits, there can be no assurance that such sources will be available, or will remain available, or that the cost of such funding sources will be reasonable. Additionally, if the Bank is no longer considered well-capitalized, our ability to access new brokered deposits or retain existing brokered deposits could be affected by market conditions, regulatory requirements or a combination thereof, which could result in most, if not all, brokered deposit sources being unavailable. The inability to utilize brokered deposits as a source of funding could have an adverse effect on our financial position, results of operations and liquidity. In addition, significant reliance on brokered deposits could be perceived negatively by customers, counterparties or investors, which could further affect our funding costs or access to alternative sources of liquidity.

We are highly dependent on our management team, and the loss of our senior executive officers or other key employees could harm our ability to implement our strategic plan, impair our relationships with customers and adversely affect our business, results of operations and growth prospects.

Our success depends, in large part, on our ability to attract and retain key personnel. Competition for the best personnel in most activities we engage in can be intense, as we compete with both smaller banks that may be able to offer bankers with more responsibility and autonomy and larger banks that may be able to offer bankers with higher compensation, resources and support, and we may not be able to hire personnel or to retain them. The unexpected loss of services of one or more of our key personnel could have a material adverse impact on our business because of their skills, knowledge of our market, relationships in the communities we serve, years of industry experience and the difficulty of promptly finding qualified replacement personnel. Although we have employment agreements with certain of our executive officers, there is no guarantee that these officers and other key personnel will remain employed with the Company. If we are unable to successfully plan for and execute the transition or replacement of key members of our management team, our operations and strategic initiatives could be adversely affected.

Nonperforming assets take significant time to resolve and adversely affect our results of operations and financial condition, and could result in further losses in the future.

Our nonperforming assets adversely affect our net income in various ways. We do not record interest income on nonaccrual loans or OREO, thereby adversely affecting our net interest income, net income and returns on assets and equity, and our loan administration costs increase, which together with reduced interest income adversely affects our

29

efficiency ratio. When we take collateral in foreclosure and similar proceedings, we are required to mark the collateral to its then-fair market value, which may result in a loss. These nonperforming loans and OREO also increase our risk profile and the level of capital our regulators believe is appropriate for us to maintain in light of such risks. The resolution of nonperforming assets requires significant time commitments from management and can be detrimental to the performance of their other responsibilities. If we experience increases in nonperforming loans and nonperforming assets, our net interest income may be negatively impacted and our loan administration costs could increase, each of which would have an adverse effect on our net income and related ratios, such as return on assets and equity.

Our provision and allowance for credit losses may prove to be insufficient to absorb potential losses in our loan portfolio.29 Table of ContentsOur provision and allowance for credit losses may prove to be insufficient to absorb potential losses in our loan portfolio.

We make various assumptions and judgments about the collectability of our loan and lease portfolio and utilize these assumptions and judgments when determining the provision and allowance for credit losses. The determination of the appropriate level of the provision for credit losses inherently involves a high degree of subjectivity and requires us to make significant estimates of current credit risks and future trends, all of which may undergo material changes, as we have experienced. Deterioration in economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors both within and outside of our control, may require an increase in the amount reserved in the allowance for credit losses. In addition, bank regulatory agencies periodically review our provision and the total allowance for credit losses and may require an increase in the allowance for credit losses or future provisions for credit losses, based on judgments different than those of management. Any increases in the provision or allowance for credit losses will result in a decrease in our net income and, potentially, capital, and could increase earnings volatility or constrain our ability to deploy capital, and may have a material adverse effect on our financial condition or results of operations. Any increases in the provision or allowance for credit losses will result in a decrease in our net income and, potentially, capital, and may have a material adverse effect on our financial condition or results of operations.

Decreased residential mortgage origination, volume and pricing decisions of competitors may adversely affect our profitability.

Our mortgage operation originates and sells residential mortgage loans and services residential mortgage loans. Changes in interest rates, housing prices, financial stress on borrowers as a result of economic conditions, regulations by the applicable governmental authorities and pricing decisions by our loan competitors may adversely affect demand for our residential mortgage loan products, the revenue realized on the sale of loans, revenues received from servicing such loans for others, and ultimately reduce our net income. New regulations, increased regulatory reviews, and/or changes in the structure of the secondary mortgage markets which we would utilize to sell mortgage loans may be introduced and may increase costs and make it more difficult to operate a residential mortgage origination business.

We could recognize losses on securities held in our securities portfolio, particularly if interest rates increase or economic and market conditions deteriorate.

Changes in interest rates may negatively affect both the returns on and market value of our investment securities. Interest rate volatility can reduce unrealized gains or increase unrealized losses in our portfolio. Interest rates are highly sensitive to many factors including monetary policies, domestic and international economic and political issues, and other factors beyond our control. These changes can negatively impact our other comprehensive income and equity levels through accumulated other comprehensive income, which includes net unrealized gains and losses on our investment securities. Further, such losses could be realized into earnings should liquidity and/or business strategy necessitate the sales of securities in a loss position. Periods of market stress or deposit outflows could increase the likelihood that we would need to sell securities at unfavorable prices. Additionally, actual investment income and cash flows from investment securities that carry prepayment risk, such as mortgage-backed securities and callable securities, may materially differ from those anticipated at the time of investment or subsequently as a result of changes in interest rates and market conditions. In a rising‑rate environment, slower prepayments or extensions of expected maturities could increase interest rate sensitivity and reduce portfolio liquidity. These occurrences could have a material adverse effect on our net interest income or our results of operations.

30

New lines of business or new products and services may subject us to additional risks.

From time to time, we may implement or acquire new lines of business or offer new products and services within existing lines of business.From time to time, we may implement or may acquire new lines of business or offer new products and services within existing lines of business. In developing and marketing new lines of business and new products and services we may invest significant time and resources. We may not achieve target timetables for the introduction and development of new lines of business and new products or services and price and profitability goals may not prove feasible. External factors, such as regulatory compliance obligations, competitive alternatives, and shifting market preferences, may also impact the successful implementation of a new line of business or a new product or service.

In addition, the development or acquisition of new products, services or business lines may involve operational, technological or integration challenges, including reliance on third‑party vendors or strategic partners, which could increase costs or delay implementation. Furthermore, any new line of business and/or new product or service could have a significant impact on the effectiveness of our system of internal controls. If our risk management, compliance or internal control processes do not scale effectively to support new activities, we may be exposed to increased operational, legal or regulatory risk. If our risk management framework is not effective, we could suffer unexpected losses and our business, financial condition, results of operations or growth prospects could be materially and adversely affected. Failure to successfully manage these risks in the development and implementation of new lines of business or new products or services could have a material adverse effect on our business, results of operations and financial condition. In addition, unsuccessful product launches or new business initiatives could adversely affect our reputation and divert management attention from existing operations.

We focus on marketing our services to a limited segment of the population and any adverse change impacting such segment is likely to have an adverse impact on us.30 Table of ContentsWe focus on marketing our services to a limited segment of the population and any adverse change impacting such segment is likely to have an adverse impact on us.

Our marketing focuses primarily on the banking needs of small- and medium-sized businesses, professionals and residents in the markets that we serve, primarily communities with large Asian-American populations. This demographic concentration makes us more prone to circumstances that particularly affect this segment of the population. As a result, our financial condition and results of operations are subject to changes in the economic conditions affecting these communities. Our success depends upon the business activity, population, income levels, deposits and real estate activity in these communities. Although our customers’ business and financial interests may extend well beyond these communities, adverse economic conditions that affect these communities could reduce our growth rate, affect the ability of our customers to repay their loans to us and generally affect our financial condition and results of operations. Because of our geographic concentration, we are less able than regional or national financial institutions to diversify our credit risks across multiple markets. In addition, larger institutions with similar focuses are targeting our market areas. As we grow, we face entrenched multi-ethnic-oriented banks with larger resources in our new markets, which may be able to offer broader product offerings, more aggressive pricing or greater technological capabilities, placing us at a competitive disadvantage. As we grow, we face entrenched multi-ethnic-oriented banks with larger resources in our new markets.

The costs and effects of litigation, investigations or similar matters, or adverse facts and developments related thereto, could materially affect our business, operating results and financial condition.

We may be involved from time to time in a variety of litigation, investigations or similar matters arising out of our business, including regulatory, supervisory and civil proceedings.We may be involved from time to time in a variety of litigation, investigations or similar matters arising out of our business. The outcome of such matters is inherently difficult to predict, and we may not prevail in any particular matter. Any claims asserted against us, regardless of merit or ultimate outcome, may require significant management time and financial resources and could harm our reputation. Adverse judgments, settlements or civil money penalties in litigation or investigations could result in substantial costs, including damages, fines, penalties, remediation expenses or restrictions on our business activities, and could materially adversely affect our business, financial condition and results of operations. Our insurance coverage may not be sufficient to cover all claims, losses or liabilities, and insurance coverage may become more costly or less available over time. Banking institutions are also increasingly subject to private litigation, including class action lawsuits and claims based on evolving legal theories relating to lending practices, account terms, employment matters or other aspects of their operations. We may also be subject to regulatory investigations, examinations or enforcement actions that could result in fines, penalties, customer remediation requirements, or other supervisory actions. Such matters could expose us to significant liability, increased regulatory scrutiny, ongoing compliance or reporting obligations, or reputational harm. Although we seek to manage litigation risk through internal controls, compliance programs, training, insurance and active litigation

31

management, the commencement, outcome and magnitude of litigation or investigations cannot be predicted with certainty.

Our ability to maintain our reputation is critical to the success of our business, and the failure to do so may materially adversely affect our business and the value of our common stock.

We are a community bank, and our reputation is one of the most valuable components of our business. Threats to our reputation can come from many sources, including adverse sentiment about financial institutions generally, unethical practices, employee misconduct, failure to deliver minimum standards of service or quality, compliance deficiencies, security breaches, litigation, investigations and other proceedings, and questionable or fraudulent activities of our customers. Negative publicity regarding our business, employees, or customers, with or without merit, may result in the loss of customers, investors and employees, costly litigation, a decline in revenues and increased government regulation. If our reputation is negatively affected, by the actions of our employees or otherwise, our business and, therefore, our operating results and the value of our common stock may be materially adversely affected.

Our risk management framework may not be effective in mitigating risks and/or losses to us.

Our risk management framework is comprised of various processes, systems and strategies, and is designed to manage the types of risk to which we are subject, including, among others, credit, market, liquidity, operational, interest rate and compliance. Our framework also includes financial or other modeling methodologies that involve management assumptions and judgment. Our risk management framework may not be effective under all circumstances and may not adequately mitigate any risk or loss to us. If our risk management framework is not effective, we could suffer unexpected losses and our business, financial condition, results of operations or growth prospects could be materially and adversely affected. We may also be subject to potentially adverse regulatory consequences.

We have a continuing need for technological change, and we may not have the resources to effectively implement new technology or we may experience operational challenges when implementing new technology.

The financial services industry is continually undergoing rapid technological changes with frequent introductions of new technology-driven products and services (including those related to or involving artificial intelligence, machine learning, blockchain and other distributed ledger technologies), and an established and growing demand for mobile and other phone and computer banking applications. In addition to better serving customers, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success will depend in part upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands for convenience as well as to create additional efficiencies in our operations as we continue to grow and expand our market area.

Many of our larger competitors have substantially greater resources to invest in technological improvements. As a result, they may be able to offer additional or more convenient products compared to those that we will be able to provide, which would put us at a competitive disadvantage. We may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to our customers, and even if we implement such products and services, we may incur substantial costs in doing so. The implementation of new technologies may also require changes to existing systems, processes and controls and may increase our reliance on thirdparty vendors, which could expose us to additional operational, regulatory or compliance risks. Failure to successfully keep pace with technological change affecting the financial services industry could have a material adverse impact on our business, financial condition and results of operations.

System failure or compromises of our network security could subject us to increased operating costs as well as litigation and other liabilities.

The computer systems and network infrastructure we use, including those we maintain with our service providers and vendors, could be vulnerable to hardware and cyber security issues. Our operations are dependent upon our ability to protect our computer equipment against damage from fire, power loss, telecommunications failure, natural disasters such as earthquakes, tornadoes and hurricanes, or a similar catastrophic event. We could also experience a cybersecurity incident

32

by intentional or negligent conduct on the part of employees or other internal or external sources, including our third-party vendors and cyber criminals through, for example, phishing attempts, brute force attacks, denial of service attacks, viruses or other malicious code, exploiting software vulnerabilities (including “zero-day attacks”), ransomware or other malware and supply chain attacks and other disruptive problems caused by criminal threat actors. Any damage or failure that causes an interruption in our operations could have an adverse effect on our financial condition and results of operations. In addition, our operations are dependent upon our ability to protect the computer systems and network infrastructure utilized by us, including our internet banking activities, against damage from physical break-ins, cyberattacks and other disruptive problems caused by criminal threat actors. Such cyberattacks and other technology disruptions would jeopardize the security of information stored in and transmitted through our computer systems and network infrastructure, and those maintained by our service providers and vendors, which may result in significant liability, reputational damage and inhibit the use of our internet banking services by current and potential customers, any of which may result in a material adverse impact on our financial condition, results of operations or the market price of our common stock. As cyber threats continue to evolve and become more frequent, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. In addition, as the regulatory environment related to information security, data collection and use, and privacy becomes increasingly rigorous, with new and constantly changing requirements applicable to our business, compliance with those requirements could also result in additional costs.

We and our third-party vendors are under continuous threat of loss due to hacking and cyberattacks especially as we continue to expand client capabilities to utilize internet and other remote channels to transact business. These cyber risks include increased phishing, malware, and other cybersecurity attacks described above, vulnerability to disruptions of our and our third-party vendors’ information technology infrastructure and telecommunications systems for remote operations, increased risk of unauthorized dissemination of confidential information, limited ability to restore the systems in the event of a systems failure or interruption, greater risk of a cybersecurity incident resulting in destruction or misuse of valuable information, and potential impairment of our ability to perform critical functions, including wiring funds, all of which could expose us to risks of data or financial loss, litigation and liability and could seriously disrupt our operations and the operations of any impacted customers.

To date, none of foregoing types of attacks have had a material effect on our business or operations and we maintain a system of internal controls and insurance coverage to mitigate against operational risks, including data processing system failures and errors and customer or employee fraud. However, no assurances can be provided that we (or our third-party vendors) may not suffer from such an attack in the future that may cause us material harm, especially in light of the risks being posed by the proliferation of new technologies, including artificial intelligence, the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of cybercriminals and other external parties. However, no assurances can be provided that we (or our third-party vendors) may not suffer from such an attack in the future that may cause us material harm, especially in light of the risks being posed by the proliferation of new technologies, the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of cybercriminals and other external parties. .

Our operations could be interrupted if our third-party service providers experience difficulty, terminate their services or fail to comply with banking regulations.

We depend to a significant extent on a number of relationships with third-party service providers. Specifically, we receive core systems processing, essential web hosting, deposit processing and other processing services from third-party service providers. If these third-party service providers experience financial, operational, or technological difficulties or terminate their services and we are unable to replace them with other suitable service providers, our operations could be interrupted. If an interruption were to continue for a significant period of time, our business, financial condition and results of operations could be adversely affected, perhaps materially. Even if we are able to replace our service providers, it may be at a higher cost to us, which could adversely affect our business, financial condition and results of operations.

The developments and use of artificial intelligence (“AI”) presents risks and challenges that may adversely impact our business.The developments and use of artificial intelligent (AI) presents risks and challenges that may adversely impact our business.

The Company or its third-party (or fourth party) vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to the Company’s business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as

33

provisions in intellectual property, privacy, security, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in the Company’s implementation of AI technology and increase the Company’s compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may produce output or take action that is incorrect, that reflects biases included in the data on which they are trained, that results in the release of private, confidential, or proprietary information, that infringes on the intellectual property rights of others, or that is otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, the Company may rely on AI models developed by third parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third parties have taken to limit the risks associated with the output of their models, matters over which the Company may have limited visibility. Any of these risks could expose the Company to liability or adverse legal or regulatory consequences, harm the Company’s reputation and the public perception of its business or the effectiveness of its security measures and risk‑management practices, or place us at a competitive disadvantage if we are unable to adopt or govern AI technologies effectively relative to our peers.

We depend on the accuracy and completeness of information provided by customers and counterparties and any misrepresented information could adversely affect our business, financial condition and results of operations.

In deciding whether to extend credit or to enter into other transactions with customers and counterparties, we rely on information furnished to us by or on behalf of such customers and counterparties, including financial statements and other financial information. We also rely on representations of customers and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. We also rely on representations of customers and counterparties as to the accuracy and completeness 33 Table of Contentsof that information and, with respect to financial statements, on reports of independent auditors. Such information could turn out to be inaccurate, including as a result of fraud on behalf of our customers, counterparties or other third parties. In times of increased economic stress, we are at an increased risk of fraud losses. We cannot make assurances that our underwriting and operational controls will prevent or detect such fraud or that we will not experience fraud losses or incur costs or other damages related to such fraud. Our customers may also experience fraud in their businesses which could adversely affect their ability to repay their loans or make use of our services. Our exposure and the exposure of our customers to fraud may increase our financial risk and reputation risk as it may result in unexpected credit losses that exceed those that have been provided for in our allowance for credit losses. Reliance on inaccurate or misleading information from our customers, counterparties and other third parties, including as a result of fraud, could have a material adverse impact on our business, financial condition and results of operations.

Our accounting estimates and risk management processes rely on analytical and forecasting models.

Processes that management uses to estimate our current expected credit losses and to measure the fair value of financial instruments, as well as the processes used to estimate the effects of changing interest rates and other market measures on our financial condition and results of operations, depend upon the use of analytical and/or forecasting models. These models reflect assumptions that may not be accurate, particularly in times of market stress or other unforeseen circumstances. Even if these assumptions are accurate, the models may prove to be inadequate or inaccurate because of other flaws in their design or their implementation.

If the models that management uses for interest rate risk and asset liability management are inadequate, we may incur increased or unexpected losses upon changes in market interest rates or other market measures. If the models that management uses for determining our expected credit losses are inadequate, the ACL may not be sufficient to support future charge offs. If the models that management uses to measure the fair value of financial instruments are inadequate, the fair value of such financial instruments may fluctuate unexpectedly or may not accurately reflect what we could realize upon sale or settlement of such financial instruments. Any such failure in management’s analytical or forecasting models could have a material adverse effect on our business, financial condition and results of operations.

34

Changes in accounting standards could materially impact our financial statements.

From time to time, the FASB or the Securities and Exchange Commission, or SEC, may change the financial accounting and reporting standards that govern the preparation of our financial statements. Such changes may result in us being subject to new or changing accounting and reporting standards. In addition, the bodies that interpret the accounting standards (such as banking regulators or outside auditors) may change their interpretations or positions on how these standards should be applied. These changes may be beyond our control, can be hard to predict and can materially impact how we record and report our financial condition and results of operations. In some cases, we could be required to apply a new or revised standard retrospectively, or apply an existing standard differently, also retrospectively, in each case resulting in our needing to revise or restate prior period financial statements.

Failure to maintain effective internal controls over financial reporting could have a material adverse effect on our business and stock price.

Management regularly monitors, reviews and updates our disclosure controls and procedures, including our internal control over financial reporting. Any system of controls, however well designed and operated, is based in part on certain assumptions and can provide only reasonable assurances that the controls will be effective. The effectiveness of our internal controls also depends on the performance of individuals, and human error, misconduct or changes in personnel could compromise the effectiveness of our controls. Any failure or circumvention of our controls and procedures or failure to comply with regulations related to controls and procedures could have a material adverse effect on our business, results of operations and financial condition. Failure to achieve and maintain an effective internal control environment could prevent us from accurately reporting our financial results, preventing or detecting fraud or providing timely and reliable financial information pursuant to our reporting obligations, which could result in a material weakness in our internal controls over financial reporting and the restatement of previously filed financial statements and could have a material adverse effect on our business, financial condition and results of operations. Further, ineffective internal controls could cause our investors to lose confidence in our financial information, which could affect the trading price of our common stock.

Risks Related to Legislative and Regulatory Events

We are subject to extensive government regulation that could limit or restrict our activities, which in turn may adversely impact our ability to increase our assets and earnings.

We operate in a highly regulated environment and are subject to supervision and regulation by a number of governmental regulatory agencies, including the Federal Reserve, the DBF and the FDIC. Regulations adopted by these agencies, which are generally intended to provide protection for depositors and customers rather than for the benefit of shareholders, govern a comprehensive range of matters relating to ownership and control of our shares, our acquisition of other companies and businesses, permissible activities for us to engage in, maintenance of adequate capital levels, and other aspects of our operations. These bank regulators possess broad authority to prevent or remedy unsafe or unsound practices or violations of law. Regulatory authorities also have significant discretion in the interpretation, application and enforcement of laws and regulations, and may impose supervisory expectations or informal actions that are not codified in statute or regulation. The laws and regulations applicable to the banking industry could change at any time and we cannot predict the effects of these changes on our business, profitability or growth strategy. Increased regulation could increase our cost of compliance and adversely affect profitability. Moreover, certain of these regulations contain significant punitive sanctions for violations, including monetary penalties and limitations on a bank’s ability to implement components of its business plan, such as expansion through mergers and acquisitions or the opening of new branch offices. In addition, changes in regulatory requirements may add costs associated with compliance efforts. Furthermore, government policy and regulation, particularly as implemented through the Federal Reserve System, significantly affect credit conditions. Negative developments in the financial industry and the impact of new legislation and regulation in response to those developments could negatively impact our business operations and adversely impact our financial performance. In addition, the potential erosion of Federal Reserve independence could negatively impact financial markets and impact our profitability. See Supervision and Regulation above for an additional discussion of the extensive regulation and supervision that the Company and the Bank are subject to.

35

Federal and state regulators periodically examine our business, and we may be required to remediate adverse examination findings.

The Federal Reserve, the FDIC, and the DBF periodically examine our business, including our compliance with laws and regulations. If, as a result of an examination, a banking agency were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, liquidity, interest rate sensitivity or other aspects of any of our operations had become unsatisfactory, or that we were in violation of any law or regulation, they may take a number of different remedial actions as they deem appropriate. These actions include the power to enjoin “unsafe or unsound” practices, to require affirmative action to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil money penalties, to fine or remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate our deposit insurance and place us into receivership or conservatorship. Any regulatory action against us could have an adverse effect on our business, financial condition and results of operations. Additionally, significant transactions, such as the recently-completed transaction with First IC Corporation, may result in heightened regulatory or supervisory scrutiny, increased examination activity or additional remediation expectations, which could increase compliance costs or limit management flexibility during the integration period.

Changes to monetary policy by the Federal Reserve could adversely impact our results of operations.

The Federal Reserve is responsible for regulating the supply of money in the United States, including through open market operations and other tools used to influence economic activity and price stability, as well as setting monetary policy.The Federal Reserve is responsible for regulating the supply of money in the United States, including open market operations used to stabilize prices in times of economic stress, as well as setting monetary policies. Changes in monetary policy, including the pace, timing and magnitude of interest rate increases or decreases, as well as changes in liquidity conditions, may be volatile and difficult to predict. These actions strongly influence our rate of return on certain investments, our hedge effectiveness for mortgage servicing and our mortgage origination pipeline, as well as our cost of funds for lending and investing. Monetary policy actions may also affect asset valuations, deposit pricing and availability, borrower behavior and overall credit conditions, all of which could adversely impact our liquidity, results of operations, financial condition and capital position. In addition, changes in monetary policy may negatively affect the financial condition of our customers by increasing borrowing costs or reducing access to credit, which could result in increased delinquencies, reduced loan demand or lower profitability. We cannot predict the nature or timing of future changes in monetary, economic or other policies or the effect that they may have on our business activities, financial condition or results of operations. The Company cannot predict the nature or timing of future changes in monetary, economic, or other policies or the effect that they may have on the Company's business activities, financial condition and results of operations.

We are subject to federal and state fair lending laws, and failure to comply with these laws could lead to material penalties.

Federal and state fair lending laws and regulations, such as the Equal Credit Opportunity Act and the Fair Housing Act, impose nondiscriminatory lending requirements on financial institutions. The Department of Justice, CFPB and other federal and state agencies are responsible for enforcing these laws and regulations. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation. A successful challenge to our performance under the fair lending laws and regulations could adversely impact our rating under the Community Reinvestment Act and result in a wide variety of sanctions, including the required payment of damages and civil money penalties, injunctive relief, imposition of restrictions on merger and acquisition activity and restrictions on expansion activity, which could negatively impact our reputation, business, financial condition and results of operations.

The Federal Reserve may require us to commit capital resources to support the Bank.

The Federal Reserve, which examines us and the Bank, requires a bank holding company to act as a source of financial and managerial strength to a subsidiary bank and to commit resources to support such subsidiary bank. Under the “source of strength” doctrine, the Federal Reserve may require a bank holding company to make capital injections into a troubled subsidiary bank and may charge the bank holding company with engaging in unsafe and unsound practices for failure to commit resources to such a subsidiary bank. In addition, The Bank is subject to capital adequacy guidelines and other regulatory requirements specifying minimum amounts and types of capital which the Bank must maintain. From time to time, the regulators implement changes to these regulatory capital adequacy guidelines. If the Bank fails to meet these

36

minimum capital guidelines and other regulatory requirements, our financial condition would be materially and adversely affected. We may also be required to satisfy additional capital adequacy standards as determined by the Federal Reserve. These requirements, and any other new regulations, could adversely affect our ability to pay dividends, service holding‑company obligations, pursue growth initiatives or return capital to shareholders, and could require us to raise additional capital or reallocate resources in ways that may not be favorable to our shareholders, including at times when market conditions are adverse. These requirements, and any other new regulations, could adversely affect our ability to pay dividends, or could require us to reduce business levels or to raise capital, including in ways that may adversely affect our financial condition or results of operations.

We could face a risk of noncompliance and enforcement action with the Bank Secrecy Act and other anti-money laundering statutes and regulations.

The Bank Secrecy Act of 1970, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain effective anti-money laundering programs and file suspicious activity and currency transaction reports as appropriate. FinCEN, established by the U.S. Department of the Treasury to administer the Bank Secrecy Act, is authorized to impose significant civil money penalties for violations of those requirements and engages in coordinated enforcement efforts with the individual federal banking regulators, as well as the U.S. Department of Justice, Drug Enforcement Administration and IRS. There is also increased scrutiny of compliance with the rules enforced by OFAC related to U.S. sanctions regimes. If our policies, procedures and systems are deemed deficient or the policies, procedures and systems of the financial institutions that we have already acquired or may acquire in the future are deficient, we would be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain aspects of our business plan, including our acquisition plans, which would negatively impact our business, financial condition and results of operations. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us.

Our deposit insurance premiums could be substantially higher in the future, which could have a material adverse effect on our future earnings.

The FDIC insures deposits at FDIC-insured depository institutions, such as the Bank, up to applicable limits. The amount of a particular institution’s deposit insurance assessment is based on that institution’s risk classification under an FDIC risk-based assessment system. An institution’s risk classification is assigned based on its capital levels and the level of supervisory concern the institution poses to its regulators. An institution’s risk classification is assigned based on its capital levels and the level 36 Table of Contentsof supervisory concern the institution poses to its regulators. We are generally unable to control the amount of premiums that we are required to pay for FDIC insurance. Any future additional assessments, increases or required prepayments in FDIC insurance premiums could reduce our profitability, place additional pressure on pricing of loans and deposits, limit our ability to pursue certain business opportunities, or otherwise negatively impact our operations. Any future additional assessments, increases or required prepayments in FDIC insurance premiums could reduce our profitability, may limit our ability to pursue certain business opportunities or otherwise negatively impact our operations. The timing and magnitude of any such assessments may be difficult to predict and could adversely affect our earnings in the periods in which they are imposed.

Risks Related to Our Common Stock

The Company’s directors may have interests that differ from other shareholders, and such directors have ownership interests in the Company that, when aggregated with holdings of their extended families and their affiliated entities, may allow such individuals and entities to take certain corporate actions without the consent of other shareholders.

As of December 31, 2025, our directors and their families and affiliated entities collectively had a 24.6% ownership interest in the Company. As a result, our directors may have significant influence over the election of board of directors, control the management and policies of the Company and, in general, determine the outcome of any corporate transaction or other matter submitted to the shareholders for approval, including mergers, consolidations and the sale of all or substantially all of the assets of the Company, and will be able to prevent or cause a change in control of the Company.

An investment in our common stock is not an insured deposit and may lose value.

Securities that we issue, including our common stock, are not savings or deposit accounts or other obligations of any bank, insured by the FDIC, any other governmental agency or instrumentality, or any private insurer, and are subject to investment risk, including the possible loss of our shareholders’ investments. Investment in our common stock is inherently

37

risky for the reasons described herein, and is subject to the same market forces that affect the price of common stock in any company. As a result, if you acquire our common stock, you could lose some or all of your investment.

Environmental, social and governance (“ESG”) and diversity, equity and inclusion (“DEI”) risks could adversely affect our reputation and shareholder, employee, client and third party relationships and may negatively affect our stock price.

Public expectations, investor preferences, regulatory developments and stakeholder views regarding environmental, social and governance related matters continue to evolve and may be inconsistent or conflicting. Our responses to these matters, including decisions regarding business practices, customer relationships, disclosures or policies, may be perceived negatively by certain stakeholders, regardless of intent. In addition, adverse publicity or stakeholder reactions related to our clients, counterparties or business partners, including through traditional or social media, could harm our reputation and negatively affect our ability to attract and retain customers, employees and investors. In addition, our operations are dependent upon our ability to protect the computer systems and network infrastructure utilized by us, including our internet banking activities, against damage from physical break-ins, cyberattacks and other disruptive problems caused by criminal threat actors. Changes in laws, regulations or public policy affecting the consideration of ESG related factors could also increase compliance costs, restrict certain business activities or adversely affect our growth strategies. Any of these factors could adversely affect our business, reputation and the market price of our common stock.

Our dividend policy may change, and consequently, your only opportunity to achieve a return on your investment may be if the price of our common stock appreciates.

We have paid quarterly dividends to our shareholders for the past twelve years. However, past payment of dividends is not a guarantee of future dividend payments. We have no obligation to pay dividends and we may change our dividend policy at any time without notice to our shareholders. Holders of our common stock are only entitled to receive such cash dividends as our board of directors, in its discretion, may declare out of funds legally available for such payments. Furthermore, consistent with our strategic plans, growth initiatives, capital availability and requirements, projected liquidity needs, financial condition, and other factors, we have made, and will continue to make, capital management decisions and policies that could adversely impact the amount of dividends paid to our shareholders.

We are a separate and distinct legal entity from our subsidiary, the Bank. We receive substantially all of our revenue from dividends from the Bank, which we use as the principal source of funds to pay our expenses. Various federal and/or state laws and regulations limit the amount of dividends that the Bank may pay us. Such limits are also tied to the earnings of our subsidiary. If the Bank does not receive regulatory approval or if the Bank’s earnings are not sufficient to make dividend payments to us while maintaining adequate capital levels, our ability to pay our expenses and our business, financial condition or results of operations could be materially and adversely impacted.

We may need to raise additional capital in the future.

We are required to meet certain regulatory capital requirements and maintain sufficient liquidity. We are generally not restricted from issuing additional shares of our common stock up to the authorized number of shares set forth in our charter. We may need to raise additional capital in the future to provide us with sufficient capital resources and liquidity to meet our commitments and business needs, which could include the possibility of financing acquisitions. Our ability to raise additional capital depends on conditions in the capital markets, economic conditions and a number of other factors, including investor perceptions regarding the banking industry, market conditions and governmental activities, and on our financial condition and performance. We cannot predict the size, timing or terms of future issuances of our common stock or other capital instruments, or the effect that any such issuances may have on the market price of our common stock. We cannot predict the size of future issuances of our common stock or the effect, if any, that future issuances and sales of our common stock will have on the market price of our common stock. Any issuance of additional equity securities could result in dilution to existing shareholders, and the issuance of debt or other capital instruments could increase our leverage and interest expense. If significant inflation continues, our business could be negatively affected by, among other things, increased default rates leading to credit losses which could decrease our appetite for new credit extensions. Accordingly, we may be unable to raise additional capital if needed, or on terms acceptable to us. If we or the Bank fail to maintain capital at levels required by regulators, or at levels deemed appropriate by supervisory authorities, our financial condition, liquidity and results of operations could be materially and adversely affected, and we could be subject to restrictions on growth, capital distributions or other aspects of our business.

38

We have the ability to incur debt and pledge our assets, including our stock in the Bank, to secure that debt.

We have the ability to incur debt and pledge our assets to secure that debt. Absent special and unusual circumstances, a holder of indebtedness for borrowed money has rights that are superior to those of holders of common stock. For example, interest must be paid to the lender before dividends can be paid to the shareholders, and loans must be paid off before any assets can be distributed to shareholders if we were to liquidate. Furthermore, we would have to make principal and interest payments on our indebtedness, which could reduce our profitability or result in net losses on a consolidated basis even if the Bank were profitable.

Merger-Related Risks

If we fail to successfully integrate our acquisitions or to realize the anticipated benefits of them, our financial condition and results of operations could be negatively affected.

We intend to continue to regularly evaluate potential acquisitions and expansion opportunities. To the extent we grow through acquisition, we cannot assure you that we will be able to manage this growth adequately or profitably. Acquiring other banks, branches or businesses, as well as other geographic and product expansion activities, involve various risks including: (i) risk of unknown, undisclosed or contingent liabilities that could arise after the closing of an acquisition and for which there is no indemnification obligation or other price protection mechanism associated with the acquisition; (ii) unanticipated costs and delays, including as a result of enhanced regulatory scrutiny; (iii) risks that acquired new businesses do not perform consistently with our growth and profitability expectations; (iv) risks of entering new market or product areas where we have limited experience; (v) risks that growth will strain our infrastructure, staff, internal controls and management, which may require additional personnel, time and expenditures; (vi) exposure to potential asset quality issues with acquired institutions; (vii) difficulties, expenses and delays of integrating the operations and personnel of acquired institutions, and start-up delays and costs of other expansion activities; (viii) inaccurate estimates of value assigned to acquired assets; (ix) potential disruptions to our business; (x) possible loss of key employees and customers of acquired institutions; (xi) potential short-term decrease in profitability; (xii) potential dilution of our current shareholders or a decline in our share price resulting from the issuance in connection with an acquisition of equity securities or securities convertible into equity securities, any of which may be senior to our common stock as to distributions and in liquidation; (xiii) litigation; and (xiv) diversion of our management’s time and attention from our existing operations and businesses.

Our future success is largely dependent upon our ability to successfully execute our business strategy. Our future success is largely dependent upon our ability to successfully execute our business strategy.

Our future success, including our ability to achieve our growth and profitability goals, depends largely on the ability of our management team to execute our long‑term business strategy. This strategy requires us, among other things, to maintain and enhance our reputation; attract and retain experienced personnel; maintain stable, low‑cost funding sources; strengthen market penetration and competitive positioning; improve operating efficiency; implement new technologies; grow prudent lending and noninterest income; manage credit, interest rate and liquidity risks; comply with regulatory requirements; oversee third‑party service providers; and control expenses.

Failure to achieve these objectives could impair our ability to execute our strategy and adversely affect our business, growth prospects, financial condition and results of operations. Even if we are able to replace our service providers, it may be at a higher cost to us, which could adversely affect our business, financial condition and results of operations. In addition, ineffective growth management, technology implementation challenges, cost overruns or service disruptions involving third‑party providers could hinder our ability to achieve our strategic objectives. Pursuing multiple strategic initiatives simultaneously, including acquisitions, technology investments or geographic expansion, may place additional strain on management, personnel, systems and controls. Our ability to execute our strategic objectives depends, in part, on the successful integration of First IC Corporation following the completion of the Company’s acquisition on December 1, 2025. The integration process will require significant management attention and resources and may divert focus from other initiatives. We may encounter challenges integrating systems, processes, controls, personnel and cultures, and there can be no assurance that the anticipated benefits or efficiencies of the transaction will be realized on the expected timeline or at all. Failure to successfully integrate the businesses could adversely affect our growth prospects, financial condition and results of operations

39

Item 1B. Unresolved Staff Comments

None.

Item 1C. Cybersecurity

Cybersecurity Risk Management and Strategy

Our risk management program is designed to identify, assess, and mitigate risks across various aspects of our company, including financial, operational, regulatory, reputational, and legal. Cybersecurity is a critical component of this program, given the increasing reliance on technology and potential of cyber threats. Our Information Security Officer is primarily responsible for the cybersecurity component of our risk management program and is a key member of the risk management organization, reporting directly to the Chief Executive Officer and, as discussed below, periodically to the Information Technology Committee of our board of directors.

Our objective for managing cybersecurity risk is to avoid or minimize the impacts of external threat events or other efforts to penetrate, disrupt or misuse our systems or information. The structure of our information security program is designed around the National Institute of Standards and Technology (“NIST”) Cybersecurity Framework, regulatory guidance, and other industry standards. In addition, we leverage certain industry and government associations, third-party benchmarking, audits, and threat intelligence feeds to facilitate and promote program effectiveness. Our Information Security Officer, who reports directly to our Chief Executive Officer, along with key members of the Information Security Officer’s team, regularly collaborate with peer banks, industry groups, and policymakers to discuss cybersecurity trends and issues and identify best practices. The information security program is periodically reviewed by the Informaiton Security Officer, as well as the Information Technology Committee of our board of directors, with the goal of addressing changing threats and conditions. The information security program is periodically reviewed by the Informaiton Security Program, as well as the Information Technology Committee, with the goal of addressing changing threats and conditions.

We have established processes and systems designed to assess, identify, manage, and mitigate cybersecurity risk and threats, including regular and on-going education and training for employees, including information security awareness training, preparedness simulations and tabletop exercises, and recovery and resilience tests. We employ a variety of preventative and detective tools designed to monitor and block suspicious activity and to identify cybersecurity threats. We continue to strengthen the management and oversight of cybersecurity risks through new security system enhancements, policies, testing, identification and reporting. We engage in regular assessments of our infrastructure, software systems, and network architecture, using internal cybersecurity professionals and third-party specialists. We also engage a third-party to perform penetration testing and ongoing analysis to identify potential vulnerabilities and areas for additional enhancement. We also maintain a third-party risk management program designed to identify, assess, and manage risks, including cybersecurity risks, associated with third-party service providers. We also monitor our email gateways for malicious phishing campaigns and monitor remote connections for cybersecurity threats. We leverage internal and external auditors and independent external partners to periodically review our processes, systems, and controls, including with respect to our information security program, to assess their design and operating effectiveness and make recommendations to strengthen our risk management program.

We maintain an Incident Response Plan that provides a documented framework for responding to actual or potential cybersecurity incidents, including timely notification of and escalation to senior management and the Information Technology Committee of our board of directors, as well as the full board of directors. The Incident Response Plan is coordinated through the Information Security Officer and key members of management are embedded into the Incident Response Plan by its design. The Incident Response Plan facilitates coordination across multiple parts of our organization and is evaluated at least annually.

We have not experienced a cybersecurity incident or identified risks from known cybersecurity threats or prior cybersecurity incidents that has, or is reasonably likely to have, materially impacted our business strategy, results of operations, or financial condition. Despite our efforts, there can be no assurance that our cybersecurity risk management processes and measures described will be fully implemented, complied with, or effective in protecting our systems and information. We face risks from certain cybersecurity threats that, if realized, are reasonably likely to materially affect our business strategy, results of operations or financial condition. For further discussion of risks from cybersecurity threats,

40

see the section captioned “System failures or breaches of our network security could subject us to increased operating costs as well as litigation and other liabilities” in Item 1A. Risk Factors.

Cybersecurity Governance

Our Information Security Officer directs our enterprise information security department and manages our information security program. The responsibilities of our enterprise information security department include cybersecurity risk assessment and defense, vulnerability assessment, incident prevention, mitigation, response, and remediation, data access governance, third-party risk management, and business resilience. The responsibilities of enterprise information security department include cybersecurity risk assessment and defense, vulnerability assessment, incident prevention, mitigation, response, and remediation, data access governance, third-party risk management, and business resilience. Our Information Security Officer has over ten years of relevant expertise and formal training in the areas of information security and cybersecurity risk management in the financial institutions industry.

The Information Technology Committee of our board of directors has primary responsibility for overseeing our information security and technology programs, including management’s actions to identify, assess, mitigate, and remediate or prevent material cybersecurity issues and risks. Our Information Security Officer provides quarterly reports to the Information Technology Committee of our board of directors regarding the information security program and the technology program, key enterprise cybersecurity initiatives, and other matters relating to cybersecurity risks and incidents. The Information Technology Committee also reviews our cybersecurity risk profile on a quarterly basis. The Information Technology Committee, as well as the full board of directors, reviews and approves our information security and technology budgets and strategies annually. The Information Technology Committee provides a report of their activities to the full board of directors on a quarterly basis.

Recently Filed
Click on a ticker to see risk factors
Ticker * File Date
COPR 3 hours ago
GAP 3 hours ago
MGTI 4 hours ago
CHCI 7 hours ago
LWAY 8 hours ago
XPON 8 hours ago
LSBK 8 hours ago
STIM 9 hours ago
ABEO 9 hours ago
PSQH 9 hours ago
BCYC 9 hours ago
GLUE 10 hours ago
CLNN 10 hours ago
XFOR 10 hours ago
MCHB 19 hours ago
LIFE 21 hours ago
MUX 21 hours ago
XRX 22 hours ago
MBVI 23 hours ago
BSVN 23 hours ago
PCAP 23 hours ago
BMOK 23 hours ago
FRST 23 hours ago
FLYYQ 23 hours ago
MVST 23 hours ago
ITIC 23 hours ago
PANL 23 hours ago
AGEN 23 hours ago
GDOT 23 hours ago
RLYB 23 hours ago
MCBS 1 day ago
MYPS 1 day ago
CAEP 1 day ago
TAVI 1 day ago
CWCO 1 day ago
ARTNA 1 day ago
QSEA 1 day ago
EGY 1 day ago
AP 1 day ago
APT 5 days, 23 hours ago
IBO 5 days, 23 hours ago
DAIC 5 days, 23 hours ago
AEAQ 5 days, 23 hours ago
NUWE 5 days, 23 hours ago
KDK 5 days, 23 hours ago
SKYT 6 days ago
CRWE 6 days ago
CWBC 6 days ago
EXOD 6 days ago
DMRC 6 days ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard