Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - UVSP

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. "Risk Factors":

•Operating, legal and regulatory risks;

•Economic, political and competitive forces;

•General economic conditions, either nationally or in our market areas, that are worse than expected, included as a result of employment levels and labor shortages, and the effect of a potential recession or slowed economic growth caused by supply chain disruptions or otherwise;

•Legislative, regulatory and accounting changes, including increased assessments by the Federal Deposit Insurance Corporation and changes in the income tax laws and regulations;

•Monetary and fiscal policies of the U.S. government, including policies of the U.S. Treasury and the Board of Governors of the Federal Reserve System;

•Demand for our financial products and services in our market area;

•Major catastrophes such as earthquakes, floods or other natural or human disasters and infectious disease outbreaks, the related disruption to local, regional and global economic activity and financial markets, and the impact that any of the foregoing may have on us and our customers and other constituencies;

•Inflation or volatility in interest rates that reduce our margins and yields, the fair value of financial instruments or our level of loan originations or prepayments on loans we have made and make or the sale of loans or other assets and/or lead to higher operating costs and higher costs to retain or attract deposits;

•The imposition of tariffs or other domestic or international governmental policies and any retaliatory responses;

•The impact of a potential federal government shutdown;

•Fluctuations in real estate values in our market area;

•A failure to maintain adequate levels of capital and liquidity to support our operations;

•The availability of capital;

•The composition and credit quality of our loan and investment portfolios;

•Changes in the level and direction of loan delinquencies, classified and criticized loans and charge-offs and changes in estimates of the adequacy of the allowance for credit losses;

•Changes in the economic assumptions or methodology utilized to calculate the allowance for credit losses;

•Our ability to access cost-effective funding;

•Changes in liquidity, including the size and composition of our deposit portfolio and the percentage of uninsured deposits in the portfolio;

•Our ability to implement our business strategies;

•Our ability to manage market risk, credit risk, interest rate risk and operational risk;

•Timing and amount of revenue and expenditures;

•Adverse changes in the securities markets;

•The impact of any military conflict, terrorist act or other geopolitical acts;

•Our ability to enter new markets successfully and capitalize on growth opportunities;

•Competition for loans, deposits and employees;

•System failures or cyber-security breaches of our information technology infrastructure and those of our third-party service providers;

•The failure to maintain current technologies and/or to successfully implement future information technology enhancements;

•Changes in investor sentiment or consumer spending, borrowing or savings behavior;

•Our ability to attract and retain key employees;

Table of Contents

•Other risks and uncertainties, including those occurring in the U.S. and international financial systems; and

•The risk that our analysis of these risks and forces could be incorrect and/or that the strategies developed to address them could be unsuccessful.

These forward-looking statements speak only as of the date of the report. Univest Financial Corporation (the "Corporation") expressly disclaims any obligation to publicly release any updates or revisions to reflect any change in the Corporation's expectations with regard to any change in events, conditions or circumstances on which any such statement is based, unless otherwise required by law.

Item 1. Business

General

The Corporation is a Pennsylvania corporation, organized in 1973, and registered as a bank holding company pursuant to the Bank Holding Company Act of 1956. The Corporation owns all of the capital stock of Univest Bank and Trust Co. (the "Bank") and is the sole member of 1876 Double Eagle LLC. The Corporation's and the Bank's headquarters are located at 14 North Main Street, Souderton, Pennsylvania 18964. At December 31, 2025, the Corporation had total assets of $8.4 billion, net loans and leases of $6.8 billion, total deposits of $7.1 billion and total shareholders' equity of $943.3 million.

The Bank is a Pennsylvania state-chartered bank and trust company. As a state-chartered member bank of the Federal Reserve System, the Bank is regulated primarily by the Pennsylvania Department of Banking and Securities and the Federal Reserve Bank of Philadelphia.

The Bank is engaged in domestic banking services for individuals, businesses, municipalities and non-profit organizations. Through its wholly-owned subsidiaries, the Bank provides a variety of financial services throughout its markets of operation. The Bank is the parent company of Girard Investment Services, LLC, a full-service registered introducing broker-dealer and a licensed insurance agency, Girard Advisory Services, LLC, a registered investment advisory firm, and Girard Pension Services, LLC, a registered investment advisor, which provides investment consulting and management services to municipal entities. Girard Investments is headquartered in Souderton, Pennsylvania and Girard Advisory Services is headquartered in King of Prussia, Pennsylvania. The Bank is also the parent company of Univest Capital, Inc.

Market Area

The Corporation's headquarters are in Souderton in Montgomery County, Pennsylvania, which is located in Southeastern Pennsylvania, approximately 35 miles north of Philadelphia. The Corporation provides banking and financial services to customers in 19 counties in the Southeastern, Central and Western regions of Pennsylvania, three counties in New Jersey and five counties in Maryland.

The following table details key demographics for our Montgomery, Bucks, Lancaster and Philadelphia markets compared to Pennsylvania and the national average.

(1) Pennsylvania Department of Labor and Industry - Montgomery, Bucks, Lancaster, Philadelphia unemployment rates are as of November 2025 and the Pennsylvania unemployment rate is as of December 2025

(2) Bureau of Labor Statistics - National unemployment rates are as of December 2025, seasonally adjusted

(3) S&P Global - Demographic data is provided by Claritas based primarily on US Census data

Table of Contents

Significant types of employment industries for our markets include health care and social assistance, retail trade, manufacturing, educational services, accommodation and food services, professional, scientific and technical services, transportation and warehousing, administrative and support and waste management and remediation services, construction, and finance and insurance. As of June 30, 2025 (the latest date for which such information is available), the Corporation ranked fourth out of 31 financial institutions in deposit market share in Montgomery County with 11 financial centers, sixth out of 28 financial institutions in Bucks County with eight financial centers, tenth out of 24 financial institutions in Lancaster County with five financial centers, and thirteenth out of 37 financial institutions in Philadelphia County with five financial centers, with 4.0% of total combined deposit market share in the four counties, according to data provided by Federal Deposit Insurance Corporation (the "FDIC") Market Share Data.

Competition

The Corporation's service areas are characterized by intense competition for banking business among commercial banks, savings institutions and other financial institutions.

Acquisitions

The Corporation prides itself on being a financial organization that continues to increase its scope of services while maintaining a determined commitment to the communities it serves. The most recent acquisitions include certain assets of the Paul I. Sheaffer Insurance Agency on December 1, 2021, Fox Chase Bancorp on July 1, 2016 and Valley Green Bank on January 1, 2015.

Human Capital Resources

As of December 31, 2025, we employed 960 individuals, approximately 94% of whom are full-time and of which approximately 56% are women. None of these employees are covered by collective bargaining agreements, and the Corporation believes it enjoys good relations with its personnel. As an integrated full-service financial institution, approximately 68% of our employees are employed through our banking segment, 8% through our wealth management business, 10% through our insurance business and the remaining 14% of our employees serve in shared support functions for each of our three segments. With a Mission Statement that challenges us to be a strong leader in our markets and active in our communities, being a responsible corporate citizen is at the core of how we operate.

Hiring and Promotion

The Corporation seeks to hire well-qualified employees who are also a good fit for our core values. Whenever possible, we seek to fill positions by promotion and transfer within the organization. As of December 31, 2025, 21% of our Senior Leadership Team members were women.

Training and Development

The training and development of our employees remains a priority. In 2025, we invested more than $579 thousand in tools, training programs and continuing education to help our employees build their knowledge, skills and experience. In addition, as part of "Univest University," we provide several certification programs including a Skill Builder Certification Program, a Supervisor Certification, a Leadership Certification and an Advanced Leadership Certification. These programs include courses that address communication skills, customer service, managing conflict, alternative management styles, business ethics and emotional intelligence. The Corporation also offers a Business

Table of Contents

Ethics for Leaders training and a mentorship program. During 2025, we brought our entire organization together for a learning initiative focused on Psychological Safety. Over the course of five months, every employee participated in one of 44 interactive sessions designed to strengthen trust, collaboration and open communication across the Univest Family. During the year ended December 31, 2025, we provided approximately 33,000 training hours to our employees. The Corporation offers a Summer Internship Program, which includes additional opportunities for networking and professional development and a group volunteer project.

In addition to our internal training efforts, we provide a Tuition Reimbursement Program, in which costs for an undergraduate degree, a graduate degree, and advanced intensive technical training programs from an accredited college or university are eligible for reimbursement up to $3,500 per year. We offer banking-related classes through the Pennsylvania Bankers Association at no cost to our employees.

Retention

Employee retention helps us operate efficiently and offers continuity to our customers and the community. At December 31, 2025, 17% of our current staff had been with us for 15 years or more.

Safety, Health and Welfare

The safety, health and wellness of our employees is consistently a top priority. We offer our employees financial wellness programs, team health challenges, weight management counseling, and behavioral health webinars to support mental health.

In addition, we offer online yoga classes, gym reimbursements, on-demand mindfulness webinars, the ability for our employees to receive a flu shot or a mammogram at our main campus, as well as provide AEDs in all our offices. Additionally, we provided access to CPR classes for interested employees.

Our Inclusive Conversations series included five sessions in 2025 aimed at creating a safe space to discuss meaningful topics from neurodivergence in the workplace to women's health and well-being.

Benefits

On an ongoing basis, we further promote the health and wellness of our employees by strongly encouraging work-life balance. Our benefits package includes health care coverage, retirement benefits, life and disability insurance, wellness programs, paid time-off and leave policies. We also provide our lower-wage earners with higher insurance subsidies.

Univest United

Univest is committed to fostering, cultivating and preserving a culture of inclusivity. Univest's inclusivity initiatives are applicable, but not limited to: our practices and policies on recruitment and selection; compensation and benefits; professional development and training; promotions; transfers; social and recreational programs; layoffs; terminations; and the ongoing development of an inclusive work environment encourages and enforces:

•Respectful communication and cooperation between all employees;

•Teamwork and employee participation, fostering representation of all groups and perspectives; and

•Employer and employee contributions to the communities we serve to promote a greater understanding and respect for inclusivity.

All employees of Univest have a responsibility to treat others with dignity and respect. All employees are expected to exhibit conduct that reflects inclusion during work, at work functions on or off the work site, and at all other company-sponsored and participative events. Our Univest United Committee was established to ensure that our workplace is a supportive

Table of Contents

environment with equal opportunities for everyone. Progress on our culture of inclusivity is reported to the Board of Directors on a quarterly basis. Our Manager of Employee Engagement works to cultivate a supportive and inclusive work environment and implement inclusion programs.

Our Univest United Learning & Development Committee created learning sessions that serve as a foundation for increasing awareness on inclusion topics. All employees have completed this training and it is included as part of new hire orientation to ensure all future employees receive this important information.

Our Employee Resource Groups ("ERGs") help foster an inclusive and supportive environment, providing a platform for employees to connect, share experiences, and drive positive change within the organization. RISE, the Women's ERG, and EMBRACE, the People of Color ERG, are at the forefront of these efforts. During 2025, the Corporation hosted in-person networking events, offered volunteer opportunities and provided virtual sessions.

Employee Engagement

Our Chairman, President and Chief Executive Officer communicates with our entire organization on a weekly basis via email. These emails provide updates on key organizational initiatives, financial performance, as well as industry insights.

We continue to recognize employee milestones and acknowledge these achievements with in-person Service Awards that celebrate employees reaching a five-year milestone. Our employees are also invited to attend holiday socials at locations across our service area.

Community Involvement

Our Connecting with Community volunteer initiative is one of the pillars of our philanthropy program. In 2025, we provided our employees with 48 Connecting with Community events to choose from in support of local charitable organizations. In addition to these Connecting with Community opportunities, we encourage our employees to volunteer independently so that they truly bring our community core values to life. In 2025, Univest employees volunteered 15,255 hours. In addition to being generous with their time, our employees also supported our annual fundraiser for the United Way. Through voluntary payroll deductions, Univest employees contributed more than $64 thousand. During 2025, the Corporation contributed $2.2 million to non-profit organizations to provide financial support to the communities it serves.

Supervision and Regulation

The financial services industry in the United States, particularly for entities that are chartered as banks, is highly regulated by federal and state laws that limit the types of businesses in which banks and their holding companies may engage, and which impose significant operating requirements and limitations on banking entities. This regulatory framework is designed to protect depositors and consumers, the safety and soundness of depository institutions and their holding companies, and the stability of the banking system as a whole. This framework affects the activities and investments of the Corporation and its subsidiaries and gives the regulatory authorities broad discretion in connection with their supervisory, examination and enforcement activities and policies. The discussion below is only a brief summary of some of the significant laws and regulations that affect the Bank and the Corporation, and is not intended to be a complete description of all such laws and regulations.

The Bank is subject to supervision and is regularly examined by the Pennsylvania Department of Banking and Securities and the Federal Reserve Bank of Philadelphia. The agencies maintain significant enforcement authority including, but not limited to, the issuance of cease and desist orders and civil money penalties, removal of directors and officers, and the appointment of a receiver or conservator for a bank in appropriate circumstances.

The Corporation is subject to the reporting requirements of the Board of Governors of the Federal Reserve System (the "Board"), and the Corporation, together with its subsidiaries, is subject to examination by the Board. In addition, the Board has enforcement authority over the Corporation.

Table of Contents

Any change in applicable laws or regulations, whether by Congress, the Pennsylvania legislature, the Pennsylvania Department of Banking and Securities, the Board, the FDIC, or the Securities and Exchange Commission ("SEC") could have a material adverse impact on the Corporation and the Bank and their operations.

Community Reinvestment Act and Fair Lending Laws

All institutions with FDIC deposit insurance have a responsibility under the Community Reinvestment Act ("CRA") and related federal regulations to help meet the credit needs of their communities, including low- and moderate-income borrowers. In connection with its examination of a state member bank, the Board is required to assess the bank's record of compliance with the CRA. A bank's failure to comply with the provisions of the CRA could, at a minimum, result in denial of certain corporate applications such as branches or mergers, or in restrictions on its activities. The CRA requires all FDIC-insured institutions to publicly disclose their rating. The Bank received a "satisfactory" CRA rating in its most recent federal examination.

In addition, the Equal Credit Opportunity Act and the Fair Housing Act prohibit lenders from discriminating in their lending practices on the basis of characteristics specified in those statutes. The failure to comply with the Equal Credit Opportunity Act and the Fair Housing Act could result in enforcement actions by the Board, as well as other federal regulatory agencies and the Department of Justice.

The Bank Secrecy Act, USA PATRIOT Act, and Anti-Money Laundering Regulations

The Bank must comply with the anti-money laundering and countering the financing of terrorism provisions of the Bank Secrecy Act (the "BSA") as amended by the USA PATRIOT Act, and implementing regulations issued by the Board and the Financial Crimes Enforcement Network of the U.S. Department of the Treasury. Together, the BSA and the USA PATRIOT Act require the Bank to implement a compliance program to detect and prevent money laundering, terrorist financing, and illicit crime, to establish a customer identification program and other internal controls, conduct customer due diligence, administer training, maintain specified records, and report suspicious activity, among other things. Accordingly, if we engage in a merger or other acquisition, our controls designed to combat money laundering would be considered as part of the application process.

Capital Rules

The Corporation and the Bank are subject to various regulatory capital requirements administered by the federal banking agencies. The risk-based capital standards applicable to the Corporation and the Bank are based on the current standards of the Basel Committee on Banking Supervision, commonly referred to as Basel III. The minimum required Tier 1 capital to average assets ratio is 4.0% (5.0% to be considered "well capitalized"). Under current rules, in order to avoid limitations on capital distributions (including dividend payments and certain discretionary bonus payments to executive officers), a banking organization must hold a capital conservation buffer comprised of common equity Tier 1 capital above its minimum risk-based capital requirements in an amount greater than 2.5% of total risk-weighted assets. See Note 21, "Regulatory Matters" included in the Notes to the Consolidated Financial Statements included herein under Item 8 for further discussion.

Federal law requires, among other things, that federal bank regulators take "prompt corrective action" with respect to institutions that do not meet minimum capital requirements.

Insurance of Deposit Accounts

The Bank's deposits are insured up to applicable limits by the Deposit Insurance Fund of the FDIC. Deposit insurance per account owner is $250,000 for each account ownership category.

The FDIC charges insured depository institutions premiums to maintain the Deposit Insurance Fund. Under the FDIC's risk-based assessment system, institutions deemed less risky pay lower assessments. Assessments for institutions of less than $10 billion of assets are based on financial measures and supervisory ratings derived from statistical modeling estimating the probability of failure within three years.

Table of Contents

The FDIC has authority to increase initial base deposit insurance assessment rates and did so by two basis points beginning in the first quarterly assessment period of 2023. As a result, effective January 1, 2023, assessment rates for institutions of the Bank's size range from 2.5 to 32 basis points. Any significant future increase in insurance premiums would likely have an adverse effect on the operating expenses and results of operations of the Bank. Management cannot predict what insurance assessment rates will be in the future.

Transactions with Affiliates and Loans to Insiders

A state member bank's authority to engage in transactions with its affiliates is generally limited by Sections 23A and 23B of the Federal Reserve Act and by the Act's implementing regulation, Regulation W. An affiliate includes, among other things, a company that controls, or is under common control with, an insured depository institution such as the Bank. In general, "covered transactions" between an insured depository institution and its affiliates, as defined by Section 23A and Regulation W, are subject to certain quantitative limits and collateral requirements. "Covered transactions" with affiliates must be consistent with safe and sound banking practices and may not involve the purchase of low-quality assets. Under Section 23B and Regulation W, transactions with affiliates must generally be on terms that are substantially the same, or at least as favorable to, the institution as comparable transactions with or involving non-affiliates.

The Bank's authority to extend credit to its and its affiliates' directors, executive officers and 10% shareholders (insiders), as well as to entities controlled by such insiders (related interests), is governed by the requirements of Sections 22(g) and 22(h) of the Federal Reserve Act and the Act's implementing regulation, Regulation O. Among other things, these provisions generally require that extensions of credit to insiders and their related interests:

•be made on terms that are substantially the same as, and follow credit underwriting procedures that are not less stringent than, those prevailing for comparable transactions with unaffiliated persons and that do not involve more than the normal risk of repayment or present other unfavorable features; and

•not exceed certain limitations on the amount of credit extended to such insiders and their related interests, individually and in the aggregate, which limits are based, in part, on the amount of the Bank's unimpaired capital and unimpaired surplus.

In addition, extensions of credit to insiders or their related interests in excess of certain limits must be approved in advance by a majority of the Bank's board of directors. Extensions of credit to executive officers are subject to additional limits based on the type of credit extension involved.

Prohibitions Against Tying Arrangements

The Bank is prohibited, subject to some exceptions, from extending credit or offering any other service, or fixing or varying the consideration for such extension of credit or service, on the condition that the customer obtain some additional service from the institution or its affiliates or not obtain services of a competitor of the institution or its affiliates.

Other Laws and Regulations

The Bank's operations are also subject to federal laws and regulations applicable to credit transactions, such as the:

•Truth In Lending Act, governing disclosures of credit terms to consumer borrowers;

•Real Estate Settlement Procedures Act, requiring that borrowers for mortgage loans for one- to four-family residential real estate receive various disclosures, including good faith estimates of settlement costs, lender servicing and escrow account practices, and prohibiting certain practices that increase the cost of settlement services;

•Home Mortgage Disclosure Act, requiring financial institutions to provide information to enable the public and public officials to determine whether a financial institution is fulfilling its obligation to help meet the housing needs of the community it serves;

•Fair Credit Reporting Act, governing the use and provision of information to credit reporting agencies;

•Fair Debt Collection Practices Act, governing the manner in which consumer debts may be collected;

•Laws and regulations prohibiting unfair or deceptive acts or practices; and

•Other regulations of the various federal agencies charged with the responsibility of implementing such federal laws and regulations.

Table of Contents

The operations of the Bank are further subject to the:

•Right to Financial Privacy Act, which imposes a duty to maintain confidentiality of consumer financial records and prescribes procedures for complying with administrative subpoenas of financial records;

•Electronic Funds Transfer Act and Regulation E promulgated thereunder, which govern automatic deposits to and withdrawals from deposit accounts and consumer customers' rights and liabilities arising from the use of automated teller machines and other electronic banking services;

•Check Clearing for the 21st Century Act (also known as "Check 21"), which gives "substitute checks," such as digital check images and copies made from that image, the same legal standing as the original paper checks;

•Truth in Savings Act, governing disclosures of deposit account terms to consumers;

•Regulations of the Office of Foreign Assets Control that enforce economic and trade sanctions programs based on United States foreign policy and national security goals; and

•Gramm-Leach-Bliley Act, which places limitations on the sharing of consumer financial information by financial institutions with unaffiliated third parties. Specifically, the Gramm-Leach-Bliley Act requires all financial institutions offering financial products or services to retail customers to provide such customers with the financial institution's privacy policy and the opportunity to "opt out" of the sharing of certain personal financial information with unaffiliated third parties.

Corporation as Source of Strength

The Board has issued a policy statement regarding dividends by bank holding companies. In general, the Board's policies provide that dividends should be paid only out of current earnings and only if the prospective rate of earnings retention by the bank holding company appears consistent with the organization's capital needs, asset quality and overall financial condition. The ability of a bank holding company to pay dividends may be restricted if a subsidiary bank becomes undercapitalized or otherwise suffers financial difficulties. In addition, the Board's regulations and guidance require prior notice to the agency of a bank holding company's payment of dividends or repurchase of its stock under certain circumstances. These regulatory policies could affect the ability of the Corporation to pay dividends, repurchase its stock or otherwise engage in capital distributions. The Bank is also subject to limitations and requirements under state and federal law with respect to capital distributions, including payment of dividends to the Corporation.

Non-Banking Activities

A bank holding company such as the Corporation is generally prohibited from engaging in non-banking activities, or acquiring direct or indirect control of more than 5% of the voting securities of any company engaged in non-banking activities. One of the principal exceptions to this prohibition is for activities found by the Board to be so closely related to banking or managing or controlling banks as to be a proper incident thereto. Some of the principal activities that the Board has determined by regulation to be so closely related to banking are: (i) making or servicing loans; (ii) performing certain data processing services; (iii) providing securities brokerage services; (iv) acting as fiduciary, investment or financial advisor; (v) leasing personal or real property; (vi) making investments in corporations or projects designed primarily to promote community welfare; and (vii) acquiring a savings association whose direct and indirect activities are limited to those permitted for bank holding companies.

Change in Bank Control Act and Bank Holding Company Act Requirements

Under the Change in Bank Control Act, no person or group of persons may acquire "control" of a bank holding company, such as the Corporation, unless the Board has been given 60 days' prior written notice and has not issued a notice disapproving the proposed acquisition, taking into consideration certain factors, including the financial and managerial resources of the acquirer and the competitive effects of the acquisition. Control, as defined under the Change in Bank Control Act and its implementing regulations, means the power, directly or indirectly, to direct the management or policies of an insured depository institution, or owning, controlling, or holding with power to vote 25% or more of any class of voting stock. There is a rebuttable presumption of control if, immediately after the transaction, the acquiring person will own, control, or hold with power to vote 10% or more of a class of voting stock, and if (i) the holding company involved has its shares registered under the Securities Exchange Act of 1934, or, (ii) if no other person will own, control or hold the power to vote a greater percentage of that class of voting stock after the acquisition.

Table of Contents

In addition, the Bank Holding Company Act ("BHCA") prohibits any company from acquiring control of a bank or bank holding company, or ownership or control of any voting shares of any bank or bank holding company if after such acquisition it would own or control, directly or indirectly, more than 5% of the voting shares of such bank or bank holding company, without first having obtained the approval of the Board. Among other circumstances, under the BHCA, a company has control of a bank or bank holding company if the company owns, controls or has power to vote 25% or more of any class of voting securities of the bank or bank holding company, controls in any manner the election of a majority of directors or trustees of the bank or bank holding company, or the Board has determined, after notice and opportunity for hearing, that the company directly or indirectly exercises a controlling influence over the management or policies of the bank or bank holding company. The Board has established presumptions of control under which the acquisition of control of 5% or more of a class of voting securities of a bank holding company, together with other factors enumerated by the Board, could constitute the acquisition of control of a bank or bank holding company for purposes of the BHCA. In approving bank or bank holding company acquisitions, the Board is required to consider, among other things, the effect of the acquisition on competition, the financial condition, managerial resources and future prospects of the bank holding company and the banks concerned, the convenience and needs of the communities to be served (including the record of performance under the CRA), the effectiveness of the applicant in combating money laundering activities, and the extent to which the proposed acquisition would result in greater or more concentrated risks to the stability of the U.S. banking or financial system. Our ability to make future acquisitions will depend on our ability to obtain approval for such acquisitions from the Board. The Board could deny our application based on the above criteria or other considerations.

Federal Securities Laws

Our common stock is registered with the SEC under Section 12(b) of the Securities Exchange Act of 1934, as amended (the "Exchange Act"). We are also subject to the proxy rules, tender offer rules, insider trading restrictions, annual and periodic reporting (discussion below), and other requirements of the Exchange Act.

Sarbanes-Oxley Act of 2002

The Corporation is subject to the Sarbanes-Oxley Act of 2002 ("SOX"). SOX created new standards of corporate governance and imposed additional requirements on the board of directors and management of public companies. Pursuant to Section 404 of SOX ("SOX 404"), management of the Corporation is required to furnish a report on internal control over financial reporting, identify any material weaknesses in its internal controls over financial reporting and assert that such internal controls are effective. The process has and will continue to require substantial resources in both financial costs and human capital.

Wealth Management and Insurance Businesses

The Corporation's wealth management and insurance businesses are subject to additional regulatory requirements. The securities brokerage activities of Girard Investment Services, LLC are subject to regulation by the SEC, the Financial Industry Regulatory Authority and the Securities Investor Protection Corporation. Girard Advisory Services, LLC and Girard Pension Services, LLC are registered investment advisory firms which are subject to regulation by the SEC.

Credit and Monetary Policies

The Bank is affected by the fiscal and monetary policies of the federal government and its agencies, including the Board. An important function of these policies is to curb inflation and control recessions through control of the supply of money and credit. The Board uses its powers to regulate reserve requirements of member banks, the discount rate on member bank borrowings, interest rates on time and savings deposits of member banks, and to conduct open-market operations in United States Government securities to exercise control over the supply of money and credit. The policies have a direct effect on the amount of Bank loans and deposits and on the interest rates charged on loans and paid on deposits, with the result that the policies have a material effect on Bank earnings. Future policies of the Board and other authorities cannot be predicted, nor can their effect on future Bank earnings.

The FHLBanks provide

Table of Contents

a central credit facility primarily for member institutions. The Bank, as a member of the Federal Home Loan Bank of Pittsburgh ("FHLB"), is required to acquire and hold shares of capital stock in the FHLB.

Securities and Exchange Commission Reports

The Corporation makes available free-of-charge its reports that are electronically filed with the SEC including its Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to those reports on its website as a hyperlink to the SEC's Electronic Data Gathering, Analysis and Retrieval ("EDGAR") system. These reports are available as soon as reasonably practicable after the material is electronically filed. The Corporation's website address is www.univest.net. Information included on the Corporation's website is not part of this Annual Report on Form 10-K. The Corporation will provide at no charge a copy of the SEC Form 10-K annual report for the year 2025 to each shareholder who requests one in writing. Requests should be directed to: Megan Duryea Santana, Corporate Secretary, Univest Financial Corporation, P.O. Box 197, Souderton, PA 18964.

The SEC maintains an internet site that contains the Corporation's SEC filings electronically at www.sec.gov.

Information about our Executive Officers

Item 1A. Risk Factors

An investment in the Corporation's common stock is subject to risks inherent to the Corporation's business. Before making an investment, you should carefully consider the risks and uncertainties described below, together with all of the other information included or incorporated by reference in this report. This report is qualified in its entirety by these risk factors.

Risks Related to Market Interest Rates

Our results of operations may be adversely affected by credit losses relating to our investment portfolio.

Table of Contents

We are subject to interest rate risk.

Our profitability is dependent to a large extent on our net interest income. Changes in interest rates influence not only the interest we receive on loans and investment securities and the amount of interest we pay on deposits and borrowings, but such changes could also affect our ability to originate loans and obtain and retain deposits and the fair value of our financial assets and liabilities. Although we have implemented strategies to reduce the potential effects of changes in interest rates on our results of operations, any substantial and prolonged change in market interest rates could adversely affect our operating results.

Net interest income may decline in a particular period if:

•in a declining interest rate environment, more interest-earning assets than interest-bearing liabilities reprice or mature, or

•in a rising interest rate environment, more interest-bearing liabilities than interest-earning assets re-price or mature.

When short-term rates are higher than long-term rates, that is referred to as an inverted yield curve. Should the yield curve invert, the difference between rates paid on deposits and received on loans could narrow significantly resulting in a decrease in net interest income and our profitability. Our interest-bearing liabilities generally have shorter contractual maturities than our interest-earning assets. This imbalance can create significant earnings volatility because market interest rates change over time. In a period of declining interest rates, the interest income we earn on our interest-earning assets may decrease more rapidly than the interest we pay on our interest-bearing liabilities, as borrowers prepay mortgage loans and as mortgage-backed securities and callable investment securities are called, requiring us to reinvest those cash flows at lower, prevailing interest rates. Conversely, in a period of rising interest rates, the interest income we earn on our interest-earning assets may not increase as rapidly as the interest we pay on deposits and other interest-bearing liabilities. In addition to these factors, if market interest rates rise rapidly, interest rate adjustment caps may limit increases in the interest rates on adjustable-rate loans, thus reducing our net interest income. In a period of rising interest rates, increases in interest rates may adversely affect the ability of our borrowers to make loan repayments on adjustable-rate loans, as the interest owed on such loans would increase as interest rates increase. Furthermore, increases in interest rates may adversely affect our ability to originate loans. This lagging effect may also negatively impact our net interest income when general interest rates continue to rise periodically.

While we pursue an asset/liability strategy designed to mitigate our risk from changes in interest rates, changes in interest rates can still have a material adverse effect on our financial condition and results of operations.

Changes in the estimated fair value of debt securities may reduce stockholders' equity.

At December 31, 2025, the Corporation maintained a debt securities portfolio of $494.3 million, of which $371.3 million was classified as available-for-sale. The estimated fair value of the available-for-sale debt securities portfolio may change depending on changes in interest rates, the credit quality of the underlying issuer, market liquidity and other factors. Stockholders' equity increases or decreases by the amount of the change in the unrealized gain or loss (the difference between the estimated fair value and the amortized cost) of the available-for-sale debt securities portfolio, net of the related tax expense or benefit, under the category of accumulated other comprehensive income (loss). At December 31, 2025, accumulated other comprehensive income was $13.6 million related to unrealized holding gains in the available-for-sale investment securities portfolio. A decline in the estimated fair value of this portfolio will result in a decline in stockholders' equity, as well as book value per common share. The decrease will occur even though the securities are not sold.

Risks Related to Our Lending Activities

We are subject to lending risk.

Various laws and regulations also affect our lending activities, and failure to comply with such applicable laws and regulations could subject us to enforcement actions and civil monetary penalties.

At December 31, 2025, approximately 79.7% of our loan and lease portfolio consisted of commercial, financial and agricultural, commercial real estate and construction loans and leases, which are generally perceived as having more risk of

Table of Contents

default than residential real estate loans. Commercial business, commercial real estate and construction loans are more susceptible to a risk of loss during a downturn in the business cycle. These types of loans involve larger loan balances to a single borrower or groups of related borrowers. These loans also expose us to greater credit risk than loans secured by residential real estate because the collateral securing these loans typically cannot be liquidated as easily as residential real estate. If we foreclose on these loans, our holding period for the collateral typically is longer than for a single or multi-family residential property because there are fewer potential purchasers of the collateral. Commercial real estate loans may be affected to a greater extent than residential loans by adverse conditions in real estate markets or the economy because commercial real estate borrowers' ability to repay their loans depends on successful development of their properties and the successful operation of the borrower's business.

Commercial business loans and leases are typically affected by the borrowers' ability to repay the loans from the cash flows of their businesses. These loans may involve greater risk because the availability of funds to repay each loan depends substantially on the success of the business itself. The collateral securing the loans and leases often depreciates over time, is difficult to appraise and liquidate and fluctuates in value based on the success of the business. If interest rates rise, the borrower's debt service requirement may increase, negatively impacting the borrower's ability to service their debt.

Risk of loss on a construction loan depends largely upon whether our initial estimate of the property's value at completion of construction equals or exceeds the cost of the property construction (including interest). During the construction phase, a number of factors can result in delays and cost overruns. When projects move slower than anticipated, the properties may have significantly lower values than when the original underwriting was completed, resulting in lower collateral values to support the loan. Extended time frames may also cause the interest carrying cost for projects to be higher than the builder projected, negatively impacting the builder's profit and cash flows and, therefore, their ability to make principal and interest payments.

An increase in nonperforming loans and leases from these types of loans could result in an increase in the provision for credit losses and an increase in loan and lease charge-offs. The risk of credit losses on loans and leases increases if the economy worsens.

Our allowance for credit losses on loans and leases may be insufficient, and an increase in the allowance would reduce earnings.

We maintain an allowance for credit losses on loans and leases. Additions to our allowance for credit losses on loans and leases decrease our net income.

If the evaluation we perform in connection with establishing loan and lease loss reserves is wrong or the assumptions on which we rely prove to be incorrect, our allowance for credit losses on loans and leases may not be sufficient to cover our losses or adjustments may be necessary to address different economic conditions or adverse development in the loan portfolio, which would have an adverse effect on our operating results.

The regulators, in reviewing our loan and lease portfolio as part of a regulatory examination, may from time to time require us to increase our allowance for credit losses, thereby negatively affecting our earnings, financial condition and capital ratios. Moreover, additions to the allowance may be necessary based on changes in economic and real estate market conditions, new information regarding existing loans and leases, identification of additional impaired loans and leases and other factors, both within and outside of our control. Additions to the allowance would have a negative impact on our results of operations.

Table of Contents

Changes in economic conditions and the composition of our loan and lease portfolio could lead to higher loan charge-offs and/or an increase in our provision for credit losses, which may reduce our net income.

Changes in national and regional economic conditions could impact our loan and lease portfolios. For example, an increase in unemployment, an increase in inflation, potential recessionary conditions, the imposition of tariffs, a decrease in real estate values or changes in interest rates, as well as other factors, could weaken the economies of the communities we serve. Weakness in the market areas we serve could depress our earnings as customers may not demand our products or services, borrowers may not be able to repay their loans, the value of the collateral securing our loans to borrowers may decline and/or the quality of our loan portfolio may decline.

Concentrations of loans in certain industries could have adverse effects on credit quality.

The concentration and mix of our assets could increase the potential for credit losses. In the ordinary course of business, we may have heightened credit exposure to a particular industry, geography, asset class or financial market. Although there are limitations on the extent of total exposure to an individual consumer or business borrower, events adversely affecting specific customers or counterparties, industries, geographies, asset classes or financial markets, including a decline in their creditworthiness or a worsening overall risk profile, could materially affect us. The schedule on page 43 provides a break-out of our loan portfolio by certain loan and industry types.

In deciding whether to extend credit or enter into other transactions with customers and counterparties, we rely on information furnished to us by or on behalf of customers and counterparties, including financial statements and other financial information. We also rely on representations of customers and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. For example, in deciding whether to extend credit to clients, we may assume that a customer's audited financial statements conform to U.S. generally accepted accounting principles ("U.S. GAAP") and present fairly, in all material respects, the financial condition, results of operations and cash flows of the customer. Our earnings are significantly affected by our ability to properly originate, underwrite and service loans. Our financial condition, results of operations and capital could be negatively impacted to the extent we incorrectly assess the creditworthiness of our borrowers, fail to detect or respond to deterioration in asset quality in a timely manner, or rely on financial statements that do not comply with U.S. GAAP or are materially misleading.

In the course of our business, we may foreclose and take title to real estate and could be subject to environmental liabilities with respect to these properties. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. In addition, future laws or more stringent interpretations or enforcement policies with respect to existing laws may increase our exposure to environmental liability. Our policies and procedures require environmental factors to be considered during the loan application process. An environmental review is performed before initiating any commercial foreclosure action; however, these reviews may not be sufficient to detect all potential environmental hazards. Possible remediation costs and liabilities could have a material adverse effect on our financial condition.

Risks Related to Our Operations

Our controls and procedures may fail or be circumvented.

Any system of controls, however well designed and operated, is based in part on certain assumptions and can provide only reasonable, not absolute, assurances that the objectives of the system are met. Any failure to follow or circumvention of these controls, policies and procedures could have a material adverse impact on our financial condition and results of operations.

Table of Contents

We may not be able to attract and retain skilled people.

We are dependent on the ability and experience of a number of key management personnel who have substantial experience with our operations, the financial services industry, and the markets in which we offer products and services. Competition for qualified employees and personnel in the banking industry is intense. The process of recruiting personnel with the combination of skills and attributes required to carry out our strategies is often lengthy. The loss of one or more senior executives or key managers may have an adverse effect on our businesses. We maintain change in control agreements and grant equity awards with time-based vesting with certain executive officers to aid in our retention of these individuals.

A lack of liquidity could adversely affect our financial condition and results of operations.

Liquidity is essential to our business. We rely on our ability to generate deposits and effectively manage the repayment of our liabilities to ensure that there is adequate liquidity to fund operations. An inability to raise funds through deposits, borrowings, the sale and maturities of loans and securities and other sources could have a substantial negative effect on liquidity. Our most important source of funds is our deposits. Deposit balances can decrease when customers perceive alternative investments as providing a better risk adjusted return, which are strongly influenced by such external factors as the direction and level of interest rates, local and national economic conditions and the availability and attractiveness of alternative investments. Further, the demand for deposits may be reduced due to a variety of factors such as negative trends in the banking sector, the level of and/or composition of our uninsured deposits, demographic patterns, changes in customer preferences, reductions in consumers' disposable income, the monetary policy of the FRB or regulatory actions that decrease customer access to particular products. If customers move money out of bank deposits and into other investments such as money market funds, we would lose a relatively low-cost source of funds, which would increase our funding costs and reduce net interest income. Any changes made to the rates offered on deposits to remain competitive with other financial institutions may also adversely affect profitability and liquidity. Other primary sources of funds consist of cash flows from operations, maturities and sales of investment securities and/or loans, brokered deposits, borrowings from the FHLB and/or FRB discount window, and unsecured borrowings. We also may borrow funds from third-party lenders, such as other financial institutions. Our access to funding sources in amounts adequate to finance or capitalize our activities, or on terms that are acceptable, could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry, a decrease in the level of our business activity as a result of a downturn in markets or by one or more adverse regulatory actions against us or the financial sector in general. Any decline in available funding could adversely impact our ability to originate loans, invest in securities, meet expenses, or to fulfill obligations such as meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition and results of operations.

Our profitability depends in part on our success in attracting and retaining a stable base of low-cost deposits. The competition for these deposits is strong and customers are increasingly seeking investments with higher interest rates that are safe, including the purchase of U.S. Treasury securities and other government-guaranteed obligations, as well as the establishment of accounts at the largest, most well-capitalized banks. If we were to lose a significant portion of our low-cost deposits, it would negatively impact our liquidity and profitability.

We heavily rely on information technology systems, including the systems of third-party service providers, to conduct our business. Any failure, interruption, or breach in security or operational integrity of these systems could result in failures or disruptions in our customer relationship management and general ledger, deposit, loan, and other systems. The occurrence of any system failures, interruptions, or breaches in security could expose us to

Table of Contents

reputation risk, litigation, regulatory scrutiny and possible financial liability that could have a material adverse effect on our financial condition and results of operations.

Although we take protective measures to maintain the confidentiality, integrity and availability of information, our computer systems, software and networks may be vulnerable to unauthorized access, loss or destruction of data (including confidential client information), account takeovers, unavailability of service, computer viruses or other malicious code, cyber-attacks and other events that could have an adverse security impact. Furthermore, we may not be able to ensure that all of our clients, suppliers, counterparties and other third parties have appropriate controls in place to protect themselves from cyber-attacks or to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. Although we have developed, and continue to invest in, systems and processes that are designed to detect and prevent security breaches and cyber-attacks, a breach of our systems and global payments infrastructure or those of our fintech vendors and processors could result in: losses to us and our customers; loss of business and/or customers; damage to our reputation; the incurrence of additional expenses (including the cost of investigation and remediation and the cost of notification to consumers, credit monitoring and forensics, and fees and fines imposed by the card networks); disruption to our business; an inability to grow our online services or other businesses; additional regulatory scrutiny, investigation or penalties; and/or exposure to civil litigation and possible financial liability - any of which could have a material adverse effect on our reputation, business, financial condition and results of operations. Although the impact to date for these types of events has not had a material impact on us, we cannot be sure this will be the case in the future.

Our risk and exposure to cyber-attacks or other information security breaches remains heightened because of, among other things, the evolving nature of these threats, our plans to continue to enhance our internet banking and mobile banking channel strategies, our expanded geographic footprint and that a portion of our employee base works remotely. There continues to be a rise in security breaches and cyber-attacks within the financial services industry, especially in the commercial banking sector.

Disruptions or failures in the physical infrastructure or operating systems that support our businesses, customers or third parties, or cyber-attacks or security breaches of the networks, systems or devices that our customers or third parties use to access our products and services could result in customer attrition, financial losses, the inability of our customers or vendors to transact business with us, violations of applicable privacy and other laws, regulatory fines, penalties or intervention, reputational damage, reimbursement or other compensation costs, and/or additional compliance costs, any of which could materially adversely affect our results of operations or financial condition.

The failure to maintain current technologies, and the costs to update technology, could negatively impact the Corporation's business and financial results.

Our future success depends, in part, on our ability to effectively embrace technology to better serve customers and reduce costs. We have been required, and may be required in the future, to expend additional resources to employ the latest technologies.

Our reliance on and integration of artificial intelligence ("AI") and machine learning ("ML") technologies expose us to various risks, including operational, data, regulatory, and reputational risks, which could materially affect our business and financial results.

•Operational and Model Risk: AI/ML models may rely on complex algorithms and vast datasets. Errors, biases, or generating false information in these models, or unexpected system failures, could lead to flawed decisions, financial losses, compliance failures, or degraded customer experiences, impacting profitability and client retention. We utilize certain AI/ML models provided by third-party vendors, including models used for credit scoring and fraud detection, and may use other AI/ML models in the future.

•Data Security and Privacy: AI systems may process sensitive customer data. Security breaches or unauthorized access to these systems could result in data theft, loss of intellectual property, and significant penalties, damaging customer trust.

•Regulatory and Compliance Risk: The regulatory landscape for AI is rapidly evolving. New laws could impose costly compliance burdens, restrict AI use, or introduce liabilities, particularly concerning algorithmic bias and fair lending practices (e.g., "digital redlining"), potentially increasing operational costs and limiting service offerings.

•Talent and Third-Party Risk: Attracting and retaining skilled AI professionals is crucial and competitive. We also depend on third-party AI vendors, creating dependency risks and potential issues with data handling, model reliability, and licensing, all of which could disrupt operations. While we do not currently develop AI or ML models internally,

Table of Contents

future expansion of our AI capabilities may require specialized technical skillsets, and we could face challenges attracting and retaining qualified AI talent if those needs arise.

•Reputational and Ethical Risk: Misuse of AI, biased outcomes, or privacy violations can harm our brand, erode customer confidence, and attract negative public attention, potentially affecting demand for our services.

If we cannot effectively manage these challenges, including adapting to rapid technological change and ensuring responsible AI governance, our reputation, competitive position, and financial performance could be significantly harmed.

Our Board of Directors relies on management and outside consultants in overseeing cybersecurity risk management.

The Board of Directors has established an Enterprise-Wide Risk Management Committee. The Chief Risk Officer is the primary management liaison to the Enterprise-Wide Risk Management Committee. The Enterprise-Wide Risk Management Committee provides oversight, from a risk perspective, of information systems security, among other things. In that regard, the Chief Information Security Officer provides information security updates to the Enterprise-Wide Risk Management Committee at each Enterprise-Wide Risk Management Committee meeting. We also engage outside consultants to support our cybersecurity efforts. While select members of the Enterprise-Wide Risk Management Committee have experience in cybersecurity risk management in other business entities comparable to the Corporation, directors rely on the Chief Risk Officer, the Chief Information Security Officer and consultants for cybersecurity guidance.

We are a community bank and our ability to maintain our reputation is critical to the success of our business. The failure to do so may materially adversely affect our performance.

We are a community bank, and our reputation is one of the most valuable components of our business. A key component of our business strategy is to rely on our reputation for integrity, reliability, customer service and knowledge of local markets to expand our presence by capturing new business opportunities from existing and prospective customers in our market area and contiguous areas. Threats to our reputation can come from many sources, including adverse sentiment about financial institutions generally, unethical practices, employee misconduct, failure to deliver minimum standards of service or quality, compliance deficiencies, cybersecurity incidents, errors in the use of artificial intelligence and questionable or fraudulent activities of our customers. In addition, third parties with whom the Corporation has relationships may take actions over which the Corporation has limited control that could negatively impact perceptions about the Corporation or the financial services industry. The proliferation of social media may increase the likelihood that negative information about the Corporation, whether or not accurate, could impact the Corporation's reputation and business. Negative publicity regarding our business, employees, or customers, with or without merit, may result in the loss of customers and employees, costly litigation and increased governmental regulation, all of which could adversely affect our business and operating results.

We borrow from the Federal Home Loan Bank, the Federal Reserve and correspondent banks, and these lenders could modify or terminate their current programs, which could have an adverse effect on our liquidity and profitability.

We utilize the FHLB for overnight borrowings and term advances. We also borrow from the Federal Reserve and from correspondent banks under our federal funds lines of credit. The amount loaned to us is generally dependent on the value of the collateral pledged as well as the FHLB's internal credit rating of the Bank. These lenders could reduce the percentages loaned against various collateral categories, could eliminate certain types of collateral and could otherwise modify or even terminate their loan programs, particularly to the extent they are required to do so, because of capital adequacy or other balance sheet concerns about us. Any change or termination of our borrowings from the FHLB, the Federal Reserve or correspondent banks would have an adverse effect on our liquidity and profitability.

Other Risks Related to Our Business

Natural disasters, acts of war or terrorism, outbreaks or escalations of hostilities and other external events could negatively impact us.

Table of Contents

Risks Related to Economic Conditions

Inflation can have an adverse impact on our business and on our customers.

Inflation risk can negatively impact the value of assets or income from investments as inflation decreases the value of money. Inflation rose sharply at the end of 2021 and remained elevated through the first half of calendar 2024, before beginning to moderate in the latter half of 2024 and into calendar 2025. However, inflation levels continue to exceed the Federal Reserve Board's long-term target of 2.0%. As discussed above under “Risks Related to Market Interest Rates – We are subject to interest rate risk,” as inflation increases and market interest rates rise the value of our investment securities, particularly those with longer maturities, would decrease, although this effect can be less pronounced for floating rate instruments. In addition, inflation generally increases the cost of goods and services we use in our business operations, such as electricity and other utilities, which increases our non-interest expenses. Furthermore, our customers are also affected by inflation and the rising costs of goods and services used in their households and businesses, which could have a negative impact on their ability to repay their loans with us.

Our earnings are impacted by general business and economic conditions.

Our operations and profitability are impacted by general business and economic conditions, including long-term and short-term interest rates, the shape of the interest rate curve, inflation, the imposition of tariffs or other domestic or international governmental policies, money supply, supply chain issues, political issues, legislative, tax, accounting and regulatory changes, fluctuations in both debt and equity capital markets, broad trends in industry and finance, values of real estate and other collateral and the strength of the U.S. economy and the local economies in which we operate, all of which are beyond our control. Negative changes in these general business and economic conditions could have the following consequences, any of which could have a material adverse effect on the business, financial condition, liquidity and results of operations:

•demand for the products and services may decline;

•our allowance for credit losses may increase;

•loan delinquencies, problem assets, and foreclosures may increase;

•our funding costs and noninterest expenses may increase;

•the value of our securities portfolio may decrease;

•collateral for loans, especially real estate, may decline in value, thereby reducing customers' borrowing power, and reducing the value of assets and collateral associated with existing loans; and

•the net worth and liquidity of loan guarantors may decline, impairing their ability to honor commitments.

Our profitability is affected by economic conditions in our markets.

Adverse economic conditions in the region, including, without limitation, declining real estate values or higher unemployment, could cause our levels of nonperforming assets and loan losses to increase. Regional economic conditions have a significant impact on the ability of borrowers to repay their loans as scheduled. A sluggish local economy could, therefore, result in losses that materially and adversely affect our financial condition and results of operations.

Interruption of our customers' supply chains could negatively impact their business and operations and impact their ability to repay their loans.

Any material interruption in our customers' supply chains, such as a material interruption of the resources required to conduct their business, such as those resulting from interruptions in service by third-party providers, trade restrictions, such as increased tariffs or quotas, embargoes or customs restrictions, restrictions in federal subsidies or grants, social or labor unrest, natural disasters, epidemics or pandemics or political disputes and military conflicts, that cause a material disruption in our customers' supply chains, could have a negative impact on their business and ability to repay their borrowings with us. In the event of disruptions in our customers' supply chains, the labor and materials they rely on in the ordinary course of business may not be available at reasonable rates or at all. Additionally, changes in distribution of federal funds or freezing federal funds, including reductions in federal workforce causing unemployment, could have an adverse effect on the ability of consumers and businesses to pay debts and/or affect the demand for loans and deposits.

Table of Contents

Risks Related to Regulation

The fiscal, monetary and regulatory policies of the federal government and its agencies could have an adverse effect on our results of operations.

In addition to being affected by general economic conditions, our earnings and growth are affected by the policies of the FRB. An important function of the FRB is to regulate the money supply and credit environment. Among the instruments used by the FRB to implement these objectives are open market purchases and sales of U.S. Government securities, adjustments of the discount rate and changes in banks' reserve requirements against bank deposits. These instruments are used in varying combinations to influence overall economic growth and the distribution of credit, bank loans, investments and deposits. The FRB's policies determine in large part the cost of funds for lending and investing and the return earned on those loans and investments, both of which affect our net interest margin. Its policies can also adversely affect borrowers, potentially increasing the risk that they may fail to repay their loans. The monetary policies and regulations of the FRB have had a significant effect on the overall economy and the operating results of financial institutions in the past and are expected to continue to do so in the future.

Additionally, Congress and the administration through executive orders controls fiscal policy through decisions on taxation and expenditures. Depending on industries and markets involved, changes to tax law and increased or reduced public expenditures could affect us directly or the business operations of our customers.

Changes in Federal Reserve and other governmental policies, fiscal policy, and our regulatory environment generally are beyond our control, and we are unable to predict what changes may occur or the manner in which any future changes may affect our business, financial condition and results of operations.

We are subject to extensive regulation, supervision, and examination by our regulators. Regulation by these agencies is intended primarily for the protection of our depositors and the deposit insurance fund and not for the benefit of our shareholders. The Bank's activities are also regulated under consumer protection laws applicable to our lending, deposit, and other activities. A material claim against the Bank under these laws or an enforcement action by our regulators could have a material adverse effect on our financial condition and results of operations. These regulations, along with the currently existing tax, accounting, securities, deposit insurance and monetary laws, rules, standards, policies, and interpretations, control the ways financial institutions conduct business, implement strategic initiatives, and prepare financial reporting and disclosures. Regulatory authorities have extensive discretion in their supervisory and enforcement activities, including the ability to impose restrictions on our operations and comment on the classification of our assets and the level of our allowance for credit losses. Further, compliance with such regulation may increase our costs and limit our ability to pursue business opportunities.

Non-compliance with the USA PATRIOT Act, Bank Secrecy Act, or other laws and regulations could result in fines or sanctions.

The USA PATRIOT and Bank Secrecy Acts require financial institutions to develop programs and procedures to prevent financial institutions from being used for money laundering and terrorist activities. If such activities are detected, financial institutions are obligated to file suspicious activity reports with the U.S. Treasury's Office of Financial Crimes Enforcement Network. These rules require financial institutions to establish procedures for identifying and verifying the identity of customers seeking to open new financial accounts. Failure to comply with these regulations could result in fines or sanctions. While we have developed policies and procedures designed to assist in compliance with these laws and regulations, these policies and procedures may not be effective in preventing violations of these laws and regulations.

Risks Related to the Wealth Management Industry

Revenues and profitability from our wealth management business may be adversely affected by any reduction in assets under management, which could reduce fees earned.

The majority of the revenue from the wealth management business consists of trust, investment advisory and brokerage and other servicing fees. Substantial revenues are generated from investment management contracts with clients. Under these contracts, the investment advisory fees paid to us are typically based on the market value of assets under management. Assets

Table of Contents

under management may decline for various reasons including declines in the market value of the assets in the funds and accounts managed, which could be caused by price declines in the securities markets generally or by price declines in specific market segments. Assets under management may also decrease due to redemptions and other withdrawals by clients or termination of contracts. This could be in response to adverse market conditions or in pursuit of other investment opportunities. If our assets under management decline and there is a related decrease in fees, it will negatively affect our results of operations.

We may not be able to attract and retain wealth management clients.

Due to strong competition, our wealth management business may not be able to attract and retain clients. Many of our competitors have greater resources than we have.

If we are not successful, our results of operations and financial condition may be negatively impacted.

The wealth management business is subject to extensive regulation, supervision and examination by regulators, and any enforcement action or adverse changes in the laws or regulations governing our business could decrease our revenues and profitability.

The wealth management business is subject to regulation by regulatory agencies that are charged with safeguarding the integrity of the securities and other financial markets and with protecting the interests of customers participating in those markets. The imposition of any such penalties or orders could have a material adverse effect on the wealth management segment's operating results and financial condition. The wealth management business also may be adversely affected as a result of new or revised legislation or regulations. Regulatory changes have imposed and may continue to impose additional costs, which could adversely impact our profitability.

Risks Related to the Insurance Industry

Revenues and profitability from our insurance business may be adversely affected by market conditions, which could reduce insurance commissions and fees earned.

The revenues of our fee-based insurance business are derived primarily from commissions from the sale of insurance policies, which commissions are generally calculated as a percentage of the policy premium. These insurance policy commissions can fluctuate as insurance carriers change the premiums on the insurance products we sell. Due to the cyclical nature of the insurance market and the impact of other market and macroeconomic conditions on insurance premiums, commission levels may vary. The reduction of these commission rates, along with general volatility and/or declines in premiums, may adversely impact our profitability.

Risks Related to Competition

We operate in a highly competitive industry and market area, which could adversely impact its business and results of operations.

Our competitors, including commercial banks, community banks, savings institutions, credit unions, consumer finance companies, insurance companies, securities dealers, brokers, mortgage bankers, investment advisors, money market mutual funds and other financial technology and financial institutions, compete with us for loans and deposits and insurance and wealth management services.

Many of these competing institutions have much greater financial and marketing resources than we have. If we are unable to compete effectively in the offerings of our products and services, our business may be negatively affected. Additionally, these

Table of Contents

competitors may offer more favorable interest rates than we do, which could decrease the loans or deposits that we attract or require us to adjust our rates to retain and/or attract loans or deposits. Increased deposit competition could adversely affect our ability to generate the funds necessary for lending operations. As a result, we may need to seek other sources of funds that may be more expensive to obtain, which could increase the cost of funds and decrease profitability.

Some of the financial services organizations with which we compete are not subject to the same degree of regulation or tax structure as we are. As a result, these non-bank competitors have certain advantages over us in providing lower-cost products, accessing funding and in providing various services. The banking business in our primary market areas is very competitive, and the level of competition and their pricing structure facing us may increase further, which may limit our asset growth and financial results.

In addition, rapid technological changes and consumer preferences may result in increased competition. A number of well-funded technology focused companies are innovating the payments, distributed ledger, and cryptocurrency networks and are attempting to disintermediate portions of the traditional banking model. A shift in the mix of payment forms away from our products and services could have a material adverse effect on our financial position and results of operations.

Risks Related to Strategic Activities

The anticipated benefits of our digital initiatives may not be fully realized.

We have devoted substantial time and resources to our strategic digital initiatives. The success of these initiatives will depend on, among other things, whether our upgraded technology and digital solutions are received favorably by our customers and employees and improves their experiences and interactions with us. If we are unable to successfully achieve these objectives, the anticipated benefits of these initiatives may not be realized fully, or at all, or may take longer to realize than expected.

Our business strategy includes significant investment in growth plans, and our financial condition and results of operations could be negatively affected if we fail to grow or fail to manage our growth effectively.

We expanded into the Western Pennsylvania and northern Maryland markets, and may further expand into additional markets as a result of our digital initiatives. Our growth initiatives require us to recruit experienced personnel. The failure to retain such personnel would place significant limitations on our ability to successfully execute our growth strategy. In addition, as we expand our lending beyond our current market areas, we could incur additional risk related to those new market areas. We may not be able to expand our market presence in our existing market areas or successfully enter new markets. A weak economy, low demand and competition for credit may impact our ability to successfully execute our growth plan and adversely affect our business, financial condition, results of operations, reputation and growth prospects. While we believe we have the executive management resources and internal systems in place to successfully manage our future growth, there can be no assurance growth opportunities will be available or that we will successfully manage our growth. We regularly evaluate potential growth and expansion opportunities. If appropriate opportunities present themselves, we may engage in other business growth initiatives or undertakings. We may not successfully identify appropriate opportunities, may not be able to negotiate or finance such activities and such activities, if undertaken, may not be successful.

We may need to raise additional capital in the future and such capital may not be available when needed or at all.

Federal regulatory agencies have the authority to change the Corporation's and Bank's capital requirements and new accounting rules could have a negative impact on our regulatory capital ratios. Accordingly, we may need to raise additional capital in the future to provide us with sufficient capital resources to meet our commitments and business needs. If we raise capital through the issuance of additional shares of our common stock or other securities, it would dilute the ownership interests of existing shareholders and may dilute the per share book value of our common stock. New investors may also have rights, preferences and privileges senior to our current shareholders, which may adversely impact our current shareholders. Our ability to raise additional capital, if needed, or at attractive prices, will depend on, among other things, conditions in the capital markets at that time, which are outside of our control, and our financial performance. An inability to raise additional capital on acceptable terms when needed could have a material adverse effect on our business, financial condition and results of operations.

As a result, we may engage in negotiations or discussions that, if they were to result in a transaction, could have a material effect on our operating results and

Table of Contents

financial condition, including on our short- and long-term liquidity and capital structure. Our acquisition activities could be material to us. For example, we could issue additional shares of common stock in a merger transaction, which could dilute current shareholders' ownership interest and the per share book value of our common stock.

Our acquisition activities could involve a number of additional risks, including the risks of:

•Incurring time and expense associated with identifying and evaluating and negotiating potential transactions;

•Using estimates and judgments to evaluate credit, operations, management, and market risks with respect to the target institution or its assets, which later prove to be inaccurate;

•The time and expense required to integrate the operations and personnel of the combined businesses;

•Creating an adverse short-term effect on our results of operations;

•Failing to realize related revenue synergies and/or cost savings within expected time frames; and

•Losing key employees and customers or a reduction in our stock price as a result of an acquisition that is poorly received.

We may not be successful in overcoming these risks or any other problems encountered in connection with potential acquisitions. Our inability to overcome these risks could have an adverse effect on our ability to achieve our business strategy and could have an adverse effect on our financial condition and results of operations.

Risks Related to Our Common Stock

Our stock price can be volatile.

The factors that could cause our stock price to decrease include, but are not limited to:

•Our past and future dividend practice;

•Our financial condition, performance, creditworthiness and prospects;

•Variations in our operating results or the quality of our assets;

•General investor sentiment regarding the banking industry;

•Operating results that vary from the expectations of management, securities analysts and investors;

•Changes in expectations as to our future financial performance;

•Changes in financial markets related to market valuations of financial industry companies;

•The operating and securities price performance of other companies that investors believe are comparable to us;

•Future sales of our equity or equity-related securities;

•The imposition of tariffs and any retaliatory responses;

•Proposed or adopted legislative, regulatory or accounting changes or developments;

•The credit, mortgage and housing markets, the markets for securities relating to mortgages or housing, and developments with respect to financial institutions generally; and

•Changes in global financial markets and global economies and general market conditions, such as interest or foreign exchange rates, inflation, recessionary conditions, stock, commodity or real estate valuations or volatility and other geopolitical, regulatory or judicial events.

The limited liquidity of our common stock may limit your ability to trade our shares and may impact the value of our common stock.

A public trading market having the desired characteristics of depth, liquidity and orderliness depends on the presence in the marketplace of willing buyers and sellers of our common stock at any given time. This presence depends on the individual decisions of investors and general economic and market conditions over which we have no control. Given the relatively low trading volume of our common stock, significant sales of our common stock in the public market, or the perception that those sales may occur, could cause the trading price of our common stock to decline or to be lower than it otherwise might be in the absence of those sales or perceptions.

Table of Contents

Anti-takeover provisions could negatively impact our shareholders.

Certain provisions in the Corporation's Articles of Incorporation and Bylaws, as well as federal banking laws, regulatory approval requirements, and Pennsylvania law, could make it more difficult for a third party to acquire the Corporation, even if doing so would be perceived to be beneficial to our shareholders.

There may be future sales or other dilution of the Corporation's equity, which may adversely affect the market price of our common stock.

The Corporation is generally not restricted from issuing additional common stock, including any securities that are convertible into or exchangeable for, or that represent the right to receive, common stock. The issuance of any additional shares of common stock or preferred stock or securities convertible into, exchangeable for or that represent the right to receive common stock or the exercise of such securities could be substantially dilutive to shareholders of our common stock. Holders of our shares of common stock have no preemptive rights that entitle holders to purchase their pro rata share of any offering of shares of any class or series. The market price of our common stock could decline as a result of offerings or because of sales of shares of our common stock made after offerings or the perception that such sales could occur. Because our decision to issue securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. Thus, our shareholders bear the risk of our future offerings reducing the market price of our common stock and diluting their stock holdings in us.

The Corporation relies on dividends from our subsidiaries for most of our revenue.

The Corporation is a bank holding company and our operations are conducted by our subsidiaries from which we receive dividends. The ability of our subsidiaries to pay dividends is subject to legal and regulatory limitations, profitability, financial condition, capital expenditures and other cash flow requirements. The ability of the Bank to pay cash dividends to the Corporation is limited by its obligation to maintain sufficient capital and by other restrictions on its cash dividends that are applicable to state member banks in the Federal Reserve System. If the Bank is not permitted to pay cash dividends to the Corporation, it is unlikely that we would be able to pay cash dividends on our common stock.

Item 1B. Unresolved Staff Comments

None.

Cybersecurity Risk Management, Strategy and Governance

Cybersecurity is a significant and integrated component of the Corporation's risk management strategy. As a financial services company, cyber threats are present and growing, and the potential exists for a cybersecurity incident to occur, which could disrupt business operations or compromise sensitive data. Through December 31, 2025, the Corporation has not, to its knowledge, experienced a cybersecurity incident materially affecting or reasonably likely to materially affect the Corporation.

The structure of our information security program is generally designed around the National Institute of Standards and Technology Cybersecurity Framework, regulatory guidance, and other industry standards. To prepare for and respond to incidents, the Corporation has implemented a multi-layered cybersecurity strategy, integrating people, technology, and processes. This includes employee training, the use of innovative technologies, and the implementation of policies and procedures in the areas of Information Security, Data Governance, Business Continuity and Disaster Recovery, Privacy, Third-Party Risk Management, and Incident Response. The Corporation engages third-party consultants and independent auditors to, among other things, conduct penetration tests and perform cybersecurity risk assessments and audits.

The Information Security Department of the Corporation is primarily responsible for identifying, assessing and managing material risks from cybersecurity threats. The Information Security Department is managed by the Board-appointed Chief Information Security Officer (the "CISO") who reports directly to the Corporation's Chief Risk Officer. The CISO has over 40 years of experience in various aspects of information technology ("IT") from field support to software development to management. Prior to joining the Corporation, the CISO held management roles of increasing responsibility in a variety of regulated industries including food, pharmaceuticals, and manufacturing. The CISO holds a Bachelor of Science Degree in Computer Science and has earned a certificate in Cybersecurity Oversight from the National Association of Corporate Directors. The CISO also oversees the Corporation's Information Security Program, which is governed by various information security and cybersecurity, systems development, change control, disaster recovery/business continuity and physical asset classification and control policies. The Information Security Program identifies data sources, threats and vulnerabilities and ensures awareness, accountability, and oversight for data protection throughout the Corporation and with trusted third parties to

Table of Contents

ensure that data is protected and able to be recovered in the event of a breach or failure (technical or other disaster). The Information Security Department conducts ongoing technology and IT threat meetings to ensure the latest threats are addressed in addition to penetration, business continuity/ disaster recovery testing, and incident response plan testing. The CISO is a member of various management committees, chairs the Corporation's management-level Information Security Steering Committee, and presents information security and cybersecurity updates on a quarterly basis to the Corporation's Enterprise-Wide Risk Management Committee, which consists of members of management, including the Chairman, President and Chief Executive Officer of the Corporation, as well independent members of the Board of Directors.

The Enterprise-Wide Risk Management Committee provides oversight, from a risk perspective, of information systems security.

Additional information security training for employees is provided through a management Information Security Steering Committee and through targeted training overseen by the CISO. In addition, as discussed below, the Corporation has implemented an Incident Response Plan to provide a structured and systematic incident response process for information security incidents that affect any of the information technology systems, network, or data of the Corporation. The Incident Response Plan is implemented and maintained by the CISO and is subject to annual review and approval by the Enterprise-Wide Risk Management Committee. Cybersecurity metrics are reported to both management level committees and the Enterprise-Wide Risk Management Committee on a quarterly basis.

The Board of Directors recognizes the importance of the Interagency Guidelines Establishing Standards for Safeguarding Customer Information and has incorporated those elements in its ongoing oversight of the Information Security Program.

Risk Assessment

On a periodic basis, but not less than annually, the CISO, in conjunction with the Enterprise-Wide Risk Management Committee, identifies and documents internal and external vulnerabilities that could result in unauthorized disclosure, misuse, alteration, or destruction of customer information or customer records. Based on the results of the risk assessment, the Corporation's Information Security Program may be revised to protect against any anticipated threats or hazards to the security or integrity of such information. The Enterprise-Wide Risk Management Committee reviews changes to the program designed to monitor, measure, and respond to vulnerabilities identified.

Response to Security Vulnerabilities

In response to identified risks, management may take certain steps to correct and respond to security vulnerabilities, which may include:

a.Eliminating unwarranted risks by applying vendor-provided software fixes, commonly called patches.

b.Ensuring that changes to security configurations are documented, approved, and tested.

c.Ensuring that exploitable files and services are assessed and removed or disabled based upon known vulnerabilities and business needs.

d.Updating vulnerability scanning and intrusion detection tools to identify known vulnerabilities and related unauthorized activities.

e.Conducting subsequent penetration testing and vulnerability assessments, as warranted.

f.Reviewing performance with service providers to ensure security maintenance and reporting responsibilities are operating according to contract provisions and that service providers provide notification of system security breaches that may affect the Corporation.

Internal Controls, Audit, and Testing

Regular internal monitoring is integral to the Corporation's risk assessment process, which includes regular testing of internal key controls, systems, and procedures. In addition, independent third-party penetration testing to test the effectiveness of security controls and preparedness measures is conducted at least annually or more often, if warranted. Management determines the scope and objectives of the penetration analysis.

Service Providers

Like many companies, the Corporation relies on third-party vendor solutions to support its operations. Many of these vendors, especially in the financial services industry, have access to sensitive and proprietary information. In order to mitigate the operational, informational and other risks associated with the use of vendors, the Corporation maintains a Third-Party Risk

Table of Contents

Management Program, which is implemented through a Third-Party Risk Management Policy and includes a detailed onboarding process and periodic reviews of vendors with access to sensitive Corporation data. The Third-Party Risk Management Policy applies to any business arrangement between the Corporation and another individual or entity, by contract or otherwise, in compliance with the Interagency Guidance on Third-Party Relationships: Risk Management. The Third-Party Risk Management Program is reviewed as part of the Corporation's annual Internal Audit Risk Assessment.

Employees and Training

Employees are an important defense against cybersecurity threats. Each employee is responsible for protecting Corporation and client information. Employees are provided training at initial onboarding and regularly thereafter regarding information security and cybersecurity-related policies and procedures applicable to their respective roles within the organization. In addition, employees are subjected to regular simulated phishing assessments, designed to sharpen threat detection and reporting capabilities. In addition to training, employees are supported with solutions designed to identify, prevent, detect, respond to, and recover from incidents. Notable technologies include firewalls, intrusion detection systems, security automation and response capabilities, user behavior analytics, multi-factor authentication, data backups to immutable storage and business continuity applications. Notable services include 24/7 security monitoring and response, continuous vulnerability scanning, third-party monitoring, and threat intelligence.

Board Reporting

On a quarterly basis, the CISO reports to the Board, directly or through the Enterprise-Wide Risk Management Committee, on the overall status of the Information Security Program, including the Corporation's compliance with the Interagency Guidelines for Safeguarding Customer Information. Any material findings related to the risk assessment, risk management and control decisions, service provider arrangements, results of testing, security breaches or violations are discussed as are management’s responses and any recommendations for program changes.

Program Adjustments

The CISO monitors, evaluates, and adjusts the Information Security Program considering any relevant changes in technology, the sensitivity of its customer information, internal or external threats to information, and changing business arrangements, such as mergers and acquisitions, alliances and joint ventures, outsourcing arrangements, and changes to customer information systems.

Incident Response Plan

To ensure that information security incidents can be recovered from quickly and with the least impact to the Corporation and its customers, the Corporation maintains a structured and systematic incident response plan (the "IRP") for all information security incidents that affect any of the IT systems, network, or data of the Corporation, including the Corporation's data held, or IT services provided, by third-party vendors or other service providers. The CISO is responsible for implementing and maintaining the IRP, which includes:

a.Identifying the incident response team ("IRT") and any appropriate sub-teams to address specific information security incidents, or categories of information security incidents.

b.Coordinating IRT activities, including developing, maintaining, and following appropriate procedures to respond to and document identified information security incidents.

c.Conducting post-incident reviews to gather feedback on information security incident response procedures and address any identified gaps in security measures.

d.Providing training and conducting periodic exercises to promote employee and stakeholder preparedness and awareness of the IRP.

e.Reviewing the IRP at least annually, or whenever there is a material change in the Corporation's business practices that may reasonably affect its cyber incident response procedures.

Notwithstanding our defensive measures and processes, the threat posed by cyber-attacks is significant. For further discussion of risks from cybersecurity threats, see the section captioned "" in Item 1A. Risk Factors.

Table of Contents

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
OVV	an hour ago
ACVA	an hour ago
USB	an hour ago
BWXT	an hour ago
MAT	an hour ago
AXSM	an hour ago
CAKE	an hour ago
NOVT	an hour ago
BDN	an hour ago
RIG	an hour ago
RYN	an hour ago
LPLA	2 hours ago
KTOS	2 hours ago
KWR	2 hours ago
LAZ	2 hours ago
PRA	2 hours ago
BLBX	2 hours ago
MAN	2 hours ago
DEA	2 hours ago
ERIE	2 hours ago
COUR	2 hours ago
MMLP	2 hours ago
MAX	2 hours ago
WEN	2 hours ago
PRK	2 hours ago
TRMK	2 hours ago
BOOM	2 hours ago
APLE	2 hours ago
GLDD	2 hours ago
ORIC	2 hours ago
CCI	2 hours ago
AGNC	2 hours ago
TARS	2 hours ago
SMMT	2 hours ago
FBIN	2 hours ago
CINF	2 hours ago
LZ	2 hours ago
EKSO	2 hours ago
FRPT	2 hours ago
VVX	2 hours ago
IVR	2 hours ago
VRE	2 hours ago
RNA	2 hours ago
CL	2 hours ago
SAH	2 hours ago
SEIC	2 hours ago
UVSP	2 hours ago
KEY	3 hours ago
WTS	3 hours ago
D	6 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - UVSP

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - UVSP

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing