HNVR · Read the filing

Hanover Bancorp, Inc. /NY_December 31, 2024

Table of Contents

UNITED STATES SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 2024

Commission file number: 001-41384

HANOVER BANCORP, INC.

(Exact name of registrant as specified in its charter)

80 East Jericho Turnpike, Mineola, New York11501

(Address of principal executive offices) (Zip Code)

(516) 548-8500

(Registrant’s telephone number, including area code)

SECURITIES REGISTERED PURSUANT TO SECTION 12(b) OF THE ACT:

Title of each class Trading symbol Name of each exchange on which registered

Common stock HNVR NASDAQ

SECURITIES REGISTERED PURSUANT TO SECTION 12(g) OF THE ACT: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐No☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐No☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company or emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ☐ Accelerated filer ☒

Non-accelerated filer ☐ Smaller reporting company ☒

Emerging growth company ☒

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal controls over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐No ☒

The aggregate market value of the voting and non-voting common stock held by non-affiliates of the registrant, computed by reference to the closing price of the common stock of $16.50 as of June 30, 2024 was $91.3 million.

As of March 7, 2025, the registrant had 7,200,883 shares of common stock outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the definitive Proxy Statement for the Registrant’s 2025 Annual Meeting of Shareholders are incorporated by reference in Part III.

Table of Contents

Hanover Bancorp, Inc.

Table of Contents

Page

Part I.

Item 1. Business 4

Item 1A. Risk Factors 19

Item 1B. Unresolved Staff Comments 41

Item 1C. Cybersecurity 41

Item 2. Properties 43

Item 3. Legal Proceedings 44

Item 4. Mine Safety Disclosures 44

Part II.

Item 6. [Reserved] 44

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 63

Item 8. Financial Statements and Supplementary Data 64

Item 9A. Controls and Procedures 117

Item 9B. Other Information 118

Part III.

Item 10. Directors, Executive Officers and Corporate Governance 119

Item 11. Executive Compensation 119

Item 14. Principal Accountant Fees and Services 119

Part IV.

Item 15. Exhibits and Financial Statement Schedules 120

Signatures 122

Table of Contents

FORWARD-LOOKING STATEMENTS

This report includes forward-looking statements within the meaning of Sections 27A of the Securities Act of 1933, as amended, and 21E of the Securities Exchange Act of 1934, as amended, that involve inherent risks and uncertainties. These forward-looking statements concern the financial condition, results of operations, plans, objectives, future performance and business of Hanover Bancorp, Inc. and its subsidiary, including statements preceded by, followed by or that include words or phrases such as “believes,” “expects,” “anticipates,” “plans,” “trend,” “objective,” “continue,” “remain,” “pattern” or similar expressions or future or conditional verbs such as “will,” “would,” “should,” “could,” “might,” “can,” “may” or similar expressions. There are a number of important factors that could cause future results to differ materially from historical performance and these forward-looking statements. Factors that might cause such a difference include, but are not limited to: (1) the impact of a pandemic or other health crises and the government’s response to such pandemic or crises on our operations as well as those of our customers and on the economy generally and in our market area specifically, (2) competitive pressures among depository institutions may increase significantly; (3) changes in the interest rate environment may reduce interest margins; (4) loan origination and sale volumes, charge-offs and loan loss provisions may vary substantially from period to period; (5) general economic conditions may be less favorable than expected; (6) political developments, wars or other hostilities may disrupt or increase volatility in securities markets or other economic conditions; (7) legislative or regulatory changes or actions may adversely affect the businesses in which Hanover Bancorp, Inc. is engaged; (8) changes and trends in the securities markets may adversely impact Hanover Bancorp, Inc.; (9) a delayed or incomplete resolution of regulatory issues could adversely impact our planning; (10) difficulties in integrating any businesses that we may acquire, which may increase our expenses and delay the achievement of any benefits that we may expect from such acquisitions; (11) the impact of reputation risk created by the developments discussed above on such matters as business generation and retention, funding and liquidity could be significant; and (12) the outcome of any future regulatory and legal investigations and proceedings may not be anticipated. Further information on other factors that could affect the financial results of Hanover Bancorp, Inc. are included in Item 1A of this Annual Report on Form 10-K and in Hanover Bancorp Inc.’s other filings with the Securities and Exchange Commission (the “Commission”). These documents are available free of charge at the Commission’s website at http://www.sec.gov and/or from Hanover Bancorp, Inc. Hanover Bancorp, Inc. assumes no obligation to update forward-looking statements at any time.

Table of Contents

Part I

Item 1.Business

Overview

Hanover Bancorp, Inc. (“Hanover”) is currently a New York corporation which is the holding company for Hanover Community Bank (the “Bank”), a New York chartered community commercial bank focusing on highly personalized and efficient services and products responsive to local needs. In 2024, our Board and shareholders approved a proposal to redomicile the Company in Maryland, and the Company is in the process of completing the change in its state of incorporation from New York to Maryland. The Bank operates as a locally headquartered, community-oriented bank serving customers throughout the New York metro area from offices in Nassau, Suffolk, Queens, Kings (Brooklyn) and New York (Manhattan) Counties, New York, and Freehold, Monmouth County, New Jersey. We opened the Bank’s Hauppauge Business Banking Center in Hauppauge, Suffolk County, New York in May 2023. In addition, we have recently received regulatory approval to open a new branch in Port Jefferson, Suffolk County, New York, which we expect to open in early 2025. As of December 31, 2024, we had total assets of $2.31 billion, total loans of $1.99 billion, total deposits of $1.95 billion and total stockholders’ equity of $196.6 million.

The Bank was originally organized in 2009, with a focus on serving the South Asian community in Nassau County. After incurring financial and regulatory setbacks, the Bank was recapitalized in 2012 (the “2012 Recapitalization”). Following the 2012 Recapitalization, the Bank adopted a strategic plan focused on providing differentiated consumer and commercial banking services to clients in the western Long Island markets and New York City boroughs, particularly the Queens and Brooklyn markets. As a result, the Bank has grown its balance sheet significantly both through organic loan and deposit growth, as well as highly opportunistic acquisitions. The Bank’s management team has utilized its strong local community ties and experience with federal and New York bank regulatory agencies to create a bank that we believe emphasizes strong credit quality, a solid balance sheet, and a robust capital base.

In 2019, we acquired Chinatown Federal Savings Bank (“CFSB”). The transaction helped us enhance and diversify our funding profile and further enhance our visibility in the New York City market where much of our lending activities take place.

On May 26, 2021, the Company completed the acquisition of Savoy Bank (“Savoy”), a privately held commercial bank founded to provide banking services to small business owners in and around New York City. With the Savoy acquisition, we expanded our commercial banking capabilities significantly, with a particular focus on small business clients and Small Business Administration (“SBA”) lending.

In May 2022, the Company completed an initial public offering (“IPO”) of its common stock resulting in net proceeds of $27.7 million. The Company listed its shares on The Nasdaq Global Select Market in connection with the IPO.

In October 2023, the Company’s Board of Directors approved a change in the Company’s fiscal year end from September 30 to December 31. Accordingly, the Company reported a transition quarter that ran from October 1, 2023 through December 31, 2023 (“transition period”). The Company’s current full fiscal year is the calendar year January 1, 2024 through December 31, 2024 (“calendar 2024”).

Our one- to four-family residential mortgage segment has a particular niche focus on non-conforming loans, primarily secured by owner-occupied and investment properties. The segment has proven particularly appealing to Asian American borrowers in the New York City boroughs. We offer a variety of deposit accounts to businesses and consumers through our branch network, which we believe complements our niche lending efforts. Additionally, we have expanded our deposit products to include a full line of municipal banking accounts, which has allowed us to capture additional customers in our operating footprint. During the fourth calendar quarter of 2023, we began offering business banking services to the legal, licensed cannabis industry, initially in New York state. We now offer these services in New Jersey and may in the future consider opening accounts for licensed entities in other states.

Table of Contents

Lending Activities

Our lending strategy is to maintain a broadly diversified loan portfolio based on the type of customer (i.e., businesses versus individuals), type of loan product (e.g., owner occupied commercial real estate, commercial loans, etc.), geographic location and industries in which our business customers are engaged (e.g., manufacturing, retail, hospitality, wholesale distribution, construction, etc.). We offer personal and business loans on a secured and unsecured basis, SBA and USDA guaranteed loans, revolving lines of credit, commercial mortgage loans, and one- to four-family non-qualified mortgages secured by primary and secondary residences that may be owner occupied or investment properties, home equity loans, bridge loans and other personal purpose loans.

Residential real estate. We originate mainly non-qualified, alternative documentation, single-family residential mortgage loans through broker referrals or our branch network to accommodate the needs of diverse communities in the New York City MSA. We offer multiple products, including our Residential Investor Program (“RIP”), which is designed specifically for two- to four-family units. Other one- to four-family credit products include home equity loans and first-time home buyer loans.

Our one- to four-family residential real estate portfolio is secured by real estate, the value of which may fluctuate significantly over a short period of time as a result of market conditions in the area in which the real estate is located. Adverse developments affecting real estate values in our market areas could therefore increase the credit risk associated with these loans, impair the value of properties pledged as collateral on loans, and affect our ability to sell the collateral upon foreclosure without a loss or additional losses.

We originate non-qualified one- to four-family residential mortgage loans both to sell and hold for investment. Single-family residential mortgage loans held for sale are generally sold with the servicing rights released. However, with higher market interest rates experienced in recent years, the appetite among the Bank’s purchasers of residential loans for pools of loans declined, eliminating the Bank’s ability to sell residential loans in its portfolio on desirable terms. Commencing in late 2023, the Bank initiated a flow origination program under which the Bank originates individual loans for sale to specific buyers, thereby positioning the Bank to resume residential loan sales.

Commercial real estate. We offer real estate loans secured by owner occupied and non-owner occupied commercial properties, including one- to four-family properties and multi-family residential properties and construction and land development loans. Our management team has extensive knowledge of the markets where we operate and our borrowers. We focus on what we believe to be high quality credits with acceptable loan-to-value ratios, income- producing properties with strong cash flow and collateral profiles. The weighted average LTV was 59% for this portfolio as of December 31, 2024.

Within the commercial real estate portfolio, multi-family loans are secured primarily by rent controlled/stabilized multi-family properties located in New York City. The real estate securing our existing non-owner occupied commercial real estate loans is primarily multi-family, mixed-use and commercial properties. Owner-occupied properties comprise a wide variety of property types, including offices, warehouses, retail centers, and hotels.

Our construction portfolio is small, representing only $13.5 million in total balances at December 31, 2024. Our construction and land development loans are comprised of commercial construction and land acquisition and development loans. Interest reserves are generally established on real estate construction loans. These loans are typically Prime-based and have maturities of fewer than 18 months. As of December 31, 2024, 100% of our real estate construction loan portfolio was secured by commercial properties.

Table of Contents

Commercial and industrial. We provide a mix of variable and fixed rate commercial and industrial loans, which we refer to as C&I loans. The loans are typically made to small and medium-sized businesses for working capital needs, business expansions and trade financing. We extend commercial business loans on an unsecured and secured basis for working capital, accounts receivable and inventory financing, machinery and equipment purchases, and other business purposes. Generally, lines of credit have maturities ranging from twelve to twenty- four months, and “term loans” have maturities ranging from five to ten years. C&I loans generally provide for floating interest rates, with interest only payments for lines of credit and monthly payments of both principal and interest for term loans. We expect C&I lending to be a key component of our growth going forward. As of December 31, 2024, our commercial and industrial loans comprised $168.9 million, or 8.5%, of total loans held for investment.

Small Business Administration Loans. Our SBA loans are secured by commercial real estate and/or business assets. We offer mostly SBA 7(a) variable-rate loans. We originate all loans to hold for investment and move loans to available for sale as management decides which loans to sell. We generally sell the 75% guaranteed portion of the SBA loans that we originate. Our SBA loans are typically made to small-sized manufacturing, wholesale, retail, hotel/motel and service businesses for working capital needs or to finance the purchase of real estate, equipment or business expansions. SBA loans secured by real estate have maturities of up to 25 years, with non-real estate secure loans generally having maturities of 10 years. In addition to real estate, collateral may include inventory, accounts receivable and equipment.

SBA loans are originated subject to personal guarantees and may include real estate belonging to guarantors as collateral. We monitor SBA loans by collateral type. From time to time, we will also originate SBA 504 loans, which are real estate backed commercial mortgages where we have first mortgages and the SBA has second mortgages on the properties. We also, from time-to-time, originate loans guaranteed by the United States Department of Agriculture (“USDA”), which have characteristics that are similar to those of SBA 7(a) loans. We originate all such loans through our loan officers and brokers to borrowers located in, and secured by collateral located in, New York and New Jersey, our primary trade area, as well as in other states across the country.

Deposits and Funding

Checking accounts consist of retail and business demand deposit products. NOW accounts consist of retail and business interest-bearing transaction accounts that have minimum balance requirements. Money market accounts consist of products that provide market rates of interest to depositors. Our savings accounts consist of statement type accounts. Time deposits consist of certificates of deposit, including those held in IRA accounts, and brokered certificates of deposit.

We also have a municipal banking business, which has produced a significant level of deposits at cost-effective rates. The business provides banking services to public municipalities, including counties, cities, towns, and school districts, throughout the Long Island area. We believe this business is differentiated from our competitors in that the customers are long-term relationships of our team and are not transactional in nature. Furthermore, our focus is banking municipalities that are core to our branch footprint and where our brand resonates. This initiative is also consistent with our branch-lite and highly efficient approach to growing our balance sheet. The team and relationships we have allow us to compete throughout the Long Island market without the expense constraints of multiple physical locations. As of December 31, 2024, we had $509.3 million in municipal deposits at a weighted average rate of 3.72%.

Deposits serve as the primary source of funding for our interest-earning assets, but also generate non-interest revenue through insufficient funds fees, stop payment fees, safe deposit rental fees, ATM fees and debit card interchange and other miscellaneous fees.

Table of Contents

Employees and Human Capital Resources

As of December 31, 2024, we employed 185 full-time employees. None of these employees are covered by a collective bargaining agreement. The Company provides its employees with comprehensive benefits, some of which are provided on a contributory basis, including medical, Health Savings Account contribution for eligible plans, a 401(k) savings plan with a company match component and short-term and long-term disability coverage. Additional benefits offered include paid time off, dental, vision, life insurance and employee assistance. The Company’s compensation package is designed to maintain market competitive total rewards programs for all employees in order to attract and retain superior talent. We also implemented flexible scheduling, which has allowed us to remain competitive.

Competition

The financial services industry is highly competitive. We compete for loans, deposits, and financial services in all of our principal markets. We compete directly with other bank and nonbank institutions located within our markets, internet-based banks, out-of-market banks and bank holding companies that advertise in or otherwise serve our markets, money market funds and other mutual funds, brokerage houses, and various other financial institutions. Additionally, we compete with insurance companies, leasing companies, regulated small loan companies, credit unions, governmental agencies and commercial entities offering financial services products, including nonbank lenders and so-called financial technology companies. Competition involves, among other things, efforts to retain current customers and to obtain new loans and deposits, the scope and types of services offered, interest rates paid on deposits and charged on loans, as well as other aspects of banking. We also face direct competition from subsidiaries of bank holding companies that have far greater assets and resources than ours.

Supervision and Regulation

Overview

The Bank is chartered under the laws of the state of New York. Its deposits are insured under the Deposit Insurance Fund (the “DIF”) of the Federal Deposit Insurance Corporation (the “FDIC”) up to applicable legal limits, but it is not a member of the Federal Reserve System. The lending, investment, deposit-taking, and other business authority of the Bank is governed primarily by state and federal law and regulations, and the Bank is prohibited from engaging in any operations not authorized by such laws and regulations. The Bank is subject to extensive regulation, supervision and examination by, and the enforcement authority of, the New York Department of Financial Services (the “DFS”) and the FDIC, its primary federal regulator. The regulatory structure establishes a comprehensive framework of activities in which a non-member bank may engage and is primarily intended for the protection of depositors, customers and the DIF. The regulatory structure gives the regulatory agencies extensive discretion in connection with their supervisory and enforcement activities and examination policies, including policies with respect to the classification of assets and the establishment of adequate loan loss reserves for regulatory purposes.

The Company is a bank holding company, due to its control of the Bank, and is therefore subject to the requirements of the Bank Holding Company Act of 1956, as amended (the “BHCA”), and regulation and supervision by the Board of Governors of the Federal Reserve System (“FRB”). The Company files reports with and is subject to periodic examination by the FRB. Any change in the applicable laws and regulations could have a material adverse impact on the Company and the Bank and their operations and the Company’s shareholders.

On May 24, 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the “Economic Growth Act”) was enacted to modify or remove certain financial reform rules and regulations, including some of those implemented under the Dodd-Frank Wall Street and Consumer Protection Act (the “Dodd-Frank Act”). While the Economic Growth Act maintains most of the regulatory structure established by the Dodd-Frank Act, it amends certain aspects of the regulatory framework for small depository institutions with assets of less than $10 billion and for large banks with assets of more than $50 billion. Many of these changes could result in meaningful regulatory changes for banks and their holding companies. In addition, the Economic Growth Act includes regulatory relief for community banks regarding regulatory examination cycles, call reports, the Volcker Rule, mortgage disclosures and risk weights for certain high-risk commercial real estate loans.

Table of Contents

Bank Regulation

Loans and Investments

State commercial banks and trust companies have authority to originate and purchase any type of loan, including commercial, commercial real estate, residential mortgages or consumer loans. Aggregate loans by a state commercial bank or trust company to any single borrower or group of related borrowers are generally limited to 15% of the Bank’s capital stock, surplus fund and undivided profits, plus an additional 10% if secured by specified readily marketable collateral.

Federal and state law and regulations limit the Bank’s investment authority. Generally, a state non-member bank is prohibited from investing in corporate equity securities for its own account other than the equity securities of companies through which the bank conducts its business. Under federal and state regulations, a New York state non-member bank may invest in investment securities for its own account up to specified limits depending upon the type of security. “Investment securities” are generally defined as marketable obligations that are investment grade and not predominantly speculative in nature.

Lending Standards and Guidance

The federal banking agencies adopted uniform regulations prescribing standards for extensions of credit that are secured by liens or interests in real estate or made for the purpose of financing permanent improvements to real estate. Under these regulations, all insured depository institutions, such as the Bank, must adopt and maintain written policies establishing appropriate limits and standards for extensions of credit that are secured by liens or interests in real estate or are made for the purpose of financing permanent improvements to real estate. These policies must establish loan portfolio diversification standards, prudent underwriting standards (including loan-to-value limits) that are clear and measurable, loan administration procedures, and documentation, approval and reporting requirements. The real estate lending policies must reflect consideration of the federal bank regulators’ Interagency Guidelines for Real Estate Lending Policies.

The FDIC, the Office of the Comptroller of the Currency (the “OCC”), and the FRB have also jointly issued the “Concentrations in Commercial Real Estate Lending, Sound Risk Management Practices” (the “CRE Guidance”). The CRE Guidance, which addresses land development, construction, and certain multi-family loans, as well as commercial real estate loans, does not establish specific lending limits but rather reinforces and enhances these agencies’ existing regulations and guidelines for such lending and portfolio management. Specifically, the CRE Guidance provides that a bank has a concentration in CRE lending if (1) total reported loans for construction, land development, and other land represent 100% or more of total risk-based capital; or (2) total reported loans secured by multi-family properties, non-farm non-residential properties (excluding those that are owner-occupied), and loans for construction, land development, and other land represent 300% or more of total risk-based capital and the bank’s commercial real estate loan portfolio has increased 50% or more during the prior 36 months. If a concentration is present, management must employ heightened risk management practices that address key elements, including board and management oversight and strategic planning, portfolio management, development of underwriting standards, risk assessment and monitoring through market analysis and stress testing, and maintenance of increased capital levels as needed to support the level of commercial real estate lending.

Federal Deposit Insurance

The Bank is a member of the DIF, which is administered by the FDIC. The Bank’s deposit accounts are insured by the FDIC, generally up to a maximum of $250,000 per depositor.

The FDIC imposes deposit insurance assessments against all insured depository institutions. An institution’s assessment rate depends upon the perceived risk of the institution to the DIF, with institutions deemed less risky paying lower rates. Assessments for institutions of less than $10 billion of total assets, such as the Bank, are based on financial measures and supervisory ratings derived from statistical models estimating the probability of failure within three years. Assessment rates (inclusive of possible adjustments) range from 1.5 to 30 basis points of each institution’s total assets less tangible capital. The FDIC may increase or decrease the range of assessments uniformly, except that no adjustment can deviate more than two basis points from the base assessment rate without notice and comment rulemaking.

Table of Contents

By final rule adopted in October 2022, the FDIC increased the initial base deposit insurance assessment rates by 2 basis points beginning in the first quarterly assessment period of 2023. As a result, effective January 1, 2023, assessment rates for institutions of the Bank’s size ranged from 3.5 to 32 basis points. A significant increase in insurance premiums would have an adverse effect on the operating expenses and results of operations of the Bank. We cannot predict what deposit insurance assessment rates will be in the future.

The FDIC may terminate the insurance of an institution’s deposits upon finding that the institution has engaged in unsafe and unsound practices, is in an unsafe and unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC. The Bank knows of no practice, condition or violation that might lead to termination of its deposit insurance.

Capitalization

The Bank is subject to risk-based and leverage capital standards by which all banks are evaluated in terms of capital adequacy. Federal banking agencies have broad powers to take corrective action to resolve problems of insured depository institutions. The extent of these powers depends upon whether the institutions in question are “well capitalized,” “adequately capitalized,” “undercapitalized”, “significantly undercapitalized,” or “critically undercapitalized.” FDIC rules define these five capital categories. Under current FDIC regulations, a bank is deemed to be “well capitalized” if the bank has a total risk-based capital ratio of 10% or greater, has a Tier 1 risk-based capital ratio of 8% or greater, has a common equity tier 1 capital ratio of 6.5% or greater, has a leverage ratio of 5% or greater, and is not subject to any order or final capital directive by the FDIC to meet and maintain a specific capital level for any capital measure. A bank may be deemed to be in a capitalization category that is lower than is indicated by its actual capital position if it received an unsatisfactory safety and soundness examination rating. Calculation of all types of regulatory capital is subject to deductions and adjustments specified in the regulations. As of December 31, 2024, the Bank was a “well-capitalized” bank, as defined by its primary federal regulator.

Each of the bank regulatory agencies have issued rules that amend their capital guidelines for interest rate risk and require such agencies to consider in their evaluation of a bank’s capital adequacy, the exposure of a bank’s capital and economic value to changes in interest rates. These rules do not establish an explicit supervisory threshold. The agencies have indicated that they intend, at a subsequent date, to incorporate explicit minimum requirements for interest rate risk into their risk-based capital standards and have proposed a supervisory model to be used together with bank internal models to gather data and propose, at a later date, explicit minimum requirements.

The United States is a member of the Basel Committee on Banking Supervision (the “Basel Committee”) that provides a forum for regular international cooperation on banking supervisory matters. The Basel Committee develops guidelines and supervisory standards and is best known for its international standards on capital adequacy. In December 2010, the Basel Committee released its final framework for strengthening international capital and liquidity regulation, officially identified by the Basel Committee as “Basel III.” In July 2013, the US bank regulatory agencies published final rules to implement the Basel III capital framework and revise the framework for the risk-weighting of assets. The Basel III rules, among other things, narrow the definition of regulatory capital. As of January 1, 2019, Basel III requires bank holding companies and their bank subsidiaries to maintain substantially more capital, with a greater emphasis on common equity. Basel III also provides for a “countercyclical capital buffer,” an additional capital requirement that generally is to be imposed when national regulators determine that excess aggregate credit growth has become associated with a buildup of systemic risk, in order to absorb losses during periods of economic stress. Banking institutions that maintain insufficient capital to comply with the capital conservation buffer will face constraints on dividends, equity repurchases and compensation based on the amount of the shortfall. Additionally, the Basel III framework requires banks and bank holding companies to measure their liquidity against specific liquidity tests, including a liquidity coverage ratio (“LCR”) designed to ensure that the banking entity maintains a level of unencumbered high-quality liquid assets greater than or equal to the entity’s expected net cash outflow for a 30-day time horizon under an acute liquidity stress scenario, and a net stable funding ratio (“NSFR”) designed to promote more medium and long-term funding based on the liquidity characteristics of the assets and activities of banking entities over a one-year time horizon. The LCR and NSFR rules do not apply to us due to our asset size.

Table of Contents

The final BASEL III capital rules apply to all depository institutions, top-tier bank holding companies with total consolidated assets of $3.0 billion or more, and top-tier savings and loan holding companies, referred to as banking organizations. As finally implemented, Basel III requires banking organizations to maintain: (a) a minimum ratio of CET1 to risk-weighted assets of at least 4.5%; (b) a minimum ratio of tier 1 capital to risk- weighted assets of at least 6.0%; (c) a minimum ratio of total (that is, tier 1 plus tier 2) capital to risk- weighted assets of at least 8.0%; and (d) a minimum leverage ratio of 3.0%, calculated as the ratio of tier 1 capital balance sheet exposures plus certain off-balance sheet exposures (computed as the average for each quarter of the month-end ratios for the quarter). In addition, the rules also limit a banking organization’s capital distributions and certain discretionary bonus payments if the banking organization does not hold a “capital conservation buffer” of 2.5%, effectively raising the foregoing capital requirements by 2.5%.

As a result of the capital conservation buffer rules, if the Bank fails to maintain the required minimum capital conservation buffer, the Bank may be unable to make capital distributions to us, which could negatively impact our ability to pay dividends, service debt obligations or repurchase common stock. In addition, such a failure could result in a restriction on our ability to pay certain cash bonuses to executive officers, negatively impacting our ability to retain key personnel. As of December 31, 2024, the Bank’s current capital levels exceeded the applicable minimum capital requirements, including the capital conservation buffer, as prescribed in the Basel III capital rules.

As a result of the Economic Growth Act, banking regulatory agencies adopted a revised definition of “well capitalized” for financial institutions and holding companies with assets of less than $10 billion that are not determined to be ineligible by their primary federal regulator due to their risk profile, which is referred to as a Qualifying Community Bank. The new definition expanded the ways that a Qualifying Community Bank may meet its capital requirements and be deemed “well capitalized.” The new rule establishes a community bank leverage ratio, or CBLR, equal to the tangible equity capital divided by the average total consolidated assets. Currently the minimum required CBLR is 9.0%.

A Qualifying Community Bank that meets the CBLR is considered to be well capitalized and to have met generally applicable leverage capital requirements, generally applicable risk-based capital requirements, and any other capital or leverage requirements to which such financial institution or holding company is subject.

The Bank did not elect into the CBLR framework.

Safety and Soundness Standards

Each federal banking agency, including the FDIC, has adopted guidelines establishing general standards relating to, among other things, internal controls, information and internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, asset quality, earnings, compensation, fees and benefits and information security standards. In general, the guidelines set forth the safety and soundness standards that the federal banking agencies use to identify and address problems at insured depository institutions before capital becomes impaired and require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines. The guidelines prohibit excessive compensation as an unsafe and unsound practice and describe compensation as excessive when the amounts paid are unreasonable or disproportionate to the services performed by an executive officer, employee, director, or principal shareholder. The FDIC also has issued guidance on risks banks may face from third-party relationships (e.g., relationships under which the third-party provides services to the bank). The guidance generally requires the Bank to perform adequate due diligence on the third-party, appropriately document the relationship, and perform adequate oversight and auditing, in order to the limit the risks to the Bank.

Prompt Corrective Regulatory Action

Federal law requires that federal bank regulatory authorities take “prompt corrective action” with respect to institutions that do not meet minimum capital requirements. For these purposes, the statute establishes five capital tiers: well capitalized, adequately capitalized, undercapitalized, significantly undercapitalized and critically undercapitalized.

Table of Contents

The final rule that increased regulatory capital standards also adjusted the prompt corrective action tiers as of January 1, 2015 to conform to the revised capital standards. As described above, the Bank has not elected to follow the CBLR so the generally applicable prompt corrective action requirements remain applicable to the Bank. Under prompt corrective action requirements, insured depository institutions are required to meet the following in order to qualify as “well capitalized”: total risk-based capital ratio of 10% or greater, a Tier 1 risk-based capital ratio of 8% or greater, a common equity tier 1 capital ratio of 6.5% or greater, a leverage ratio of 5% or greater, and not be subject to any order or final capital directive by the FDIC to meet and maintain a specific capital level for any capital measure.

Non-member banks that have insufficient capital are subject to certain mandatory and discretionary supervisory measures. For example, a bank that is “undercapitalized” (i.e., fails to comply with any regulatory capital requirement) is subject to growth, capital distribution (including dividend) and other limitations, and is required to submit a capital restoration plan; a holding company that controls such a bank is required to guarantee that the bank complies with the restoration plan. If an undercapitalized institution fails to submit an acceptable plan, it is treated as if it is “significantly undercapitalized.” A “significantly undercapitalized” bank is subject to additional restrictions. Non-member banks deemed by the FRB or FDIC to be “critically undercapitalized” also may not make any payment of principal or interest on certain subordinated debt, extend credit for a highly leveraged transaction, or enter into any material transactions outside the ordinary course of business after 60 days of obtaining such status, and are subject to the appointment of a receiver or conservator within 270 days after obtaining such status.

Dividends

Under federal and state law and applicable regulations, a New York state chartered bank may generally declare a dividend, without approval from the DFS, in an amount equal to its year-to-date net income plus the prior two years’ net income less dividends already paid. Dividends exceeding those amounts require application to and approval by the DFS. To pay a cash dividend, a non-member bank must also maintain an adequate capital conservation buffer under the capital rules discussed above.

Incentive Compensation Guidance

The FRB, OCC, FDIC, other federal banking agencies and DFS have issued comprehensive guidance intended to ensure that the incentive compensation policies of banking organizations, including non-member banks and bank holding companies, do not undermine the safety and soundness of those organizations by encouraging excessive risk-taking. The incentive compensation guidance sets expectations for banking organizations concerning their incentive compensation arrangements and related risk-management, control and governance processes. In addition, under the incentive compensation guidance, a banking organization’s federal supervisor, which for the Bank is the FDIC and for the Company is the FRB, may initiate enforcement action if the organization’s incentive compensation arrangements pose a risk to the safety and soundness of the organization. Further, provisions of the Basel III regime described above limit discretionary bonus payments to bank and bank holding company executives if the institution’s regulatory capital ratios fail to exceed certain thresholds. The scope and content of the banking regulators’ policies on incentive compensation are likely to continue evolving.

Transactions with Affiliates and Insiders

Sections 23A and 23B of the Federal Reserve Act govern transactions between an insured depository institution and its affiliates, which includes the Company. The FRB has adopted Regulation W, which implements and interprets Sections 23A and 23B, in part by codifying prior FRB interpretations.

Table of Contents

An affiliate of a bank is any company or entity that controls, is controlled by or is under common control with the bank. A subsidiary of a bank that is not also a depository institution or a “financial subsidiary” under federal law is not treated as an affiliate of the bank for the purposes of Sections 23A and 23B; however, the FRB has the discretion to treat subsidiaries of a bank as affiliates on a case-by-case basis. Section 23A limits the extent to which a bank or its subsidiaries may engage in “covered transactions” with any one affiliate to an amount equal to 10% of the bank’s capital stock and surplus. There is an aggregate limit of 20% of the bank’s capital stock and surplus for such transactions with all affiliates. The term “covered transaction” includes, among other things, the making of a loan to an affiliate, a purchase of assets from an affiliate, the issuance of a guarantee on behalf of an affiliate and the acceptance of securities of an affiliate as collateral for a loan. All such transactions are required to be on terms and conditions that are consistent with safe and sound banking practices and no transaction may involve the acquisition of any “low quality asset” from an affiliate unless certain conditions are satisfied. Certain covered transactions, such as loans to or guarantees on behalf of an affiliate, must be secured by collateral in amounts ranging from 100 to 130 percent of the loan amount, depending upon the type of collateral. In addition, Section 23B requires that any covered transaction (and specified other transactions) between a bank and an affiliate must be on terms and conditions that are substantially the same, or at least as favorable, to the bank, as those that would be provided to a non-affiliate.

A bank’s loans to its executive officers, directors, any owner of more than 10% of its stock (each, an insider) and certain entities affiliated with any such person (an insider’s related interest) are subject to the conditions and limitations imposed by Section 22(h) of the Federal Reserve Act and the FRB’s Regulation O. The aggregate amount of a bank’s loans to any insider and the insider’s related interests may not exceed the loans-to-one-borrower limit applicable to non-member banks. Aggregate loans by a bank to its insiders and insiders’ related interests may not exceed 15% of the bank’s unimpaired capital and unimpaired surplus plus an additional 10% of unimpaired capital and surplus in the case of loans that are fully secured by readily marketable collateral, or when the aggregate amount on all of the extensions of credit outstanding to all of these persons would exceed the bank’s unimpaired capital and unimpaired surplus. With certain exceptions, such as education loans and certain residential mortgages, a bank’s loans to its executive officers may not exceed the greater of $25,000 or 2.5% of the bank’s unimpaired capital and unimpaired surplus, but in no event more than $100,000. Regulation O also requires that any loan to an insider or a related interest of an insider be approved in advance by a majority of the board of directors of the bank, with any interested director not participating in the voting, if the loan, when aggregated with any existing loans to that insider or the insider’s related interests, would exceed the higher of $25,000 or 5% of the bank’s unimpaired capital and surplus. Generally, such loans must be made on substantially the same terms as, and follow credit underwriting procedures that are no less stringent than, those that are prevailing at the time for comparable transactions with other persons and must not involve more than a normal risk of repayment. An exception is made for extensions of credit made pursuant to a benefit or compensation plan of a bank that is widely available to employees of the bank and that does not give any preference to insiders of the bank over other employees of the bank.

Enforcement

The DFS and the FDIC have extensive enforcement authority over non-member banks to correct unsafe or unsound practices and violations of law or regulation. Such authority includes the issuance of cease-and-desist orders, assessment of civil money penalties and removal of officers and directors. The FDIC may also appoint a conservator or receiver for a non-member bank under specified circumstances, such as where (i) the bank’s assets are less than its obligations to creditors, (ii) the bank is likely to be unable to pay its obligations or meet depositors’ demands in the normal course of business, or (iii) a substantial dissipation of bank assets or earnings has occurred due to a violation of law of regulation or unsafe or unsound practices. Separately, the Superintendent of the DFS also has the authority to appoint a receiver or liquidator of any state-chartered bank or trust company under specified circumstances, including where (i) the bank is conducting its business in an unauthorized or unsafe manner, (ii) the bank has suspended payment of its obligations, or (iii) the bank cannot with safety and expediency continue to do business.

Table of Contents

Federal Reserve System

Under federal law and regulations, the Bank is required to maintain sufficient liquidity to ensure safe and sound banking practices. Regulation D, promulgated by the FRB, imposes reserve requirements on all depository institutions, including the Bank, which maintain transaction accounts or nonpersonal time deposits. In March 2020, due to a change in its approach to monetary policy due to the COVID-19 pandemic, the FRB implemented a final rule to amend Regulation D requirements and reduce reserve requirement ratios to zero. The FRB has indicated that it has no plans to re-impose reserve requirements but may do so in the future if conditions warrant.

Examinations and Assessments

The Bank is required to file periodic reports with and is subject to periodic examination by the DFS and FDIC. Federal and state regulations generally require periodic on-site examinations for all depository institutions. The Bank is required to pay an annual assessment to the DFS and FDIC to fund the agencies’ operations.

Community Reinvestment Act and Fair Lending Laws Federal Regulation

Under the Community Reinvestment Act (“CRA”), as implemented by the FDIC, the Bank has a continuing and affirmative obligation consistent with its safe and sound operation to help meet the credit needs of its entire community, including low- and moderate-income neighborhoods. The CRA does not establish specific lending requirements or programs for financial institutions nor does it limit an institution’s discretion to develop the types of products and services that it believes are best suited to its particular community. The CRA requires the FDIC to assess the Bank’s record of meeting the credit needs of its community and to take that record into account in its evaluation of certain applications by the Bank. For example, the regulations specify that a bank’s CRA performance will be considered in its expansion (e.g., branching or merger) proposals and may be the basis for approving, denying or conditioning the approval of an application. As of the date of its most recent examination, the Bank was rated “Satisfactory” with respect to its CRA compliance. The banking regulatory agencies have recently substantially amended their regulations implementing the CRA to, among other things, move away from standards based upon the location of a bank’s branches and toward a focus on the location of its loans. These regulations have staggered effective dates, and management has not yet determined the impact of these new regulations as a whole on the Bank.

New York State Regulation

The Bank is also subject to provisions of the New York State Banking Law that impose continuing and affirmative obligations upon a banking institution organized in New York State to serve the credit needs of its local community. Such obligations are substantially similar to those imposed by the CRA. The latest New York State CRA rating received by the Bank is “Satisfactory.”

USA PATRIOT Act and Money Laundering

The Bank is subject to the Bank Secrecy Act (“BSA”), which incorporates several laws, including the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (the “USA PATRIOT Act”) and related regulations. The USA PATRIOT Act gives the federal government powers to address money laundering and terrorist threats through enhanced domestic security measures, expanded surveillance powers, increased information sharing, and broadened anti-money laundering requirements. By way of amendments to the BSA, Title III of the USA PATRIOT Act implemented measures intended to encourage information sharing among bank regulatory agencies and law enforcement bodies. Further, certain provisions of Title III impose affirmative obligations on a broad range of financial institutions, including banks, thrifts, brokers, dealers, credit unions, money transfer agents and parties registered under the Commodity Exchange Act.

Table of Contents

Among other things, Title III of the USA PATRIOT Act and the related regulations require:

● Monitoring account activity for suspicious transactions; and

● A heightened level of review for certain high-risk customers or accounts.

The USA PATRIOT Act also includes prohibitions on maintaining correspondent accounts for foreign shell banks and requires compliance with record keeping obligations with respect to correspondent accounts of foreign banks.

The bank regulatory agencies have increased the regulatory scrutiny of the BSA and anti-money laundering programs maintained by financial institutions. Significant penalties and fines, as well as other supervisory orders may be imposed on a financial institution for non-compliance with these requirements. In addition, for financial institutions engaging in a merger transaction, federal bank regulatory agencies must consider the effectiveness of the financial institution’s efforts to combat money laundering activities. The Bank has adopted policies and procedures to comply with these requirements.

Privacy Laws

The Bank is subject to a variety of federal and state privacy laws, which govern the collection, safeguarding, sharing and use of customer information, and require that financial institutions have in place policies regarding information privacy and security. For example, the Gramm-Leach-Bliley Act requires all financial institutions offering financial products or services to retail customers to provide such customers with the financial institution’s privacy policy and practices for sharing nonpublic information with third parties, provide advance notice of any changes to the policies and provide such customers the opportunity to “opt out” of the sharing of certain personal financial information with unaffiliated third parties. It also requires banks to safeguard personal information of consumer customers. Some state laws also protect the privacy of information of state residents and require adequate security for such data, and certain state laws may, and issued federal regulations do, in some circumstances, require the Bank to notify affected individuals of security breaches of computer databases that contain their personal information. These laws and regulations may also require the Bank to notify law enforcement, regulators or consumer reporting agencies in the event of a data breach, as well as businesses and governmental agencies that own data.

Consumer Finance Regulations

The CFPB has broad rulemaking authority for a wide range of consumer protection laws that apply to all banks and savings institutions, including the authority to prohibit “unfair, deceptive or abusive” acts and practices. In this regard, the CFPB has several rules that implement various provisions of the Dodd-Frank Act that were specifically identified as being enforced by the CFPB. While the Bank is subject to the CFPB regulations, because it has less than $10 billion in total consolidated assets, the FDIC and the DFS are responsible for examining and supervising the Bank’s compliance with these consumer financial laws and regulations. In addition, the Bank is subject to certain state laws and regulations designed to protect consumers.

Table of Contents

Other Regulations

The Bank’s operations are also subject to federal laws applicable to credit transactions, such as:

● Unfair or Deceptive Acts or Practices laws and regulations;

The operations of the Bank are further subject to the:

● State unclaimed property or escheatment laws; and

Holding Company Regulations

General

The Company, as a bank holding company controlling the Bank, is subject to regulation and supervision by the FRB under the BHCA. The Company is periodically examined by and required to submit reports to the FRB and must comply with the FRB’s rules and regulations. Among other things, the FRB has authority to restrict activities by a bank holding company that are deemed to pose a serious risk to the subsidiary bank.

Table of Contents

Permissible Activities

A bank holding company is generally prohibited from engaging in non-banking activities or acquiring direct or indirect control of more than 5% of the voting securities of any company engaged in non-banking activities. One of the principal exceptions to this prohibition is for activities found by the FRB to be so closely related to banking or managing or controlling banks as to be a proper incident thereto. Some of the principal activities that the FRB has determined by regulation to be so closely related to banking are: (i) making or servicing loans; (ii) performing certain data processing services; (iii) providing discount brokerage services; (iv) acting as fiduciary, investment or financial advisor; (v) leasing personal or real property; (vi) making investments in corporations or projects designed primarily to promote community welfare; and (vii) acquiring a savings and loan association whose direct and indirect activities are limited to those permitted for bank holding companies.

The Gramm-Leach-Bliley Act of 1999 authorized a bank holding company that meets specified conditions, including being “well capitalized” and “well managed,” to opt to become a “financial holding company” and thereby engage in a broader array of financial activities than those permitted for a bank holding company. Such activities can include insurance underwriting and investment banking. The Company has not elected “financial holding company” status.

Capitalization

Bank holding companies are subject to consolidated regulatory capital requirements that are no less stringent, both quantitatively and in terms of components of capital, than those applicable to depository institutions. As a result, consolidated regulatory capital requirements identical to those applicable to the subsidiary banks generally apply to bank holding companies. However, the FRB has provided a “Small Bank Holding Company” exception to its consolidated capital requirements, and subsequent legislation and the related issuance of regulations by the FRB have increased the threshold for the exception to $3.0 billion of consolidated assets. Consequently, bank holding companies such as the Company with less than $3.0 billion of consolidated assets are not subject to the consolidated holding company capital requirements unless otherwise directed by the FRB.

Source of Strength

Section 616 of the Dodd-Frank Act codified the FRB’s “source-of-strength” doctrine for bank subsidiaries of bank holding companies. The FRB has issued regulations requiring that all bank holding companies serve as a source of strength to their subsidiary depository institutions by providing financial, managerial and other support in times of an institution’s distress. Under this regulation, where a bank is experiencing severe financial distress, its parent bank holding company may be required to make financial contributions to the bank.

Dividends and Stock Repurchases

The FRB has issued a policy statement regarding the payment of dividends by holding companies. In general, the policy provides that dividends should be paid only out of current earnings and only if the prospective rate of earnings retention by the holding company appears consistent with the organization’s capital needs, asset quality and overall supervisory financial condition. Separate regulatory guidance provides for prior consultation with FRB staff concerning dividends in certain circumstances such as where the company’s net income for the past four quarters, net of dividends previously paid over that period, is insufficient to fully fund the dividend or the company’s overall rate of earnings retention is inconsistent with the company’s capital needs and overall financial condition. The ability of a bank holding company to pay dividends may be restricted if a subsidiary bank becomes undercapitalized.

The regulatory guidance also states that a bank holding company should consult with FRB supervisory staff prior to redeeming or repurchasing common stock or perpetual preferred stock if the bank holding company is experiencing financial weaknesses or the repurchase or redemption would result in a net reduction, at the end of a quarter, in the amount of such equity instruments outstanding compared with the beginning of the quarter in which the redemption or repurchase occurred.

Table of Contents

There is a separate requirement that a bank holding company give the FRB prior written notice of any purchase or redemption of then outstanding equity securities if the gross consideration for the purchase or redemption, when combined with the net consideration paid for all such purchases or redemptions during the preceding 12 months, is equal to 10% or more of the company’s consolidated net worth. The FRB may disapprove such a purchase or redemption if it determines that the proposal would constitute an unsafe and unsound practice, or would violate any law, regulation, FRB order or directive, or any condition imposed by, or written agreement with, the FRB. There is an exception to this approval requirement for well-capitalized bank holding companies that meet certain other conditions.

These regulatory policies may affect our ability to pay dividends, repurchase shares of common stock or otherwise engage in capital distributions.

Acquisition of Control of the Company

Under the Change in Bank Control Act, no person may acquire control of a bank holding company such as the Company unless the FRB has prior written notice and has not issued a notice disapproving the proposed acquisition. In evaluating such notices, the FRB takes into consideration such factors as the financial resources, competence, experience and integrity of the acquirer, the future prospects of the bank holding company involved and its subsidiary bank and the competitive effects of the acquisition. In January 2020, the Federal Reserve substantially revised its control regulations. Under the revised rule, control is conclusively presumed to exist if an individual or company acquires 25% or more of any class of voting securities of the BHC. Where an investor holds less than 25%, the Federal Reserve provides the following four-tiered approach to determining control: (1) less than 5%; (2) 5%-9.99%; (3) 10%-14.99%; and (4) 15%-24.99%. In addition to the four tiers, the Federal Reserve takes into account substantive activities, including director service, business relationships, business terms, officer/employee interlocks, contractual powers, and proxy contests for directors. The Federal Reserve Board may require the company to enter into passivity and, if other companies are making similar investments, anti-association commitments. Acquisition of more than 10% of any class of a bank holding company’s voting stock constitutes a rebuttable presumption of control under the regulations under certain circumstances including where, as is the case with the Company, the issuer has registered securities under Section 12 of the Securities Exchange Act of 1934.

Federal Securities Laws

Hanover Bancorp, Inc.’s common stock is registered with the Securities and Exchange Commission. Hanover Bancorp, Inc. is a reporting company subject to the information, proxy solicitation, insider trading restrictions and other requirements under the Securities Exchange Act of 1934.

Emerging Growth Company Status

The Jumpstart Our Business Startups Act (the “JOBS Act”), which was enacted in April 2012, has made numerous changes to the federal securities laws to facilitate access to capital markets. Under the JOBS Act, a company with total annual gross revenues of less than $1.07 billion during its most recently completed fiscal year qualifies as an “emerging growth company.” We qualify as an emerging growth company under the JOBS Act.

An “emerging growth company” may choose not to hold shareholder votes to approve annual executive compensation (more frequently referred to as “say-on-pay” votes) or executive compensation payable in connection with a merger (more frequently referred to as “say-on-golden parachute” votes). An emerging growth company also is not subject to the requirement that its auditors attest to the effectiveness of the company’s internal control over financial reporting, and can provide scaled disclosure regarding executive compensation; however, we will also not be subject to the auditor attestation requirement or additional executive compensation disclosure so long as the Company remains a “non-accelerated filer” and a “smaller reporting company,” respectively, under Commission regulations (generally less than $75 million and $250 million, respectively, of voting and non-voting equity held by non-affiliates or less than $100 million in annual revenue). Finally, an emerging growth company may elect to comply with new or amended accounting pronouncements in the same manner as a private company, but must make such election when the company is first required to file a registration statement. We have elected to comply with new or amended accounting pronouncements in the same manner as a private company.

Table of Contents

A company loses emerging growth company status on the earlier of: (i) the last day of the fiscal year of the company during which it had total annual gross revenues of $1.07 billion or more; (ii) the last day of the fiscal year of the issuer following the fifth anniversary of the date of the first sale of common equity securities of the company pursuant to an effective registration statement under the Securities Act of 1933; (iii) the date on which such company has, during the previous three-year period, issued more than $1.0 billion in non-convertible debt; or (iv) the date on which such company is deemed to be a “large accelerated filer” under Securities and Exchange Commission regulations (generally, at least $700 million of voting and non-voting equity held by nonaffiliates).

Sarbanes-Oxley Act of 2002

The Sarbanes-Oxley Act of 2002 is intended to improve corporate responsibility, to provide for enhanced penalties for accounting and auditing improprieties at publicly traded companies and to protect investors by improving the accuracy and reliability of corporate disclosures pursuant to the securities laws. We have policies, procedures and systems designed to comply with these regulations, and we review and document such policies, procedures and systems to ensure continued compliance with these regulations.

Additional Information

The Company makes available, free of charge, through its internet website www.hanoverbank.com, its annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), as well as its proxy statement for its Annual Meeting of Shareholders, as soon as reasonably practicable after electronically filing such material with the Securities and Exchange Commission (the “SEC”). Materials filed with the SEC are available at www.sec.gov. The reference to these website addresses does not constitute incorporation by reference of the information contained on the websites and should not be considered part of this document. You can request a copy of our Annual Report on Form 10-K free of charge by sending a written request to Hanover Bancorp, Inc., Attn: Corporate Secretary, 80 East Jericho Turnpike, Mineola, New York 11501. Please include your contact information with the request.

Table of Contents

Item 1A. Risk Factors

As a financial services organization, we are subject to a number of risks inherent in our transactions and present in the business decisions we make. Set forth below is a summary of those risks, and then a more detailed discussion of the primary risks and uncertainties that if realized could have a material and adverse effect on our business, financial condition, results of operations, cash flows, liquidity and the value of our securities. The risks and uncertainties described below are not the only risks we face.

Summary of Risk Factors

Table of Contents

ECONOMIC, MARKET AND INVESTMENT RISKS

Inflationary pressures and rising prices may affect our results of operations and financial condition.

Inflation rose sharply at the end of 2021 and remained at an elevated level through 2024. Small to medium-sized businesses may be impacted more during periods of high inflation as they are not able to leverage economics of scale to mitigate cost pressures compared to larger businesses. Consequently, the ability of our business customers to repay their loans may deteriorate, and in some cases this deterioration may occur quickly, which would adversely impact our results of operations and financial condition. Furthermore, a prolonged period of inflation could cause wages and other costs to the Company to increase, which could adversely affect our results of operations and financial condition.

If we are unable to adequately manage our liquidity, deposits, capital levels and interest rate risk, we may experience a material adverse effect on our financial condition and results of operations.

If we are unable to adequately manage our liquidity, deposits, capital levels and interest rate risk, we may experience a material adverse effect on our financial condition and results of operations. We must maintain sufficient funds to respond to the needs of depositors and borrowers. Deposits have traditionally been our primary source of funds for use in lending and investment activities. We also receive funds from loan repayments, investment maturities and income on other interest-earning assets. While we emphasize the generation of low-cost core deposits as a source of funding, there is strong competition for such deposits in our market area. Additionally, deposit balances can decrease if customers perceive alternative investments as providing a better risk/return tradeoff. Accordingly, as a part of our liquidity management, we must use a number of funding sources in addition to deposits and repayments and maturities of loans and investments, which may include Federal Home Loan Bank of New York advances, Federal Reserve Bank of New York’s discount window advances, federal funds purchased and brokered certificates of deposit. Adverse operating results or changes in industry conditions could lead to difficulty or an inability to access these additional funding sources.

Any decline in available funding could adversely impact our ability to originate loans, invest in securities, pay our expenses, or fulfill obligations such as repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition and results of operations.

A lack of liquidity could also attract increased regulatory scrutiny and result in potential restraints imposed on us by regulators. Depending on the capitalization status and regulatory treatment of depository institutions, including whether an institution is subject to a supervisory prompt corrective action directive, certain additional regulatory restrictions and prohibitions may apply, including restrictions on growth, restrictions on interest rates paid on deposits, restrictions or prohibitions on payment of dividends and restrictions on the acceptance of brokered deposits.

Our financial flexibility would be severely constrained if we were unable to maintain our access to funding or if adequate financing were not available at acceptable interest rates. Further, if we were required to rely more heavily on more expensive funding sources to support liquidity, our revenues may not increase proportionately to cover our increased costs. In this case, our operating margins and profitability would be adversely affected. If alternative funding sources were no longer available to us, we may need to sell a portion of our investment and/or loan portfolio to raise funds, which, depending upon market conditions, could result in us realizing a loss on the sale of such assets. As of December 31, 2024, we had a net unrealized loss of $1.3 million on our available for-sale investment securities portfolio as a result of the higher interest rate environment. Our investment securities totaled $87.5 million, or 3.8% of total assets, at December 31, 2024. The details of this portfolio are included in Note 2 to the consolidated financial statements.

Table of Contents

A substantial portion of our business is in the New York metro area, therefore, our business is particularly vulnerable to an economic downturn in our primary market area.

We primarily serve businesses, municipalities and individuals located in the New York metro area. As a result, we are exposed to risks associated with lack of geographic diversification. The occurrence of an economic downturn in the New York metro area, could impact the credit quality of our assets, the businesses of our customers and the ability to expand our business. Our success significantly depends upon the growth in population, income levels, deposits and housing in our market area. If the communities in which we operate do not grow or if prevailing economic conditions locally or nationally are unfavorable, our business may be negatively affected.

In addition, the market value of the real estate securing loans as collateral could be adversely affected by unfavorable changes in market and economic conditions. As of December 31, 2024, 67% of our commercial real estate loan portfolio was secured by real estate located in the five boroughs of New York City and Nassau County, New York. Adverse developments affecting commerce or real estate values in the local economies in our primary market areas could increase the credit risk associated with our loan portfolio and have an adverse impact on our revenues and financial condition. In particular, we may experience increased loan delinquencies, which could result in a higher provision for credit losses and increased charge-offs. Any sustained period of increased non-payment, delinquencies, foreclosures or losses caused by adverse market or economic conditions in our market area could adversely affect the value of our assets, revenues, financial condition and results of operations.

We also obtain a significant volume of deposits from municipal customers, primarily in Nassau and Suffolk Counties in New York. Approximately 26.1% of our deposits are from municipal customers, although no single municipal customer represents a concentration risk. A prolonged economic downturn which adversely effects tax revenues or other governmental funding sources could have an adverse impact on our ability to gather cost efficient deposits, and fund our loans and other investments, thereby adversely affecting our results of operations.

We have a significant number of loans secured by real estate, and a downturn in the local real estate market could negatively impact our profitability.

At December 31, 2024, approximately $1.8 billion, or 91%, of our total loan portfolio was secured by real estate, almost all of which is located in our primary lending market. Future declines in the real estate values in the New York metro area and Nassau County and surrounding markets could significantly impair the value of the particular collateral securing our loans and our ability to sell the collateral upon foreclosure for an amount necessary to satisfy the borrower’s obligations to us. This could require increasing our allowance for credit losses to address the decrease in the value of the real estate securing our loans, which could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

Appraisals and other valuation techniques we use in evaluating and monitoring loans secured by real property, other real estate owned and repossessed personal property may not accurately describe the net value of the asset.

In considering whether to make a loan secured by real property, we generally require an appraisal of the property. However, an appraisal is only an estimate of the value of the property at the time the appraisal is made and, as real estate values may change significantly in relatively short periods of time (especially in periods of heightened economic uncertainty), this estimate may not accurately describe the net value of the real property collateral after the loan is made. As a result, we may not be able to realize the full amount of any remaining indebtedness when we foreclose on and sell the relevant property. In addition, we rely on appraisals and other valuation techniques to establish the value of our other real estate owned (“OREO”) and personal property that we acquire through foreclosure proceedings and to determine certain loan impairments. If any of these valuations are inaccurate, our consolidated financial statements may not reflect the correct value of our OREO, and our allowance for credit losses may not reflect accurate loan impairments. This could have an adverse effect on our business, financial condition or results of operations.

Table of Contents

We engage in lending secured by real estate and may be forced to foreclose on the collateral and own the underlying real estate, subjecting us to the costs and potential risks associated with the ownership of the real property, or consumer protection initiatives or changes in state or federal law may substantially raise the cost of foreclosure or prevent us from foreclosing at all.

Since we originate loans secured by real estate, we may have to foreclose on the collateral property to protect our investment and may thereafter own and operate such property, in which case we would be exposed to the risks inherent in the ownership of real estate. Although we held no OREO properties at December 31, 2024, it is possible that in future periods we may take title to OREO properties in the event of defaults on outstanding loans. The amount that we, as a mortgagee, may realize after a default depends on factors outside of our control, including, but not limited to, general or local economic conditions, environmental cleanup liabilities, assessments, interest rates, real estate tax rates, operating expenses of the mortgaged properties, our ability to obtain and maintain adequate occupancy of the properties, zoning laws, governmental and regulatory rules, and natural disasters. Our inability to manage the amount of costs or size of the risks associated with the ownership of real estate, or writedowns in the value of OREO, could have an adverse effect on our business, financial condition and results of operations.

Additionally, consumer protection initiatives or changes in state or federal law may substantially increase the time and expense associated with the foreclosure process or prevent us from foreclosing at all. A number of states in recent years have either considered or adopted foreclosure reform laws that make it substantially more difficult and expensive for lenders to foreclose on properties in default. Additionally, federal regulators have prosecuted a number of mortgage servicing companies for alleged consumer law violations. If new state or federal laws or regulations are ultimately enacted that significantly raise the cost of foreclosure or raise outright barriers, such could have an adverse effect on our business, financial condition and results of operations.

Other aspects of our business may be adversely affected by unfavorable economic, market, and political conditions.

An economic recession or a downturn in various markets could have one or more of the following adverse effects on our business:

● a decrease in the demand for our loans and other products we offer;

● a decrease in the value of collateral securing our loans;

● an increase in the level of nonperforming and classified loans;

● an increase in provisions for credit losses and loan charge-offs;

● a decrease in our ability to access the capital markets; and

Various market conditions also affect our operating results. Real estate market conditions directly affect performance of our loans secured by real estate. Debt markets affect the availability of credit, which impacts the rates and terms at which we offer loans. Stock market downturns often reflect broader economic deterioration and/or a downward trend in business earnings which may adversely affect businesses’ ability to raise capital and/or service their debts. Political and electoral changes, developments, conflicts and conditions (such as fiscal policy changes proposed) have in the past introduced, and may in the future introduce, additional uncertainty that could also affect our operating results negatively.

Table of Contents

LENDING ACTIVITIES RISKS

Small Business Administration lending is an increasingly important part of our business. Our SBA lending program is dependent upon the U.S. federal government, and we face specific risks associated with originating SBA loans.

Our SBA lending program is dependent upon the U.S. federal government. The SBA periodically reviews the lending operations of participating lenders to assess, among other things, whether the lender exhibits prudent risk management. When weaknesses are identified, the SBA may request corrective actions or impose enforcement actions. Any changes to the SBA program, including but not limited to changes to the level of guarantee provided by the federal government on SBA loans, changes to program specific rules impacting volume eligibility under the guaranty program, as well as changes to the program amounts authorized by Congress or funding for the SBA program may also have a material adverse effect on our business. In addition, any default by the U.S. government on its obligations or any prolonged government shutdown could, among other things, impede our ability to originate SBA loans or sell such loans in the secondary market, which could materially and adversely affect our business, results of operations and financial condition.

The SBA’s 7(a) Loan Program is the SBA’s primary program for helping start-up and existing small businesses, with financing guaranteed for a variety of general business purposes. Typically, we sell the guaranteed portion of our SBA 7(a) loans in the secondary market. These sales result in premium income for us at the time of sale and create a stream of future servicing income, as we retain the servicing rights to these loans. For the reasons described above, we may not be able to continue originating these loans or selling them in the secondary market. Furthermore, even if we are able to continue to originate and sell SBA 7(a) loans in the secondary market, we might not continue to realize premiums upon the sale of the guaranteed portion of these loans or the premiums may decline due to economic and competitive factors. When we originate SBA loans, we incur credit risk on the non-guaranteed portion of the loans, and if a customer defaults on a loan, we share any loss and recovery related to the loan pro-rata with the SBA. If the SBA establishes that a loss on an SBA guaranteed loan is attributable to significant technical deficiencies in the manner in which the loan was originated, funded or serviced by us, the SBA may seek recovery of the principal loss related to the deficiency from us. Generally, we do not maintain reserves or loss allowances for such potential claims and any such claims could materially and adversely affect our business, financial condition or results of operations.

The laws, regulations and standard operating procedures that are applicable to SBA loan products may change in the future. We cannot predict the effects of these changes on our business and profitability. Because government regulation greatly affects the business and financial results of all commercial banks and bank holding companies and especially our organization, changes in the laws, regulations and procedures applicable to SBA loans could adversely affect our ability to operate profitably.

The non-guaranteed portion of SBA loans that we retain on our balance sheet as well as the guaranteed portion of SBA loans that we sell could expose us to various credit and default risks.

We have historically originated an increasingly significant number of SBA loans, and sold a significant portion of the guaranteed portions of these loans on the secondary market. We generally retain the non-guaranteed portions of the SBA loans that we originate. Consequently, as of December 31, 2024, we held $187.4 million of SBA loans on our balance sheet, $134.1 million of which consisted of the non-guaranteed portion of SBA loans and $53.3 million consisted of the guaranteed portion of SBA loans. The non-guaranteed portion of SBA loans have a higher degree of credit risk and risk of loss as compared to the guaranteed portion of such loans. We generally retain the non-guaranteed portions of the SBA loans that we originate and sell, and to the extent the borrowers of such loans experience financial difficulties, our financial condition and results of operations would be adversely impacted.

When we sell the guaranteed portion of SBA loans in the ordinary course of business, we are required to make certain representations and warranties to the purchaser about the SBA loans and the manner in which they were originated. Under these agreements, we may be required to repurchase the guaranteed portion of the SBA loan if we have breached any of these representations or warranties, in which case we may record a loss. In addition, if repurchase and indemnity demands increase on loans that we sell from our portfolio, our liquidity, results of operations and financial condition could be adversely affected.

Table of Contents

We are expanding the geographic scope of our SBA, and other government guaranteed lending, and this may expose us to greater and additional risks than lending in our primary trade area.

Historically, our SBA and other government guaranteed lending has been to customers, and secured by collateral, located primarily on our metropolitan New York trade area. However, we have hired lending personnel in other parts of the country to expand our market share of SBA and other government guaranteed lending. This geographic expansion of our government guaranteed lending may expose us to greater and different risks than lending in our trade area. For example, upon a default we will need to comply with local legal requirements and court rules, which may be more or less advantageous to borrowers than those in New York and New Jersey, which may make collecting upon collateral more difficult and expensive. We may also need to hold and operate property or business assets in remote locales, making it more difficult and expensive for management to oversee the assets. We may also have less knowledge of the markets in areas in which we may now lend, making underwriting decisions riskier.

The recognition of gains on the sale of loans and servicing asset valuations reflect certain assumptions.

We expect that gains on the sale of U.S. government guaranteed loans will comprise a meaningful component of our revenue. The determination of these gains is based on assumptions regarding the value of unguaranteed loans retained, servicing rights retained and deferred fees and costs, and net premiums paid by purchasers of the guaranteed portions of U.S. government guaranteed loans. The value of the retained unguaranteed portion of the loans and servicing rights are determined based on market derived factors such as prepayment rates, current market conditions and recent loan sales. Deferred fees and costs are determined using internal analysis of the cost to originate loans. Significant errors in assumptions used to compute gains on sale of loans or servicing asset valuations could result in material revenue misstatements, which may have a material adverse effect on our business, results of operations and profitability. In addition, while we believe these valuations reflect fair value and such valuations are subject to validation by an independent third party, if such valuations are not reflective of fair market value then our business, results of operations and financial condition may be materially and adversely affected.

Imposition of limits by bank regulators on commercial real estate lending activities could curtail our growth and adversely affect our earnings.

In 2006, the OCC, the FDIC, and the FRB, or collectively, the Agencies, issued joint guidance entitled “Concentrations in Commercial Real Estate Lending, Sound Risk Management Practices,” or the “CRE Guidance.” Although the CRE Guidance did not establish specific lending limits, it provides that a bank’s commercial real estate lending exposure will receive increased supervisory scrutiny where total non-owner-occupied commercial real estate loans, including loans secured by apartment buildings, investor commercial real estate, and construction and land loans, represent 300% or more of an institution’s total risk-based capital, and the outstanding balance of the commercial real estate loan portfolio has increased by 50% or more during the preceding 36 months. Our commercial real estate and multi-family loans balance have decreased 4% combined for the year ended December 31, 2024 and commercial real estate loans represent 385% of our risk-based capital at December 31, 2024, a decrease from 432% at December 31, 2023 and 448% at September 30, 2023.

In December 2015, the Agencies released a new statement on prudent risk management for commercial real estate lending, or the “2015 Statement.” In the 2015 Statement, the Agencies, among other things, indicated the intent to continue “to pay special attention” to commercial real estate lending activities and concentrations going forward. If the FDIC, our primary federal regulator, were to impose restrictions on the amount of such loans we can hold in our portfolio or require us to implement additional compliance measures, for reasons noted above or otherwise, our earnings could be adversely affected as would our earnings per share.

Table of Contents

The residential mortgage loans that we originate consist primarily of non-conforming residential mortgage loans which may be considered less liquid and more risky.

The residential mortgage loans that we originate consist primarily of non-conforming residential mortgage loans, which are typically considered to have a higher degree of risk and are less liquid than conforming residential mortgage loans. We attempt to address this enhanced risk through our underwriting process, and by generally requiring three months principal, interest, taxes and insurance reserves. These loans also present pricing risk as rates change, and our sale premiums cannot be guaranteed. Further, the criteria for our loans to be purchased by other financial institutions may change from time to time, which could result in a lower volume of corresponding loan originations. In addition, when we sell the non-conforming residential mortgage loans, we are required to make certain representations and warranties to the purchaser regarding such loans. Under those agreements, we may be required to repurchase the non-conforming residential mortgage loans if we have breached any of these representations or warranties, in which case we may record a loss. Additionally, if repurchase and indemnity demands increase on loans that we sell from our portfolio, our liquidity, results of operations and financial condition could be adversely affected.

Interest rate shifts may reduce net interest income and otherwise negatively impact our financial condition and results of operations.

The majority of our banking assets are monetary in nature and subject to risk from changes in interest rates. Like most banks, our earnings and cash flows depend to a great extent upon the level of our net interest income, or the difference between the interest income we earn on loans, investments and other interest-earning assets, and the interest we pay on interest-bearing liabilities, such as deposits and borrowings. Changes in interest rates can increase or decrease our net interest income, because different types of assets and liabilities may react differently, and at different times, to market interest rate changes.

When interest-bearing liabilities mature or reprice more quickly, or to a greater degree than interest-earning assets in a period, an increase in interest rates could reduce net interest income. Similarly, when interest-earning assets mature or reprice more quickly, or to a greater degree than interest-bearing liabilities, falling interest rates could reduce net interest income. An increase in interest rates may, among other things, reduce the demand for loans and our ability to originate loans and decrease loan repayment rates. Conversely, a decrease in the general level of interest rates may affect us through, among other things, increased prepayments on our loan portfolio and increased competition for deposits. Accordingly, changes in the level of market interest rates affect our net yield on interest-earning assets, loan origination volume and our overall results of operations. Although our asset-liability management strategy is designed to control and mitigate exposure to the risks related to changes in market interest rates, those rates are affected by many factors outside of our control, including governmental monetary policies, inflation, deflation, recession, changes in unemployment, the money supply, international disorder and instability in domestic and foreign financial markets.

CREDIT RISKS

We may not be able to measure and limit our credit risk adequately, which could lead to unexpected losses.

The primary component of our business involves making loans to our clients. The business of lending is inherently risky, including risks that the principal or interest on any loan will not be repaid in a timely manner or at all or that the value of any collateral supporting the loan will be insufficient to cover losses in the event of a default. These risks may be affected by the strength of the borrower’s business and industry, and local, regional and national market and economic conditions. Many of our loans are made to small- to medium-sized businesses that may be less able to withstand competitive, economic and financial pressures than larger borrowers. Our risk management practices, such as managing the concentration of our loans within specific industries, loan types and geographic areas, and our credit approval practices may not adequately reduce credit risk. Further, our credit administration personnel, policies and procedures may not adequately adapt to changes in economic or any other conditions affecting clients and the quality of the loan portfolio. A failure to effectively measure and manage the credit risk associated with our loan portfolio could lead to unexpected losses and have an adverse effect on our business, financial condition and results of operations.

Table of Contents

Our emphasis on one- to four- family residential mortgage loans involves risks that could adversely affect our financial condition and results of operations.

Our loan portfolio includes a significant concentration of one- to four- family residential mortgage loans. As of December 31, 2024, we had $729.3 million in one- to four- family residential mortgage loans, representing 37% of our total loan portfolio. Approximately 91% of these loans are secured by properties in the five boroughs of New York City and Nassau County, New York and 66% of these loans are rental properties and are not owner-occupied. These loans expose us to credit risks that may be different from those related to loans secured by owner-occupied properties or commercial loans. Adverse developments affecting commerce or real estate values in the local economies in our primary market areas could increase the credit risk associated with our loan portfolio and have an adverse impact on our revenues and financial condition. In addition, economic downturns in New York City could affect levels of employment in the New York metro area, which may affect the demand for rental housing. Any increase in rental vacancies, or reductions in rental rates, could adversely impact our borrowers and their ability to repay their loans. Any sustained period of increased non-payment, delinquencies, foreclosures or losses caused by adverse market or economic conditions in our market area could adversely affect the value of our assets, revenues, financial condition and results of operations.

Our niche lending products may expose us to greater risk than traditional lending products.

A significant portion of our lending activity is related to certain niche lending products, such as loans secured by investor owned, non-owner occupied one- to four-family properties and loans without third-party income verifications, which are considered non-qualified mortgage loans and which may expose us to greater risk of credit loss than that associated with more traditional lending products. Non-qualified mortgage loans are considered to have a higher degree of risk and are less liquid than qualified mortgage loans. For the year ended December 31, 2024 and fiscal year ended September 30, 2023, we originated $130.4 million and $196.0 million in non-qualified mortgage loans, respectively. During the year ended December 31, 2024 we sold into the secondary market $37.6 million of our non-qualified mortgages. There were no such sales for the fiscal year ended September 30, 2023. Although we have developed underwriting standards and procedures designed to reduce the risk of loss, we can provide no assurance that these standards and procedures will be effective in reducing losses. Should we incur credit losses, it could adversely affect our results of operations.

The small- to medium-sized businesses that we lend to may have fewer resources to weather adverse business developments, which may impair our borrowers’ ability to repay loans.

We target our business development and marketing strategy primarily to serve the banking and financial services needs of small- to medium-sized businesses and real estate owners. These small- to medium-sized businesses frequently have smaller market share than their competition, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete and may experience significant volatility in operating results. Any one or more of these factors may impair the borrower’s ability to repay a loan. In addition, the success of a small- to medium-sized business often depends on the management talents and efforts of one or two persons or a small group of persons, and the death, disability or resignation of one or more of these persons could have a material adverse impact on the business and its ability to repay a loan. Economic downturns and other events that negatively impact our market areas could cause us to incur substantial credit losses that could negatively affect our financial condition and results of operations.

Our allowance for credit losses may not be adequate to cover actual losses.

We maintain an allowance for credit losses that represents management’s judgment of expected credit losses and risks inherent in our loan portfolio. As of December 31, 2024, our allowance for credit losses totaled $22.8 million, which represented approximately 1.15% of our total loans held for investment. The level of the allowance reflects management’s continuing evaluation of general economic conditions, diversification and seasoning of the loan portfolio, historic loss experience, identified credit problems, delinquency levels, adequacy of collateral and historical peer charge-off data. The determination of the appropriate level of our allowance for credit losses is inherently highly subjective and requires management to make significant estimates of and assumptions regarding current credit risks and future trends, all of which may undergo material changes.

Table of Contents

Our federal and state regulators, as an integral part of their examination process, review our methodology for calculating, and the adequacy of, our allowance for credit losses and may direct us to make additions to the allowance based on their judgments about information available to them at the time of their examination. Further, if actual charge-offs in future periods exceed the amounts allocated to our allowance for credit losses, we may need additional provisions for credit losses to restore the adequacy of our allowance for credit losses. While we believe our allowance for credit losses is appropriate for the risk identified in our loan portfolio, we cannot provide assurance that we will not further increase the allowance for credit losses, that it will be sufficient to address losses, or that regulators will not require us to increase this allowance. We also cannot be certain that actual results will be consistent with forecasts and assumptions used in our modeling. Any of these occurrences could materially and adversely affect our financial condition and results of operations.

If our non-performing assets increase, our earnings will be adversely affected.

At December 31, 2024, our non-performing assets, which consist of non-performing loans and OREO (of which we had none at December 31, 2024), were $16.4 million, or 0.71% of total assets. Our non-performing assets adversely affect our net income in various ways:

If additional borrowers become delinquent and do not pay their loans, and we are unable to successfully manage our non-performing assets, our losses and troubled assets could increase, which could have a material adverse effect on our financial condition and results of operations.

We are dependent on the use of data and modeling in our management’s decision-making, and faulty data or modeling approaches could negatively impact our decision-making ability or possibly subject us to regulatory scrutiny in the future.

The use of statistical and quantitative models, and other quantitative and qualitative analyses, is necessary for bank decision-making, and the employment of such analyses is becoming increasingly widespread in our operations.

Liquidity stress testing, interest rate sensitivity analysis, the identification of possible violations of anti-money laundering regulations and the estimation of credit losses are all examples of areas in which we are dependent on models and the data that underlies them. The use of statistical and quantitative models is also becoming more prevalent in regulatory compliance. While we are not currently subject to annual Dodd-Frank Wall Street Reform and Consumer Protection Act, or Dodd-Frank Act, stress testing and the Comprehensive Capital Analysis and Review submissions, we anticipate that model-derived testing may become more extensively implemented by regulators in the future.

We anticipate data-based modeling will penetrate further into bank decision-making, particularly risk management efforts, as the capacities developed to meet rigorous stress testing requirements are able to be employed more widely and in differing applications. While we believe these quantitative techniques and approaches improve our decision-making, they also create the possibility that faulty data or flawed quantitative approaches could negatively impact our decision-making ability or, if we become subject to regulatory stress-testing in the future, adverse regulatory scrutiny. Secondarily, because of the complexity inherent in these approaches, misunderstanding or misuse of their outputs could similarly result in suboptimal decision-making.

Table of Contents

LIQUIDITY RISKS

If we do not manage our liquidity effectively, our business could suffer.

Liquidity is essential for the operation of our business. Market conditions, unforeseen outflows of funds or other events could have a negative effect on our level or cost of funding, affecting our ongoing ability to accommodate liability maturities and deposit withdrawals, meet contractual obligations, and fund new business transactions at a reasonable cost and in a timely manner. If our access to stable and low-cost sources of funding, such as client deposits, is reduced, we may need to use alternative funding, which could be more expensive or of limited availability. Further evolution in the regulatory requirements relating to liquidity and risk management also may impact us negatively. For more information on these regulations and other regulatory changes, see the section entitled “Supervision and Regulation.” Any substantial, unexpected or prolonged changes in the level or cost of liquidity could affect our business adversely.

Our growth strategy may require us to raise additional capital in the future to fund such growth, and the unavailability of additional capital on terms acceptable to us could adversely affect us or our growth.

Although we believe we have sufficient capital to meet our capital needs for our immediate growth plans, we will continue to need capital to support our longer-term growth plans. Our ability to access the capital markets, if needed, will depend on a number of factors, including the state of the financial markets. If capital is not available on favorable terms when we need it, we will have to either issue common stock or other securities on less than desirable terms or curtail our growth until market conditions become more favorable. Any diminished ability to raise additional capital, if needed, could subject us to liability, restrict our ability to grow, require us to take actions that would affect our earnings negatively or otherwise affect our business and our ability to implement our business plan, capital plan and strategic goals adversely. Such events could have a material adverse effect on our business, financial condition and results of operations.

STRATEGIC RISKS

If we do not effectively execute our strategic plans, we will not achieve our growth objectives and our business and results of operations may be negatively affected.

Our growth depends upon successful, consistent execution of our business strategies. A failure to execute these strategies may impact growth negatively. A failure to grow, whether organically or through strategic acquisitions, may have an adverse effect on our business. The challenges arising from generating organic or strategic growth may include preserving valuable relationships with employees, clients and other business partners and delivering enhanced products and services. Execution of our business strategies also may require certain regulatory approvals or consents, which may include approvals of the FRB, the FDIC, the DFS and other domestic regulatory authorities. These regulatory authorities may impose conditions on the activities or transactions contemplated by our business strategies, which may negatively impact our ability to realize fully the expected benefits of certain opportunities.

Table of Contents

Any failure by us to manage acquisitions and other significant transactions successfully may have a material adverse effect on our results of operations, financial condition, and cash flows.

Our ability to grow revenues, earnings and cash flows at or above our historical rates depends in part upon our ability to identify, appropriately price, successfully acquire, and integrate businesses to realize anticipated synergies by integrating cultures, accounting, data processing and internal control systems. Promising acquisitions are difficult to identify and complete for a number of reasons, including high valuations, competition among prospective buyers, and the need to satisfy applicable closing conditions, including any conditions to receiving the required regulatory approvals. To the extent we enter into transactions to acquire complementary businesses and/or technologies, we may not achieve the expected benefits of such transactions, which could result in increased costs, lowered revenues, ineffective deployment of capital, regulatory concerns, exit costs or diminished competitive position or reputation. These risks may be increased if the acquired company operates in a geographic location where we do not already have significant business operations. Integration and other risks can be more pronounced for larger and more complicated transactions, transactions outside of our core business space, or if multiple transactions are pursued simultaneously. The failure to successfully integrate acquired entities and businesses or failure to produce results consistent with the financial model used in the analysis of our acquisitions, investments, joint ventures or strategic alliances may cause us to incur asset write-offs, restructuring costs or other unanticipated expenses which may have a material adverse effect on our results of operations, financial position, and cash flows. If we fail to identify and successfully complete transactions that further our strategic objectives, we may be required to expend additional resources to grow our business organically.

We have grown and may continue to grow through acquisitions.

Over the last several years, we have grown rapidly through both organic growth and acquisitions. On August 9, 2019, we consummated the acquisition of CFSB. On May 26, 2021, we consummated the acquisition of Savoy. These two acquisitions added $780.8 million in total assets, $452.6 million in deposits and $676.3 million in loans, as well as four branch offices in New York City. As part of our growth strategy, we intend to pursue prudent and commercially attractive acquisitions that will position us to capitalize on market opportunities. To be successful as a larger institution, we must successfully integrate the operations and retain the customers of acquired institutions, attract and retain the management required to successfully manage larger operations, and control costs.

Future results of operations will depend in large part on our ability to successfully integrate the operations of the acquired institutions and retain the customers of those institutions. If we are unable to successfully manage the integration of the separate cultures, customer bases and operating systems of the acquired institutions, and any other institutions that may be acquired in the future, our results of operations may be adversely affected.

In addition, to successfully manage substantial growth, we may need to increase non-interest expenses through additional personnel, leasehold and data processing costs, among others. In order to successfully manage growth, we may need to adopt and effectively implement policies, procedures and controls to maintain credit quality, control costs and oversee our operations. No assurance can be given that we will be successful in this strategy.

We may be challenged to successfully manage our business as a result of the strain on management and operations that may result from growth. The ability to manage growth will depend on our ability to continue to attract, hire and retain skilled employees. Success will also depend on the ability of our officers and key employees to continue to implement and improve operational and other systems, to manage multiple, concurrent customer relationships and to hire, train and manage employees.

Finally, substantial growth may stress regulatory capital levels, and may require us to raise additional capital in the future. No assurance can be given that we will be able to raise any required capital, or that we will be able to raise capital on terms that are beneficial to stockholders.

Table of Contents

Attractive acquisition opportunities may not be available to us in the future.

We expect that other banking and financial service companies, many of which have significantly greater resources than we do and have a deep and liquid trading market, will compete with us in acquiring other financial institutions, if we pursue such acquisitions in the future. This competition could increase prices for potential acquisitions that we believe are attractive. Also, acquisitions are subject to various regulatory approvals. If we fail to receive the appropriate regulatory approvals, we will not be able to consummate an acquisition that we believe is in our best interests. Among other things, our regulators will consider our capital, liquidity, profitability, regulatory compliance and levels of goodwill when considering acquisition and expansion proposals. Any acquisition could be dilutive to our earnings and stockholders’ earnings per share.

COMPETITION RISKS

Competition in originating loans and attracting deposits may adversely affect our profitability.

We operate in a highly competitive banking market and face substantial competition in originating loans. This competition currently comes principally from other banks, savings institutions, mortgage banking companies, credit unions and other lenders. Many of our competitors enjoy advantages, including greater financial resources and higher lending limits, a wider geographic presence, more accessible branch office locations, the ability to offer a wider array of services or more favorable pricing alternatives, as well as lower origination and operating costs. This competition could reduce our net income by decreasing the number and size of loans that we originate and the interest rates we may charge on these loans.

In attracting deposits, we face substantial competition from other insured depository institutions such as banks, savings institutions and credit unions, as well as institutions offering uninsured investment alternatives, including money market funds. Many of our competitors enjoy advantages, including greater financial resources, more aggressive marketing campaigns, better brand recognition and more branch locations. These competitors may offer higher interest rates than we do, which could decrease the deposits that we attract or require us to increase our rates to retain existing deposits or attract new deposits. Increased deposit competition could adversely affect our ability to generate the funds necessary for lending operations, which may increase our cost of funds or negatively impact our liquidity.

We also compete with non-bank providers of financial services, such as brokerage firms, consumer finance companies, insurance companies and governmental organizations, which may offer more favorable terms. Some of our non-bank competitors are not subject to the same extensive regulations that govern our operations. As a result, such non-bank competitors may have advantages over us in providing certain products and services. This competition may reduce or limit our margins on banking services, reduce our market share and adversely affect our earnings and financial condition.

The financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Our inability to compete successfully in the markets in which we operate could have an adverse effect on our business, financial condition or results of operations.

Table of Contents

We need to invest in innovation, and the inability or failure to do so may affect our business and earnings negatively.

Our success in the competitive environment in which we operate requires consistent investment of capital and human resources in innovation, particularly in light of the current “FinTech” environment, in which financial institutions are investing significantly in new technologies, such as artificial intelligence, machine learning, blockchain and other distributed ledger technologies, and developing potentially industry-changing new products, services and industry standards in order to attract clients. Our investment is directed at meeting the needs of our clients, adapting existing products and services to the evolving standards and demands of the marketplace, and maintaining the security of our systems and building a platform for future innovation and competitive advantage that is scalable. Among other things, investing in innovation helps keep us relevant and client-focused while maintaining acceptable margins. Our investment also focuses on enhancing the delivery of our products and services, such as our recent implementation of digital payment channels, such as mobile wallets, contactless debit cards and Zelle. Falling significantly behind our competition in this area could adversely affect our business opportunities, growth and earnings. There are substantial risks and uncertainties associated with innovation efforts, including an increased risk that new and emerging technologies may expose us to increased cybersecurity and other information technology vulnerability and threats. Expected timetables for the introduction and development of new products or services may not be achieved, and price and profitability targets may not be met. Further, our revenues and costs may fluctuate because new products and services generally require start-up costs while corresponding revenues take time to develop or may not develop at all.

KEY PERSONNEL RISKS

We rely heavily on our executive management team and other key personnel for our successful operation, and we could be adversely affected by the unexpected loss of their services.

Our success depends in large part on the performance of our key personnel at the Bank that have substantial experience and tenure with the Bank and in the markets that we serve. Our continued success and growth depend in large part on the efforts of these key personnel, the support of our Directors, and ability to attract, motivate and retain highly qualified senior and middle management and other skilled employees to complement and succeed to our core senior management team.

If we are not able to attract, retain and motivate other key personnel, our business could be negatively affected.

Our future success depends in large part on our ability to retain and motivate our existing employees and attract new employees. Competition for the best employees can be intense, and there can be no assurance that we will be successful in our efforts to recruit and retain key personnel. Factors that affect our ability to attract and retain talented and diverse employees include compensation and benefits programs, profitability, opportunities for advancement, flexible working conditions, availability of qualified persons and our reputation. Our ability to attract and retain key executives and other employees may be hindered as a result of existing and potential regulations applicable to incentive compensation and other aspects of our compensation programs. These regulations may not apply to some of our competitors and to other institutions with which we compete for talent. The unexpected loss of services of key personnel, both in business line and corporate functions, could have a material adverse impact on our net income and financial condition because of the loss of their knowledge of our markets, operations and clients, their years of industry experience, and their technical skills. Similarly, the loss of key employees, either individually or as a group, could adversely affect our clients’ perception of our abilities and, accordingly, our reputation.

Table of Contents

REGULATORY AND COMPLIANCE RISKS

We operate in a highly regulated environment and the laws and regulations that govern our operations, corporate governance, executive compensation and accounting principles, or changes in them, or our failure to comply with them, could adversely affect us and our future growth.

Banks are highly regulated under federal and state law. As such, we are subject to extensive regulation, supervision and legal requirements from government agencies such as the FRB, the FDIC and the DFS, which govern almost all aspects of our operations. These laws and regulations are not intended to protect our shareholders. Rather, these laws and regulations are intended to protect our clients, depositors, the DIF, and the overall financial stability of the United States. These laws and regulations, among other matters, prescribe minimum capital requirements, impose limitations on the business activities in which we can engage, limit the dividend or distributions that the Bank can pay to the Company and the Company can pay to its shareholders, restrict the ability of institutions to guarantee our debt and impose certain specific accounting requirements on us that may be more restrictive and may result in greater or earlier charges to earnings or reductions in our capital than required under generally accepted accounting principles (“GAAP”). Compliance with laws and regulations can be difficult and costly, and changes to laws and regulations often impose additional operating costs. Our failure to comply with these laws and regulations, even if the failure follows good faith effort or reflects a difference in interpretation, could subject us to restrictions on our business activities, enforcement actions and fines and other penalties, any of which could adversely affect our results of operations, regulatory capital levels and the price of our common stock. Further, any new laws, rules and regulations could make compliance more difficult or expensive or otherwise adversely affect our business, financial condition and results of operations.

Federal and State banking agencies periodically conduct examinations of our business, including compliance with laws and regulations, and our failure to comply with any supervisory actions to which we are or become subject as a result of such examinations could adversely affect us.

As part of the bank regulatory process, the FDIC, the New York State DFS, and the FRB periodically conduct examinations of our business, including compliance with laws and regulations. If, as a result of an examination, one of these banking agencies were to determine that the financial condition, capital adequacy, asset quality, earnings prospects, management capability, liquidity, asset sensitivity to market risks, asset management, risk management or other aspects of any of our operations have become unsatisfactory, or that the Company, the Bank or their respective management were in violation of any law or regulation, it may take a number of different remedial actions as it deems appropriate. These actions include the power to enjoin “unsafe or unsound” practices, to require affirmative actions to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital levels, to restrict our growth, to assess civil monetary penalties against the Company, the Bank or their respective officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate the Bank’s deposit insurance and terminate the Bank’s charter to operate. If we become subject to such regulatory actions, our business, financial condition, results of operations and reputation could be adversely affected.

Legislative and regulatory actions taken now or in the future may increase our costs and impact our business, governance structure, financial condition or results of operations.

Economic conditions that contributed to the financial crisis in 2008, particularly in the financial markets, resulted in government regulatory agencies and political bodies placing increased focus and scrutiny on the financial services industry. There can be no guarantee that regulators or other third parties will not seek to impose such additional requirements on financial institutions, such as extending additional regulations to small banks with less than $10 billion in assets. Compliance with these regulations has and may continue to result in additional operating and compliance costs that could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

Table of Contents

Federal and state regulatory agencies frequently adopt changes to their regulations or change the manner in which existing regulations are applied. Regulatory or legislative changes to laws applicable to the financial industry, if enacted or adopted, may impact the profitability of our business activities, require more oversight or change certain of our business practices, including the ability to offer new products, obtain financing, attract deposits, make loans and achieve satisfactory interest spreads and could expose us to additional costs, including increased compliance costs. These changes also may require us to invest significant management attention and resources to make any necessary changes to operations to comply and could have an adverse effect on our business, financial condition and results of operations.

Increases in FDIC insurance premiums could adversely affect our earnings and results of operations.

The deposits of our bank are insured by the FDIC up to legal limits and, accordingly, subject it to the payment of FDIC deposit insurance assessments as determined according to the calculation described in “Supervision and Regulation-Deposit Insurance.” In addition, the FDIC has the ability to assess special assessments against insured depository institutions if required to recapitalize the DIF. Increases in assessment rates or special assessments may occur in the future, especially if there are significant additional financial institution failures. Any future special assessments, increases in assessment rates or required prepayments in FDIC insurance premiums could reduce our profitability or limit our ability to pursue certain business opportunities, which could have a material adverse effect on our business, financial condition and results of operations.

Changes in tax laws and regulations, or changes in the interpretation of existing tax laws and regulations, may have a material adverse effect on our business, financial condition, results of operations and growth prospects.

We operate in an environment that imposes income taxes on our operations at both the federal and state levels to varying degrees and we try to minimize the impact of these taxes. Any change in tax laws or regulations, or new interpretation of an existing law or regulation, could significantly alter the tax impact on our financial results.

The net deferred tax asset reported on our balance sheet generally represents the tax benefit of future deductions from taxable income for items that have already been recognized for financial reporting purposes. The bulk of these deferred tax assets consists of deferred loan loss deductions and deferred compensation deductions. The net deferred tax asset is measured by applying currently enacted income tax rates to the accounting period during which the tax benefit is expected to be realized. As of December 31, 2024, our net deferred tax asset was $1.6 million.

Failure to comply with stringent capital requirements could result in regulatory criticism, requirements and restrictions.

The Bank is subject to capital adequacy guidelines and other regulatory requirements specifying minimum amounts and types of capital which it must maintain. From time to time, regulators implement changes to these regulatory capital adequacy guidelines. The failure to meet applicable regulatory capital requirements could result in one or more of our regulators placing limitations or conditions on our activities, including our growth initiatives, or restricting the commencement of new activities, and could affect client and investor confidence, our costs of funds and FDIC insurance costs, our ability to pay dividends on our common stock, our ability to make acquisitions, and our business, results of operations and financial condition. These limitations establish a maximum percentage of eligible retained income that could be utilized for these actions.

Financial institutions, such as the Bank, face a risk of noncompliance and enforcement action with the Bank Secrecy Act and other anti-money laundering statutes and regulations.

The BSA, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective anti-money laundering program and file suspicious activity and currency transaction reports as appropriate. The Financial Crimes Enforcement Network, established by the U.S. Department of the Treasury (the “Treasury Department”), to administer the Bank Secrecy Act, is authorized to impose significant civil money penalties for violations of those requirements and has recently engaged in coordinated enforcement efforts with the individual federal banking regulators, as well as the U.S. Department of Justice, Drug Enforcement Administration and the Internal Revenue Service. There is also increased scrutiny of compliance with the sanctions programs and rules administered and enforced by the Treasury Department’s Office of Foreign Assets Control (“OFAC”).

Table of Contents

In order to comply with regulations, guidelines and examination procedures in this area, we have dedicated significant resources to our anti-money laundering program. If our policies, procedures and systems are deemed deficient, we could be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the inability to obtain regulatory approvals to proceed with certain aspects of our business plans, including acquisitions and de novo branching.

We are subject to numerous laws and regulations of certain regulatory agencies, such as the Consumer Financial Protection Bureau, including the Community Reinvestment Act and fair lending laws, and failure to comply with these laws could lead to a wide variety of sanctions.

The CRA directs all insured depository institutions to help meet the credit needs of the local communities in which they are located, including low- and moderate-income neighborhoods. Each institution is examined periodically by its primary federal regulator, which assesses the institution’s performance. The Equal Credit Opportunity Act, the Fair Housing Act and other fair lending laws and regulations impose nondiscriminatory lending requirements on financial institutions. The CFPB, the U.S. Department of Justice and other federal agencies are responsible for enforcing these laws and regulations. The CFPB was created under the Dodd-Frank Act to centralize responsibility for consumer financial protection with broad rulemaking authority to administer and carry out the purposes and objectives of federal consumer financial laws with respect to all financial institutions that offer financial products and services to consumers.

Adverse supervisory findings regarding an institution’s performance under the CRA, fair lending or consumer lending laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions activity, restrictions on expansion, and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation. Such actions could have an adverse effect on our business, financial condition and results of operations.

The FRB may require us to commit capital resources to support the Bank, and we may not have sufficient access to such capital resources.

Federal law requires that a holding company act as a source of financial and managerial strength to its subsidiary bank and to commit resources to support such subsidiary bank. Under the “source of strength” doctrine and FRB regulations implementing it, the FRB may require a holding company to make capital injections into a troubled subsidiary bank and may charge the holding company with engaging in unsafe and unsound practices for failure to commit resources to a subsidiary bank. A capital injection may be required at times when the holding company may not have the resources to provide it and therefore may be required to attempt to borrow the funds or raise capital. Any loans by a holding company to its subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. In the event of a holding company’s bankruptcy, the bankruptcy trustee will assume any commitment by the holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank. Moreover, bankruptcy law provides that claims based on any such commitment will be entitled to a priority of payment over the claims of the institution’s general unsecured creditors, including the holders of its note obligations. Thus, any borrowing that must be done by the Company to make a required capital injection becomes more difficult and expensive and could have an adverse effect on our business, financial condition and results of operations. Moreover, it is possible that we will be unable to borrow funds when we need to do so.

Table of Contents

Our deposit services for businesses in the state licensed cannabis industry could expose us to liabilities and regulatory compliance costs.

Commencing in fourth calendar quarter of 2023, we implemented specialized deposit and lending services intended for cannabis-related business customers (“CRBs”). Medical use cannabis, as well as recreational use businesses, are legal in numerous states and the District of Columbia, including our primary markets of New York and New Jersey. However, such businesses are not legal at the federal level, and marijuana remains a Schedule I drug under the Controlled Substances Act of 1970. In 2014, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) published guidelines for financial institutions servicing state legal cannabis businesses. We have implemented a comprehensive control framework that includes written policies and procedures related to the on-boarding of such businesses and the monitoring and maintenance of such business accounts that comports with the FinCEN guidance. Additionally, our policies call for due diligence review of CRBs before they are on-boarded, including confirmation that businesses requiring licenses are properly licensed and maintain their licenses in good standing in the applicable state. Throughout the relationships, our policies call for continued monitoring of the businesses, including periodic site visits, confirmation that licenses are in good standing and reviews of business and compliance data, as applicable, to determine that the businesses continue to satisfy our requirements. The Bank may offer additional banking products and services to CRBs in the future. While we believe our policies and procedures allow us to operate in compliance with the FinCEN guidelines, there can be no assurance that compliance with the FinCEN guidelines will protect us from federal prosecution or other regulatory sanctions. Federal prosecutors have significant discretion and there can be no assurance that the federal prosecutors will not choose to strictly enforce the federal laws governing cannabis. Any change in the federal government’s enforcement position could potentially subject us to criminal prosecution and other regulatory sanctions. As a general matter, the medical and recreational cannabis business is considered high-risk, thus increasing the risk of a regulatory action against our BSA/AML program that would likely have adverse consequences, including but not limited to, preventing us from undertaking mergers, acquisitions and other expansion activities.

TECHNOLOGY RISKS

Cyber-attacks or other security breaches could adversely affect our operations, net income or reputation.

We regularly collect, process, transmit and store significant amounts of confidential information regarding our customers, employees and others and concerning our business, operations, plans and strategies. In some cases, this confidential or proprietary information is collected, compiled, processed, transmitted or stored by third parties on our behalf.

Information security risks have generally increased in recent years because of the proliferation of new technologies, the use of the internet and telecommunications technologies to conduct financial and other transactions and the increased sophistication and activities of perpetrators of cyber-attacks and mobile phishing. Mobile phishing, a means for identity thieves to obtain sensitive personal information through fraudulent e-mail, text or voice mail, is an emerging threat targeting the customers of financial entities. A failure in or breach of our operational or information security systems, or those of our third-party service providers, as a result of cyber-attacks or information security breaches or due to employee error, malfeasance or other disruptions could adversely affect our business, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, increase our costs and/or cause losses.

If this confidential or proprietary information were to be mishandled, misused or lost, we could be exposed to significant regulatory consequences, reputational damage, civil litigation and financial loss.

Table of Contents

In recent years, several financial services firms suffered successful cyber-attacks launched both domestically and from abroad, resulting in the disruption of services to clients, loss or misappropriation of sensitive or private information, and reputational harm. Further, information security risks for financial institutions like us are significant in part because of the evolving proliferation of new technologies, the use of the internet, mobile devices, and cloud technologies to conduct financial transactions and the increased sophistication and activities of hackers, terrorists, organized crime and other external parties, including foreign state actors. In addition, our clients often use their own devices, such as computers, smart phones and tablets, to manage their accounts, which may heighten the risk of system failures, interruptions or security breaches. If we fail to continue to upgrade our technology infrastructure and monitor our vendors to ensure effective information security relative to the type, size and complexity of our operations, we could become more vulnerable to cyber-attack and, consequently, subject to significant regulatory penalties.

Although we employ a variety of physical, procedural and technological safeguards to protect this confidential and proprietary information from mishandling, misuse or loss, these safeguards do not provide absolute assurance that mishandling, misuse or loss of the information will not occur, and that if mishandling, misuse or loss of information does occur, those events will be promptly detected and addressed. Similarly, when confidential or proprietary information is collected, compiled, processed, transmitted or stored by third parties on our behalf, our policies and procedures require that the third party agree to maintain the confidentiality of the information, establish and maintain policies and procedures designed to preserve the confidentiality of the information, and permit us to confirm the third party’s compliance with the terms of the agreement. However, these safeguards do not provide absolute assurance that mishandling, misuse or loss of the information will not occur, and that if mishandling, misuse or loss of information does occur, those events will be promptly detected and addressed. As information security risks and cyber threats continue to evolve, we may be required to expend additional resources to continue to enhance our information security measures and/or to investigate and remediate any information security vulnerabilities.

We have a continuing need for technological change, and we may not have the resources to implement new technology effectively, or we may experience operational challenges when implementing new technology or technology needed to compete effectively with larger institutions may not be available to us on a cost-effective basis.

The financial services industry undergoes rapid technological changes with frequent introductions of new technology-driven products and services, including developments in telecommunications, data processing, automation, internet-based banking, debit cards and so-called “smart cards” and remote deposit capture. In addition to serving clients better, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success will depend, at least in part, upon our ability to address the needs of our clients by using technology to provide products and services that will satisfy client demands for convenience, as well as to create additional efficiencies in our operations as we continue to grow and expand our products and service offerings. We offer electronic banking services for consumer and business customers via our website, www.hanoverbank.com, including internet banking and electronic bill payment, as well as mobile banking. We also offer debit cards, ATM cards, and automatic and ACH transfers. We may experience operational challenges as we implement these new technology enhancements or products, which could impair our ability to realize the anticipated benefits from such new technology or require us to incur significant costs to remedy any such challenges in a timely manner.

Many of our larger competitors have substantially greater resources to invest in technological improvements. Third parties upon which we rely for our technology needs may not be able to develop on a cost-effective basis the systems that will enable us to keep pace with such developments. As a result, competitors may be able to offer additional or superior products compared to those that we will be able to provide, which would put us at a competitive disadvantage. We may lose clients seeking new technology-driven products and services to the extent we are unable to provide such products and services. Accordingly, the ability to keep pace with technological change is important and the failure to do so could adversely affect our business, financial condition and results of operations.

Table of Contents

OPERATIONAL RISKS

Many types of operational risks can affect our earnings negatively.

We regularly assess and monitor operational risk in our businesses. Despite our efforts to assess and monitor operational risk, our risk management framework may not be effective in all cases. Factors that can impact operations and expose us to risks varying in size, scale and scope include:

● unsuccessful or difficult implementation of computer systems upgrades;

● deficiencies in services or service delivery;

While we have in place many controls and business continuity plans designed to address these factors and others, these plans may not operate successfully to mitigate these risks effectively. If our controls and business continuity plans do not mitigate the associated risks successfully, such factors may have a negative impact on our business, financial condition or results of operations. In addition, an important aspect of managing our operational risk is creating a risk culture in which all employees fully understand that there is risk in every aspect of our business and the importance of managing risk as it relates to their job functions. We continue to enhance our risk management program to support our risk culture. Nonetheless, if we fail to provide the appropriate environment that sensitizes all of our employees to managing risk, our business could be impacted adversely.

Our ability to maintain our reputation is critical to the success of our business and the failure to do so may materially adversely affect our performance.

Our reputation is one of the most valuable assets of our business. A key component of our business strategy is to rely on our reputation for customer service and knowledge of local markets to expand our presence by capturing new business opportunities from existing and prospective customers in our market area and contiguous areas. As such, we strive to conduct our business in a manner that enhances our reputation. This is done, in part, by recruiting, hiring and retaining employees who share our core values of being an integral part of the communities we serve, delivering superior service to our customers and caring about our customers and associates. If our reputation is negatively affected, by the actions of our employees or otherwise, our business and, therefore, our operating results may be materially adversely affected.

Table of Contents

We are subject to certain operational risks, including, but not limited to, customer, employee or third-party fraud and data processing system failures and errors.

We rely on the ability of our employees and systems to process a high number of transactions. Operational risk is the risk of loss resulting from our operations, including but not limited to, the risk of fraud by employees or persons outside our company, the execution of unauthorized transactions by employees, errors relating to transaction processing and technology, breaches of our internal control systems and compliance requirements. Insurance coverage may not be available for such losses, or where available, such losses may exceed insurance limits. This risk of loss also includes the potential legal actions that could arise as a result of operational deficiencies or as a result of non-compliance with applicable regulatory standards, adverse business decisions or their implementation, or customer attrition due to potential negative publicity. In the event of a breakdown in our internal control systems, improper operation of systems or improper employee actions, we could suffer financial loss, face regulatory action, and/or suffer damage to our reputation.

We may be subject to environmental liabilities in connection with the real properties we own and the foreclosure on real estate assets securing our loan portfolio.

In the course of our business, we may foreclose on and take title to real estate or otherwise be deemed to be in control of property that serves as collateral on loans we make. As a result, we could be subject to environmental liabilities with respect to those properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination, or we may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property.

The cost of removal or abatement may substantially exceed the value of the affected properties or the loans secured by those properties, we may not have adequate remedies against the prior owners or other responsible parties and we may not be able to resell the affected properties either before or after completion of any such removal or abatement procedures. If material environmental problems are discovered before foreclosure, we generally will not foreclose on the related collateral or will transfer ownership of the loan to a subsidiary. It should be noted, however, that the transfer of the property or loans to a subsidiary may not protect us from environmental liability. Furthermore, despite these actions on our part, the value of the property as collateral will generally be substantially reduced or we may elect not to foreclose on the property and, as a result, we may suffer a loss upon collection of the loan. Any significant environmental liabilities could have an adverse effect on our business, financial condition and results of operations.

Our operations could be interrupted if our third-party service providers experience difficulty, terminate their services or fail to comply with banking regulations.

Hanover Bancorp, Inc. /MD HNVR US Equity

HNVR · 10-K · period ended 2024-12-31

Item 1.Business

Item 1A. Risk Factors

Hanover Bancorp, Inc. /MD HNVR US Equity☆

HNVR · 10-K · period ended 2024-12-31

Item 1.Business

Item 1A. Risk Factors

Hanover Bancorp, Inc. /MD HNVR US Equity