CCNE US Equity☆

ccne-20221231

Table of Contents

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

F O R M 10-K

For the fiscal year ended December 31, 2022

or

For the transition period from to

Commission File Number 001-39472

CNB FINANCIAL CORPORATION

(Exact name of registrant as specified in its charter)

1 South Second Street

P.O. Box 42

Clearfield, Pennsylvania16830

(Address of principal executive office)

Registrant’s telephone number, including area code (814) 765-9621

Securities registered pursuant to Section 12(b) of the Act:

Title of Class Trading Symbol(s) Name of each exchange on which registered

Common Stock, no par value CCNE The NASDAQ Stock Market LLC

Securities registered pursuant to Section 12 (g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. ☐ Yes ☒No

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. ☐ Yes ☒No

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. ☒Yes☐ No

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). ☒Yes☐ No

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of "large accelerated filer," "accelerated filer", "smaller reporting company", and "emerging growth company" in Rule 12b-2 of the Exchange Act. (Check one):

Large Accelerated Filer ☐ Accelerated Filer ☒

Non-accelerated filer ☐ Smaller reporting company ☐

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). ☐ Yes ☒ No

The aggregate market value of the voting and non-voting common equity held by non-affiliates of the registrant, based on the last sales price quoted on the Nasdaq Global Select Market on June 30, 2022, the last business day of the registrant’s most recently completed second fiscal quarter, was approximately: $382,432,095

The number of shares outstanding of the registrant’s common stock as of March 2, 2023: 21,116,970 shares

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the definitive Proxy Statement for the 2023 Annual Meeting of Stockholders to be held on April 18, 2023 are incorporated by reference into Part III of this report.

Table of Contents

TABLE OF CONTENTS

Page Number

PART I.

ITEM 1. Business 1

ITEM 1A. Risk Factors 12

ITEM 1B. Unresolved Staff Comments 22

ITEM 2. Properties 22

ITEM 3. Legal Proceedings 22

ITEM 4. Mine Safety Disclosures 22

PART II.

ITEM 6. Reserved 24

ITEM 7A. Quantitative and Qualitative Disclosures about Market Risk 51

ITEM 8. Financial Statements and Supplementary Data 52

ITEM 9A. Controls and Procedures 123

ITEM 9B. Other Information 124

ITEM 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 124

PART III.

ITEM 10. Directors, Executive Officers and Corporate Governance 124

ITEM 11. Executive Compensation 124

ITEM 14. Principal Accountant Fees and Services 125

PART IV.

ITEM 15. Exhibits and Financial Statement Schedules 126

Table of Contents

PART I.

The disclosures set forth in this item are qualified by Item 1A. Risk Factors and the section captioned "Forward-Looking Statements and Factors that Could Affect Future Results" in Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations of this report and other cautionary statements set forth elsewhere in this report.

ITEM 1. BUSINESS

CNB Financial Corporation (the "Corporation") is a financial holding company registered under the Bank Holding Company Act of 1956, as amended (the "BHC Act"). It was incorporated under the laws of the Commonwealth of Pennsylvania in 1983 for the purpose of engaging in the business of a financial holding company. On April 26, 1984, the Corporation acquired all of the outstanding capital stock of County National Bank, a national banking chartered institution. In December 2006, County National Bank changed its name to CNB Bank (the "Bank") and became a state bank chartered in Pennsylvania and subject to regulation by the Pennsylvania Department of Banking and Securities (the "Pennsylvania Department of Banking") and the Federal Deposit Insurance Corporation. In October 2013, the Corporation acquired FC Banc Corp. and its subsidiary, The Farmers Citizens Bank. In July 2016, the Corporation acquired Lake National Bank, and in July 2020, the Corporation acquired Bank of Akron.

In addition to the Bank, the Corporation has four other subsidiaries. CNB Securities Corporation is incorporated in Delaware and currently maintains investments in debt and equity securities. CNB Insurance Agency, incorporated in Pennsylvania, provides for the sale of nonproprietary annuities and other insurance products. CNB Risk Management, Inc. is a Delaware-based captive insurance company which insures against certain risks unique to the operations of the Corporation and its subsidiaries and for which insurance may not be currently available or economically feasible in today's insurance marketplace. Holiday Financial Services Corporation ("Holiday"), incorporated in Pennsylvania, offers small balance unsecured loans and secured loans, primarily collateralized by automobiles and equipment, to borrowers with higher risk characteristics.

CNB Bank

The Bank was originally chartered as a national bank in 1934 and is now a Pennsylvania-chartered bank. The CNB Bank franchise operates eighteen full-service branch locations in Pennsylvania.

ERIEBANK, a division of the Bank, began operations in 2005. In July 2016, the Corporation acquired Lake National Bank, which operated two full-service branches in Mentor, Ohio, approximately 20 miles east of Cleveland, Ohio. The Bank continues to operate one of these branch locations within its ERIEBANK franchise, with the other location ceasing operations in August 2020. In January 2020, the Corporation established a loan production office ("LPO") in Cleveland, Ohio. This LPO operated within the ERIEBANK division as of December 31, 2021 and has subsequently closed. In conjunction with the closing of the LPO, the Corporation opened a full-service branch in Cleveland, Ohio. The Bank currently operates twelve full-service branch locations, a division of the Bank, with its headquarters in Erie, Pennsylvania.

In October 2013, the Corporation acquired FC Banc Corp. and its subsidiary, Farmers Citizens Bank. The Bank currently operates six full-service branch locations as FCBank, a division of the Bank, with its headquarters in Worthington, Ohio.

In 2016, the Bank received regulatory approval to conduct business in the state of New York as BankOnBuffalo, a division of the Bank. In July 2020, the Corporation acquired Bank of Akron, with its branch locations operating with BankOnBuffalo. The Bank currently operates eleven branch locations, one mobile branch, one drive-up office, and one loan production office as BankOnBuffalo, a division of the Bank, with its headquarters in Buffalo, New York.

In 2021, the Bank received regulatory approval to conduct business in the state of Virginia as Ridge View Bank, a division of the Bank. The Bank currently operates two LPOs in Southwest Virginia.

In early 2023, the Bank intends to launch Impressia Bank, a full-service banking division dedicated to the professional and financial development and advancement of women business owners and women leaders. This women-focused commercial bank will operate within the existing geographic footprint of each of CNB Bank’s other divisions and also will have an online presence.

1

Table of Contents

The Bank had 47 full-service branch offices located in various communities in its market area at December 31, 2022. The Bank’s primary market area of the Pennsylvania counties of Blair, Cambria, Cameron, Centre, Clearfield, Crawford, Elk, Indiana, Jefferson and McKean. ERIEBANK, a division of the Bank, operates in the Pennsylvania counties of Crawford, Erie and Warren and in the Ohio counties of Ashtabula, Cuyahoga, Geauga, Lake and Lorain. FCBank, a division of the Bank, operates in the Ohio counties of Crawford, Delaware, Franklin, Knox, Marion, Morrow and Richland. BankOnBuffalo, a division of the Bank, operates in the New York counties of Erie and Niagara. Ridge View Bank, a division of the Bank, operates in Southwest, Virginia. Impressia Bank, a division of the Bank, will operate in the Bank’s primary market areas.

The Bank is a full-service bank engaging in a full range of banking activities and services for individual, business, governmental and institutional customers. These activities and services principally include checking, savings, and time deposit accounts; real estate, commercial, industrial, residential and consumer loans; and a variety of other specialized financial services. The Bank’s Private Client Solutions division offers a full range of client services, including private banking and wealth and asset management.

Holiday Financial Services Corporation

In 2005, the Corporation entered the consumer discount loan and finance business, which is conducted through a wholly-owned subsidiary, Holiday. Holiday currently has nine offices within the Corporation’s market area.

Cybersecurity

Following a cybersecurity incident in the fourth quarter of 2020 that resulted in potential unauthorized access to personally identifiable information, the Corporation has continued to enhance its data security systems, technology platforms, employee education, and risk management processes in an effort to underpin its business strategy. Although the Corporation’s core systems were not compromised and the Corporation has not experienced any material losses, the Corporation is committed to implementing strategies to prevent and/or mitigate future cyber attacks.

Federal regulators issued two statements regarding cybersecurity: (i) a statement indicating that financial institutions should design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing internet-based services of the financial institutions; and (ii) a statement indicating the expectation of a financial institution's management to maintain a sufficient business continuity planning process to ensure rapid recovery, resumption, and maintenance of the financial institution's operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to: (a) enable recovery of data and business operations, (b) address rebuilding network capabilities, and (c) restore data if the financial institution or any of its critical service providers fall victim to this type of cyber-attack. If the Corporation does not comply with this regulatory guidance, it could be subject to various regulatory sanctions, as well as financial penalties.

In November 2021, the federal bank regulatory agencies issued a final rule requiring banking organizations that experience a computer-security incident to notify certain entities. A computer-security incident occurs when actual or potential harm to the confidentiality, integrity or availability of information or the information system occurs, or there is a violation or imminent threat of a violation to banking security policies and procedures. The affected bank must notify its respective federal regulator of the computer-security incident that has occurred. These notifications are intended to promote early awareness of threats to banking organizations and will help banks react to those threats before they manifest into bigger incidents. This rule also requires bank service providers to notify their customers of a computer-security incident.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. The Corporation expects this trend of state-level activity in those areas to continue, and continues to monitor developments in the states in which the Corporation’s customers are located.

2

Table of Contents

Competition

The financial services industry in the Corporation’s service area continues to be extremely competitive, both among commercial banks and with other financial service providers such as consumer finance companies, thrifts, investment firms, mutual funds, and credit unions. The increased competition has resulted from changes in legal and regulatory guidelines as well as from economic conditions. Mortgage banking firms, leasing companies, financial affiliates of industrial companies, brokerage firms, retirement fund management firms, and even government agencies provide additional competition for loans and other financial services. Some of the financial service providers operating in the Corporation’s market area operate on a large-scale regional or national basis and possess greater resources than those of the Corporation. The Corporation is generally competitive with all competing financial institutions in its service area with respect to interest rates paid on time and savings deposits, service charges on deposit accounts, and interest rates charged on loans.

Supervision and Regulation

The Corporation is a bank holding company that has elected financial holding company status, and the Bank is a Pennsylvania state-chartered bank that is not a member of the Federal Reserve System. Accordingly, the Corporation is subject to the oversight of the Board of Governors of the Federal Reserve System (the "Federal Reserve Board") and the Pennsylvania Department of Banking and is regulated under the BHC Act, and the Bank is subject to the oversight of the Pennsylvania Department of Banking and Federal Deposit Insurance Corporation ("FDIC"), as its primary federal regulator. The Corporation and the Bank are also subject to various requirements and restrictions under federal and state law, such as requirements to maintain reserves against deposits, restrictions on the types, amounts and terms and conditions of loans that may be granted, and limitations on the types of investments that may be made and the types of services that may be offered. Various consumer financial protection laws and regulations also affect the operation of the Bank and, pursuant to the Dodd-Frank Wall Street Reform and Consumer Protection Act (the "Dodd-Frank Act"), the Consumer Financial Protection Bureau ("CFPB") is authorized to write rules on consumer financial products and services which could affect the operations of the Bank and Holiday. In addition to the impact of regulation, commercial banks are significantly affected by the actions of the Federal Reserve Board, including actions taken with respect to interest rates, as the Federal Reserve Board attempts to control the money supply and credit availability in the U.S. in order to influence the economy.

The following summary sets forth certain of the material elements of the regulatory framework applicable to bank holding companies and their subsidiaries and provides certain specific information about us and our subsidiaries. It does not describe all of the provisions of the statutes, regulations and policies that are identified. To the extent that the following information describes statutory and regulatory provisions, it is qualified in its entirety by express reference to each of the particular statutory and regulatory provisions. A change in applicable statutes, regulations or regulatory policy may have a material effect on our business.

Bank Holding Company Regulation

As a bank holding company that controls a Pennsylvania state-chartered bank, the Corporation is subject to regulation and examination by the Pennsylvania Department of Banking and the Federal Reserve Board. We are required to file with the Federal Reserve Board an annual report and such additional information as the Federal Reserve Board may require pursuant to the BHC Act, and applicable regulations. For instance, the BHC Act requires each bank holding company to obtain the approval of the Federal Reserve Board before it may acquire substantially all the assets of any bank, or before it may acquire ownership or control of any voting shares of any bank if, after such acquisition, it would own or control, directly or indirectly, more than five percent of any class of voting shares of such bank. Such a transaction may also require approval of the Pennsylvania Department of Banking.

Pursuant to provisions of the BHC Act and regulations promulgated by the Federal Reserve Board thereunder, the Corporation may only engage in, or own companies that engage in, activities deemed by the Federal Reserve Board to be permissible for bank holding companies or financial holding companies. Activities permissible for bank holding companies include those that are so closely related to banking or managing or controlling banks as to be a proper incident thereto. Activities for financial holding companies include those that are "so closely related to banking as to be a proper incident thereto" as well as certain additional activities deemed "financial in nature or incidental to such financial activity" or complementary to a financial activity and that does not pose a substantial risk to the safety and soundness of the depository institution or the financial system.

The Corporation must obtain permission from or provide notice to the Federal Reserve Board prior to engaging in most new business activities.

3

Table of Contents

Regulation of CNB Bank

Federal and state banking laws and regulations govern, among other things, the scope of a bank’s business, the investments a bank may make, the reserves against deposits a bank must maintain, the loans a bank makes and collateral it takes, the activities of a bank with respect to mergers and acquisitions, the establishment of branches, management practices, and numerous other aspects of banking operations.

Source of Strength Doctrine

Under Section 616 of the Dodd-Frank Act, a bank holding company is required to serve as a source of financial strength to its subsidiary banks and may not conduct its operations in an unsafe or unsound manner. In addition, it is the Federal Reserve Board’s policy that in serving as a source of financial and managerial strength to its subsidiary banks, a bank holding company should stand ready to use available resources to provide adequate capital funds to its subsidiary banks during periods of financial stress or adversity and should maintain the financial flexibility and capital-raising capacity to obtain additional resources for assisting its subsidiary banks. A bank holding company’s failure to meet its obligations to serve as a source of strength to its subsidiary banks will generally be considered by the Federal Reserve Board to be an unsafe and unsound banking practice, a violation of the Federal Reserve Board regulations, or both. This doctrine is commonly known as the "source of strength" doctrine.

Identity Theft

The Securities and Exchange Commission ("SEC") and the Commodity Futures Trading Commission (together with the SEC, the "Commissions") jointly issued final rules and guidelines to require certain regulated entities to establish programs to address risks of identity theft. The rules and guidelines implement provisions of the Dodd-Frank Act. These provisions amend Section 615(e) of the Fair Credit Reporting Act and directed the Commissions to adopt rules requiring entities that are subject to the Commissions’ jurisdiction to address identity theft in two ways. First, the rules require financial institutions and creditors to develop and implement a written identity theft prevention program that is designed to detect, prevent, and mitigate identity theft in connection with certain existing accounts or the opening of new accounts. The rules include guidelines to assist entities in the formulation and maintenance of programs that would satisfy the requirements of the rules. Second, the rules establish special requirements for any credit and debit card issuers that are subject to the Commissions’ jurisdiction to assess the validity of notifications of changes of address under certain circumstances.

Capital Adequacy

The Capital Rules adopted in 2013 by the Federal Reserve Board, the FDIC, and the Office of the Comptroller of the Currency generally implement the Basel Committee on Banking Supervision’s capital framework, referred to as Basel III, for strengthening international capital standards. The Capital Rules revise the definitions and components of regulatory capital, increase risk-based capital requirements, and make selected changes to the calculation of risk-weighted assets. The risk-weighting categories in the Capital Rules are standardized and include a risk-sensitive number of categories, depending on the nature of the assets, generally ranging from 0% for U.S. government and agency securities to 600% for certain equity exposures, and resulting in higher risk weights for a variety of assets.

The Capital Rules, among other things:

•revise minimum capital requirements and adjust prompt corrective action thresholds;

•revise the components of regulatory capital, including adding a new minimum common equity Tier 1 capital ratio of 4.5% of risk-weighted assets and increasing the minimum Tier 1 capital ratio requirement from 4% to 6%;

•retain the existing risk-based capital treatment for 1-4 family residential mortgage exposures;

•permit most banking organizations to retain, through a one-time permanent election, the existing capital treatment for accumulated other comprehensive income;

•implement the capital conservation buffer beginning January 1, 2016, which was phased in incrementally until it reached 2.5% of risk-weighted assets, in addition to the minimum common equity Tier 1, Tier 1 and total capital ratios, on January 1, 2019;

•require a minimum leverage ratio of 4%;

•require a total capital ratio of 8%;

•increase capital requirements for past-due loans, high volatility commercial real estate exposures, and certain short-term loan commitments;

4

Table of Contents

•require the deduction of mortgage servicing assets and deferred tax assets that exceed 10% of common equity Tier 1 capital in each category and 15% of common equity Tier 1 capital in the aggregate; and

•remove references to credit ratings consistent with the Dodd-Frank Act and establish due diligence requirements for securitization exposures.

Compliance with the Capital Rules was required beginning January 1, 2015, for most banking organizations including the Corporation, subject to a transition period for several aspects of the final rules, including the new minimum capital ratio requirements, the capital conservation buffer, and the regulatory capital adjustments and deductions. The Corporation implemented the Capital Rules on January 1, 2015, and continues to exceed all estimated well-capitalized regulatory requirements on a fully phased-in basis.

In July 2019, the Office of the Comptroller of the Currency, the Federal Reserve Board and the FDIC adopted a final rule intended to simply the Capital Rules described above for non-advanced approaches institutions. Institutions were required to implement the simplification rule by April 1, 2020.

In September 2019, the Office of the Comptroller of the Currency, the Federal Reserve Board and the FDIC adopted a final rule that is intended to further simplify the Capital Rules for depository institutions and their holding companies that have less than $10 billion in total consolidated assets, such as us, if such institutions meet certain qualifying criteria. This final rule became effective on January 1, 2020. Under this final rule, if we meet the qualifying criteria, including having a leverage ratio (equal to Tier 1 capital divided by average total consolidated assets) of a certain size (greater than 9% beginning January 1, 2022), we will be eligible to opt into the community bank leverage ratio framework. If we opt into this framework, we will be considered to have satisfied the generally applicable risk-based and leverage capital requirements in the Capital Rules (as modified pursuant to the simplification rule) and will be considered to have met the well-capitalized ratio requirements for prompt corrective action purposes. To date, we have not opted in to this community bank leverage ratio framework.

Dividend Restrictions

The Corporation is a legal entity separate and distinct from the Bank. Declaration and payment of cash dividends depends upon cash dividend payments to the Corporation by the Bank, which is our primary source of revenue and cash flow. Accordingly, the right of the Corporation, and consequently the right of our creditors and shareholders, to participate in any distribution of the assets or earnings of any subsidiary is necessarily subject to the prior claims of creditors of the Bank, except to the extent that claims of the Corporation in its capacity as a creditor may be recognized.

As a Pennsylvania state-chartered bank, the Bank is subject to regulatory restrictions on the payment and amounts of dividends under the Pennsylvania Banking Code. Further, the ability of banking subsidiaries to pay dividends is also subject to their profitability, financial condition, capital expenditures and other cash flow requirements.

The payment of dividends by the Bank and the Corporation may also be affected by other factors, such as the requirement to maintain adequate capital above regulatory requirements. The federal banking agencies have indicated that paying dividends that deplete a depository institution’s capital base to an inadequate level would be an unsafe and unsound banking practice. A depository institution may not pay any dividend if payment would cause it to become undercapitalized or if it already is undercapitalized. Moreover, the federal banking agencies have issued policy statements that provide that bank holding companies and insured banks should generally only pay dividends out of current operating earnings. Federal banking regulators have the authority to prohibit banks and bank holding companies from paying a dividend if the regulators deem such payment to be an unsafe or unsound practice.

Prompt Corrective Action and Safety and Soundness

Under applicable "prompt corrective action" ("PCA") statutes and regulations, depository institutions are placed into one of five capital categories, ranging from "well capitalized" to "critically undercapitalized." The PCA statute and regulations provide for progressively more stringent supervisory measures as an insured depository institution’s capital category declines. An institution that is not well capitalized is generally prohibited from accepting brokered deposits and offering interest rates on deposits higher than the prevailing rate in its market. An undercapitalized depository institution must submit an acceptable restoration plan to the appropriate federal banking agency. One requisite element of such a plan is that the institution’s parent holding company must guarantee compliance by the institution with the plan, subject to certain limitations.

At December 31, 2022, the Bank qualified as "well capitalized" under applicable regulatory capital standards.

5

Table of Contents

Bank holding companies and insured depository institutions may also be subject to potential enforcement actions of varying levels of severity by the federal banking agencies for unsafe or unsound practices in conducting their business, or for violation of any law, rule, regulation, condition imposed in writing by the agency, or term of a written agreement with the agency. In more serious cases, enforcement actions may include the issuance of directives to increase capital; the issuance of formal and informal agreements; the imposition of civil monetary penalties; the issuance of a cease and desist order that can be judicially enforced; the issuance of removal and prohibition orders against officers, directors, and other institution affiliated parties; the termination of the insured depository institution’s deposit insurance; the appointment of a conservator or receiver for the insured depository institution; and the enforcement of such actions through injunctions or restraining orders based upon a judicial determination that the FDIC, as receiver, would be harmed if such equitable relief was not granted.

Community Reinvestment Act

Under the Community Reinvestment Act of 1977 ("CRA"), the FDIC is required to assess the record of all financial institutions it supervises to determine if these institutions are meeting the credit needs of the community (including low and moderate income neighborhoods) which they serve. CRA performance evaluations are based on a four-tiered rating system: Outstanding, Satisfactory, Needs to Improve, and Substantial Noncompliance. CRA performance evaluations are considered in evaluating applications for such things as mergers, acquisitions, and applications to open branches. The Bank received a CRA rating of "Satisfactory" at its most recent CRA exam.

Restrictions on Transactions with Affiliates and Insiders

The Bank is subject to the restrictions of Sections 23A and 23B of the Federal Reserve Act and the implementing Regulation W. The Bank's "affiliates" for purposes of these sections include, among other potential entities, the Corporation and its direct subsidiaries. Section 23A requires that loans or extensions of credit by the Bank to an affiliate, purchases by the Bank of securities issued by an affiliate, purchases by the Bank of assets from an affiliate (except as may be exempted by order or regulation), the Bank’s acceptance of securities or debt obligations issued by an affiliate as collateral for a loan or extension of the credit to a third party, the Bank’s acceptance of a guarantee or letter of credit on behalf of an affiliate, a transaction with an affiliate involving the borrowing or lending of securities to the extent the transaction causes the Bank to have credit exposure to the affiliate, and a derivative transaction with an affiliate, to the extent the Bank will have credit exposure to the affiliate (collectively, "Covered Transactions") be on terms and conditions consistent with safe and sound banking practices. Section 23A also imposes quantitative restrictions on the amount of and collateralization requirements on such transactions. Section 23B requires that all Covered Transactions and certain other transactions, including the sale of securities or other assets by the Bank to an affiliate and the payment of money or the furnishing of services by the Bank to an affiliate, be on terms comparable to those prevailing for similar transactions with nonaffiliates.

The Bank is also subject to Sections 22(g) and 22(h) of the Federal Reserve Act, and the implementation of Regulation O issued by the Federal Reserve Board. These provisions impose limitations on loans and extensions of credit by the Bank to its and its affiliates' executive officers, directors and principal shareholders and their related interests. The limitations restrict the terms and aggregate amount of such transactions. Regulation O also imposes certain recordkeeping and reporting requirements.

Deposit Insurance and Premiums

The deposits of the Bank are insured up to applicable limits per insured depositor by the FDIC. The standard maximum deposit insurance amount is $250,000 per depositor, per insured depository institution, per ownership category, in accordance with applicable FDIC regulations.

The FDIC uses a risk-based assessment system that imposes insurance premiums based on a risk matrix that takes into account the bank’s capital level and supervisory rating. The base for insurance assessments is the average consolidated total assets less tangible equity capital of a financial institution. Assessment rates are calculated using formulas that take into account the risk of the institution being assessed. The FDIC adopted a final rule effective June 26, 2020, and applied as of April 1, 2020, to mitigate the effect on deposit insurance assessments of a bank’s participation in the Paycheck Protection Program, the Paycheck Protection Program Liquidity Facility and the Money Market Mutual Fund Liquidity Facility in connection with the COVID-19 pandemic.

6

Table of Contents

Financial Privacy and Data Security

The Corporation is subject to federal laws, including the Gramm-Leach-Bliley Act, and certain state laws containing consumer privacy protection provisions. These provisions limit the ability of banks and other financial institutions to disclose nonpublic information about consumers to affiliated and non-affiliated third parties and limit the reuse of certain consumer information received from non-affiliated financial institutions. These provisions require notice of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain nonpublic personal information to affiliates or non-affiliated third parties by means of opt-out or opt-in authorizations.

The Gramm-Leach-Bliley Act requires that financial institutions implement comprehensive written information security programs that include administrative, technical, and physical safeguards to protect consumer information. Federal banking agencies have also adopted guidelines for establishing information security standards and programs to protect such information. Further, pursuant to interpretive guidance issued under the Gramm-Leach-Bliley Act and certain state laws, financial institutions are required to notify customers of security breaches that result in unauthorized access to their nonpublic personal information.

Incentive Compensation

The Dodd-Frank Act requires the federal banking agencies and the SEC to establish joint regulations or guidelines prohibiting incentive-based payment arrangements at specified regulated entities, including the Corporation and the Bank, with at least $1 billion in total consolidated assets that encourage inappropriate risks by providing an executive officer, employee, director or principal shareholder with excessive compensation, fees, or benefits that could lead to material financial loss to the entity. The federal banking agencies and the SEC most recently proposed such regulations in 2016, but the regulations have not yet been finalized. If the regulations are adopted in the form initially proposed, they will restrict the manner in which executive compensation is structured.

The Dodd-Frank Act also requires publicly traded companies to give stockholders a non-binding vote on executive compensation at their first annual meeting taking place six months after the date of enactment and at least every three years thereafter and on so-called "golden parachute" payments in connection with approvals of mergers and acquisitions.

USA PATRIOT Act

Under Title III of the USA PATRIOT Act, all financial institutions are required to take certain measures to identify their customers, prevent money laundering, monitor customer transactions, and report suspicious activity to U.S. law enforcement agencies. Financial institutions also are required to respond to requests for information from federal banking agencies and law enforcement agencies. Information sharing among financial institutions for the above purposes is encouraged by an exemption granted to complying financial institutions from the privacy provisions of the Gramm-Leach-Bliley Act and other privacy laws. Financial institutions that hold correspondent accounts for foreign banks or provide private banking services to foreign individuals are required to take measures to avoid dealing with certain foreign individuals or entities, including foreign banks with profiles that raise money laundering concerns, and are prohibited from dealing with foreign "shell banks" and persons from jurisdictions of particular concern. The primary federal banking agencies and the Secretary of the Treasury have adopted regulations to implement several of these provisions. All financial institutions also are required to establish internal anti-money laundering programs. The effectiveness of a financial institution in combating money laundering activities is a factor to be considered in any application submitted by the financial institution under the Bank Merger Act. The Bank has in place a Bank Secrecy Act and USA PATRIOT Act compliance program and engages in very few transactions of any kind with foreign financial institutions or foreign persons.

7

Table of Contents

Office of Foreign Assets Control Regulation

The United States government has imposed economic sanctions that affect transactions with designated foreign countries, nationals, and others. These are typically known as the "OFAC" rules based on their administration by the U.S. Treasury Department Office of Foreign Assets Control. The Office of Foreign Assets Control-administered sanctions targeting countries take many different forms. Generally, they contain one or more of the following elements: (i) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on U.S. persons engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country; and (ii) a blocking of assets in which the government or specially designated nationals of the sanctioned country have an interest, by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (property and bank deposits) cannot be paid out, withdrawn, set off, or transferred in any manner without a license from the Office of Foreign Assets Control. Failure to comply with these sanctions could have serious legal and reputational consequences.

Other Federal Laws and Regulations

State usury and other credit laws limit the amount of interest and various other charges collected or contracted by a bank on loans. The Bank is also subject to lending limits on loans to one borrower and regulatory guidance on concentrations of credit. The Bank’s loans and other products and services are also subject to numerous federal and state consumer financial protection laws, including, but not limited to, the following:

•Truth-In-Lending Act, which governs disclosures of credit terms to consumer borrowers;

•Truth-in-Savings Act, which governs disclosures of the terms of deposit accounts to consumers;

•Home Mortgage Disclosure Act, requiring financial institutions to provide information to regulators to enable determinations as to whether financial institutions are fulfilling their obligations to meet the home lending needs of the communities they serve and not discriminating in their lending practices;

•Equal Credit Opportunity Act, prohibiting discrimination on the basis of race, sex or other prohibited factors in extending credit;

•Real Estate Settlement Procedures Act, which imposes requirements relating to real estate settlements, including requiring lenders to disclose certain information regarding the nature and cost of real estate settlement services;

•Fair Credit Reporting Act, covering numerous areas relating to certain types of consumer information and identity theft;

•Privacy provisions of the Gramm-Leach-Bliley Act and related regulations, which require that financial institutions provide privacy policies to consumers, to allow customers to "opt out" of certain sharing of their nonpublic personal information, and to safeguard sensitive and confidential customer information;

•Electronic Funds Transfer Act, which is a consumer protection law regarding electronic fund transfers; and

•Numerous other federal and state laws and regulations, including those related to consumer protection and bank operations.

Sarbanes-Oxley Act of 2002

The Sarbanes-Oxley Act of 2002 (the "Sarbanes-Oxley Act") is applicable to all companies with equity securities registered or that file reports under the Securities Exchange Act of 1934, as amended, including publicly-held financial holding companies such as the Corporation. In particular, the Sarbanes-Oxley Act establishes: (i) requirements for audit committees, including independence, expertise, and responsibilities; (ii) additional responsibilities regarding financial statements for the Chief Executive Officer and Chief Financial Officer of the reporting company; (iii) standards for auditors and regulation of audits; (iv) increased disclosure and reporting obligations for the reporting company and its directors and executive officers; and (v) new and increased civil and criminal penalties for violations of the securities laws.

8

Table of Contents

Governmental Policies

Our earnings are significantly affected by the monetary and fiscal policies of governmental authorities, including the Federal Reserve Board. Among the instruments of monetary policy used by the Federal Reserve Board to implement these objectives are open-market operations in U.S. Government securities and federal funds, changes in the discount rate on member bank borrowings and changes in reserve requirements against member bank deposits. These instruments of monetary policy are used in varying combinations to influence the overall level of bank loans, investments and deposits, and the interest rates charged on loans and paid for deposits. The Federal Reserve Board frequently uses these instruments of monetary policy, especially its open-market operations and the discount rate, to influence the level of interest rates and to affect the strength of the economy, the level of inflation or the price of the dollar in foreign exchange markets. The monetary policies of the Federal Reserve Board have had a significant effect on the operating results of banking institutions in the past and are expected to continue to do so in the future. It is not possible to predict the nature of future changes in monetary and fiscal policies, or the effect which they may have on our business and earnings.

Other Legislative Initiatives

Proposals may be introduced in the United States Congress, in the Pennsylvania Legislature, and/or by various bank regulatory authorities that could alter the powers of, and restrictions on, different types of banking organizations and which could restructure part or all of the existing regulatory framework for banks, bank and financial holding companies and other providers of financial services. Moreover, other bills may be introduced in Congress which would further regulate, deregulate or restructure the financial services industry, including proposals to substantially reform the regulatory framework. It is not possible to predict whether any such proposals will be enacted into law or, even if enacted, what effect such action may have on our business and earnings.

Human Capital

As of December 31, 2022, the Corporation had a total of 759 employees, of which 722 were full time and 37 were part time.

The Corporation respects, values and promotes the realization of an increasing diversity and inclusivity profile in our team of Board members and employees, and our customers, reflective of the communities we serve. The Corporation emphasizes relevant governance and diversity and inclusion principles in strategic planning, human capital management and leadership development (which includes recruiting and retaining employees).

Strategic Planning and Related Training

The Corporation has established a formal Strategic Plan, and the framework of the Strategic Plan establishes that principles of inclusion and diversity encompass and integrate with the other objectives of the Strategic Plan, including exceptional experiences, demonstrated leadership, adaptable technology, and long-term growth. In establishing these principles as the foundation upon which all other strategic objectives are anchored, the Corporation seeks to further develop and sustain a diverse, equitable, and inclusive culture, with sensitivity to the entirety of the Corporation’s footprint and environment in which it operates. The differences among the Corporation’s Board of Directors and employees, and its customers and community members, are respected and embraced to drive innovative products, services, and solutions that effectively meet the variety of needs among the Corporation’s diverse group of stakeholders.

To ensure that the Environmental, Social, and Governance principles are understood, implemented, and demonstrated by the Corporation’s employee team on a sustained basis, the Corporation developed a comprehensive diversity, equity, and inclusion ("DE&I") communication processes and a training curriculum which was rolled out to all employees, including internal sessions delivered by a certified diversity and inclusion trainer, supplemented by relevant external training sources. Employee experience committees were also formed in 2022 to explore and evaluate how various DE&I topics impact our employees and how we can better address them. To monitor progress and solicit feedback, the Corporation conducted a company wide survey on DE&I. The results of this survey will be utilized for developing areas of focus for 2023. In 2023, the Corporation also plans to continue offering training to employees, including a module within the Corporation's training program for new managers, monthly lunch and learn events, and develop employee resource groups, which are employee-led groups whose aim is to foster a diverse, inclusive workplace aligned within the organization.

9

Table of Contents

Inclusion and Diversity Committee

In support of its strategic diversity and inclusion efforts, and to ensure that the diverse perspectives of the entire Corporation’s employee team is considered when developing and implementing its service and operating profile, the Corporation established a Diversity, Equity and Inclusion Committee (the “Diversity Committee”) in 2018. The Diversity Committee, which meets monthly, is comprised of over 10 employee members including underrepresented minorities, females, and those who identify as LGTBQAI+, as well as two senior executive level members, with the following committee responsibilities and goals:

•Encourage an inclusive and engaged workforce culture through communications and training;

•Demonstrate sustainability, commitment and accountability by tracking inclusion and diversity efforts bank wide;

•Bring awareness to the importance of inclusion and diversity internally and externally.

The Diversity Committee’s meeting minutes, activities and recommendations are provided regularly to the Corporation’s executive management team for consideration to promote the effective integration of diversity and inclusion principles into the respective facets of our business evaluated and addressed by the Diversity Committee.

Human Capital Management and Leadership Development

We seek to recognize the unique contribution each employee brings to the Corporation, and we are fully committed to supporting a workplace that understands, accepts and values the similarities and differences between individuals. The Corporation’s key human capital management objectives are to recruit, hire, develop, and promote a deeply experienced and diverse employee team, supplemented by similarly inclusive and diversity-focused third-party vendors, that collectively translate into a strong workforce committed to fostering, promoting, and preserving the entire spectrum of our communities and culture, while successfully executing our business strategies and demonstrating our corporate values. To support these objectives, the Corporation’s Employee Experience processes and programs are designed and operated to:

•Attract and develop talented employees across the spectrum of professional experience, life experience, socio-economic background, gender, race, religion, skill set, and geographic representation;

•Prepare all members of our team for critical roles and leadership positions both now and the future, in serving as employees and valuable community members;

•Reward and support employees fairly and without discrimination based upon successful performance and through competitive pay and benefit programs;

•Enhance the Corporation’s culture through efforts to better understand, foster, promote, and preserve a culture of diversity and inclusion; and

•Evolve and invest in technology, tools, and resources to better support employees of varying skills and backgrounds at work.

Among the means we use to monitor our performance in employee diversity and inclusion management, we take recurring management and employee demographic measurements and engagement surveys, and utilize the results to identify progress made, as well as areas in need of more attention, in improving the diversity, equity, and inclusion of our leadership and workforce profile, and personnel management practices.

A critical measure is realizing increasing diversity in our senior leadership positions, as those members of the Corporation’s management have greater ability to effectuate sustained change in the composition of our team and the expanded, relevant involvement of all groups within the spectrum of our workforce and communities. We are proud of the diversity we have achieved within the Corporation’s senior leadership team, which is comprised of 16 individuals, of which 50% are female or members of underrepresented minority groups.

Overall, the Corporation's workforce is 67% female and 33% male, as reported by those who self-identified. In addition, 11% of the Corporation's workforce self-identified as a member of an underrepresented minority group. The underrepresented minority groups include individuals who self-identify as an ethnicity other than white, LGBTQAI+ or military veteran.

10

Table of Contents

As a result of broadening our recruitment efforts to increase the diversity of our teams, for the year ended December 31, 2022, 45 people out of 196 total hires for the Corporation identified as an underrepresented group. The Corporation increased the percentage of underrepresented hires from 19.5% of total new hires in 2021 to 22.7% in 2022, allowing us to continue to improve our overall diversity workforce profile, as our regional banks' workforce profiles are moving towards better alignment with the overall demographics of their respective communities.

Community Involvement and Social Impacts

The Corporation serves as a cornerstone institution of both financial support and community service in the markets in which we serve. We are committed to strengthening these communities through the active volunteering of our employees.

The Corporation's employees actively participate in their local communities through volunteer activities in education, economic development, human and health services, and community reinvestment. During 2022, employees donated 15,316 hours in support of more than 658 organizations, with 60% of employees actively participating. Additionally, there were approximately $987,000 in donations to community organizations and events within the communities we serve. Notably, the Corporation’s Martin Luther King, Jr. "Take the Day On" efforts resulted in the support of 30 community organizations and 249 volunteer hours recorded. Employees collected donations and delivered them to local organizations in need during this national day of service, which typically serves as a bank holiday.

The Corporation expanded its efforts surrounding its financial literacy outreach in 2022, conducting five Financial Reality Fairs in various regions throughout the footprint we serve. The fairs teach real-life budgeting skills to high school students, many of whom are in low-to-moderate income households. The fairs included seven high schools and almost 1,000 students. Eighty employees donated over 875 hours of volunteer time and leveraged partnerships with thirty community organizations. Our employees and community volunteers not only shared their real-life knowledge of budgeting, but also provided additional financial education after the events. In addition to the fairs, employees participated in 120 other financial literacy events ranging from basic community banking sessions to school presentations. A total of 1,219 volunteer hours can be attributed to the Corporation’s financial literacy program. Further, the Corporation sponsored elementary and secondary banking curriculum materials donating $30,155 to provide 8,666 workbooks for students, along with teacher guides and complimentary digital programs. Additionally, the Corporation provided $300,000 in Educational Improvement Tax Credit Program scholarships, and $24,500 in academic scholarships in service to the communities in which we operate.

In 2022, the Corporation focused on increasing its outreach to those who are "unbanked" or "underbanked". Two examples of how the Corporation worked to address this social issue include the launch of the Stress Less account, the Bank's first Bank On Certified account and opening a new fully mobile "BankOnWheels" to operate in the Buffalo metro area. The national Bank On movement seeks to provide consumers safe and affordable access to the mainstream financial system and help connect unbanked and underbanked people to these products. The Bank is committed to expanding banking access to its communities with this Bank On Certified account. Features of this account include a low minimum to open, checkless checking, a low monthly service charge, free access to eBanking, debit card access, and no fees for overdraft or dormancy. BankOnWheels, which opened in the fourth quarter of 2022, is an innovative new banking experience, making full-service banking accessible to more consumers and small businesses, particularly those in underserved communities. The first of its kind operated by any financial institution in Western New York, BankOnWheels is a full-service, yet fully mobile bank branch, which will enable the Bank to deliver essential banking services to communities with little or no access to such services today. The BankOnWheels will rotate between three locations in the cities of Buffalo and Niagara Falls, which are located in communities underserved by banks, with plans to serve additional areas in the future.

Throughout its history, the Corporation has focused on strengthening the communities it serves. We accomplish this by promoting economic development through investments in community-strengthening initiatives, such as affordable housing and revitalization efforts. As of December 31, 2022, the Corporation’s investment in affordable housing totaled approximately $8.0 million, with an additional investment commitment of $1.0 million and $2.5 million invested in the Erie Downtown Development Corporation, which is focused on revitalization efforts in downtown Erie, Pennsylvania.

The Corporation is also committed to supporting women owned businesses. The Bank intends to launch Impressia Bank, a division of the Bank, in the first quarter of 2023. Designed for women by women, Impressia Bank will be a full-service banking division of the Bank dedicated to the professional and financial development and advancement of women business owners and women leaders. Impressia Bank clients will have access to resources related to accelerating their business, developing appropriate business strategies, and establishing a community of women who support one another.

11

Table of Contents

Available Information

The Corporation makes available free of charge on its website (www.cnbbank.bank) its Annual Report on Form 10-K, its quarterly reports on Form 10-Q, current reports on Form 8-K, and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended, as soon as practicable after it electronically files such material with, or furnishes it to, the Securities and Exchange Commission, the SEC. Information on the Corporation’s website is not incorporated by reference into this report.

Shareholders may obtain a copy of the Corporation’s Annual Report on Form 10-K free of charge by writing to: CNB Financial Corporation, 1 South Second Street, PO Box 42, Clearfield, PA 16830, Attn: Shareholder Relations.

The SEC maintains an internet site that contains reports, proxy statements and other information about electronic filers such as the Corporation. The site is available at http://www.sec.gov.

ITEM 1A. RISK FACTORS

The Corporation’s financial condition and results of operations are subject to various risks inherent in its business. The material risks and uncertainties that management believes affect the Corporation are described below. If any of these risks actually occur, the Corporation’s business, financial condition, liquidity, results of operations and prospects could be materially and adversely affected. The following risks together with all of the other information in this Annual Report on Form 10-K should be considered.

Economic Risks

Economic conditions could adversely affect our business and financial results.

The Corporation’s financial condition and results of operations are impacted by global markets and economic conditions over which the Corporation has no control. Inflation has significantly increased since the start of 2021 and continues to remain at elevated levels compared to recent years, which has led to increased costs for businesses and consumers. An economic downturn or recession, including deterioration in the economic conditions in the U.S., or a slowing or stalled recovery therefrom, may have a material adverse effect on our business, financial condition or results of operations. Poor economic conditions have in the past adversely affected, and may in the future affect, the demand for the Corporation’s products, the creditworthiness of the Corporation’s borrowers and the value of the Corporation’s investment securities and other interest-earning assets. In particular, the Corporation may face the following risks in connection with the economic or market environment:

•The Corporation’s and the Bank’s ability to borrow from other financial institutions or to access the debt or equity capital markets on favorable terms or at all could be adversely affected by disruptions in the capital markets or other events, including actions by rating agencies and deteriorating investor expectations.

•The Corporation faces increased regulation of the banking and financial services industry. Compliance with such regulation may increase its costs and limit its ability to pursue business opportunities.

•Market developments may affect customer confidence levels and may cause increases in loan delinquencies and default rates, which management expects would adversely impact the Bank’s charge-offs and provision for credit losses.

•Market developments may adversely affect the Bank’s securities portfolio by causing other-than-temporary-impairments, prompting write-downs and securities losses.

•Competition in the banking and financial services industry could intensify as a result of the consolidation of financial services companies in connection with current market conditions.

The Corporation may not be able to meet its cash flow needs on a timely basis at a reasonable cost, and the Corporation’s cost of funds for banking operations may significantly increase as a result of general economic conditions, interest rates and competitive pressures.

Liquidity is the ability to meet cash flow obligations as they come due and cash flow needs on a timely basis and at a reasonable cost. The liquidity of the Bank is used to make loans and to repay deposit and borrowing liabilities as they become due, or are demanded by customers and creditors. Many factors affect the Bank’s ability to meet liquidity needs, including variations in the markets served by its network of offices, its mix of assets and liabilities, reputation and standing in the marketplace, and general economic conditions.

12

Table of Contents

The Bank’s primary source of funding is customer deposits, gathered throughout its network of banking offices. Periodically, the Corporation utilizes term borrowings from the Federal Home Loan Bank (the "FHLB") of Pittsburgh, of which the Bank is a member, and other lenders to meet funding obligations. The Bank’s securities and loan portfolios provide a source of contingent liquidity that could be accessed in a reasonable time period through sales.

Significant changes in general economic conditions, market interest rates, competitive pressures or otherwise, could cause the Bank’s deposits to decrease relative to overall banking operations, and it would have to rely more heavily on brokered funds and borrowings in the future, which are typically more expensive than deposits.

Management and the Corporation's Board of Directors, through the Asset-Liability Committee ("the ALCO"), monitor liquidity and the ALCO establishes and monitors acceptable liquidity ranges. The Bank actively manages its liquidity position through target ratios. Continual monitoring of these ratios, both historical and through forecasts under multiple rate scenarios, allows the Bank to employ strategies necessary to maintain adequate liquidity.

Changes in economic conditions, including consumer savings habits and availability of or access to capital, could potentially have a significant impact on the Bank’s liquidity position, which in turn could materially impact the Corporation’s financial condition, results of operations and cash flows.

Credit and Interest Rate Risks

The Bank’s allowance for credit losses may not be adequate to cover loan losses which could have a material adverse effect on the Corporation’s business, financial condition and results of operations.

A significant source of risk for the Corporation arises from the possibility that losses will be sustained because borrowers, guarantors and related parties may fail to perform in accordance with the terms of their loan agreements. Most loans originated by the Bank are secured, but some loans are unsecured based upon management’s evaluation of the creditworthiness of the borrowers. With respect to secured loans, the collateral securing the repayment of these loans principally includes a wide variety of real estate, and to a lesser extent commercial and personal property, either of which may be insufficient to cover the obligations owed under such loans.

Collateral values and the financial performance of borrowers may be adversely affected by changes in prevailing economic, environmental and other conditions, including declines in the value of real estate, changes in interest rates and debt service levels, changes in oil and gas prices, changes in monetary and fiscal policies of the federal government, widespread disease, terrorist activity, environmental contamination and other external events, which are beyond the control of the Bank. In addition, collateral appraisals that are out of date or that do not meet industry recognized standards might create the impression that a loan is adequately collateralized when in fact it is not. Although the Bank may acquire any real estate or other assets that secure defaulted loans through foreclosures or other similar remedies, the amounts owed under the defaulted loans may exceed the value of the assets acquired.

The allowance for credit losses is subject to a formal analysis by the Credit Administration and Finance Departments of the Corporation. Following the issuance by the Financial Accounting Standards Board ("FASB") of Accounting Standards Update ("ASU") 2016-13, "Measurement of Credit Losses on Financial Instruments," the Corporation adjusted its loan allowance methodology to reflect the new standard, which requires periodic estimates of lifetime expected credit losses on financial assets and categorizes expected credit losses as allowances for credit losses under the current expected credit loss ("CECL") methodology. The Corporation measures expected credit losses of financial assets on a collective (pool) basis, when the financial assets share similar risk characteristics. Depending on the nature of the pool of financial assets with similar risk characteristics, the models utilized by the Corporation to estimate expected credit losses include a discounted cash flow ("DCF") model that discounts instrument-level contractual cash flows, adjusted for prepayments and curtailments, incorporating loss expectations, and a weighted average remaining maturity ("WARM") model which contemplates expected losses at a pool-level, utilizing historic loss information. The Corporation's models for estimating the allowance for credit losses consider available relevant information about the collectability of cash flows, including information about past events, current conditions, and reasonable and supportable forecasts.

13

Table of Contents

The Bank monitors delinquencies and losses on a monthly basis. The Bank has adopted underwriting and credit monitoring policies and procedures, including the review of borrower financial statements and collateral appraisals, which management believes are appropriate to mitigate the risk of loss by assessing the likelihood of borrower nonperformance and the value of available collateral. The Bank also manages credit risk by diversifying its loan portfolio. An ongoing independent review, subsequent to management’s review, of individual credits is performed by an independent loan review function, which reports to the Loan Committee of the Corporation’s Board of Directors.

The determination of the appropriate level of the allowance for credit losses inherently involves a high degree of subjectivity and requires the Corporation to make significant estimates of current credit risks and future trends, all of which may undergo material changes. Although management believes that the processes in place for assessing the appropriate level of the allowance for credit losses are robust, such policies and procedures have limitations, including judgment errors in management’s risk analysis, and may not prevent unexpected losses in the future. Moreover, the CECL methodology may create more volatility in the level of our allowance for credit losses from quarter to quarter as changes in the level of allowance for credit losses will be dependent upon, among other things, macroeconomic forecasts and conditions, loan portfolio volumes and credit quality. These factors could have a material adverse effect on the Corporation’s business, financial condition and results of operations.

Interest rate volatility could significantly reduce the Corporation’s profitability.

The Corporation’s earnings largely depend on the relationship between the yield on its earning assets, primarily loans and investment securities, and the cost of funds, primarily deposits and borrowings. This relationship, commonly known as the net interest margin, is susceptible to significant fluctuation and is affected by economic and competitive factors that influence the yields and rates, and the volume and mix of the Bank’s interest earning assets and interest bearing liabilities.

Interest rate risk can be defined as the sensitivity of net interest income and of the market value of financial instruments to the direction and frequency of changes in interest rates. Interest rate risk arises from the imbalance in the re-pricing, maturity, and/or cash flow characteristics of assets and liabilities. The Corporation is subject to interest rate risk to the degree that its interest bearing liabilities re-price or mature more slowly or more rapidly or on a different basis than its interest earning assets. Changes in interest rates, including those due to federal monetary policy, will affect the levels of income and expense recorded on a large portion of the Bank’s assets and liabilities, and fluctuations in interest rates will impact the market value of all interest sensitive assets. Significant fluctuations in interest rates could have a material adverse impact on the Corporation’s business, financial condition, results of operations, or liquidity.

In response to high inflation, the Federal Reserve significantly increased the benchmark federal funds rate during 2022 and has signaled its intention to continue with additional increases in 2023. These actions have significantly increased interest rates. As interest rates rise, we experience competitive pressures to increase the rates we pay on deposits, which may decrease our net interest income. Furthermore, these increases in interest rates increase our cost of new debt or preferred capital.

The Bank’s interest rate risk measurement and management techniques incorporate the re-pricing and cash flow attributes of its balance sheet and off-balance sheet instruments as they relate to current and potential changes in interest rates. The level of interest rate risk, measured in terms of the potential future effect on earnings, is determined through the use of static gap analysis and earnings simulation modeling under multiple interest rate scenarios. Management’s objectives are to measure, monitor, and develop strategies in response to the interest rate risk profile inherent in the Bank’s balance sheet in order to preserve the sensitivity of net interest income to actual or potential changes in interest rates. For further information on risk relating to interest rates, refer to Part I, Item 7a, "Quantitative and Qualitative Disclosures about Market Risk," herein.

The Corporation’s investment securities portfolio is subject to credit risk, market risk, and liquidity risk, and declines in value in its investment securities portfolio may require it to record impairment charges that could have a material adverse effect on its results of operations and financial condition.

The Corporation’s investment securities portfolio has risks beyond its control that can significantly influence the portfolio’s fair value. These factors include, but are not limited to, rating agency downgrades of the securities, defaults of the issuers of the securities, lack of market pricing of the securities, and continued instability in the credit markets. Recent lack of market activity with respect to certain of the securities has, in certain circumstances, required the Corporation to base its fair market valuation on unobservable inputs. The Corporation has engaged valuation experts to price these certain securities using proprietary models, which incorporate assumptions that market participants would use in pricing the securities, including bid/ask spreads and liquidity and credit premiums. Any change in current accounting principles or interpretations of these principles could impact the Corporation’s assessment of fair value and thus its determination of other-than-temporary impairment of the securities in its investment securities portfolio.

14

Table of Contents

The Bank may be required to record other-than-temporary impairment charges on its investment securities if they suffer declines in value that are considered other-than-temporary. Numerous factors, including collateral deterioration underlying certain private label mortgage-backed securities, lack of liquidity for re-sales of certain investment securities, absence of reliable pricing information for certain investment securities, adverse changes in business climate, adverse actions by regulators, or unanticipated changes in the competitive environment could negatively affect the Bank’s securities portfolio in future periods. An other-than-temporary impairment charge could have a material adverse effect on the Corporation’s results of operations and financial condition.

A substantial decline in the value of the Bank’s FHLB common stock may adversely affect the Corporation’s results of operations, liquidity and financial condition.

As a requirement of membership in the FHLB of Pittsburgh, the Bank must own a minimum required amount of FHLB stock, calculated periodically based primarily on its level of borrowings from the FHLB. Borrowings from the FHLB represent the Bank’s primary source of short-term and long-term wholesale funding.

In an extreme situation, it is possible that the capitalization of an FHLB, including the FHLB of Pittsburgh, could be substantially diminished or reduced to zero. Consequently, given that there is no trading market for the Bank’s FHLB common stock, the Corporation’s management believes that there is a risk that the Corporation’s investment could be deemed impaired at some time in the future. If this occurs, it may adversely affect the Corporation’s results of operations and financial condition.

If the capitalization of the FHLB of Pittsburgh is substantially diminished, the Bank’s liquidity may be adversely impacted if it is not able to obtain alternative sources of funding.

There are 11 FHLB banks, including the FHLB of Pittsburgh, in the FHLB system. The 11 FHLB banks are jointly liable for the consolidated obligations of the FHLB system. To the extent that one FHLB bank cannot meet its obligations to pay its share of the system’s debt, other FHLB banks can be called upon to make the payment. The Corporation cannot assure you, however, that the FHLB system will be able to meet these obligations.

The Bank could be held responsible for environmental liabilities relating to properties acquired through foreclosure, resulting in significant financial loss.

In the event the Bank forecloses on a defaulted commercial or residential mortgage loan to recover its investment, it may be subject to environmental liabilities in connection with the underlying real property, which could significantly exceed the value of the real property. Although the Bank exercises due diligence to discover potential environmental liabilities prior to acquiring any property through foreclosure, hazardous substances or wastes, contaminants, pollutants, or their sources may be discovered on properties during its ownership or after a sale to a third party. The Corporation cannot assure you that the Bank would not incur full recourse liability for the entire cost of any removal and cleanup on an acquired property, that the cost of removal and cleanup would not exceed the value of the property, or that the Bank could recover any of the costs from any third party. Losses arising from environmental liabilities could have a material adverse impact on the Corporation’s business, financial condition, results of operations, or liquidity.

Replacement of the LIBOR benchmark interest rate could adversely affect our business, financial condition, and results of operations.

In 2017, the United Kingdom’s Financial Conduct Authority ("FCA"), which regulates the London Interbank Offered Rate ("LIBOR"), announced that the FCA intends to stop persuading or compelling banks to submit the rates required to calculate LIBOR after 2021. As a result, the Federal Reserve Board and the Federal Reserve Bank of New York organized the Alternative Reference Rates Committee, which identified the Secured Overnight Financing Rate ("SOFR") as its preferred alternative to LIBOR in derivatives and other financial contracts. The U.S. bank regulators issued a Statement on LIBOR Transition on November 30, 2020 encouraging banks to transition away from U.S. Dollar (USD) LIBOR as soon as practicable and in any event by December 31, 2021 for new contracts. LIBOR is currently anticipated to be fully phased out by June 30, 2023. We are not able to predict with certainty when LIBOR will cease to be available or when there will be sufficient liquidity in the SOFR markets. Any changes adopted by the FCA or other governing bodies in the method used for determining LIBOR may result in a sudden or prolonged increase or decrease in reported LIBOR. If such an increase or decrease were to occur, our interest payments that are higher or lower than if LIBOR were to remain available in its current form.

15

Table of Contents

We have a number of loans, derivative contracts, borrowings, and other financial instruments with attributes that are either directly or indirectly dependent on LIBOR. The transition from LIBOR, or any changes or reforms to the determination or supervision of LIBOR, could have an adverse impact on the market for or value of any LIBOR-linked securities, loans, and other financial obligations or extensions of credit held by or due to us, could create considerable costs and additional risk and could have an adverse impact on our overall financial condition or results of operations. Since proposed alternative rates (including SOFR) are calculated differently, payments under contracts referencing new rates will differ from those referencing LIBOR. The transition will change our market risk profiles, requiring changes to risk and pricing models, valuation tools, product design, and hedging strategies. Furthermore, failure to adequately manage this transition process with our customers could adversely impact our reputation. Although we are currently unable to assess what the ultimate impact of the transition from LIBOR will be, failure to adequately manage the transition could have a material adverse effect on our business, financial condition and results of operations.

Risks Related to an Investment in the Corporation’s Securities

Some provisions contained in the Corporation’s articles of incorporation and its bylaws and under Pennsylvania law could deter a takeover attempt or delay changes in control or management of the Corporation.

Certain anti-takeover provisions of the Pennsylvania Business Corporation Law of 1988, as amended, apply to Pennsylvania registered corporations (e.g., publicly traded companies) including, but not limited to, those relating to (1) control share acquisitions, (2) disgorgement of profits by certain controlling persons, (3) business combination transactions with interested shareholders, and (4) the rights of shareholders to demand fair value for their stock following a control transaction. Pennsylvania law permits corporations to opt-out of these anti-takeover provisions, but the Corporation has not done so. Such provisions could have the effect of deterring takeovers or delaying changes in control or management of the Corporation. Additionally, such provisions could limit the price that some investors might be willing to pay in the future for shares of the Corporation’s common stock.

For example, the Corporation’s amended and restated articles of incorporation require the affirmative vote of 66% of the outstanding shares entitled to vote to effect a business combination. In addition, the Corporation’s amended and restated articles of incorporation, subject to the limitations prescribed in such articles and subject to limitations prescribed by Pennsylvania law, authorize the Corporation’s Board of Directors, from time to time by resolution and without further shareholder action, to provide for the issuance of shares of preferred stock, in one or more series, and to fix the designation, powers, preferences and other rights of the shares and to fix the qualifications, limitations and restrictions thereof. As a result of its broad discretion with respect to the creation and issuance of preferred stock without shareholder approval, the Corporation's Board of Directors could adversely affect the voting power and other rights of the holders of common stock and, by issuing shares of preferred stock with certain voting, conversion and/or redemption rights, could discourage any attempt to obtain control of the Corporation.

The Corporation’s bylaws, as amended and restated, provide for the division of the Corporation’s Board of Directors into three classes of directors, with each serving staggered terms. In addition, any amendment to the Corporation’s bylaws must be approved by the affirmative vote of a majority of the votes cast by all shareholders entitled to vote thereon and, if any shareholders are entitled to vote thereon as a class, upon receiving the affirmative vote of a majority of the votes cast by the shareholders entitled to vote as a class.

Any of the foregoing provisions may have the effect of deterring takeovers or delaying changes in control or management of the Corporation.

The price of the Corporation’s common stock may fluctuate significantly, and this may make it difficult for you to resell shares of common stock owned by you at times or at prices you find attractive.

The price of the Corporation’s common stock on the Global Select Market of The NASDAQ Stock Market LLC ("NASDAQ") constantly changes. The Corporation expects that the market price of its common stock will continue to fluctuate, and the Corporation cannot give you any assurances regarding any trends in the market prices for its common stock.

The Corporation’s stock price may fluctuate as a result of a variety of factors, many of which are beyond its control. These factors include the Corporation’s:

•past and future dividend practice;

•financial condition, performance, creditworthiness, and prospects;

•quarterly variations in the Corporation’s operating results or the quality of the Corporation’s assets;

16

Table of Contents

•operating results that vary from the expectations of management, securities analysts, and investors;

•changes in expectations as to the Corporation’s future financial performance;

•announcements of innovations, new products, strategic developments, significant contracts, acquisitions, and other material events by the Corporation or its competitors;

•the operating and securities price performance of other companies that investors believe are comparable to the Corporation;

•future sales of the Corporation’s equity or equity-related securities;

•the credit, mortgage and housing markets, the markets for securities relating to mortgages or housing, and developments with respect to financial institutions generally; and

•instability in global financial markets and global economies and general market conditions, such as interest or foreign exchange rates, stock, commodity or real estate valuations or volatility, budget deficits or sovereign debt level concerns and other geopolitical, regulatory or judicial events.

The Corporation’s ability to pay dividends is limited by law and regulations.

The future declaration of dividends by the Corporation’s Board of Directors will depend on a number of factors, including capital requirements, regulatory limitations, the Corporation’s operating results and financial condition and general economic conditions. As a bank holding company, the Corporation’s principal assets and sources of income are derived from the Bank and, as a result, the Corporation’s ability to pay dividends depends primarily on the receipt of dividends from the Bank. Dividend payments from the Bank are subject to legal and regulatory limitations, generally based on retained earnings, imposed by bank regulatory agencies. The ability of the Bank to pay dividends is also subject to financial condition, regulatory capital requirements, capital expenditures, and other cash flow requirements. The Corporation cannot assure you that the Bank will be able to pay dividends to the Corporation in the future. If the Corporation were unable to receive dividends from the Bank, it would materially and adversely affects the Corporation’s liquidity and its ability to service its debt, pay its other obligations, or pay cash dividends on its common stock. The Corporation may decide to limit the payment of dividends to its stockholders even when the Corporation has the legal ability to pay them in order to retain earnings for use in the Corporation’s business.

Operational and Strategic Risks

The Bank’s loans are principally concentrated in certain areas of Pennsylvania, Ohio, New York and Virginia, and adverse economic conditions in those markets could adversely affect the Corporation’s business, financial condition and results of operations.

The Corporation’s success is dependent to a significant extent upon general economic conditions in the United States and, in particular, the local economies in Central and Northwest Pennsylvania, Central and Northeast Ohio, Western New York and Southwest Virginia - the primary markets served by the Bank. The Bank is particularly exposed to real estate and economic factors in these geographic areas, as most of its loan portfolio is concentrated among borrowers in these markets. Furthermore, because a substantial portion of the Bank’s loan portfolio is secured by real estate in these areas, the value of the associated collateral is also subject to regional real estate market conditions.

The Bank is not immune to negative consequences arising from overall economic weakness and, in particular, a sharp downturn in the local real estate markets served by the Bank. While the Bank’s loan portfolio has not shown significant signs of credit quality deterioration despite continued challenges in the U.S. economy, we cannot assure you that no deterioration will occur. An economic recession in the markets served by the Bank, and the nation as a whole, could negatively impact household and corporate incomes. This impact could lead to decreased loan demand and increase the number of borrowers who fail to pay the Bank interest or principal on their loans, and accordingly, could have a material adverse effect on the Corporation’s business, financial condition, results of operations, or liquidity.

17

Table of Contents

Severe weather, flooding and other effects of climate change and other natural disasters, such as earthquakes, could adversely affect our financial condition, results of operations or liquidity.

Our branch locations and our customers’ properties may be adversely impacted by flooding, wildfires, high winds and other effects of severe weather conditions that may be caused or exacerbated by climate change. These events can force property closures, result in property damage and/or result in delays in expansion, development or renovation of our properties and those of our customers. Even if these events do not directly impact our properties or our customers’ properties, they may impact us and our customers through increased insurance, energy or other costs. In addition, changes in laws or regulations, including federal, state or city laws, relating to climate change could result in increased capital expenditures to improve the energy efficiency of our branch locations and/or our customers’ properties. We also face investor-related climate risks. Investors are increasingly taking into account environmental, social, and governance factors, including climate risks, in determining whether to invest in companies. Our reputation and investor relationships could be damaged as a result of our involvement with activities perceived to be causing or exacerbating climate change, as well as any decisions we make to continue to conduct or change our activities in response to considerations relating to climate change.

The preparation of the Corporation’s financial statements requires the use of estimates that could significantly vary from actual results, which could have a material adverse effect on the Corporation’s business, financial condition, results of operations, or liquidity.

The preparation of the consolidated financial statements in conformity with accounting principles generally accepted in the U.S. requires management to make significant estimates that affect the financial statements. For example, one of these significant estimates is the allowance for credit losses. Due to the inherent nature of estimates, the Corporation cannot provide absolute assurance that it will not significantly increase the allowance for credit losses and/or sustain credit losses that are significantly higher than the provided allowance, which could have a material adverse effect on the Corporation’s business, financial condition, results of operations or liquidity.

The Corporation’s financial results may be subject to the impact of changes in accounting standards or interpretation in new or existing standards.

From time to time the Financial Accounting Standards Board ("FASB"), and the SEC change accounting regulations and reporting standards that govern the preparation of the Corporation’s financial statements. In addition, the FASB, SEC, and bank regulators may revise their previous interpretations regarding existing accounting regulations and the application of these accounting standards. These revisions in their interpretations are out of the Corporation’s control and may have a material impact on its financial statements.

The Corporation depends on the accuracy and completeness of information about customers and counterparties.

In deciding whether to extend credit or enter into other transactions with customers and counterparties, we rely on information furnished to us by or on behalf of customers and counterparties, including financial statements and other financial information. We also rely on representations of customers and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. For example, in deciding whether to extend credit to clients, we may assume that a customer's audited financial statements conform to GAAP and present fairly, in all material respects, the financial condition, results of operations and cash flows of the customer. Our earnings are significantly affected by our ability to properly originate, underwrite and service loans. Our financial condition, results of operations and capital could be negatively impacted to the extent we incorrectly assess the creditworthiness of our borrowers, fail to detect or respond to deterioration in asset quality in a timely manner, or rely on financial statements that do not comply with GAAP or are materially misleading.

The risks presented by acquisitions could adversely affect our financial condition and results of operations.

Any acquisitions will be accompanied by the risks commonly encountered in acquisitions including, among other things: our ability to realize anticipated cost savings and avoid unanticipated costs relating to the merger, the difficulty of integrating operations and personnel, the potential disruption of our or the acquired company’s ongoing business, the inability of our management to maximize our financial and strategic position, the inability to maintain uniform standards, controls, procedures and policies, and the impairment of relationships with the acquired company’s employees and customers as a result of changes in ownership and management. These risks may prevent the Corporation from fully realizing the anticipated benefits of an acquisition or cause the realization of such benefits to take longer than expected.

18

Table of Contents

Strong competition within the Corporation’s markets and technological change may have a material adverse impact on its profitability.

The Corporation competes with an ever-increasing array of financial service providers. As noted above, as a financial holding company and state-chartered financial institution, respectively, the Corporation and the Bank are subject to extensive regulation and supervision, including, in many cases, regulations that limit the type and scope of activities. The non-bank financial service providers that compete with the Corporation and the Bank may not be subject to such extensive regulation, supervision, and tax burden. Competition from nationwide banks, as well as local institutions, is strong in the Corporation’s markets.

The financial services industry is undergoing rapid technological change and technological advances are likely to intensify competition. In addition to improving customer services, effective use of technology increases efficiency and enables financial institutions to reduce costs. Accordingly, the Corporation’s future success will depend in part on its ability to address customer needs by using technology. The Corporation cannot assure you that it will be able to successfully take advantage of technological changes or advances or develop and market new technology driven products and services to its customers. Failure to keep pace with technological change affecting the financial services industry could have a material adverse effect on the Corporation's financial condition, results of operations, or liquidity.

Many regional, national, and international competitors have far greater assets and capitalization than the Corporation has and greater resources to invest in technology and access to capital markets and can consequently offer a broader array of financial services than the Corporation can. We cannot assure you that we will continue to be able to compete effectively with other financial institutions in the future. Developments increasing the nature or level of competition could have a material adverse effect on the Corporation’s business, financial condition, results of operations, or liquidity. For further information on competition, refer to Part I, Item 1, "Competition," herein.

The unsoundness of other financial institutions with which the Corporation does business could adversely affect the Corporation’s business, financial condition or results of operations.

Our ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial institutions are interrelated as a result of trading, clearing, counterparty, investment or other relationships. The Corporation routinely executes transactions with counterparties in the financial services industry such as commercial banks, brokers and dealers, investment banks and other institutional clients for a range of transactions including loan participations, derivatives, and hedging transactions. In addition, the Corporation invests in securities or loans originated or issued by financial institutions or supported by the loans they originate. As a result, defaults by, or even rumors or questions about, one or more financial institutions, or the financial industry generally, have led to market-wide liquidity problems and could lead to losses or defaults by us or other institutions. Many of these transactions expose the Corporation to credit or investment risk in the event of default by the Corporation’s counterparty. In addition, the Corporation’s credit risk may be exacerbated if the collateral it holds cannot be realized or is liquidated at prices not sufficient to recover the full amount of the loan or other exposure to the Corporation. The Corporation could incur losses to its securities portfolio as a result of these issues. These types of losses may have a material adverse effect on the Corporation’s business, financial condition or results of operation.

The Corporation’s operations may be adversely affected if its external vendors do not perform as expected or if its access to third-party services is interrupted.

The Corporation relies on certain external vendors to provide products and services necessary to maintain the day-to-day operations of the Corporation. Some of the products and services provided by vendors include key components of our business infrastructure including data processing and storage and internet connections and network access, among other products and services. Accordingly, the Corporation’s operations are exposed to the risk that these vendors will not perform in accordance with the contracted arrangements or under service level agreements. The failure of an external vendor to perform in accordance with the contracted arrangements or under service level agreements, because of changes in the vendor’s organizational structure, financial condition, support for existing products and services or strategic focus or for any other reason, could disrupt the Corporation’s operations. If we are unable to find alternative sources for our vendors’ services and products quickly and cost-effectively, the failures of our vendors could have a material adverse impact on the Corporation’s business and, in turn, the Corporation’s financial condition and results of operations.

19

Table of Contents

Additionally, our information technology and telecommunications systems interface with and depend on third-party systems, and we could experience service denials if demand for such services exceeds capacity or such third-party systems fail or experience interruptions. If sustained or repeated, a system failure or service denial could result in a deterioration of our ability to process new and renewal loans, gather deposits and provide customer service, compromise our ability to operate effectively, damage our reputation, result in a loss of customer business and subject us to additional regulatory scrutiny and possible financial liability, any of which could have a material adverse effect on our financial condition and results of operations.

A failure in or breach of the Corporation’s or any of its subsidiaries’ operational or security systems or infrastructure, or those of third party vendors and other service providers, including as a result of cyber attacks, could disrupt the Corporation’s or any of its subsidiaries’ businesses, result in the unauthorized disclosure or misuse of confidential or proprietary information, damage its reputation, increase its costs, or cause losses.

The Corporation, primarily through the Bank, depends on its ability to continuously process, record and monitor a large number of customer transactions. The Corporation also collects and processes regulated personal data of employees and customers, and as such, public and regulatory expectations regarding operational and information security have increased over time. Accordingly, its and its subsidiaries’ operational systems and infrastructure must continue to be safeguarded and monitored for potential failures, vulnerabilities, disruptions and breakdowns. Although the Corporation has business continuity plans and other safeguards in place, disruptions or failures in the physical infrastructure or operating systems that support its businesses and customers, or cyber attacks or security breaches of its networks, systems or devices on which employees' or customers’ personal information is stored and that customers use to access the Corporation’s and its subsidiaries products and services could result in customer attrition, regulatory fines, penalties or intervention, reputational damage, reimbursement or other compensation costs, and/or additional compliance costs, any of which could materially adversely affect the Corporation’s results of operations or financial condition. In addition, significant disruptions of our third party vendors’ and/or service providers’ security systems or infrastructure, or other similar data security incidents, could adversely affect our business operations and/or result in the loss, misappropriation, and/or unauthorized access, use or disclosure of, or the prevention of access to, regulated personal or confidential information, which could harm our business.

Although to date the Corporation has not experienced any material losses relating to cyber attacks or other information security breaches, there can be no assurance that it or its subsidiaries will not suffer such losses in the future and our information systems remain a target of cyber attacks. Given the evolving nature of security threats and evolving safeguards, there can be no assurance that any preventive, protective, or remedial measures are or will be adequate to address threats that arise. However, even security measures that are appropriate, reasonable, and/or in accordance with applicable legal requirements may not be able to fully protect our operational or security systems or infrastructure and the data contained therein, or our data that is contained in our subsidiaries’ or third parties’ systems. Additionally, while we have implemented security measures that we believe are appropriate, a regulator could deem our security measures not to be appropriate given the lack of prescriptive measures in certain data protection laws. The Corporation continues to enhance its data security systems, technology platforms, employee education and risk management processes, in an effort to underpin its business strategy as well as in response to the evolving threat landscape and any incidents we experience. In connection with these efforts, we have incurred costs and expect to incur additional costs as we continue to enhance our data security infrastructure and take further steps to prevent unauthorized access to our systems and the data we maintain. In addition, any actual or perceived failure by the Corporation or our vendors or business partners to comply with our privacy, confidentiality, or data security-related legal or other obligations to third parties may result in claims by third parties that we have breached our privacy- or confidentiality-related obligations, which could materially and adversely affect our business and prospects.

The Corporation’s risk and exposure to these matters, including future "phishing" attempts like the 2020 incident, which was disclosed in the Corporation's Annual Form 10-K for the year ended December 31, 2020, remain heightened because of, among other things, the evolving nature of these threats, our plans to continue to implement our Internet banking and mobile banking channel strategies and develop additional remote connectivity solutions to serve our customers when and how they want to be served. As a result, cybersecurity and the continued development and enhancement of the Corporation’s controls, processes and practices designed to protect its and its subsidiaries systems, computers, software, data and networks from attack, damage or unauthorized access remain a priority for the Corporation. As cyber threats continue to evolve, the Corporation may be required to expend further significant resources to continue to modify or enhance its protective measures or to investigate and remediate future information security vulnerabilities.

While we have purchased cybersecurity insurance, there are no assurances that the coverage would be adequate in relation to any incurred losses. Moreover, as cyber attacks increase in frequency and magnitude, we may be unable to obtain cybersecurity insurance in amounts and on terms we view as adequate for our operations.

20

Table of Contents

A pandemic, including the ongoing COVID-19 pandemic, and measures intended to prevent its spread, could have a material adverse effect on our business, results of operations, cash flows, and financial condition.

A pandemic, such as the ongoing COVID-19 pandemic, and emergence of new variants could negatively impact the global economy, disrupt financial markets and international trade, and result in varying unemployment levels, all of which could negatively impact our business, results of operations, cash flows, and financial condition. Pandemic outbreaks could lead (and the current outbreak of COVID-19 has led) governments and other authorities around the world, including federal, state and local authorities in the United States, to impose measures intended to mitigate its spread, including restrictions on freedom of movement and business operations such as issuing guidelines, travel bans, border closings, business closures and quarantine orders.

Risks Related to Legal and Compliance Matters

The Corporation is subject to extensive government regulation and supervision, which may affect its ability to conduct its business and may negatively impact its financial results.

The Corporation, primarily through the Bank and its non-bank subsidiary, is subject to extensive federal and state regulation and supervision. Banking regulations are primarily intended to protect depositors’ funds, the Federal Deposit Insurance Fund and the safety and soundness of the banking system as a whole, not stockholders. These regulations affect the Corporation’s lending practices, capital structure, investment practices, dividend policy and growth, among other things. Congress and federal regulatory agencies continually review banking laws, regulations and policies for possible changes. Changes to statutes, regulations or regulatory policies, including changes in interpretation or implementation of statutes, regulations or policies, could affect the Corporation in substantial and unpredictable ways. Such changes could subject it to additional costs, limit the types of financial services and products the Corporation may offer, and/or limit the pricing it may charge on certain banking services, among other things.

Failure to comply with laws, including the Bank Secrecy Act and USA Patriot Act, regulations or policies could result in sanctions by regulatory agencies, restrictions, civil money penalties and/or reputation damage, which could have a material adverse effect on the Corporation’s business, financial condition and results of operations and/or cause the Corporation to lose its financial holding company status. While the Corporation has policies and procedures designed to prevent any such violations, there can be no assurance that such violations will not occur. See the section captioned "Supervision and Regulation" in Part I, Item 1 of this report for further information.

Federal and state governments could pass legislation responsive to current credit conditions which could cause the Corporation to experience higher credit losses.

The Corporation could experience higher credit losses because of federal or state legislation or regulatory action that reduces the amount the Bank’s borrowers are otherwise contractually required to pay under existing loan contracts. Also, the Corporation could experience higher credit losses because of federal or state legislation or regulatory action that limits the Bank’s ability to foreclose on property or other collateral or makes foreclosure less economically feasible. The Corporation cannot assure you that future legislation will not significantly and adversely impact its ability to collect on its current loans or foreclose on collateral.

General Risk Factors

The Corporation relies on its management and other key personnel, and the loss of any of them may adversely affect its operations.

The Corporation is and will continue to be dependent upon the services of its executive management team. In addition, it will continue to depend on its ability to retain and recruit key client relationship managers. The unexpected loss of services of any key management personnel, or the inability to recruit and retain qualified personnel in the future, could have an adverse effect on its business and financial condition.

21

Table of Contents

The Corporation's risk management framework may not be effective in mitigating risk and loss.

The Corporation maintains an enterprise risk management program that is designed to identify, quantify, monitor, report, and control the risks that it faces. These risks include, but are not limited to: strategic, interest-rate, credit, liquidity, operations, pricing, reputation, compliance, litigation, and cybersecurity. While the Corporation assesses and improves this program on an ongoing basis, there can be no assurance that its approach and framework for risk management and related controls will effectively mitigate all risk and limit losses in its business. If conditions or circumstances arise that expose flaws or gaps in the Corporation's risk-management program, or if its controls break down, the Corporation's results of operations and financial condition may be adversely affected.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 2. PROPERTIES

The headquarters of the Corporation and the Bank are located at 1 South Second Street, Clearfield, Pennsylvania, in a building owned by the Corporation. The Bank operates 47 full-service offices at December 31, 2022. Of these 47 offices, 23 are owned and 23 are leased from independent owners and one is leased from the Corporation. Holiday has nine full-service offices, of which eight are leased from independent owners and one is leased from the Corporation. The Bank’s primary market area of the Pennsylvania counties of Blair, Cambria, Cameron, Centre, Clearfield, Crawford, Elk, Indiana, Jefferson and McKean. ERIEBANK, a division of the Bank, operates in the Pennsylvania counties of Crawford, Erie and Warren and in the Ohio counties of Ashtabula, Cuyahoga, Geauga, Lake and Lorain. FCBank, a division of the Bank, operates in the Ohio counties of Crawford, Delaware, Franklin, Knox, Marion, Morrow and Richland. BankOnBuffalo, a division of the Bank, operates in the New York counties of Erie and Niagara. Ridge View Bank, a division of the Bank, operates in Southwest, Virginia. Impressia Bank, a division of the Bank, will operate in the Bank’s primary market areas. There are no encumbrances on the offices owned and the rental expense on the leased property is immaterial in relation to operating expenses. The initial lease terms range from three to twenty years.

ITEM 3. LEGAL PROCEEDINGS

There are no material pending legal proceedings to which the Corporation or any of its subsidiaries is a party, or of which any of their properties is the subject, except ordinary routine proceedings which are incidental to the business.

ITEM 4. MINE SAFETY DISCLOSURES

None.

22

Table of Contents

PART II.

ITEM 5. MARKET FOR REGISTRANT’S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Our common stock is traded on the Global Select Market of NASDAQ under the symbol "CCNE." As of December 31, 2022, the number of shareholders of record of the Corporation’s common stock was 7,023.

Issuer Purchases of Equity Securities

The following table provides information with respect to any purchase of shares of the Corporation’s common stock made by or on behalf of the Corporation for the quarter ended December 31, 2022.

(1) On May 17, 2022, the Corporation’s Board of Directors authorized the repurchase of up to 500,000 shares of common stock, provided that the aggregate purchase price of shares of common stock repurchased does not exceed $15 million. The repurchases of common stock, if any, are authorized to be made during the period beginning on June 2, 2022 (the date on which the Corporation received acknowledgement of the repurchase program from the Federal Reserve Bank) through and including May 17, 2023 through open market purchases, privately negotiated transactions. Depending on market conditions and other factors, these repurchases may be commenced or suspended without prior notice. As of December 31, 2022, there were 500,000 shares remaining for repurchase under the program.

Additionally, during the quarter ended December 31, 2022, certain employees surrendered shares of common stock owned by them to satisfy their statutory minimum U.S. federal and state tax obligations associated with the vesting of shares of restricted common stock issued under the CNB Financial Corporation 2019 Omnibus Incentive Plan.

23

Table of Contents

Share Return Performance

Set forth below is a chart comparing the Corporation’s cumulative return to stockholders against the cumulative return of the NASDAQ Composite Index and a peer group index of banking organizations for the five-year period commencing December 31, 2017 and ending December 31, 2022.

CNB Financial Corporation

Period Ending

Source : S&P Global Market Intelligence

© 2023

ITEM 6. RESERVED

ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

This Management’s Discussion and Analysis of Financial Condition and Results of Operations is presented to provide insight into management’s assessment of financial results and should be read in conjunction with the following parts of this Annual Report on Form 10-K: Part I, Item 1 "Business," Part II, Item 7A, "Quantitative and Qualitative Disclosures About Market Risk," and Part II, Item 8 "Financial Statements and Supplementary Data." This section of this Annual Report on Form 10-K generally discusses 2022 and 2021 items and year-to-year comparisons between 2022 and 2021. Discussions of 2020 items and year-to-year comparisons between 2021 and 2020 that are not included in this Form 10-K can be found in "Management’s Discussion and Analysis of Financial Condition and Results of Operations" in Part II, Item 7 of the Corporation’s Annual Report on Form 10-K for the year ended December 31, 2021.

24

Table of Contents

Dollar amounts in tables are stated in thousands, except for per share amounts.

Forward-Looking Statements and Factors that Could Affect Future Results

The information below includes forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, with respect to CNB’s financial condition, liquidity, results of operations, future performance and business. These forward-looking statements are intended to be covered by the safe harbor for "forward-looking statements" provided by the Private Securities Litigation Reform Act of 1995. Forward-looking statements are those that are not historical facts. Forward-looking statements include statements with respect to beliefs, plans, objectives, goals, expectations, anticipations, estimates and intentions that are subject to significant risks and uncertainties and are subject to change based on various factors (some of which are beyond CNB’s control). Forward-looking statements often include the words "believes," "expects," "anticipates," "estimates," "forecasts," "intends," "plans," "targets," "potentially," "probably," "projects," "outlook" or similar expressions or future conditional verbs such as "may," "will," "should," "would" and "could." CNB’s actual results may differ materially from those contemplated by the forward-looking statements, which are neither statements of historical fact nor guarantees or assurances of future performance.

Such known and unknown risks, uncertainties and other factors that could cause the actual results to differ materially from the statements, include, but are not limited to, (i) adverse changes or conditions in capital and financial markets; (ii) changes in interest rates; (iii) the duration and scope of a pandemic, including the ongoing COVID-19 pandemic, and the local, national and global impact of a pandemic; (iv) changes in general business, industry or economic conditions or competition; (v) changes in any applicable law, rule, regulation, policy, guideline or practice governing or affecting financial holding companies and their subsidiaries or with respect to tax or accounting principles or otherwise; (vi) higher than expected costs or other difficulties related to integration of combined or merged businesses; (vii) the effects of business combinations and other acquisition transactions, including the inability to realize our loan and investment portfolios; (viii) changes in the quality or composition of our loan and investment portfolios; (ix) adequacy of loan loss reserves; (x) increased competition; (xi) loss of certain key officers; (xii) deposit attrition; (xiii) rapidly changing technology; (xiv) unanticipated regulatory or judicial proceedings and liabilities and other costs; (xv) changes in the cost or sources of funds, demand for loan and deposit products or demand for financial services; and (xvi) other economic, competitive, governmental or technological factors affecting our operations, markets, products, services and prices. Such developments could have an adverse impact on CNB's financial position and results of operations.

The forward-looking statements contained herein are based upon management’s beliefs and assumptions. Any forward-looking statement made herein speaks only as of the date on which it is made. Factors or events that could cause our actual results to differ may emerge from time to time, and it is not possible for us to predict all of them. CNB undertakes no obligation to publicly update or revise any forward-looking statements included in this Annual Report on Form 10-K, whether as a result of new information, future events or otherwise, except to the extent required by law. In light of these risks, uncertainties and assumptions, the forward-looking events discussed might not occur and you should not put undue reliance on any forward-looking statements.

Overview

The Corporation is a financial holding company registered under the BHC Act. It was incorporated under the laws of the Commonwealth of Pennsylvania in 1983 for the purpose of engaging in the business of a financial holding company. The Corporation’s subsidiary, the Bank, provides financial services to individuals and businesses primarily within its primary market area of the Pennsylvania counties of Blair, Cambria, Cameron, Centre, Clearfield, Crawford, Elk, Indiana, Jefferson and McKean. ERIEBANK, a division of the Bank, operates in the Pennsylvania counties of Crawford, Erie and Warren and in the Ohio counties of Ashtabula, Cuyahoga, Geauga, Lake and Lorain. FCBank, a division of the Bank, operates in the Ohio counties of Crawford, Delaware, Franklin, Knox, Marion, Morrow and Richland. BankOnBuffalo, a division of the Bank, operates in the New York counties of Erie and Niagara. Ridge View Bank, a division of the Bank, operates in Southwest, Virginia. Impressia Bank, a division of the Bank, will operate in the Bank’s primary market areas beginning in the first quarter of 2023. Although the Corporation’s strategies, through its Bank subsidiary, are executed based on the divisions discussed above, the Bank is a single Pennsylvania-chartered bank whereby all divisions of the Bank conduct their business on a doing business as basis.

25

Table of Contents

In addition to the Bank, the Corporation has four other subsidiaries. CNB Securities Corporation is incorporated in Delaware and currently maintains investments in debt and equity securities. CNB Insurance Agency, incorporated in Pennsylvania, provides for the sale of nonproprietary annuities and other insurance products. CNB Risk Management, Inc., incorporated in Delaware, is a captive insurance company that insures against certain risks unique to the operations of the Corporation and its subsidiaries and for which insurance may not be currently available or economically feasible in today's insurance marketplace. Holiday, incorporated in Pennsylvania, offers small balance unsecured loans and secured loans, primarily collateralized by automobiles and equipment, to borrowers with higher risk characteristics.

Non-GAAP Financial Information

This report contains references to financial measures that are not defined in GAAP. Management uses non-GAAP financial information in its analysis of the Corporation’s performance. Management believes that these non-GAAP measures provide a greater understanding of ongoing operations, enhance comparability of results of operations with prior periods and show the effects of significant gains and charges in the periods presented. The Corporation’s management believes that investors may use these non-GAAP measures to analyze the Corporation’s financial performance without the impact of unusual items or events that may obscure trends in the Corporation’s underlying performance. This non-GAAP data should be considered in addition to results prepared in accordance with GAAP, and is not a substitute for, or superior to, GAAP results. Limitations associated with non-GAAP financial measures include the risks that persons might disagree as to the appropriateness of items included in these measures and that different companies might calculate these measures differently.

Non-GAAP measures reflected within the discussion below include:

•Tangible book value per common share;

•Tangible common equity/tangible assets;

•Adjusted allowance/loans receivable, net of Paycheck Protection Program ("PPP") related loans;

•Net interest margin (fully tax equivalent basis);

•Efficiency ratio;

•Pre-provision net revenue ("PPNR");

•Return on average tangible common equity; and

•Non-interest income excluding realized gains on available-for-sale ("AFS") securities.

A reconciliation of these non-GAAP financial measures is provided below in the "Non-GAAP Financial Measures" section.

Primary Factors Used To Evaluate Performance

Management considers return on average assets, return on average equity, return on average tangible common equity, earnings per common share, tangible book value per common share, asset quality, net interest margin, and other metrics as key measures of the financial performance of the Corporation. The interest rate environment will continue to play an important role in the future earnings of the Corporation. To address the challenging interest rate and competitive environments, the Corporation continues to evaluate, develop and implement strategies necessary to support its ongoing financial performance objectives and future growth goals. Additionally, management frequently evaluates the potential impact of economic and geopolitical events that may have an impact on the credit risk profile of its customers and develops proactive strategies to mitigate such potential impacts on the Corporation’s loan portfolio.

Financial Condition

The following table presents ending balances, growth, and the percentage change of certain measures of our financial condition for specified years (dollars in millions):

2022Balance 2021Balance $ Changevs. prioryear % Changevs. prioryear

26

Table of Contents

Cash and Cash Equivalents

Cash and cash equivalents totaled $106.3 million at December 31, 2022, including $43.4 million held at the Federal Reserve. Cash and cash equivalents totaled $732.2 million at December 31, 2021. The decrease in cash and cash equivalents from December 31, 2021 to December 31, 2022 was due primarily to robust loan growth coupled with an increase in investment purchases, to position a portion of the excess liquidity into higher earning assets, and a decrease in deposits. The decrease in deposits was driven primarily by the impact of competitive pricing pressures due to the rapid increase in interest rates, as well as customers experiencing substantial increases in costs due to inflation.

Management believes the liquidity needs of the Corporation are satisfied primarily by the current balance of cash and cash equivalents, customer deposits, FHLB financing, other funding sources and the portions of the securities and loan portfolios that mature within one year. The Corporation expects that these sources of funds will enable it to meet cash obligations and off-balance sheet commitments as they come due. In addition to the above noted liquidity sources, the Corporation maintains access to the Federal Reserve discount window.

Securities

Securities AFS and equity securities totaled $381.0 million and $707.6 million at December 31, 2022 and 2021, respectively. At December 31, 2022, the total balance of investments classified as held-to-maturity ("HTM") securities was $404.8 million. There were no investments classified as HTM at December 31, 2021. During 2022, as a result of the Corporation’s asset/liability and capital management strategies, securities with a combined amortized cost of $220.8 million and a fair value of $213.7 million were transferred from AFS to HTM. These HTM portfolio bonds continue to support liquidity through pledging and can be utilized as collateral against borrowings. In addition to these internal portfolio transfers, some of the investment purchases made by the Corporation during 2022 were also classified as HTM securities.

The Corporation’s objective is to maintain the investment securities portfolio at an appropriate level to balance the earnings and liquidity provided by the portfolio. Note 3, "Securities," in the consolidated financial statements provides more detail concerning the composition of the Corporation’s investment securities portfolio and the process for evaluating securities for impairment.

The following table summarizes the maturity distribution schedule with corresponding weighted-average yields of securities AFS as of December 31, 2022. Weighted-average yields have been computed on a fully taxable-equivalent basis using a tax rate of 21%. Mortgage-backed securities are included in maturity categories based on their stated maturity date.

$ Amt. Yield $ Amt. Yield $ Amt. Yield $ Amt. Yield $ Amt. Yield

27

Table of Contents

The following table summarizes the maturity distribution schedule with corresponding weighted-average yields of securities HTM as of December 31, 2022.

$ Amt. Yield $ Amt. Yield $ Amt. Yield $ Amt. Yield $ Amt. Yield

The following table summarizes the weighted average modified duration of securities AFS as of December 31, 2022.

Weighted Average Modified Duration (in Years)

U.S. Government Sponsored Entities 1.06

State and Political Subdivisions 6.18

Residential and multi-family mortgage 5.76

Corporate notes and bonds 5.02

The following table summarizes the weighted average modified duration of securities HTM as of December 31, 2022.

Weighted Average Modified Duration (in Years)

U.S. Government Sponsored Entities 3.44

Residential and multi-family mortgage 5.13

The portfolio contains no holdings of a single issuer that exceeds 10% of shareholders’ equity other than U.S. government sponsored entities.

The Corporation generally purchases debt securities over time and does not attempt to "time" its transactions, which allows for more efficient management of fluctuations in the interest rate environment. The Corporation's strategy given the current environment is to focus on lower risk securities and shorter durations that complement the current portfolio investment ladder, coupled with consistent reinvestment of cash flows to replace lower earning assets.

The Corporation monitors the earnings performance and the effectiveness of the liquidity of the securities portfolio on a regular basis through meetings of the Asset/Liability Committee ("ALCO"). The ALCO also reviews and manages interest rate risk for the Corporation. Through active balance sheet management and analysis of the securities portfolio, a sufficient level of liquidity is maintained to satisfy depositor requirements and various credit needs of our customers.

Loans Receivable

Note 4, "Loans Receivable and Allowance for Credit Losses," in the consolidated financial statements provides more detail concerning the loan portfolio of the Corporation.

At December 31, 2022, loans, excluding the impact of (i) syndicated loans, and (ii) PPP loans, net of PPP-related fees (such loans being referred to as the "PPP-related loans"), totaled $4.1 billion, representing an increase of $654.5 million, or 18.9%, from December 31, 2021. This favorable loan growth, which was experienced across the Corporation's footprint, continued to reflect the Corporation's ongoing expansion in the Cleveland and Southwest Virginia regions, as well as new opportunities from its new loan production office in Rochester, New York, combined with growth in the portfolio related to its Private Banking division.

28

Table of Contents

For the twelve months ended December 31, 2022, the Corporation's balance sheet reflected an increase in syndicated lending balances of $30.9 million compared to December 31, 2021. The syndicated loan portfolio totaled $156.6 million, or 3.7% of total loans, excluding PPP-related loans, at December 31, 2022, compared to $125.8 million, or 3.5% of total loans, excluding PPP-related loans, at December 31, 2021.

Loan Origination/Risk Management

The Corporation has certain lending policies and procedures in place that are designed to maximize loan income within an acceptable level of risk. Management reviews and approves these policies and procedures on a regular basis. A reporting system supplements the review process by providing management with frequent reports related to loan production, loan quality, concentrations of credit, loan delinquencies and nonperforming and potential problem loans. Diversification in the loan portfolio is a means of managing risk associated with fluctuations in economic conditions. The Corporation has not underwritten any hybrid loans, payment option loans, or low documentation/no documentation loans. Variable rate loans are generally underwritten at the fully indexed rate. Loan underwriting policies and procedures have not changed materially between any periods presented. As discussed more fully above, syndicated loan purchases are underwritten utilizing the same process as the Corporation’s originated loans.

The Corporation has begun to explore the credit and reputational risks associated with climate change and their potential impact on the foregoing, while closely monitoring regulatory developments on climate risk. This includes, among other things, researching and developing a formalized approach to considering climate change related risks in the Corporation's underwriting processes. This approach will be impacted, in part, by the accessibility and reliability of both customer climate risk data and climate risk data in general. One of the objectives of these efforts is to enable the Corporation to better understand the climate change related risks associated with the Corporation's customers' business activities and to be able to monitor their response to those risks and their ultimate impact on the Corporation's customers.

29

Table of Contents

Maturities and Sensitivities of Loans Receivable to Changes in Interest Rate

The following table presents the maturity distribution of the Corporation's loans receivable at December 31, 2022. The table also presents the portion of loans receivable that have fixed interest rates or variable interest rates that fluctuate over the life of the loans in accordance with changes in an interest rate index.

Loans Receivable with Fixed Interest Rate

Agricultural production and other loans to farmers 8 280 — — 288

Other revolving credit plans 7 9 15 3 34

Credit cards — — — — —

Overdrafts — — — — —

Loans Receivable with Variable or Floating Interest Rate

Agricultural production and other loans to farmers 668 71 171 — 910

Automobile — 6 — — 6

30

Table of Contents

Loan Concentration

At December 31, 2022, no industry concentration existed which exceeded 10% of the total loan portfolio.

Loan Quality

The following table presents information concerning the loan portfolio delinquency and other nonperforming assets at December 31, 2022 and 2021:

Accrual loans greater than 90 days past due 1,121 168

Loans modified in a troubled debt restructuring ("TDR"):

Nonaccrual loans as a percentage of loans 0.49 % 0.53 %

Nonperforming assets as a percentage of total assets 0.43 % 0.38 %

Allowance for credit losses on loans $ 43,436 $ 37,588

Allowance for credit losses / Total loans 1.02 % 1.03 %

(1) Nonperforming TDR loans are also included in the balance of nonaccrual loans.

Total nonperforming assets were $23.5 million, or 0.43% of total assets, as of December 31, 2022, compared to $20.3 million, or 0.38% of total assets, as of December 31, 2021. In addition, the allowance for credit losses as a percentage of nonaccrual loans was 207.0% as of December 31, 2022, compared to 193.6% as of December 31, 2021.

The Corporation has established written lending policies and procedures that require underwriting standards, loan documentation, and credit analysis standards to be met prior to funding a loan. Subsequent to the funding of a loan, ongoing review of credits is required. Credit reviews are performed quarterly by an outsourced loan review firm and cover approximately 65% of the commercial loan portfolio on an annual basis. In addition, the external independent loan review firm reviews past due loans and all classified assets and nonaccrual loans annually.

Potential problem loans consist of loans that are performing in accordance with contractual terms but for which management has concerns about the ability of a borrower to continue to comply with contractual repayment terms because of the borrower’s potential operating or financial difficulties. Management monitors these "watchlist" loans monthly to determine potential losses within the commercial loan portfolio. The "watchlist" is comprised of all credits risk rated special mention, substandard and doubtful.

31

Table of Contents

Allowance for Credit Losses

The amount of each allowance for credit losses account represents management's best estimate of current expected credit losses on these financial instruments considering available information, from internal and external sources, relevant to assessing exposure to credit loss over the contractual term of the instrument. Relevant available information includes historical credit loss experience, current conditions and reasonable and supportable forecasts. While historical credit loss experience provides the basis for the estimation of expected credit losses, adjustments to historical loss information may be made for differences in current portfolio-specific risk characteristics, environmental conditions or other relevant internal and external factors. While management utilizes its best judgment and information available, the ultimate adequacy of the Corporation's allowance for credit losses account is dependent upon a variety of factors beyond the Corporation's control, including the performance of the Corporation's loan portfolios, the economy, changes in interest rates and the view of the regulatory authorities toward classification of assets. The adequacy of the allowance for credit losses is subject to a formal analysis by the Credit Administration and Finance Departments of the Corporation. For additional information regarding the Corporation's accounting policies related to credit losses, refer to Note 1, "Summary of Significant Accounting Policies" and Note 4, "Loans and Allowance for Credit Losses" in these consolidated financial statements.

The table below provides an allocation of the allowance for credit losses on loans by loan portfolio segment at December 31, 2022 and 2021; however, allocation of a portion of the allowance to one segment does not preclude its availability to absorb losses in other segments.

Agricultural production and other loans to farmers 6 — 1,198 0.50

Excluding PPP loans, net of deferred processing fees $ 43,436 $ 4,275,019 1.02 %

32

Table of Contents

Agricultural production and other loans to farmers 9 — 1,379 0.65

Excluding PPP loans, net of deferred processing fees $ 37,588 $ 3,589,589 1.05 %

The allowance for credit losses measured as a percentage of total loans was 1.02% as of December 31, 2022, compared to 1.03% as of December 31, 2021.

The Corporation's allowance for credit losses is influenced by loan volumes, risk rating migration, delinquency status and other internal and external conditions influencing loss expectations, such as reasonable and supportable forecasts of economic conditions and other external factors.

For the year ended December 31, 2022, the allowance for credit losses increased due to the growth in the Corporation's loan portfolio, including growth in new market areas. This was partially offset by improvements in the Corporation's historical loss rates, as well as the impact of net charge-offs. There is still a significant amount of uncertainty related to the domestic and global economy, continued supply chain challenges, persistent inflation and the COVID-19 pandemic. Management will continue to proactively evaluate its estimate of expected credit losses as new information becomes available.

Note 4, "Loans Receivable and Allowance for Credit Losses," to the consolidated financial statements provides further disclosure of loan balances by portfolio segment as of December 31, 2022 and 2021, as well as the nature and scope of loans modified in a troubled debt restructuring during 2022 and 2021 and the related effect on provision for credit expense and allowance for credit losses.

33

Table of Contents

Additional information related to credit loss expense and net (charge-offs) recoveries at December 31, 2022, 2021 and 2020 is presented in the tables below.

Owner-occupied, nonfarm nonresidential properties (428) (6) 467,606 —

Agricultural production and other loans to farmers (3) — 1,254 —

Multifamily (5 or more) residential properties 64 — 227,715 —

Non-owner occupied, nonfarm nonresidential properties 1,171 1 697,930 —

Residential Mortgages secured by first liens 1,564 (23) 874,675 —

Residential Mortgages secured by junior liens 489 — 63,362 —

(1) Excludes provision for credit losses totaling $603 thousand, related to unfunded commitments. Note 20, "Off-Balance Sheet Commitments and Contingencies," in the consolidated financial statements provides more detail concerning the provision for credit losses related to unfunded commitments of the Corporation.

34

Table of Contents

Agricultural production and other loans to farmers (15) — 2,245 —

Multifamily (5 or more) residential properties (435) — 218,285 —

Residential Mortgages secured by first liens 2,436 (32) 795,747 —

Residential Mortgages secured by junior liens 308 (3) 55,063 (0.01)

Agricultural production and other loans to farmers (6) — 3,185 —

Multifamily (5 or more) residential properties 1,301 — 184,980 —

35

Table of Contents

During the year ended December 31, 2022, the Corporation recorded a provision for credit losses of $8.6 million, as compared to a provision for credit losses of $6.0 million for the year ended December 31, 2021. Included in the provision for credit losses for the year ended December 31, 2022 was $603 thousand expense related to the allowance for unfunded commitments compared to no accrual towards the allowance for unfunded commitments for the year ended December 31, 2021. Net charge-offs during the year ended December 31, 2022 were $2.1 million, compared to net charge-offs of $2.8 million during the year ended December 31, 2021. The increase of $2.6 million in provision for credit losses, from the year ended December 31, 2021 to the year ended December 31, 2022 was primarily due to loan growth, the impact of net charge-offs and the provision for credit losses recorded in 2022, related to the allowance for unfunded commitments.

Premises and Equipment

During the years ended December 31, 2022 and 2021, the Corporation invested $12.3 million and $6.5 million, respectively, in its physical infrastructure through the purchase of land, buildings, and equipment.

Bank Owned Life Insurance

The Corporation has periodically purchased Bank Owned Life Insurance ("BOLI"). The policies cover executive officers and a select group of other employees with the Bank being named as beneficiary. Earnings from BOLI assist the Corporation in offsetting its benefit costs. The Corporation made $11.6 million in purchases of BOLI during the twelve months ended December 31, 2022, while the Corporation made $22.0 million purchases of BOLI during the twelve months ended December 31, 2021.

Funding Sources

Deposits

The Corporation’s sources of funds are deposits, borrowings, amortization and repayment of loan principal, interest earned on or maturation of investment securities and funds provided from operations. The Corporation considers deposits to be its primary source of funding in support of growth in assets.

At December 31, 2022, total deposits were $4.6 billion, reflecting a decrease of $93.2 million, or 2.0%, from December 31, 2021. During the same timeframe, while non interest-bearing deposits increased approximately $106.4 million, or 13.4%, total interest-bearing deposits decreased approximately $199.5 million, or 5.1%, from December 31, 2021. The decrease in deposits was driven primarily by the impact of competitive pricing pressures due to the rapid increase in interest rates, as well as customers experiencing substantial increases in costs due to inflation.

The following table sets forth the average balances of and the average rates paid on deposits for the period indicated.

Year Ended December 31,

AverageAmount AnnualRate AverageAmount AnnualRate AverageAmount AnnualRate

36

Table of Contents

The following table presents additional information about our December 31, 2022 and 2021 deposits:

Time deposits not covered by deposit insurance $ 69,874 $ 68,562

Scheduled maturities of time deposits not covered by deposit insurance at December 31, 2022 were as follows:

Over 3 through 6 months 628

Borrowings

Periodically, the Corporation utilizes term borrowings from the FHLB and other lenders to meet funding obligations or match fund certain loan assets. The terms of these borrowings are detailed in Note 12, "Borrowings," to the consolidated financial statements. There were $132.4 million in short-term FHLB borrowings as of December 31, 2022, compared to zero at December 31, 2021.

On October 18, 2021, the Corporation announced that it had completed the redemption of $50 million aggregate principal amount of its 5.75% Fixed-to-Floating Rate Subordinated Notes due October 15, 2026 (the "2026 Notes"), representing all outstanding 2026 Notes. The 2026 Notes were redeemed pursuant to their terms at a price equal to 100% of the principal amount, plus accrued and unpaid interest up to, but excluding, October 15, 2021. The Corporation financed the redemption of the 2026 Notes with cash on hand, including net proceeds from the issuance and sale of $85.0 million aggregate principal amount of the Corporation’s 3.25% Fixed-to-Floating Rate Subordinated Notes due 2031 completed in June 2021. Additional details about our subordinated debentures and notes are included in Note 12, "Borrowings" in the accompanying notes to consolidated financial statements.

Liquidity and Capital Resources

Liquidity

Liquidity measures an organization’s ability to meet its cash obligations as they come due. The liquidity of a financial institution reflects its ability to meet loan requests, to accommodate possible outflows in deposits and to take advantage of interest rate market opportunities. The ability of a financial institution to meet its current financial obligations is a function of its balance sheet structure, its ability to liquidate assets and its access to alternative sources of funds.

The Corporation’s expected material cash requirements for the twelve months ended December 31, 2023 and thereafter consist of withdrawals by depositors, credit commitments to borrowers, shareholder dividends, share repurchases, operating expenses and capital expenditures. The Corporation expects to satisfy these short-term and long-term cash requirements through deposit growth, principal and interest payments from loans and investment securities, maturing loans and investment securities, as well as wholesale funding sources maintained by the Corporation.

The objective of the Corporation's liquidity management is to manage cash flow and liquidity reserves so that they are adequate to fund the Corporation's operations and to meet cash obligations and other commitments on a timely basis and at a reasonable cost. The Corporation seeks to achieve this objective and ensure that funding needs are met by maintaining an appropriate level of liquid funds through asset/liability management, which includes managing the mix and time to maturity of financial assets and financial liabilities on its balance sheet. The Corporation's liquidity position is enhanced by its ability to raise additional funds as needed in the wholesale markets.

Asset liquidity is provided by liquid assets which are readily marketable or pledgeable or which will mature in the near future. Liquid assets include cash, interest-bearing deposits in banks, including the Federal Reserve, and securities AFS. Liability liquidity is provided by access to funding sources which include core deposits, correspondent banks and other wholesale funding sources.

37

Table of Contents

The Corporation's liquidity position is continuously monitored and adjustments are made to the balance between sources and uses of funds, as deemed appropriate. Liquidity risk management is an important element in the Corporation's asset/liability management process. The Corporation regularly models liquidity stress scenarios to assess potential liquidity outflows or potential funding shortfalls resulting from economic disruptions, volatility in the financial markets, unexpected credit events or other significant occurrences deemed problematic by management. These scenarios are incorporated into the Corporation's contingency funding plan, which provides the basis for the identification of its liquidity needs.

At December 31, 2022, the Corporation’s cash and cash equivalents position was approximately $106.3 million, including liquidity of $43.4 million held at the Federal Reserve. The Corporation also has the ability to borrow funds as a member of the FHLB. At December 31, 2022, based upon available, pledgeable collateral, the Corporation's total borrowing capacity with the FHLB was approximately $757.8 million. Furthermore, at December 31, 2022, the Corporation had approximately $177.0 million in securities that were unencumbered by a pledge and could be used to support additional borrowings through the Federal Reserve discount window, as needed. As of December 31, 2022, management is not aware of any events that are reasonably likely to have a material adverse effect on the Corporation's liquidity, capital resources or operations. In addition, management is not aware of any regulatory recommendations regarding liquidity that would have a material adverse effect on the Corporation.

In the ordinary course of business the Corporation has entered into contractual obligations and have made other commitments to make future payments. Refer to the accompanying notes to consolidated financial statements elsewhere in this report for the expected timing of such payments as of December 31, 2022. The Corporation’s material contractual obligations as of December 31, 2022 consist of (i) long-term borrowings - Note 12, "Borrowings," (ii) operating leases - Note 9, "Leases," (iii) time deposits with stated maturity dates - Note 11, "Deposits," and (iv) commitments to extend credit and standby letters of credit - Note 20, "Off-Balance Sheet Activities."

Shareholders’ Equity, Capital Ratios and Metrics

Shareholders' Equity

On September 21, 2022, the Corporation successfully completed a common stock offering resulting in the issuance of 4,257,446 shares of common stock at $23.50 per share and net proceeds of $94.1 million after the deducting the underwriting discount and customary offering expenses. The net proceeds from the capital raise will be used for general corporate purposes, including working capital and funding the Corporation's organic growth across its multiple geographic markets, or evaluating potential acquisition opportunities.

As of December 31, 2022, the Corporation’s total shareholders’ equity was $530.8 million, representing an increase of $87.9 million, or 19.9%, from December 31, 2021. This increase was primarily due to the $94.1 million increase in additional paid in capital as a result of the Corporation's common stock offering described above coupled with $63.2 million from the Corporation's earnings for the year ended 2022, partially offset by approximately $16.9 million in both, common dividends and preferred dividends, as well as an increase of $51.7 million in accumulated other comprehensive loss, resulting primarily from the temporary unrealized reduction in the value on the AFS investment portfolio during the twelve months ended December 31, 2022.

Preferred Stock

During the year ended December 31, 2020, the Corporation raised $57.8 million, net of issuance costs, from the issuance of depositary shares, each representing a 1/40th ownership interest in a share of the Corporation's 7.125% Series A fixed rate non-cumulative perpetual preferred stock, no par value, with a liquidation preference of $1,000 per share of preferred stock. The $57.8 million qualifies as Tier 1 capital for regulatory capital purposes.

Capital Ratios and Metrics