MSBI US Equity☆

msbi-20251231

Table ofContents

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark one)

☒Annual Report Pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934

For the fiscal year endedDecember 31, 2025

or

☐Transition Report Pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934

For the transition period from ______________ to _______________

Commission File Number001-35272

MIDLAND STATES BANCORP, INC.

(Exact name of registrant as specified in its charter)

Effingham, IL (Zip Code)

(Address of principal executive offices)

(217)342-7321

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading symbol(s) Name of each exchange on which registered

Common Stock, $0.01 par value MSBI The Nasdaq Stock Market LLC

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act.☐ Yes☒No

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act.☐ Yes☒No

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.☒Yes☐ No

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). ☒Yes☐ No

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management's assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant's executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act).☐ Yes☒ No

The aggregate market value of the Registrant’s voting and non-voting common equity held by non-affiliates on June 30, 2025 was $466,599,960 (based on the closing price on the Nasdaq Global Select Market on that date of $22.65).

As of February 13, 2026, the Registrant had 20,989,589 shares of outstanding common stock, $0.01 par value.

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the Proxy Statement for our Annual Meeting of Shareholders, to be filed within 120 days after December 31, 2025, are incorporated by reference into Part III of this Form 10-K to the extent indicated in such part.

Table ofContents

MIDLAND STATES BANCORP, INC.

2025 ANNUAL REPORT ON FORM 10-K

TABLE OF CONTENTS

Page

PART I

Item 1. Business 4

Item 1A. Risk Factors 16

Item 1B. Unresolved Staff Comments 27

Item 1C. Cybersecurity 28

Item 2. Properties 29

Item 3. Legal Proceedings 29

Item 4. Mine Safety Disclosures 29

PART II

Item 6. [Reserved] 30

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 53

Item 8. Financial Statements and Supplementary Data 54

Item 9A. Controls and Procedures 120

Item 9B. Other Information 121

Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 121

PART III

Item 10. Directors, Executive Officers and Corporate Governance 122

Item 11. Executive Compensation 122

Item 14. Principal Accountant Fees and Services 123

PART IV

Item 15. Exhibits and Financial Statement Schedules 123

1

Table ofContents

GLOSSARY OF ABBREVIATIONS AND ACRONYMS

As used in this report, references to the "Company," "we," "our," "us," and similar terms refer to the consolidated entity consisting of Midland States Bancorp, Inc. and its wholly owned subsidiaries. Midland States Bancorp refers solely to the parent holding company and Midland States Bank (the "Bank") refers to our wholly owned banking subsidiary.

The acronyms and abbreviations identified below are used throughout this report, including the Notes to the Consolidated Financial Statements. You may find it helpful to refer to this page as you read this report.

ACL Allowance for credit losses on loans

ASU Accounting Standards Update

ATM Automated teller machine

BaaS Banking-as-a-Service

BHCA Bank Holding Company Act of 1956, as amended

CBLR Community Bank Leverage Ratio

CFPB Consumer Financial Protection Bureau

CISA Cybersecurity and Infrastructure Security Agency

CRA Community Reinvestment Act

CRE Commercial Real Estate

DFPR Illinois Department of Financial and Professional Regulation

DIF Deposit Insurance Fund

Exchange Act Securities Exchange Act of 1934

FASB Financial Accounting Standards Board

FDIC Federal Deposit Insurance Corporation

Federal Reserve Board of Governors of the Federal Reserve System

FHA Federal Housing Administration

FHLB Federal Home Loan Bank

FinTech Financial Technology

FOMC Federal Open Market Committee

FRB Federal Reserve Bank

GAAP U.S. generally accepted accounting principles

GreenSky GreenSky, LLC

Illinois CRA Illinois Community Reinvestment Act

LendingPoint LendingPoint, LLC

LGD Loss given default

Midland Trust Midland States Preferred Securities Trust

Nasdaq Nasdaq Global Select Market

NII at Risk Net Interest Income at Risk

OREO Other real estate owned

PCAOB Public Company Accounting Oversight Board

PCD Purchased credit deteriorated

PD Probability of default

Q-Factor Qualitative factor

SBA Small Business Administration

SEC U.S. Securities and Exchange Commission

SOFR Secured Overnight Financing Rate

Treasury U.S. Department of the Treasury

2

Table ofContents

Safe Harbor Statement Under the Private Securities Litigation Reform Act of 1995

This Annual Report on Form 10-K contains certain “forward-looking statements” within the meaning of, and are intended to be covered by the safe harbor provisions of, the Private Securities Litigation Reform Act of 1995. These forward-looking statements reflect our current views with respect to, among other things, future events and our financial performance. These statements are often, but not always, made through the use of words or phrases such as “may,” “might,” “should,” “could,” “predict,” “potential,” “believe,” “expect,” “continue,” “will,” “anticipate,” “seek,” “estimate,” “intend,” “plan,” “projection,” “goal,” “target,” “outlook,” “aim,” and “would” or the negative version of those words or other comparable words or phrases of a future or forward-looking nature. These forward-looking statements are not historical facts and are based on current expectations, estimates and projections about our industry, management’s beliefs and certain assumptions made by management, many of which, by their nature, are inherently uncertain and beyond our control. Accordingly, we caution you that any such forward-looking statements are not guarantees of future performance and are subject to risks, assumptions, estimates and uncertainties that are difficult to predict. Although we believe that the expectations reflected in these forward-looking statements are reasonable as of the date made, actual results may prove to be materially different from the results expressed or implied by the forward-looking statements.

A number of important factors could cause our actual results to differ materially from those indicated in these forward-looking statements, including those factors identified in Item 1A – "Risk Factors” or Item 7 – "Management’s Discussion and Analysis of Financial Condition and Results of Operations” or the following:

•business, economic and political conditions, particularly those affecting the financial services industry and our primary market areas;

•the effects of interest rates, including on our net interest income and the value of our securities portfolio as well as monetary and fiscal policies of the U.S. government, including policies of the Treasury and the Federal Reserve;

•factors that can impact the performance of our loan portfolio, including real estate values and liquidity in our primary market areas, the financial health of our commercial borrowers and the success of construction projects that we finance;

•our ability to successfully manage our credit risk and the sufficiency of our allowance for credit losses on loans;

•the failure of assumptions and estimates underlying the establishment of our allowances for credit losses on loans, and estimation of values of collateral and various financial assets and liabilities;

•compliance with governmental and regulatory requirements, particularly those relating to banking, consumer protection, securities and tax matters, and our ability to maintain licenses required in connection with commercial mortgage servicing operations;

•legislative and regulatory changes, including changes in banking, consumer protection, securities, trade and tax laws and regulations and their application by our regulators;

•our dependence upon third parties for certain information system, data management and processing services, and to provide key components of our business infrastructure;

•our ability to identify and address cyber-security risks, fraud and systems errors;

•our ability to effectively execute our strategic plan and manage our growth;

•the effects of competition from a wide variety of local, regional, national and other providers of financial, investment and insurance services, including FinTech companies and private credit funds, and demand for financial services in our market areas;

•credit risk and risks from concentrations by type of borrower, geographic area, collateral and industry within our loan portfolio and, large loans to certain borrowers including commercial real estate loans;

•effects on the U.S. economy resulting from the implementation of policies proposed by the presidential administration, including tariffs, deportations and changes in banking regulation;

•risks related to potential acquisitions, including our ability to receive required regulatory approvals, exposure to potential asset and credit quality risks and unknown or contingent liabilities, the time and costs of integrating systems, procedures and personnel, the need for capital to finance such transactions, and possible failures in realizing the anticipated benefits from acquisitions;

•changes in our senior management team and our ability to attract, motivate and retain qualified personnel;

•liquidity issues, including fluctuations in the fair value and liquidity of the securities we hold for sale and our ability to raise additional capital, if necessary;

3

Table ofContents

•the quality and composition of our loan and investment portfolios and the valuation of our investment portfolio;

•demand for loan products and deposit flows;

•the costs, effects and outcomes of existing or future litigation;

•changes in accounting principles, policies and guidelines; and

•the effects of severe weather, natural disasters, acts of war or terrorism, widespread disease or pandemics, and other external events.

The foregoing factors should not be construed as exhaustive and should be read together with the other cautionary statements included in this report. In addition, our past results of operations are not necessarily indicative of our future results. Any forward-looking statement speaks only as of the date on which it is made, and we do not undertake any obligation to update or review any forward-looking statement, whether as a result of new information, future developments or otherwise.

PART I

ITEM 1 – BUSINESS

Our Company

Midland States Bancorp, Inc., an Illinois corporation formed in 1988, is a diversified financial holding company headquartered in Effingham, Illinois. Our banking subsidiary, Midland States Bank, an Illinois state-chartered bank formed in 1881, has branches across Illinois and in Missouri, and provides a full range of commercial and consumer banking products and services, merchant credit card services, trust and investment management, insurance and financial planning services. As of December 31, 2025, the Company had total assets of $6.51 billion, and our wealth management group had assets under administration of approximately $4.48 billion.

Our strategic plan focuses on delivering a superior customer experience through a high-tech, high-touch approach, while remaining committed to core community banking and relationship-driven growth. We continue to enhance our regional franchise approach that serves our core customers with a consistent, high-performance culture rooted in our One Midland values and with a strong foundation in Enterprise Risk Management.

Our Principal Businesses

Community Banking. Our community banking business primarily consists of commercial and retail lending and deposit taking. We deliver a comprehensive range of banking products and services to individuals, businesses, municipalities and other entities within our market areas, which include Illinois and the St. Louis metropolitan area, where we operated 53 full-service banking offices as of December 31, 2025.

Our lending strategy is to maintain a broadly diversified loan portfolio based on the type of customer (i.e., businesses versus individuals), type of loan product (e.g., owner occupied commercial real estate, commercial loans, agricultural loans, etc.), geographic location and industries in which our business customers are engaged (e.g., manufacturing, retail, hospitality, etc.). We principally focus our commercial lending activities on loans that we originate from borrowers located in our market areas.

We market our lending products and services to qualified lending customers primarily through branch offices and high touch personal service. We focus our business development and marketing strategy primarily on middle market businesses. Our primary products and services include the following:

Commercial Loans. Our commercial loan portfolio is comprised primarily of term loans to purchase capital equipment and lines of credit for working capital and operational purposes to small and midsized businesses. Although most loans are made on a secured basis, loans may be made on an unsecured basis where warranted by the overall financial condition of the borrower. Part of our commercial loan portfolio includes loans extended to finance agricultural equipment and production. These loans are typically short-term loans extended to farmers and other agricultural producers to purchase seed, fertilizer and equipment.

Commercial Real Estate Loans. We offer real estate loans for owner occupied and non-owner occupied commercial property. The real estate securing our existing commercial real estate loans includes a wide variety of property types, such as owner occupied offices, warehouses and production facilities, office buildings, hotels, mixed-use residential and commercial facilities, retail centers, multifamily properties, skilled nursing and assisted living facilities. Our commercial real estate loan

4

Table ofContents

portfolio includes farmland loans. Farmland loans are generally made to a borrower actively involved in farming rather than to passive investors.

Construction and Land Development Loans. Our construction portfolio includes loans to small and midsized businesses to construct owner-user properties, loans to developers of commercial real estate investment properties and residential developments and, to a lesser extent, loans to individual clients for construction of single family homes in our market areas. These loans are typically disbursed as construction progresses and carry interest rates that may vary with SOFR.

The following table presents the balance and associated percentage of the major property types within our commercial real estate and construction and land development loan portfolios at December 31, 2025 and 2024:

December 31,

(dollars in thousands) Balance % Balance %

Residential Real Estate Loans. We offer first and second mortgage loans to our individual customers primarily for the purchase of primary residences. We also offer home equity lines of credit, consisting of loans secured by first or second mortgages primarily on owner occupied primary residences.

Consumer Installment Loans. We provide consumer installment loans for the purchase of automobiles, boats and other recreational vehicles, as well as for the purchase of major appliances and other home improvement projects. Our major appliance and other home improvement lending is originated principally through national and regional retailers and other vendors of these products and services. We have historically originated these loans through GreenSky and LendingPoint. In 2023, the Company ceased originating consumer loans through both GreenSky and LendingPoint. During the fourth quarter of 2024, we sold our LendingPoint portfolio of $87.1 million. During the second quarter of 2025, we sold participation interests in $317.5 million of our GreenSky consumer loan portfolio, while retaining the remaining $53.6 million of the portfolio.

Deposit Taking. We offer traditional depository products, including checking, savings, money market and certificates of deposits, to individuals, businesses, municipalities and other entities throughout our market areas. Deposits at the Bank are insured by the FDIC up to statutory limits. We also offer sweep accounts to our business and municipal customers. Sweep accounts are guaranteed through repurchase agreements. Our ability to gather deposits, particularly core deposits, is an important aspect of our business franchise.

Wealth Management. Our wealth management group operates under the name Midland Wealth Management and provides a comprehensive suite of trust and wealth management products and services, including financial and estate planning, trustee and custodial services, investment management, tax and insurance planning, business planning, corporate retirement plan consulting and administration and retail brokerage services through a nationally recognized third party broker dealer.

5

Table ofContents

Competition

We compete in a number of areas, including commercial and retail banking, residential mortgages, and wealth management. These industries are highly competitive, and the Bank and its subsidiaries face strong direct competition for deposits, loans, wealth management, and other financial-related services. We compete primarily with other community banks, thrifts and credit unions. In addition, we compete with large banks and other financial intermediaries, such as consumer finance companies, private credit funds, brokerage firms, mortgage banking companies, business finance companies, insurance companies, securities firms, mutual funds and certain government agencies as well as major retailers, all actively engaged in providing various types of loans and other financial services. Additionally, we face growing competition from so-called "online businesses" with few or no physical locations, including online banks, lenders and consumer and commercial lending platforms, and FinTech companies, as well as automated retirement and investment service providers. We believe that the range and quality of products that we offer, the knowledge of our personnel and our emphasis on building long-lasting relationships set us apart from our competitors.

The following table reflects information on the markets we currently serve, as of June 30, 2025, the most recent date for which such information was publicly available:

County State Deposits Market Share # of Banking Offices

Human Capital Resources

At December 31, 2025, we had 861 employees, including 22 part-time employees. Our employees are not represented by any collective bargaining group. Management considers its employee relations to be good. We believe our ability to attract and retain skilled employees is a key to our success. Accordingly, we strive to offer competitive compensation and benefits and regularly monitor market practices across our footprint.

We are focused on building the skills and capabilities required to operate efficiently and adapt to an evolving banking environment. Through Midland University, all employees have access to required regulatory training as well as skill-based education aligned with our strategic priorities. This includes development in areas such as generative artificial intelligence, robotic process automation, process improvement, and data-informed decision-making.

In addition to technical skills, we emphasize professional capabilities that support execution and change, including adaptability, growth mindset, collaboration, and change management. Leadership development is further reinforced through targeted programs such as our MASTERS program—Midland’s Advanced Study for Talent Enrichment and Resource

6

Table ofContents

Strengthening—which develops high-performing employees with leadership potential. Since 2016, more than 140 employees have participated in the program.

We believe our continued investment in skill development and leadership capability strengthens execution and positions the Company for long-term performance.

Corporate Information

Through our website at www.midlandsb.com under “Investors - SEC Filings,” we make available, free of charge, our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act, as well as proxy statements, as soon as reasonably practicable after we electronically file such material with, or furnish it to, the SEC. The contents of our website are not incorporated by reference into this report.

Supervision and Regulation

General

FDIC-insured institutions, their holding companies and their affiliates are extensively regulated under federal and state law. As a result, the Company’s growth and earnings performance may be affected not only by management decisions and general economic conditions, but also by the requirements of federal and state statutes and by the regulations and policies of various banking agencies, including the DFPR, the Federal Reserve, the FDIC and federal and state consumer financial protection agencies. Furthermore, taxation laws administered by the Internal Revenue Service and state taxing authorities, accounting rules developed by the FASB, securities laws administered by the SEC and state securities authorities and anti-money laundering and sanctions laws enforced by the Treasury have an impact on the Company’s business. The effect of these statutes, regulations, regulatory policies and accounting rules are significant to the Company’s operations and results.

Federal and state banking laws impose a comprehensive system of supervision, regulation and enforcement on the operations of FDIC-insured institutions, their holding companies and affiliates that is intended primarily for the protection of the FDIC-insured deposits and depositors of banks, rather than shareholders. These laws, and the regulations of the banking agencies issued under them, affect, among other things, the scope of the Company’s business, the kinds and amounts of investments that the Company and the Bank may make, required capital levels relative to assets, the nature and amount of collateral for loans, the establishment of branches, the ability of the Company or the Bank to merge, consolidate and acquire, dealings with the Company’s and the Bank’s insiders and affiliates and the Company’s payment of dividends.

In response to the global financial crisis and particularly following the passage of the Dodd Frank Act, the Company experienced heightened regulatory requirements and scrutiny. Although the reforms primarily targeted large banking organizations and systemically important financial institutions, their influence filtered down in varying degrees to community banks over time and caused the Company’s compliance and risk management processes, and the costs thereof, to increase. However, in May 2018, the Regulatory Relief Act was enacted by Congress in part to provide regulatory relief for community banks and their holding companies. The law clarified the inapplicability of certain Dodd-Frank Act reforms to community banking organizations, including relieving the Company of any requirement to engage in mandatory stress tests, maintain a risk committee or comply with the Volcker Rule’s complicated prohibitions on proprietary trading and ownership of private funds. The Company believes these reforms are favorable to its operations.

Over the past year, the federal banking agencies have continued efforts to reduce regulatory burden on banking organizations through various supervisory, regulatory and policy initiatives. These efforts have included the rescission or revision of certain rulemakings and proposals from prior administrations, initiatives to streamline examination and application processes and efforts to increase transparency and consistency in supervisory expectations. Congress also has considered additional measures aimed at easing specific compliance obligations for community banking organizations, although no reforms comparable in scope to the Regulatory Relief Act have been enacted to date. These regulatory developments may be favorable to the operations of the Company and the Bank; however, future changes in laws, regulations or supervisory priorities, and their impacts on the Company’s or the Bank’s business, remain uncertain.

The supervisory framework applicable to U.S. banking organizations subjects banks and bank holding companies to regular examination by their respective banking agencies. These examinations result in confidential examination reports and supervisory ratings that may impact an institution's operations, capital levels, growth and strategic initiatives. Examinations consider not only compliance with applicable laws and regulations, but also capital levels, asset quality and risk, management performance, earnings, liquidity and overall risk profile, among other factors. The banking agencies generally have broad discretion to impose restrictions and limitations on the operations of a regulated entity when the agencies determine, among other things, that such operations are unsafe or unsound, violate applicable law or are otherwise inconsistent with laws and

7

Table ofContents

regulations. Changes in supervisory approach or emphasis may materially affect the operations and financial results of the Company and the Bank, and the banking industry in general.

In recent supervisory communications, rulemakings and policy statements, federal banking agencies have indicated an increased focus on core, material financial risks (rather than riskmanagement processes), greater transparency in supervisory expectations, and efforts to reduce examination burden, particularly for community banks. For example, the Federal Reserve, the Bank’s primary federal regulator, has released guidance intended to streamline supervisory and examination processes, including the issuance of Matters Requiring Attention, and may propose, or join the FDIC’s and OCC’s interagency efforts regarding, rules to clarify standards for unsafe or unsound practices. These initiatives may enable management to focus more effectively on growth opportunities and the management of material financial risks.

The following is a summary of the material elements of the supervisory and regulatory framework applicable to the Company and the Bank. It does not describe all of the statutes, regulations and regulatory policies that apply, nor does it restate all of the requirements of those that are described. The descriptions are qualified in their entirety by reference to the particular statutory and regulatory provision.

The Role of Capital

Regulatory capital represents the net assets of a banking organization available to absorb losses. Because of the risks attendant to their business, FDIC-insured institutions, such as the Bank, as well as their holding companies (i.e., banking organizations) generally are required to hold more capital than other businesses, which directly affects the Company’s earnings capabilities. Although capital has historically been one of the key measures of the financial health of both bank holding companies and banks, its role became fundamentally more important in the wake of the global financial crisis, as the banking agencies recognized that the amount and quality of capital held by banking organizations prior to that crisis was insufficient to absorb losses during periods of severe stress. Certain provisions of the Dodd-Frank Act and the Basel III Rule, defined and discussed below, establish capital standards for banks and bank holding companies that are meaningfully more stringent than those in place previously.

Minimum Required Capital Levels. Banking organizations have been required to hold minimum levels of capital based on guidelines established by the Federal banking agencies since 1983. The minimum capital levels for banking organizations have been expressed in terms of ratios of “capital” divided by “total assets.” As discussed below, bank capital measures have become more sophisticated over the years and have focused more on the quality of capital and the risks of bank assets. Bank holding companies have historically had to comply with less stringent capital standards than their bank subsidiaries and have been able to raise capital with hybrid instruments such as trust preferred securities. The Dodd-Frank Act mandated the Federal Reserve to establish minimum capital levels for bank holding companies on a consolidated basis as stringent as those required for FDIC-insured institutions. A result of this change is that the proceeds of hybrid instruments, such as trust preferred securities, were excluded from capital over a phase-out period. However, if such securities were issued prior to May 19, 2010 by bank holding companies with less than $15 billion of assets, they may be retained, subject to certain restrictions. Because the Company has assets of less than $15 billion, the Company is able to maintain its trust preferred proceeds as capital but the Company has to comply with new capital mandates in other respects and will not be able to raise capital in the future through the issuance of trust preferred securities.

The Basel International Capital Accords. The risk-based capital guidelines for U.S. banking organizations since 1989 were based upon international capital accords (known as the “Basel I” accords) adopted by the international Basel Committee on Banking Supervision, a committee of central banks and bank supervisors that acts as the primary global standard-setter for prudential regulation, as interpreted and implemented by the U.S. federal banking agencies on an interagency basis. These accords recognized that bank assets for the purpose of the capital ratio calculations needed to be assigned risk weights (the theory being that riskier assets should require more capital) and that off-balance sheet exposures needed to be factored into the calculations.

Following the global financial crisis, the Group of Governors and Heads of Supervision, the oversight body of the Basel Committee on Banking Supervision, announced an agreement on a strengthened set of capital requirements for banking organizations around the world, known as the "Basel III" accords, to address deficiencies recognized in connection with the global financial crisis.

The Basel III Rule. In July 2013, the U.S. federal banking agencies approved the implementation of the Basel III regulatory capital reforms in pertinent part, and, at the same time, promulgated rules effecting certain changes required by the Dodd-Frank Act (the "Basel III Rule"). In contrast to capital requirements historically, which were in the form of guidelines, the Basel III Rule was released in the form of enforceable regulations by each of the federal banking agencies. The Basel III Rule is

8

Table ofContents

applicable to all banking organizations that are subject to minimum capital requirements, including national and state banks and savings and loan associations, as well as to bank and savings and loan holding companies, other than “small bank holding companies” and certain qualifying banking organizations that may elect a simplified framework (which the Company has not done). Thus, the Company and the Bank are each currently subject to, and comply with, the Basel III Rule as described below.

The Basel III Rule increased the required quantity and quality of capital and, for nearly every class of assets, it requires a more complex, detailed and calibrated assessment of risk and calculation of risk-weight amounts. The assignment of risk weights is likely to continue to be under review by the federal banking agencies as they seek to implement certain remaining elements of the Basel III accords. Previously, in 2023, the federal banking agencies proposed wide-ranging and significant changes to the Basel III Rules (the “Basel III Endgame Proposal”) to complete this implementation process; however, the proposal was not adopted, in part due to stakeholder concerns regarding potential economic impacts, data transparency, and the alignment of certain provisions with statutory tailoring requirements. Based on public statements from federal banking agency officials, it is anticipated that a revised proposal may be issued in the future. Any re-proposal of the Basel III Endgame Proposal is expected to primarily affect large, complex banking organizations.

Not only did the Basel III Rule increase most of the required minimum capital ratios in effect prior to 2015, but it introduced the concept of Common Equity Tier 1 Capital ("CET1"), which consists primarily of common stock, related surplus (net of Treasury stock), retained earnings and CET1 minority interests, subject to certain regulatory adjustments and deductions. The Basel III Rule also changed the definition of capital by establishing more stringent criteria for instruments to qualify as Additional Tier 1 Capital (primarily non-cumulative perpetual preferred stock that meets certain requirements) and Tier 2 Capital (primarily other types of preferred stock and subordinated debt, subject to limitations). In addition, the Basel III Rule also limited the inclusion of minority interests, mortgage-servicing assets and deferred tax assets in capital and required deductions from CET1 in the event that such assets exceed prescribed thresholds.

The Basel III Rule requires banking organizations to maintain minimum capital ratios to be deemed "adequately capitalized" as follows:

•A ratio of minimum CET1 equal to 4.5% of risk-weighted assets;

•A ratio of Tier 1 Capital equal to 6% of risk-weighted assets;

•A ratio of Total Capital (Tier 1 plus Tier 2 Capital) equal to 8% of risk-weighted assets; and

•A leverage ratio of Tier 1 Capital to total quarterly average assets equal to 4%.

In addition, banking organizations that want to make capital distributions (including for dividends and stock repurchases) and pay discretionary bonuses to executive officers without restriction must maintain 2.5% in CET1 in the form of a capital conservation buffer. The purpose of the conservation buffer is to ensure that banking organizations maintain a cushion of capital that can be used to absorb losses during periods of financial and economic stress. Factoring in the capital conservation buffer increases the minimum ratios described above to 7% for CET1, 8.5% for Tier 1 Capital and 10.5% for Total Capital.

Well Capitalized Requirements. The capital ratios described above represent minimum standards for banking organizations to be considered “adequately capitalized.” Banking agencies uniformly encourage banking organizations to maintain capital at levels above these minimums and to be classified as “well capitalized.” To that end, federal law and regulations provide various incentives for banking organizations to maintain regulatory capital at levels in excess of minimum regulatory requirements. For example, a well capitalized banking organization may: (i) qualify for exemptions from prior notice or application requirements otherwise applicable to certain activities; (ii) receive expedited processing of other required notices or applications; and (iii) accept, roll-over or renew brokered deposits. In addition, the banking agencies may require higher capital levels if warranted by the banking organization's particular operating circumstances or risk profiles. For example, the Federal Reserve’s capital guidelines contemplate that additional capital may be required to take adequate account of, among other things, interest rate risk, or the risks posed by concentrations of credit, nontraditional activities or securities trading activities. Further, any banking organization experiencing or anticipating significant growth would be expected to maintain capital ratios, including tangible capital positions (i.e., Tier 1 Capital less all intangible assets), well above the minimum regulatory levels.

Under the capital regulations of the Federal Reserve, in order to be well capitalized, a banking organization must maintain:

•A CET1 ratio to risk-weighted assets of 6.5% or more;

•A ratio of Tier 1 Capital to total risk-weighted assets of 8% or more;

9

Table ofContents

•A ratio of Total Capital to total risk-weighted assets of 10% or more; and

•A leverage ratio of Tier 1 Capital to total adjusted average quarterly assets of 5% or greater.

Under the Basel III Rule, a banking organization may be deemed well capitalized, while not complying with the capital conservation buffer described above.

As of December 31, 2025: (i) the Bank was not subject to a directive from the Federal Reserve or the DFPR to increase its capital; and (ii) the Bank was well capitalized, as defined by Federal Reserve regulations. As of December 31, 2025, the Company had regulatory capital in excess of the Federal Reserve’s requirements and met the Basel III Rule requirements to be well capitalized. The Company is also in compliance with the capital conservation buffer.

Prompt Corrective Action. The concept of a banking organization being “adequately capitalized" or "well capitalized” is part of a regulatory enforcement regime that provides the federal banking agencies with broad power to take “prompt corrective action” to resolve the problems of undercapitalized depository institutions based on the capital level of each particular institution. The extent of the banking agencies’ powers depends on whether the banking organization in question is “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” or “critically undercapitalized,” in each case as defined by regulation. Depending upon the capital category to which a banking organization is assigned, the banking agencies’ corrective powers include: (i) requiring the institution to submit a capital restoration plan; (ii) limiting the institution’s asset growth and restricting its activities; (iii) requiring the institution to issue additional capital stock (including additional voting stock) or to sell itself; (iv) restricting transactions between the institution and its affiliates; (v) restricting the interest rate that the institution may pay on deposits; (vi) ordering a new election of directors of the institution; (vii) requiring that senior executive officers or directors be dismissed; (viii) prohibiting the institution from accepting deposits from correspondent banks; (ix) requiring the institution to divest certain subsidiaries; (x) prohibiting the payment of principal or interest on subordinated debt; and (xi) ultimately, appointing a receiver for the institution.

Community Bank Capital Simplification. Community banking organizations have long raised concerns with the federal banking agencies about the regulatory burden, complexity, and costs associated with certain provisions of the Basel III Rule. In response, Congress provided an “off-ramp” for institutions, like the Company, with total consolidated assets of less than $10 billion as part of the Regulatory Relief Act. Section 201 of the Regulatory Relief Act specifically instructed the federal banking agencies to establish a single CBLR of between 8% and 10%. Under the final rule implementing this section of the Regulatory Relief Act, a community banking organization is eligible the CBLR framework if it has: (i) less than $10 billion in total consolidated assets; (ii) limited amounts of certain assets and off-balance sheet exposures; and (iii) a CBLR greater than 9%. In late 2025, the federal banking agencies proposed changes to the CBLR framework intended to encourage broader adoption, including reducing the required leverage ratio from 9% to 8%; however, the proposal has not yet been finalized. The Company has not currently determined to elect the CBLR, but it may elect the framework at any time.

Supervision and Regulation of the Company

General. The Company, as the sole shareholder of the Bank, is a bank holding company that has elected financial holding company status. As a bank holding company, the Company is registered with, and is subject to regulation supervision and enforcement by, the Federal Reserve under the BHCA. The Company is legally obligated to act as a source of financial and managerial strength to the Bank and to commit resources to support the Bank in circumstances where the Company might not otherwise do so. Under the BHCA, the Company is subject to periodic examination by the Federal Reserve. The Company is required to file with the Federal Reserve periodic reports of the Company’s operations and such additional information regarding the Company and its subsidiaries as the Federal Reserve may require.

Acquisitions and Activities. The primary purpose of a bank holding company is to control and manage banks. The BHCA generally requires the prior approval of the Federal Reserve for any merger involving a bank holding company or any acquisition by a bank holding company of another bank or bank holding company. Pursuant to the BHCA and the Dodd-Frank Act, the Federal Reserve may permit a well capitalized and well managed bank holding company to acquire banks located in any U.S. state, subject to federal deposit concentration limits, applicable nondiscriminatory state deposit-cap laws and state minimum-existence requirements for target banks (not exceeding five years).

The BHCA generally prohibits the Company from acquiring direct or indirect ownership or control of more than 5% of the outstanding class of the voting shares of any nonbanking entity and from engaging in any business other than that of banking, managing and controlling banks or furnishing services to banks and their subsidiaries. This general prohibition is subject to a number of exceptions. The principal exception allows bank holding companies to engage in, and to own shares of companies engaged in, certain businesses found by the Federal Reserve prior to November 11, 1999 to be “so closely related to banking ... as to be a proper incident thereto.” This authority permits the Company to engage in a variety of banking-related

10

Table ofContents

businesses, including the ownership and operation of a savings association, or any entity engaged in consumer finance, equipment leasing, the operation of a computer service bureau (including software development) and mortgage banking and brokerage services. The BHCA does not place formal territorial restrictions on the domestic activities of nonbank subsidiaries of bank holding companies. In addition to approval from the Federal Reserve that may be required in certain circumstances, prior approval for acquisitions by the Company may be required from other agencies, such as the agencies that regulate such nonbank companies.

Financial Holding Company Election. Bank holding companies that meet certain BHCA eligibility requirements and elect to operate as financial holding companies may engage in, or own shares in companies engaged in, a wider range of nonbanking activities, including securities and insurance underwriting and sales, merchant banking and any other activity that: (i) the Federal Reserve, in consultation with the Secretary of the Treasury, determines by regulation or order is financial in nature or incidental to any such financial activity; or (ii) the Federal Reserve determines by order to be complementary to any such financial activity, as long as the activity does not pose a substantial risk to the safety or soundness of FDIC-insured institutions or the financial system generally. In 2006, the Company elected to operate as a financial holding company. In order to maintain its status as a financial holding company, the Company and the Bank must be well capitalized, well managed and the Bank must maintain at least a satisfactory CRA rating. If the Federal Reserve determines that a financial holding company or a bank subsidiary is not well capitalized or well managed, the company has a period of time in which to achieve compliance once again, but during the period of noncompliance, the Federal Reserve may place any limitations on the company that it believes to be appropriate. Furthermore, if the Federal Reserve determines that a financial holding company’s subsidiary bank has not received a satisfactory CRA rating, that company will not be able to commence any new financial activities or acquire a company that engages in such activities.

Change in Control. Federal law prohibits any person or company from acquiring “control” of an FDIC-insured depository institution or its holding company without prior notice to the appropriate federal banking agency. “Control” is conclusively determined to exist upon the acquisition of 25% or more of the outstanding voting securities of a bank or bank holding company, but may be presumed arise under certain circumstances between 10% and 24.99% ownership.

Capital Requirements. Bank holding companies are required to maintain capital in accordance with Federal Reserve capital adequacy requirements under the Basel III Rule. For a discussion of capital requirements, see “The Role of Capital” above.

Dividend Payments. The Company’s ability to pay dividends to the Company’s shareholders may be affected by both general corporate law considerations and the policies and capital requirements of the Federal Reserve applicable to bank holding companies. As an Illinois corporation, the Company is subject to the limitations of the Illinois Business Corporations Act, as amended, which allows us to pay dividends unless, after such dividend, (i) the Company would be insolvent; or (ii) the Company’s net assets would be less than zero or less than the maximum amount payable at the time of distribution to shareholders having preferential rights in liquidation if it were then to be liquidated.

As a general matter, the Federal Reserve has indicated that the board of directors of a bank holding company should eliminate, defer or significantly reduce dividends to shareholders if: (i) the company’s net income available to shareholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends; (ii) the prospective rate of earnings retention is inconsistent with the company’s capital needs and overall current and prospective financial condition; or (iii) the company will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios. The Federal Reserve also possesses enforcement powers over bank holding companies and their nonbank subsidiaries to prevent or remedy actions that represent unsafe or unsound practices or violations of applicable statutes and regulations. Among these powers is the ability to proscribe the payment of dividends by banks and bank holding companies. In addition, under the Basel III Rule, banking organizations that want to pay unrestricted dividends must maintain 2.5% in CET1 attributable to the capital conservation buffer. See “The Role of Capital” above.

Monetary Policy. The monetary policy of the Federal Reserve has a significant effect on the operating results of bank holding companies and their subsidiaries. Among the tools available to the Federal Reserve to affect the money supply are open market transactions in U.S. government securities, changes in the discount rate on bank borrowings and changes in reserve requirements against bank deposits. These means are used in varying combinations to influence overall growth and distribution of bank loans, investments and deposits, and their use may affect interest rates charged on loans or paid on deposits, which may impact the business and operations of the Company and the Bank.

Federal Securities Regulation. The Company’s common stock is registered with the SEC under the Securities Act of 1933, as amended, and the Exchange Act. Consequently, the Company is subject to the information, proxy solicitation, insider trading and other restrictions and requirements of the SEC under the Exchange Act.

11

Table ofContents

Corporate Governance/Incentive Compensation. The Dodd-Frank Act addressed many investor protection, corporate governance and executive compensation matters that will affect most U.S. publicly traded companies. It increased shareholder influence over boards of directors by requiring companies to give shareholders a nonbinding vote on executive compensation and so-called “golden parachute” payments, and authorized the SEC to promulgate rules that would allow shareholders to nominate and solicit voters for their own candidates using a company’s proxy materials. The Dodd-Frank Act also directed the Federal Reserve, together with the other federal banking and financial services agencies, to promulgate rules prohibiting excessive compensation paid to executives of bank holding companies, regardless of whether such companies are publicly traded. Although several agencies have made repeated efforts to implement rules under this provision of the Dodd-Frank Act - including a proposal issued most recently in May 2024, which was subsequently withdrawn - no final rule has been adopted at this time. Nevertheless, the federal banking agencies have issued interagency guidance on sound incentive compensation practices for banking organizations, reflecting the agencies' recognition that incentive compensation practices in the financial industry were among the factors contributing to the global financial crisis. The interagency guidance recognizes three core principles for effective incentive compensation plans; (i) appropriately balancing risk and reward; (ii) compatibility with effective controls and risk management; and (iii) support by strong corporate governance, including active and effective oversight by the organization's board of directors. Although much of the guidance is directed at large banking organizations that are expected to maintain systematic and formalized policies and procedures, smaller banking organizations, like the Company, are expected to implement less extensive and less formalized systems pursuant to the guidance.

Supervision and Regulation of the Bank

General. The Bank is an Illinois-chartered bank that is a member of the Federal Reserve System (a "member bank"). The deposit accounts of the Bank are insured by the FDIC’s DIF to the maximum extent provided under federal law and FDIC regulations, currently $250,000 per insured depositor, per ownership category. Ongoing policy discussions at the federal level have focused on potential changes to deposit insurance coverage, including possible adjustments to coverage limits, although no changes have been enacted. As an Illinois-chartered FDIC-insured bank, the Bank is subject to the examination, supervision, reporting and enforcement requirements of the DFPR, its chartering authority, and, the Federal Reserve, as the primary federal regulator of state member banks, and the FDIC, as administrator of the DIF.

Deposit Insurance Assessments. As an FDIC-insured institution, the Bank is required to pay deposit insurance premium assessments to the FDIC. The FDIC has adopted a risk-based assessment system whereby FDIC-insured institutions pay insurance premiums at rates based on their risk classification. For institutions like the Bank that are not considered large and highly complex banking organizations, assessments are now based on examination ratings and financial ratios. The total base assessment rates, effective as of January 1, 2023, currently range from 2.5 basis points (for the lowest risk institutions) to 32 basis points or beyond (for higher risk institutions).

At least semi-annually, the FDIC updates its loss and income projections for the DIF and, if needed, increases or decreases the assessment rates, following notice and comment on proposed rulemaking.

For this purpose, the reserve ratio is the DIF balance divided by estimated insured deposits. In response to the global financial crisis, the Dodd-Frank Act increased the minimum reserve ratio from 1.15% to 1.35% of the estimated amount of total insured deposits. In its May 2025 report, the FDIC stated that the reserve ratio likely will reach the statutory minimum by the September 30, 2028 deadline; and no adjustments to the base assessment rates are currently projected.

In addition, because the cost of the failures of Silicon Valley Bank and Signature Bank attributable to the systemic risk exception to the DIF was approximately $16.7 billion, the FDIC adopted a special assessment for banking organizations with assets of $5 billion or more. The FDIC has been collecting the special assessment over eight quarters, at a quarterly rate of 3.36 basis points for the initial seven quarters of the collection period (ending on December 30, 2025) and at a quarterly rate of 2.97 basis points for the eighth and final collection period. The quarterly special assessment rate is applied to the special assessment base equal to an FDIC-insured-institution's estimated uninsured deposits for the December 31, 2022 reporting period, adjusted to exclude the first $5 billion in estimated uninsured deposits. Although the Bank was technically subject to the FDIC special assessment as part of a banking organization with assets of $5 billion or more, the Bank does not have to pay this assessment.

Supervisory Assessments. All Illinois-chartered banks are required to pay supervisory assessments to the DFPR to fund the operations of that agency. The amount of the assessment is calculated on the basis of the Bank’s total assets. During the year ended December 31, 2025, the Bank paid supervisory assessments to the DFPR totaling approximately $0.5 million.

Capital Requirements. Banks are generally required to maintain capital levels in excess of other businesses. For a discussion of regulatory capital requirements applicable to the Bank, see “The Role of Capital” above.

12

Table ofContents

Liquidity Requirements. Liquidity is a measure of the ability and ease with which bank assets may be converted to cash to meet financial obligations, such as deposits or other funding sources. Banks are required to implement liquidity risk management frameworks that ensure they maintain sufficient liquidity, including a cushion of unencumbered, high quality liquid assets, to withstand a range of stress events. The level and speed of deposit outflows contributing to the failures of Silicon Valley Bank, Signature Bank and First Republic Bank in 2023 was unprecedented and contributed to acute liquidity and funding strain, underscoring the importance of liquidity risk management and contingency funding planning by insured depository institutions like the Bank, as highlighted in a 2023 addendum to existing interagency guidance on funding and liquidity risk management.

The primary roles of liquidity risk management are to: (i) prospectively assess the need for funds to meet financial obligations; and (ii) ensure the availability of cash or collateral to fulfill those needs at the appropriate time by coordinating the various sources of funds available to the institution under normal and stressed conditions. Because the global financial crisis was in part a liquidity crisis, the Basel III Rule includes a liquidity framework that requires the largest FDIC-insured institutions to measure their liquidity against specific liquidity tests. One test, referred to as the liquidity coverage ratio, or LCR, is designed to ensure that the banking organization has an adequate stock of unencumbered high-quality liquid assets that can be converted easily and immediately in private markets into cash to meet liquidity needs for a 30-calendar day liquidity stress scenario. The other test, known as the net stable funding ratio, or NSFR, is designed to promote more medium- and long-term funding of the assets and activities of FDIC-insured institutions over a one-year horizon. These tests provide an incentive for banks and bank holding companies to increase their holdings in Treasury securities and other sovereign debt as a component of assets, increase the use of long-term debt as a funding source and rely on stable funding like core deposits (in lieu of brokered deposits).

Although these rules and tests do not apply to the Bank, it continues to review its liquidity risk management policies in light of regulatory requirements and industry developments.

Dividend Payments. The primary source of funds for the Company is dividends from the Bank. Under Illinois banking law, Illinois-chartered banks generally may pay dividends only out of undivided profits. The DFPR may restrict the declaration or payment of a dividend by an Illinois-chartered bank, such as the Bank. The Federal Reserve Act also imposes limitations on the amount of dividends paid by state member banks, such as the Bank. Without prior approval from the Federal Reserve, a state member bank may not pay dividends in any calendar year that, in total, exceed the sum of the bank’s year-to-date net income, plus the bank’s retained income for the two preceding calendar years.

Moreover, the payment of dividends by any FDIC-insured institution is affected by the requirement to maintain adequate capital pursuant to applicable capital adequacy guidelines and regulations, and an FDIC-insured institution generally is prohibited from paying any dividends if, following payment thereof, the institution would be undercapitalized. As described above, the Bank exceeded its capital requirements under applicable guidelines as of December 31, 2025. Notwithstanding the availability of funds for dividends, however, the Federal Reserve, the FDIC, and the DFPR may prohibit the payment of dividends by the Bank if any of them determine such payment would constitute an unsafe or unsound practice. In addition, under the Basel III Rule, banking organizations that want to pay unrestricted dividends have to maintain 2.5% in CET1 attributable to the capital conservation buffer. See “The Role of Capital” above.

State Bank Investments, Activities and Acquisitions. The Bank is permitted to make investments and engage in activities directly or through subsidiaries as authorized by Illinois law. However, under federal law and FDIC regulations, FDIC-insured state banks are prohibited, subject to certain exceptions, from making or retaining equity investments that are not permissible for a national bank. Federal law and FDIC regulations also prohibit FDIC-insured state banks and their subsidiaries from engaging as principal in any activity that is not permitted for a national bank unless such banks meet, and continue to meet, minimum regulatory capital requirements and the FDIC determines that the activity would not pose a significant risk to the DIF. These restrictions have not had, and are not currently expected to have, a material impact on the operations of the Bank.

The Bank may be required to obtain approval from the DFPR and the Federal Reserve (or in some cases, the FDIC) before engaging in certain acquisitions or mergers under applicable state and federal law. With respect to interstate merger and acquisitions, federal law permits state banks to merge with out-of-state banks subject to: (i) regulatory approval; (ii) federal and state deposit concentration limits; and (iii) state law requirements that the merging bank has been in existence for a minimum period of time (not to exceed five years), prior to the merger. In 2025, the FDIC and the OCC rescinded certain prior administrative actions regarding the review and approval of mergers and acquisitions, with the intent of streamlining and expediting the regulatory review of certain merger and acquisition applications. Although the Federal Reserve has not released any updated policy statement or rules regarding its review process under the Bank Merger Act in recent years, leading Federal Reserve officials have expressed a desire for increased consistency, transparency and efficiency, where appropriate, in the review of merger and acquisition applications.

13

Table ofContents

Branching Authority. Illinois banks, such as the Bank, have the authority under Illinois law to establish branches anywhere in the State of Illinois, subject to receipt of all required regulatory approvals. The Dodd-Frank Act further permits well capitalized and well managed banks to establish new interstate branches or the acquisition of individual branches of a bank in another state (rather than the acquisition of an out-of-state bank in its entirety) without impediments.

Affiliates and Insider Transactions. The Bank is subject to certain restrictions imposed by federal law on “covered transactions” between the Bank and its “affiliates.” The Company is an affiliate of the Bank for purposes of these restrictions. Covered transactions subject to these restrictions include extensions of credit to the Company, investments in the stock or other securities of the Company and the acceptance of the stock or other securities of the Company as collateral for loans made by the Bank. The Dodd-Frank Act enhanced these requirements by expanding the definition of “covered transactions” and extending the period of time for which collateral requirements for such transactions must be maintained.

Certain limitations and reporting requirements also apply to extensions of credit by the Bank to its directors and officers, to directors and officers of the Company and its subsidiaries, to principal shareholders of the Company and to “related interests” of such directors, officers and principal shareholders. In addition, federal law and regulations may govern the terms upon which any person who is a director or officer of the Company or the Bank, or a principal shareholder of the Company, may obtain credit from banks with which the Bank maintains a correspondent relationship.

Safety and Soundness Standards/Risk Management. The federal banking agencies have adopted operational and managerial standards to promote the safety and soundness of FDIC-insured institutions. The standards apply to internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, compensation, fees and benefits, asset quality and earnings.

These safety and soundness standards generally prescribe the goals to be achieved in each area, and each institution is responsible for establishing its own procedures to achieve those goals. Although regulatory standards do not have the force of law, if an FDIC-insured institution operates in an unsafe and unsound manner, its primary federal agency may require the submission of a plan to achieve and maintain compliance. Failure to submit an acceptable compliance plan, or to implement an approved plan in any material respect may result in a formal agency order directing the institution to cure the deficiency. Until such deficiency is resolved, the agency may restrict the institution’s rate of growth, require additional capital, limit deposit rates or take other corrective action as deemed appropriate. Noncompliance with safety and soundness principles also may constitute grounds for other enforcement action by the federal banking agencies, including cease and desist orders and civil money penalty assessments.

The federal banking agencies have emphasized the importance of sound risk management processes and strong internal controls when evaluating the activities of FDIC-insured institutions. In 2025, however, the agencies signaled a shift toward focusing on the identification and management of material financial risks, rather than primarily on adherence to prescriptive operational processes. Although effective risk management, internal controls and board and management oversight remain important, supervisory attention may increasingly center on whether specific practices pose material harm to the institution's financial condition or create a risk of loss to the DIF. Despite this potential shift in focus, the banking agencies continue to evaluate a broad spectrum of risks, including, but not limited to, credit, market, liquidity, operational and legal risks - emphasizing their potential impact on safety and soundness. Notably, the federal banking agencies have indicated that they intend to remove reputation risks from consideration, citing concerns about its use in restricting banking services to certain industries or groups. The key risk themes identified by the Bank for 2025 are discussed under Risk Factors below. The Bank is expected to have active board and senior management oversight; adequate policies, procedures, and limits; adequate risk measurement, monitoring, and management information systems; and comprehensive internal controls. The federal banking agencies also have released specific risk management guidance on certain topics, including third-party relationships, in response to the proliferation of relationships between banking organizations and financial technology companies (although the guidance applies more broadly).

Privacy and Cybersecurity. The Bank is subject to numerous U.S. federal and state laws and regulations aimed at protecting non-public personal and confidential information of their customers. These laws require the Bank to periodically disclose its privacy policies and practices regarding the sharing of non-public customer information, and, in certain circumstances, permit consumers to opt out of the sharing of information with unaffiliated third parties. They also limit the Bank’s ability to share certain information with affiliates and non-affiliates for marketing and/or non-marketing purposes, or to contact customers with marketing offers. In addition, the Bank is required to implement a comprehensive information security program that includes administrative, technical and physical safeguards to ensure the security and confidentiality of customer records and information. These security and privacy policies and procedures, for the protection of personal and confidential information, are in effect across all businesses and geographic locations. The Bank and the Company also are subject to federal and state laws and regulations requiring notifications and disclosures regarding certain cybersecurity incidents. In addition, the

14

Table ofContents

Bank must consider and address cybersecurity risks as part of its risk management processes, including implementing and maintaining appropriate safeguards, monitoring and testing systems and overseeing the cybersecurity practices of its service providers. Regulatory guidance emphasizes that cybersecurity should be integrated into overall enterprise risk management and business continuity planning.

Federal Home Loan Bank System. The Bank is a member of a FHLB, which serves as a central credit facility for its members. The FHLB is funded primarily from proceeds from the sale of obligations of the FHLB system. It makes loans to member banks in the form of FHLB advances. All advances from the FHLB are required to be fully collateralized as determined by the FHLB.

Community Reinvestment Act Requirements. The CRA imposes on the Bank a continuing and affirmative obligation, consistent with safe and sound operations, to help meet the credit needs of the entire community, including low- and moderate-income neighborhoods. The Federal Reserve regularly assess the Bank’s record of meeting these credit needs through periodic CRA examinations. The Bank's CRA ratings derived from these examinations can have significant impacts on the activities in which the Bank and the Company may engage. For example, a low CRA rating may impact the review of applications for acquisitions by the Bank or the Company's financial holding company status.

In October 2023, the federal banking agencies issued a final rule intended to strengthen and modernize the CRA regulations (the “CRA Rule”). The CRA Rule was subsequently challenged in court, which prevented it from taking effect. In 2025, the federal banking agencies issued a proposed rule to rescind the CRA Rule and reinstate the prior CRA regulatory framework adopted in 1995.

In 2022, the Bank, as an Illinois-chartered bank, became subject to the state-level CRA standards, following passage of the Illinois CRA. As a result, in addition to federal CRA examinations, the DFPR also assesses the Bank’s record of meeting the credit needs of its communities. Similar to the potential impact under the federal CRA regime, the Bank's CRA performance may affect applications for additional acquisitions or activities.

Anti-Money Laundering/Sanctions. The Bank Secrecy Act (BSA) is a U.S. federal statutory framework, as amended and supplemented by additional laws and implemented through regulations, which is designed to combat money laundering, the financing of terrorism and other illicit financial activity. The BSA and related anti-money laundering/countering the financing of terrorism ("AML/CFT") are intended to prevent terrorists and criminals from accessing the U.S. financial system and haves significant implications for FDIC-insured institutions, brokers, dealers and other businesses involved in the transmission of funds. Together, this regulatory framework provides a foundation to promote financial transparency and deter and detect efforts to misuse the U.S. financial system to launder criminal proceeds, finance terrorist acts or facilitate other illicit conduct. The BSA and related laws and regulations require financial institutions to establish and maintain policies and procedures for addressing: (i) customer identification and customer due diligence; (ii) the prevention and detection of money laundering and terrorist financing; (iii) the identification and reporting of suspicious activities and certain currency transactions; (iv) compliance with laws relating to currency crimes; and (v) cooperation with law enforcement authorities. The Bank also must comply with stringent economic and trade sanctions regimes administered and enforced by the Office of Foreign Assets Control. Although core AML/CFT statutory requirements and regulatory expectations remain unchanged, federal banking agencies and the Financial Crimes Enforcement Network (FinCEN) appear to be pursuing efforts to modernize and streamline AML/CFT compliance through a more risk-based approach. These efforts include revised examination expectations, increased focus on program effectiveness, and initiatives intended to reduce unnecessary compliance burden where institutions can demonstrate strong risk governance and effective controls.

Concentrations in CRE. Concentration risk exists when FDIC-insured institutions allocate a disproportionate amount of assets to a single industry or economic segment. Concentration in CRE lending is one area of regulatory focus that has, in recent years, been subject to additional scrutiny by federal banking agencies as well as the SEC (for publicly-traded banking organizations) in recent years. Interagency CRE Guidance provides supervisory criteria, including the following numerical indicators, to assist bank examiners in identifying banks with potentially significant CRE loan concentrations that may warrant greater supervisory scrutiny. These indicators include:

(i) total CRE loans exceeding 300% of capital and increasing 50% or more in the preceding three years; or

(ii) construction and land development loans exceeding 100% of capital. The CRE Guidance does not establish binding limits on CRE lending activities, but rather is intended to inform supervisory assessments of whether an institution's risk profile, earnings capacity and capital levels are commensurate with its CRE exposure. In recent years, the federal banking agencies have issued statements to reinforce prudent risk-management practices related to CRE lending, in response to observed growth in many CRE markets, increased competitive pressures, rising CRE concentrations, and an easing of CRE underwriting

15

Table ofContents

standards. In other statements, the federal banking agencies also have reminded FDIC-insured institutions to maintain underwriting discipline and monitor and manage the risks arising from CRE lending, including by holding capital commensurate with those risks. As of December 31, 2025, the Bank did not exceed these guidelines.

Consumer Financial Services. The historical structure of federal consumer protection regulation applicable to all providers of consumer financial products and services changed significantly on July 21, 2011, when the CFPB commenced operations to supervise and enforce consumer protection laws. The CFPB has broad rulemaking authority for a wide range of consumer protection laws that apply to all providers of consumer products and services, including the Bank, as well as the authority to prohibit “unfair, deceptive or abusive” acts and practices. The CFPB has examination and enforcement authority over providers with more than $10 billion in assets. FDIC-insured institutions with $10 billion or less in assets, like the Bank, continue to be examined by their applicable primary federal banking agencies.

In response to mortgage-related abuses that contributed to the global financial crisis, the Dodd-Frank Act significantly expanded underwriting, disclosure, and anti-predatory lending requirements for residential mortgage loans, including by imposing ability-to-repay standards and establishing a presumption of compliance for certain “qualified mortgages.” The CFPB has continued to refine these requirements through additional rulemaking addressing qualified mortgages and ability-to-repay standards.

Over the last several years, the CFPB has taken an aggressive approach to the regulation (and supervision, where applicable) of providers of consumer financial products and services. However, more recently, changes in leadership and policy direction have led to: (i) shifts in regulatory priorities, including the rescission or reconsideration of certain CFPB guidance and rules; (ii) a reduction in CFPB enforcement activity; and (iii) constraints on the CFPB’s budget and resources, although the CFPB continues to retain broad statutory authority to administer, supervise and enforce federal consumer financial protection laws. In addition, state banking and other financial services regulatory agencies retain authority to administer and enforce state consumer financial protection laws and could increase supervisory or enforcement activity in response to changes in federal regulatory priorities.

The CFPB’s rules have not had a significant impact on the Bank’s operations, except for higher compliance costs. The Bank must also comply with certain state consumer protection laws and requirements in the states in which it operates.

Regulation of Affiliates

The Company operates one affiliate that is regulated by functional financial regulatory agencies. Midland Wealth Advisors, LLC is a registered investment advisor. The SEC has supervisory, examination and enforcement authority over its operations. The SEC’s focus is primarily for the protection of investors under the federal securities laws. As a subsidiary of the Company, Midland Wealth Advisors, LLC is also subject to the supervision of the Federal Reserve on a consolidated basis.

ITEM 1A – RISK FACTORS

The material risks that management believes affect the Company are described below. You should carefully consider the risks, together with all of the information included herein. The risks described below are not the only risks the Company faces. Additional risks not presently known or that the Company believes are immaterial also may have a material adverse effect on the Company’s results of operations and financial condition.

Macroeconomic and Credit Risks

A decline in general business and economic conditions and any regulatory responses to such conditions could have a material adverse effect on our business, financial position, results of operations and growth prospects.

Our business and operations are sensitive to business and economic conditions in the United States generally and the state of Illinois and the St. Louis metropolitan area in particular. If the national, regional and local economies experience worsening economic conditions, our growth and profitability could be harmed. Weak economic conditions are characterized by, among other indicators, elevated levels of unemployment, fluctuations in debt and equity capital markets, increased delinquencies on mortgage, commercial and consumer loans, residential and commercial real estate price declines, and lower home sales and commercial activity. All of these factors are generally detrimental to our business. Our business is significantly affected by monetary and other regulatory policies of the U.S. federal government, its agencies and government-sponsored entities. Changes in any of these policies are influenced by macroeconomic conditions and other factors that are beyond our control, are difficult to predict and could have a material adverse effect on our business, financial position, results of operations and growth prospects.

16

Table ofContents

If we do not effectively manage our credit risk, we may experience increased levels of nonperforming loans, charge-offs and delinquencies, which could require increases in our provision for credit losses on loans.

There are risks inherent in making any loan, including risks inherent in dealing with individual borrowers, risks of nonpayment, risks resulting from uncertainties as to the future value of collateral and cash flows available to service debt, and risks resulting from changes in economic and market conditions. We cannot guarantee that our credit underwriting and monitoring procedures will reduce these credit risks, and they cannot be expected to completely eliminate our credit risks. If the overall economic climate in the United States generally, or our market areas specifically, declines, our borrowers may experience difficulties in repaying their loans, and the level of nonperforming loans, charge-offs and delinquencies could rise and require further increases in the provision for credit losses on loans, which would cause our net income, return on equity and capital to decrease. We maintain our allowance for credit losses on loans at a level that management considers adequate to absorb expected credit losses on loans based on an analysis of our portfolio and market environment.

As of December 31, 2025, our allowance for credit losses on loans as a percentage of total loans was 1.59% and as a percentage of total nonperforming loans was 105.71%. Although management believed, as of such date, that the allowance for credit losses on loans was adequate to absorb losses on any existing loans that may become uncollectible, we may be required to take additional provisions for credit losses on loans in the future to further supplement the allowance for credit losses on loans, either due to management’s decision to do so or because our banking regulators require us to do so. Our bank regulatory agencies will periodically review our allowance for credit losses on loans and the value attributed to nonaccrual loans or to real estate acquired through foreclosure and may require us to adjust our determination of the value for these items. These adjustments may adversely affect our business, financial condition and results of operations.

A significant portion of our loan portfolio is secured by real estate, the value and liquidity of which can be negatively affected by economic conditions and environmental issues.

At December 31, 2025, approximately 68.4% of our loan portfolio was comprised of loans with real estate as a primary or secondary component of collateral. As a result, adverse developments affecting real estate values in our market areas could increase the credit risk associated with our real estate loan portfolio. The market value of real estate can fluctuate significantly in a short period of time as a result of interest rate levels and by market conditions in the area in which the real estate is located. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio, significantly impair the value of property pledged as collateral on loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses, which could result in losses that would adversely affect profitability. Such declines and losses could have a material adverse impact on our business, results of operations and growth prospects.

In addition, if hazardous or toxic substances are found on properties pledged as collateral, the value of the real estate could be impaired. If we foreclose on and take title to such properties, we may be liable for remediation costs, as well as for personal injury and property damage. Environmental laws may require us to incur substantial expenses to address unknown liabilities and may materially reduce the affected property’s value or limit our ability to use or sell the affected property.

We may not be able to continue growing our business, particularly if we cannot increase loans through organic loan growth.

While we intend to continue to grow our business through organic loan growth, certain of our market areas are comprised of mature, rural communities with limited population growth, which presents a challenging market for loan origination. Our growth will also depend upon our ability to attract deposits and to identify favorable loan and investment opportunities and on whether we can continue to fund growth while maintaining cost controls and asset quality, as well on other factors beyond our control, such as national, regional and local economic conditions and interest rate trends.

Many of our loans are to commercial borrowers, which have a higher degree of risk than other types of loans.

Commercial loans represented 87.5% of our total loan portfolio at December 31, 2025. Commercial loans are often larger and involve greater risks than other types of lending. Because payments on such loans often depend on the successful operation or development of the property or business involved, repayment of such loans is often more sensitive than other types of loans to adverse conditions in the real estate market or the general business climate and economy. Accordingly, a downturn in the real estate market and a challenging business and economic environment may increase our risk related to commercial loans, particularly commercial real estate loans. Unlike residential mortgage loans, which generally are made on the basis of the borrower's ability to make repayment from their employment and other income and which are secured by real property, the value of which tends to be more easily ascertainable, commercial loans typically are made on the basis of the borrower's ability to make repayment from the cash flow of the commercial venture. Our operating commercial loans are primarily made based on the identified cash flow of the borrower and secondarily on the collateral underlying the loans. Most often, this collateral consists of accounts receivable, inventory and equipment. Inventory and equipment may depreciate over time, may be difficult

17

Table ofContents

to appraise and may fluctuate in value based on the success of the business. If the cash flow from business operations is reduced, the borrower’s ability to repay the loan may be impaired. Due to the larger average size of each commercial loan as compared with other loans such as residential loans, as well as collateral that is generally less readily-marketable, losses incurred on even a small number of commercial loans could have a material adverse impact on our financial condition and results of operations.

The small to midsized businesses that we lend to may have fewer resources to weather adverse business developments, which may impair a borrower’s ability to repay a loan, and such impairment could adversely affect our results of operations and financial condition.

We target our business development and marketing strategy primarily to serve the banking and financial services needs of small to midsized businesses. These businesses generally have fewer financial resources in terms of capital or borrowing capacity than larger entities, frequently have smaller market shares than their competition, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete and may experience substantial volatility in operating results, any of which may impair a borrower’s ability to repay a loan. In addition, the success of a small or midsized business often depends on the management talents and efforts of one or two people or a small group of people, and the death, disability or resignation of one or more of these people could have a material adverse impact on the business and its ability to repay its loan. If general economic conditions negatively impact the markets in which we operate and small to midsized businesses are adversely affected or our borrowers are otherwise affected by adverse business developments, our business, financial condition and results of operations may be adversely affected.

In addition, we have provided an aggregate of $162.3 million of financing to the two third-party buyers that purchased participation interests in consumer loans that were originated through GreenSky's consumer loan origination platform. The ability of each of these buyers to repay the obligations to us will depend significantly on the performance of the consumer loans.

Real estate construction loans are based upon estimates of costs and values associated with the complete project. These estimates may be inaccurate, and we may be exposed to significant losses on loans for these projects.

Real estate construction loans comprised approximately 6.6% of our total loan portfolio as of December 31, 2025, and such lending involves additional risks because funds are advanced upon the security of the project, which is of uncertain value prior to its completion, and costs may exceed realizable values in declining real estate markets. Because of the uncertainties inherent in estimating construction costs and the realizable market value of the completed project and the effects of governmental regulation of real property, it is relatively difficult to evaluate accurately the total funds required to complete a project and the related loan-to-value ratio. As a result, construction loans often involve the disbursement of substantial funds with repayment dependent, in part, on the success of the ultimate project and the ability of the borrower to sell or lease the property, rather than the ability of the borrower or guarantor to repay principal and interest. If our appraisal of the value of the completed project proves to be overstated or market values or rental rates decline, we may have inadequate security for the repayment of the loan upon completion of construction of the project. If we are forced to foreclose on a project prior to or at completion due to a default, we may not be able to recover all of the unpaid balance of, and accrued interest on, the loan as well as related foreclosure and holding costs. In addition, we may be required to fund additional amounts to complete the project and may have to hold the property for an unspecified period of time while we attempt to dispose of it.

Real estate market volatility and future changes in our disposition strategies could result in net proceeds that differ significantly from our other real estate owned fair value appraisals.

As of December 31, 2025, we had $0.6 million of other real estate owned. Our other real estate owned portfolio consists of properties that we obtained through foreclosure or through an in-substance foreclosure in satisfaction of loans. Properties in our other real estate owned portfolio are recorded at the lower of the recorded investment in the loans for which the properties previously served as collateral or the “fair value,” which represents the estimated sales price of the properties on the date acquired less estimated selling costs.

In response to market conditions and other economic factors, we may utilize alternative sale strategies other than orderly disposition, such as immediate liquidation sales. In this event, as a result of the significant judgments required in estimating fair value and the variables involved in different methods of disposition, the net proceeds realized from such sales transactions could differ significantly from appraisals, comparable sales and other estimates used to determine the fair value of our other real estate owned properties, potentially resulting in additional losses.

18

Table ofContents

Nonperforming assets take significant time to resolve and adversely affect our results of operations and financial condition, and could result in further losses in the future.

Our nonperforming assets adversely affect our net income in various ways. We do not record interest income on nonaccrual loans or other real estate owned, thereby adversely affecting our net income and returns on assets and equity, increasing our loan administration costs and adversely affecting our efficiency ratio. When we take collateral in foreclosure and similar proceedings, we are required to mark the collateral to its then-fair market value, which may result in a loss. These nonperforming loans and other real estate owned also increase our risk profile and the level of capital our regulators believe is appropriate for us to maintain in light of such risks. The resolution of nonperforming assets requires significant time commitments from management and can be detrimental to the performance of their other responsibilities.

Operational, Strategic and Reputational Risks

The occurrence of fraudulent activity, breaches or failures of our information security controls or cybersecurity-related incidents could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

As a bank, we are susceptible to fraudulent activity, information security breaches and cybersecurity-related incidents that may be committed against us or our clients, which may result in financial losses or increased costs to us or our clients, disclosure or misuse of our information or our client information, misappropriation of assets, privacy breaches against our clients, litigation or damage to our reputation. Such fraudulent activity may take many forms, including check fraud, electronic fraud, wire fraud, phishing, social engineering and other dishonest acts. Information security breaches and cybersecurity-related incidents may include fraudulent or unauthorized access to systems used by us or our clients, denial or degradation of service attacks and malware or other cyber-attacks. See Item 1C - "Cybersecurity" appearing elsewhere in this Annual Report on Form 10-K for additional information.

In recent periods, there continues to be a rise in electronic fraudulent activity, security breaches and cyber-attacks within the financial services industry, especially in the commercial banking sector due to cyber criminals targeting commercial bank accounts. Moreover, in recent periods, several large corporations, including financial institutions and retail companies, have suffered major data breaches, in some cases exposing not only confidential and proprietary corporate information, but also sensitive financial and other personal information of their customers and employees and subjecting them to potential fraudulent activity. Some of our clients may have been affected by these breaches, which could increase their risks of identity theft and other fraudulent activity that could involve their accounts with us.

Information pertaining to us and our clients is maintained, and transactions are executed, on networks and systems maintained by us and certain third party partners, such as our online banking, mobile banking or accounting systems. The secure maintenance and transmission of confidential information, as well as execution of transactions over these systems, are essential to protect us and our clients against fraud and security breaches and to maintain the confidence of our clients. Breaches of information security also may occur through intentional or unintentional acts by those having access to our systems or the confidential information of our clients, including employees. In addition, increases in criminal activity levels and sophistication, advances in computer capabilities, new discoveries, vulnerabilities in third party technologies (including browsers and operating systems) or other developments could result in a compromise or breach of the technology, processes and controls that we use to prevent fraudulent transactions and to protect data about us, our clients and underlying transactions, as well as the technology used by our clients to access our systems. Our third party partners’ inability to anticipate, or failure to adequately mitigate, breaches of security could result in a number of negative events, including losses to us or our clients, loss of business or clients, damage to our reputation, the incurrence of additional expenses, disruption to our business, additional regulatory scrutiny or penalties or our exposure to civil litigation and possible financial liability, any of which could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

We depend on information technology and telecommunications systems of third parties, and any systems failures, interruptions or data breaches involving these systems could adversely affect our operations and financial condition.

Our business is highly dependent on the successful and uninterrupted functioning of our information technology and telecommunications systems, third party servicers, accounting systems, mobile and online banking platforms and financial intermediaries. We outsource to third parties many of our major systems, such as data processing and mobile and online banking. The failure of these systems, or the termination of a third party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third party systems, we could experience service denials if demand for such services exceeds capacity or such third party systems fail or experience interruptions. A system failure or service denial could result in a deterioration of our ability to process loans, gather deposits or provide customer service, compromise our ability to operate effectively, result in potential noncompliance with applicable laws or regulations, damage our reputation, result in a loss of

19

Table ofContents

customer business or subject us to regulatory action and possible financial liability, any of which could have a material adverse effect on our business, financial condition, results of operations and growth prospects. In addition, failures of third parties to comply with applicable laws and regulations, or fraud or misconduct on the part of employees of any of these third parties, could disrupt our operations or adversely affect our reputation.

It may be difficult for us to replace some of our third party vendors, particularly vendors providing our core banking and information services, in a timely manner if they are unwilling or unable to provide us with these services in the future for any reason, and even if we are able to replace them, it may be at higher cost or result in the loss of customers. Any such events could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

Our operations rely heavily on the secure processing, storage and transmission of information and the monitoring of a large number of transactions on a minute-by-minute basis, and even a short interruption in service could have significant consequences. We also interact with and rely on retailers, for whom we process transactions, as well as financial counterparties and regulators. Each of these third parties may be targets of the same types of fraudulent activity, computer break-ins and other cyber security breaches described above, and the cyber security measures that they maintain to mitigate the risk of such activity may be different than our own and may be inadequate.

As a result of financial entities and technology systems becoming more interdependent and complex, a cyber incident, information breach or loss, or technology failure that compromises the systems or data of one or more financial entities could have a material impact on counterparties or other market participants, including ourselves. As a result of the foregoing, our ability to conduct business may be adversely affected by any significant disruptions to us or to third parties with whom we interact.

We are subject to certain operational risks, including, but not limited to, customer or employee fraud and data processing system failures and errors.

Employee errors and employee and customer misconduct could subject us to financial losses or regulatory sanctions and seriously harm our reputation. Misconduct by our employees could include hiding unauthorized activities from us, improper or unauthorized activities on behalf of our customers or improper use of confidential information. It is not always possible to prevent employee errors and misconduct, and the precautions we take to prevent and detect this activity may not be effective in all cases. Employee errors could also subject us to financial claims for negligence.

We maintain a system of internal controls and insurance coverage to mitigate against operational risks, including data processing system failures and errors and customer or employee fraud. However, it is possible that these protections may not be sufficient to eliminate the significant and growing risks in this area, including risks relating to the use of artificial intelligence in fraud schemes. If our internal controls fail to prevent or detect an occurrence, or if any resulting loss is not insured or exceeds applicable insurance limits, it could have a material adverse effect on our business, financial condition and results of operations.

Any acquisitions we may engage in could expose us to financial, execution and operational risks that could have a material adverse effect on our business, financial position, results of operations and growth prospects.

Any acquisition transactions we engage in could require us to use a substantial amount of cash, or other liquid assets and/or incur debt. There are risks associated with acquisitions, including the following:

•We may incur time and expense associated with evaluating potential acquisitions and negotiating potential transactions, resulting in management’s attention being diverted from the operation of our existing business.

•We could be exposed to potential asset and credit quality risks and unknown or contingent liabilities of the banks or businesses we acquire. If these issues or liabilities were to exceed our estimates, our earnings, capital and financial condition may be materially and adversely affected.

•The acquisition of other entities generally requires integration of systems, procedures and personnel of the acquired entity. This integration process is complicated and time consuming and can also be disruptive to the customers and employees of the acquired business and our business. If the integration process is not conducted successfully, we may not realize the anticipated economic benefits of acquisitions within the expected time frame, or ever, and we may lose customers or employees of the acquired business. We may also experience greater than anticipated customer losses even if the integration process is successful.

•To finance an acquisition, we may borrow funds or pursue other forms of financing, such as issuing voting and/or non-voting common stock or preferred stock, which may have high dividend rights or may be highly dilutive to holders of our common stock, thereby increasing our leverage and diminishing our liquidity.

20

Table ofContents

•We may be unsuccessful in realizing the anticipated benefits from acquisitions. For example, we may not be successful in realizing anticipated cost savings. We also may not be successful in preventing disruptions in service to existing customer relationships of the acquired institution, which could lead to a loss in revenues.

In addition to the foregoing, we may face additional risks in acquisitions to the extent we acquire new lines of business or new products, or enter new geographic areas, in which we have little or no current experience, especially if we lose key employees of the acquired operations. If we choose to engage in an acquisition transaction, we cannot assure you that we will be successful in overcoming these risks or any other problems encountered in connection with acquisitions. Our inability to overcome risks associated with acquisitions could have an adverse effect on our ability to grow our business and profitability.

We are highly dependent on our management team, and the loss of our senior executive officers or other key employees could harm our ability to implement our strategic plan, impair our relationships with customers and adversely affect our business, results of operations and growth prospects.

Our success is dependent, to a large degree, upon the continued service and skills of our current executive management team, particularly Mr. Jeffrey G. Ludwig, our President and Chief Executive Officer, and Mr. Eric T. Lemke, our Chief Financial Officer.

Our business and growth strategies are built primarily upon our ability to retain employees with experience and business relationships within their respective market areas. The loss of any of our key personnel could have an adverse impact on our business and growth because of their skills, years of industry experience, knowledge of our market areas and the difficulty of finding qualified replacement personnel, particularly in light of the fact that we are not headquartered in a major metropolitan area. In addition, although we have non-competition agreements with each of our executive officers and with several others of our senior personnel, we do not have any such agreements with other employees who are important to our business, and in any event the enforceability of non-competition agreements varies across the states in which we do business. While our mortgage originators, loan officers and wealth management professionals are generally subject to non-solicitation provisions as part of their employment, our ability to enforce such agreements may not fully mitigate the injury to our business from the breach of such agreements, as such employees could leave us and immediately begin soliciting our customers. The departure of any of our personnel who are not subject to enforceable non-competition agreements could have a material adverse impact on our business, results of operations and growth prospects.

We may be liable to purchasers of mortgage loans and mortgage servicing rights, including as a result of any breach of representations and warranties we make to the purchasers.

When we sell or securitize mortgage loans in the ordinary course of business, we are required to make certain representations and warranties to the purchaser about the mortgage loans and the manner in which they were originated. Under these agreements, we may be required to repurchase mortgage loans if we have breached any of these representations or warranties, in which case we may record a loss. In addition, if repurchase and indemnity demands increase on loans that we sell from our portfolios, our liquidity, results of operations and financial condition could be adversely affected. In addition, we have sold mortgage servicing rights to third parties pursuant to customary purchase agreements, under which we could be required to indemnify the purchasers for losses resulting from pre-closing servicing errors or breaches of our representations and warranties, which could affect our results of operations.

Our ability to maintain our reputation is critical to the success of our business, and the failure to do so may materially adversely affect our business and the value of our stock.

We are a community bank, and our reputation is one of the most valuable components of our business. Similarly, each of our subsidiaries operate in niche markets where reputation is critically important. As such, we strive to conduct our business in a manner that enhances our reputation. This is done, in part, by recruiting, hiring and retaining employees who share our core values of being an integral part of the communities we serve, delivering superior service to our customers and caring about our customers and associates. If our reputation is negatively affected, by the actions of our employees or otherwise, our business and, therefore, our operating results and the value of our stock may be materially adversely affected.

We have a continuing need for technological change, and we may not have the resources to effectively implement new technology or we may experience operational challenges when implementing new technology.

The financial services industry is undergoing rapid technological changes with frequent introductions of new technology-driven products and services, such as those using artificial intelligence. In addition to better serving customers, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success will depend in part upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands for convenience as well as to create additional efficiencies in our operations as we continue to

21

Table ofContents

grow and expand our market area. We may experience operational challenges as we implement these new technology enhancements, or seek to implement them across all of our offices and business units, which could result in us not fully realizing the anticipated benefits from such new technology or require us to incur significant costs to remedy any such challenges in a timely manner.

Many of our larger competitors have substantially greater resources to invest in technological improvements. As a result, they may be able to offer additional or superior products to those that we will be able to offer, which would put us at a competitive disadvantage. Accordingly, a risk exists that we will not be able to effectively implement new technology-driven products and services or be successful in marketing such products and services to our customers.

We face strong competition from financial services companies and other companies that offer banking, mortgage, leasing, and wealth management services, which could harm our business.

Our operations consist of offering banking and mortgage services, and we also offer trust and wealth management, and other services to generate noninterest income. Many of our competitors offer the same, or a wider variety of, banking and related financial services within our market areas. These competitors include national banks, regional banks and other community banks. We also face competition from many other types of financial institutions, including savings and loan institutions, finance companies, private credit funds, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. In addition, a number of out-of-state financial intermediaries have opened production offices or otherwise solicit deposits in our market areas. Additionally, we face growing competition from so-called “online businesses” with few or no physical locations, including online banks, lenders and consumer and commercial lending platforms, and FinTech companies, as well as automated retirement and investment service providers. Increased competition in our markets may result in reduced loans, deposits, and commissions and brokers’ fees, as well as reduced net interest margin and profitability. Ultimately, we may not be able to compete successfully against current and future competitors. If we are unable to attract and retain banking, mortgage, and wealth management customers, we may be unable to continue to grow our business and our financial condition and results of operations may be adversely affected.

Consumers and businesses are increasingly using non-banks to complete their financial transactions, which could adversely affect our business and results of operations.

Technology and other changes are allowing consumers and businesses to complete financial transactions that historically have involved banks through alternative methods. For example, the wide acceptance of internet-based commerce has resulted in a number of alternative payment processing systems and lending platforms in which banks play only minor roles. Customers can now maintain funds in prepaid debit cards or digital currencies, and pay bills and transfer funds directly without the direct assistance of banks. The diminishing role of banks as financial intermediaries has resulted and could continue to result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the potential loss of lower cost deposits as a source of funds could have a material adverse effect on our business, financial condition and results of operations.

The development of our BaaS platform may expose us to liability for compliance violations by BaaS partners or fall short of its targeted impact on our financial performance.

Beginning in 2022, we invested in the development of a BaaS platform that will enable us to enter into partnerships with financial technology companies through which we will provide banking services to the customers of these companies. We believe that these partnerships will contribute to loan production, deposit gathering, and fee income generation in future years. We intend to be very selective in our approach to developing BaaS partnerships to ensure that any partners that are added meet our high standards for risk management. However, we are subject to compliance and regulatory risk if partners do not follow our servicing policies, lending laws, and regulations. Our bank regulators may hold us responsible for the activities of our BaaS partners with respect to the marketing or administration of their programs, which may result in increased compliance costs for us or potentially compliance violations as a result of BaaS partner activities. In addition, we may not find enough suitable partnerships for the BaaS platform to have a meaningful impact on our overall financial performance.

Legal, Accounting and Compliance Risks

If we fail to design, implement and maintain effective internal control over financial reporting or fail to remediate any future material weakness in our internal control over financial reporting, we may be unable to report our financial results accurately.

Our management is responsible for establishing and maintaining adequate internal control over financial reporting designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of consolidated financial statements for external purposes in accordance with GAAP. As disclosed in our Annual Report on Form 10-K for the

22

Table ofContents

year ended December 31, 2024, management previously identified certain material weaknesses in our internal control over the risk assessment process for identifying whether third-party loan origination and servicing contracts present unique accounting considerations that should be further evaluated and the financial reporting related to our accounting and financial reporting of third-party lending and servicing arrangements. As a result of these material weaknesses, our independent registered public accounting firm concluded that our internal control over financial reporting was not effective as of December 31, 2024 and December 31, 2023. In addition, we restated our consolidated financial statements as of and for the year ended December 31, 2023, and for the year ended December 31, 2022, as well as the interim quarterly periods in 2024 and 2023.

In response to the identified material weaknesses, we, under the oversight of the Audit Committee, implemented a remediation plan that included a more formal risk assessment process, enhanced internal control training, the evaluation and enhancement of control implementation policies and procedures and other remediation efforts. As a result, we have concluded the material weaknesses previously identified have been resolved at December 31, 2025. However, we cannot provide assurance that we will not identify additional material weaknesses in the future. Any failure to implement and maintain adequate internal control over financial reporting could adversely impact our ability to report our financial position and results from operations on a timely and accurate basis, and could result in further restatements of financial results.

We may incur impairment charges to the goodwill that we recorded in connection with prior business acquisitions, which would negatively impact our business, financial condition and results of operations.

Goodwill represents the amount by which the cost of an acquisition exceeded the fair value of net assets we acquired in connection with the purchase. We review goodwill for impairment at least annually, or more frequently if events or changes in circumstances indicate that the carrying value of the asset might be impaired. We determine impairment by comparing the implied fair value of the reporting unit goodwill with the carrying amount of that goodwill. If the carrying amount of the reporting unit goodwill exceeds the implied fair value of that goodwill, an impairment charge is recognized in an amount equal to that excess. Any such adjustments are reflected in our results of operations in the periods in which they become known.

For example, during the first quarter of 2025, Management determined that a triggering event had occurred at our Banking reporting unit as a result of further deteriorated credit quality coupled with the trends in the Company's stock price. The Company performed a quantitative impairment test on its Banking reporting unit as of March 31, 2025, and engaged a third-party service provider to assist Management with the determination of the fair value. The resulting calculation indicated that the carrying amount exceeded the fair value of the Company's Banking reporting unit. As a result of the assessment, the Company recognized goodwill impairment expense of $154.0 million in the first quarter of 2025. This non-cash impairment expense did not impact our regulatory capital ratios, tangible common equity ratio nor our liquidity position, and will not result in future cash expenditures. There can be no assurance that our future evaluations of our remaining existing goodwill or goodwill we may acquire in the future will not result in additional findings of impairment and related charges, which could adversely affect our business, financial condition and results of operations.

Our risk management framework may not be effective in mitigating risks and/or losses to us.

Our risk management framework is comprised of various processes, systems and strategies, and is designed to manage the types of risk to which we are subject, including, among others, credit, market, liquidity, interest rate and compliance. Our framework also includes financial or other modeling methodologies that involve management assumptions and judgment. Our risk management framework may not be effective under all circumstances or may not adequately mitigate risk or loss to us. If our framework is not effective, we could suffer unexpected losses and our business, financial condition, results of operations or growth prospects could be materially and adversely affected. We may also be subject to potentially adverse regulatory consequences.

We are and may become involved from time to time in suits, legal proceedings, information-gathering requests, investigations and proceedings by governmental and self-regulatory agencies that may lead to adverse consequences.

Many aspects of our business and operations involve the risk of legal liability, and in some cases we or our subsidiaries have been named or threatened to be named as defendants in various lawsuits arising from our business activities. For example, some of the services we provide, such as wealth management services, require us to act as fiduciaries for our customers and others. From time to time, third parties make claims and take legal action against us pertaining to the performance of our fiduciary responsibilities.In addition, companies in our industry are frequently the subject of governmental and self-regulatory agency information-gathering requests, reviews, investigations and proceedings. We believe we face an elevated risk of the foregoing proceedings in connection with the matters leading us to restate our prior years' financial statements and in connection with LendingPoint's 2023 system conversion and any potential effects on certain loans, as discussed in this Annual Report on Form 10-K.

23

Table ofContents

The results of such proceedings could lead to significant civil or criminal penalties, including monetary penalties, damages, adverse judgments, settlements, fines, injunctions, restrictions on the way in which we conduct our business, or reputational harm.

Although we establish accruals for legal proceedings when information related to the loss contingencies represented by those matters indicates both that a loss is probable and that the amount of loss can be reasonably estimated, we do not have accruals for all legal proceedings where we face a risk of loss. In addition, due to the inherent subjectivity of the assessments and unpredictability of the outcome of legal proceedings, amounts accrued may not represent the ultimate loss to us from the legal proceedings in question. Accordingly, our ultimate losses may be higher, and possibly significantly so, than the amounts accrued for legal loss contingencies, which could adversely affect our financial condition and results of operations.

Legislative and regulatory actions taken now or in the future may increase our costs and impact our business, governance structure, financial condition or results of operations.

Compliance with applicable bank regulations by us and our third party vendors has resulted, and may continue to result, in additional operating and compliance costs and restrictions that could have a material adverse effect on our business, financial condition, results of operations and growth prospects. In addition, new proposals for legislation may continue to be introduced in the U.S. Congress that could further substantially change regulation of the bank and non-bank financial services industries and impose restrictions on the operations and general ability of firms within the industry to conduct business consistent with historical practices. Federal and state regulatory agencies also frequently adopt changes to their regulations or change the manner in which existing regulations are applied. Legislation and regulations may be impacted by the political ideologies of the executive branches of the U.S. government as well as the heads of regulatory and administrative agencies, which may change as a result of elections. Certain aspects of current or proposed regulatory or legislative changes to laws applicable to the financial industry, if enacted or adopted, may impact the profitability of our business activities, require more oversight or change certain of our business practices, including the ability to offer new products, obtain financing, attract deposits, make loans and achieve satisfactory interest spreads and could expose us to additional costs, including increased compliance costs. These changes also may require us to invest significant management attention and resources to make any necessary changes to operations to comply and could have an adverse effect on our business, financial condition and results of operations.

We are subject to stringent capital requirements, and failure to comply with these requirements may impact dividend payments and limit our activities.

As a result of the implementation of the Basel III Rule, we are required to meet minimum capital requirements. The failure to meet applicable regulatory capital requirements of the Basel III Rule could result in one or more of our regulators placing limitations or conditions on our activities, including our growth initiatives, or restricting the commencement of new activities, and could affect customer and investor confidence, our costs of funds and FDIC insurance costs, our ability to pay dividends on our common stock, our ability to make acquisitions, and our business, results of operations and financial conditions, generally. In addition, banking institutions that do not maintain a capital conservation buffer, comprised of Common Equity Tier 1 Capital, of 2.5% above the regulatory minimum capital requirements face constraints on the payment of dividends, stock repurchases and discretionary bonus payments to executive officers based on the amount of the shortfall, unless prior regulatory approval is obtained. Accordingly, if the Bank or the Company fails to maintain the applicable minimum capital ratios and the capital conservation buffer, distributions by the Bank to the Company, or dividends or stock repurchases by the Company, may be prohibited or limited.

Federal and state regulators periodically examine our business, and we may be required to remediate adverse examination findings.

The Federal Reserve, the FDIC and the DFPR periodically examine our business, including our compliance with laws and regulations. If, as a result of an examination, a banking agency were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of any of our operations had become unsatisfactory, or that we were in violation of any law or regulation, they may take a number of different remedial actions as they deem appropriate. These actions include the power to enjoin “unsafe or unsound” practices, to require affirmative action to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil money penalties, to fine or remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate our deposit insurance and place us into receivership or conservatorship. Any regulatory action against us could have an adverse effect on our business, financial condition and results of operations.

24

Table ofContents

We face a risk of noncompliance and enforcement action with the Bank Secrecy Act and other anti-money laundering statutes and regulations.

The Bank Secrecy Act, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective anti-money laundering program and to file reports such as suspicious activity reports and currency transaction reports. We are required to comply with these and other anti-money laundering requirements. The federal banking agencies and Financial Crimes Enforcement Network are authorized to impose significant civil money penalties for violations of those requirements and have engaged in coordinated enforcement efforts against banks and other financial services providers with the U.S. Department of Justice, Drug Enforcement Administration and Internal Revenue Service. We are also subject to increased scrutiny of compliance with the rules enforced by the Office of Foreign Assets Control. If our policies, procedures and systems are deemed deficient, including those of our third party vendors, we could be subject to liability, including fines and regulatory actions, which may include restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain aspects of our business plan, including our acquisition plans.

Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us. Any of these results could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

We are subject to numerous laws designed to protect consumers, including the Community Reinvestment Act and fair lending laws, and failure to comply with these laws could lead to a wide variety of sanctions.

The CRA, the Equal Credit Opportunity Act, the Fair Housing Act and other fair lending laws and regulations prohibit discriminatory lending practices by financial institutions. The U.S. Department of Justice, federal banking agencies, and other federal agencies are responsible for enforcing these laws and regulations. A challenge to an institution’s compliance with fair lending laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions activity, restrictions on expansion, and restrictions on entering new business lines. Private parties may also challenge an institution’s performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

The Federal Reserve may require us to commit capital resources to support the Bank.

As a matter of policy, the Federal Reserve expects a bank holding company to act as a source of financial and managerial strength to a subsidiary bank and to commit resources to support such subsidiary bank. The Dodd-Frank Act codified the Federal Reserve’s policy on serving as a source of financial strength. Under the “source of strength” doctrine, the Federal Reserve may require a bank holding company to make capital injections into a troubled subsidiary bank and may charge the bank holding company with engaging in unsafe and unsound practices for failure to commit resources to a subsidiary bank. A capital injection may be required at times when the holding company may not have the resources to provide it and therefore may be required to borrow the funds or raise capital. Any loans by a holding company to its subsidiary banks are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. In the event of a bank holding company’s bankruptcy, the bankruptcy trustee will assume any commitment by the holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank. Moreover, bankruptcy law provides that claims based on any such commitment will be entitled to a priority of payment over the claims of the institution’s general unsecured creditors, including the holders of its note obligations. Thus, any borrowing that must be done by the Company to make a required capital injection becomes more difficult and expensive and could have an adverse effect on our business, financial condition and results of operations.

The financial services industry, as well as the broader economy, may be subject to new legislation, regulation, and government policy.

The federal government may cause broad economic changes as a result of implementation of policies regarding tariffs, deportations and tax regulations. New appointments to the Board of Governors of the Federal Reserve could affect monetary policy and interest rates, and changes in fiscal policy could affect broader patterns of trade and economic growth. Future legislation, regulation, and government policy could affect the banking industry as a whole, including our business and results of operations, in ways that are difficult to predict. In addition, our results of operations also could be adversely affected by changes in the way in which existing statutes and regulations are interpreted or applied by courts and government agencies.

25

Table ofContents

Market and Interest Rate Risks

Monetary policies and regulations of the Federal Reserve could adversely affect our business, financial condition and results of operations.

In addition to being affected by general economic conditions, our earnings, capital ratios and growth are affected by the policies of the Federal Reserve. The Federal Reserve reduced the federal funds rate several times since late 2024 based upon improving economic conditions. These recent reductions have resulted in decreases in asset yields and funding costs. Future rate reductions of the Federal Reserve could continue to have positive effects on our business, by increasing loan demand, decreasing our costs of deposits and other sources of funding, improving the value of our securities portfolio, and increasing the earnings of our wealth management business. Lower interest rates can also positively affect our customers’ businesses and financial condition, and the value of collateral securing loans in our portfolio.

Fluctuations in interest rates may reduce net interest income and otherwise negatively impact our financial condition and results of operations.

Shifts in short-term interest rates may reduce net interest income, which is the principal component of our earnings. Net interest income is the difference between the amounts received by us on our interest-earning assets and the interest paid by us on our interest-bearing liabilities. When interest rates rise, the rate of interest we pay on our liabilities, such as deposits, generally rises more quickly than the rate of interest that we receive on our interest-bearing assets, such as loans, which may cause our profits to decrease. The impact on earnings is more adverse when the slope of the yield curve flattens, that is, when short-term interest rates increase more than long-term interest rates or when long-term interest rates decrease more than short-term interest rates.

Interest rate increases often result in larger payment requirements for our borrowers, which increases the potential for default. At the same time, the marketability of the underlying property may be adversely affected by any reduced demand resulting from higher interest rates. In a declining interest rate environment, there may be an increase in prepayments on loans as borrowers refinance their mortgages and other indebtedness at lower rates.

Changes in interest rates also can affect the value of loans, securities and other assets. An increase in interest rates that adversely affects the ability of borrowers to pay the principal or interest on loans, or that adversely affects the value of collateral securing those loans, may lead to an increase in nonperforming assets and a reduction of income recognized, which could have a material adverse effect on our results of operations and cash flows. Further, when we place a loan on nonaccrual status, we reverse any accrued but unpaid interest receivable, which decreases interest income. Subsequently, we continue to have a cost to fund the loan, which is reflected as interest expense, without any interest income to offset the associated funding expense. Thus, an increase in the amount of nonperforming assets would have an adverse impact on net interest income.

If short-term interest rates remain at low levels for a prolonged period, and assuming longer term interest rates fall, we could experience net interest margin compression as our interest earning assets would continue to reprice downward while our interest-bearing liability rates could fail to decline in tandem. This would have a material adverse effect on our net interest income and our results of operations.

We could recognize losses on securities held in our securities portfolio, particularly if interest rates continue to increase or economic and market conditions deteriorate.

Factors beyond our control can significantly influence the fair value of securities in our portfolio and can cause potential adverse changes to the fair value of these securities. For example, fixed-rate securities acquired by us are generally subject to decreases in market value when interest rates rise. Additional factors include, but are not limited to, rating agency downgrades of the securities or our own analysis of the value of the security, defaults by the issuer or individual mortgagors with respect to the underlying securities, and continued instability in the credit markets. Any of the foregoing factors could cause an impairment in future periods and result in realized losses. The process for determining potential impairment requires difficult, subjective judgments about the future financial performance of the issuer and any collateral underlying the security in order to assess the probability of receiving all contractual principal and interest payments on the security. Because of changing economic and market conditions affecting interest rates, the financial condition of issuers of the securities and the performance of the underlying collateral, we may recognize realized and/or unrealized losses in future periods, which could have an adverse effect on our financial condition and results of operations.

Our mortgage banking revenue has been and could continue to be adversely impacted by an elevated interest rate environment.

Mortgage production, especially refinancing activity, is adversely affected by high or rising interest rate environments. Though the Federal Reserve reduced the federal funds rate several times since late 2024, should interest rates remain elevated, it

26

Table ofContents

could adversely affect our mortgage production levels. Because we sell a substantial portion of the mortgage loans we originate, the revenue and profitability of our mortgage banking business also depends in large part on our ability to aggregate a high volume of loans and sell them in the secondary market at a gain. Thus, in addition to our dependence on the interest rate environment, we are dependent upon (i) the existence of an active secondary market and (ii) our ability to profitably sell loans or securities into that market. To the extent we are not able to achieve a high level of mortgage production, our revenue and profitability will depend upon our ability to reduce our costs commensurate with the reduction of revenue from our mortgage operations.

Liquidity and Funding Risks

Liquidity risks could affect operations and jeopardize our business, financial condition, and results of operations.

Liquidity is essential to our business. An inability to raise funds through deposits, borrowings, the sale of loans and/or investment securities and from other sources could have a substantial negative effect on our liquidity. Our most important source of funds consists of our customer deposits, including escrow deposits held in connection with our commercial mortgage servicing business. Such deposit balances can decrease when customers perceive alternative investments, such as the stock market, as providing a better risk/return tradeoff, or, in connection with our commercial mortgage servicing business, third parties for whom we provide servicing choose to terminate that relationship with us. If customers move money out of bank deposits and into other investments, we could lose a relatively low cost source of funds, which would require us to seek wholesale funding alternatives in order to continue to grow, thereby increasing our funding costs and reducing our net interest income and net income.

Our access to funding sources in amounts adequate to finance or capitalize our activities or on terms that are acceptable to us could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry.

Any decline in available funding could adversely impact our ability to continue to implement our strategic plan, including originate loans, invest in securities, meet our expenses, pay dividends to our shareholders or to fulfill obligations such as repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition and results of operations.

We may need to raise additional capital in the future, and if we fail to maintain sufficient capital, whether due to losses, an inability to raise additional capital or otherwise, our financial condition, liquidity and results of operations, as well as our ability to maintain regulatory compliance, would be adversely affected.

We face significant capital and other regulatory requirements as a financial institution. The Company, on a consolidated basis, and the Bank, on a stand-alone basis, must meet certain regulatory capital requirements and maintain sufficient liquidity. Importantly, regulatory capital requirements could increase from current levels, which could require us to raise additional capital or contract our operations. Our ability to raise additional capital depends on conditions in the capital markets, economic conditions and a number of other factors, including investor perceptions regarding the banking industry, market conditions and governmental activities, and on our financial condition and performance. Accordingly, we cannot assure you that we will be able to raise additional capital if needed or on terms acceptable to us. If we fail to maintain capital to meet regulatory requirements, our financial condition, liquidity and results of operations would be materially and adversely affected.

We may be adversely affected by the soundness of other financial institutions.

Our ability to engage in routine funding transactions and the perceived strength of our Bank could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services companies are interrelated as a result of trading, clearing, counterparty, and other relationships. We have exposure to different industries and counterparties, and through transactions with counterparties in the financial services industry, including brokers and dealers, commercial banks, investment banks, and other institutional clients. As a result, defaults by, or even rumors or questions about, one or more financial services companies, or the financial services industry generally, have led to market-wide liquidity problems and deposit volatility, and could lead to losses or defaults by us or by other institutions. These issues could have a material adverse effect on our business, financial condition, results of operations and growth prospects. Additionally, if our competitors were extending credit on terms we found to pose excessive risks, or at interest rates which we believed did not warrant the credit exposure, we may not be able to maintain our business volume and could experience deteriorating financial performance.

ITEM 1B –UNRESOLVED STAFF COMMENTS

27

Table ofContents

None.

ITEM 1C –CYBERSECURITY

We rely extensively on various information systems and other electronic resources to operate our business. In addition, nearly all of our customers, service providers and other business partners on whom we depend, including the providers of our online banking, mobile banking and accounting systems, use these systems and their own electronic information systems. Any of these systems can be compromised, including through intentional acts or carelessness by employees, customers and other individuals who are authorized to use them, and by criminals, who often use sophisticated and constantly evolving set of software, tools and strategies to do so. We expect the strength of these threats to continue to increase as criminals incorporate artificial intelligence tools into their strategies. The nature of our business, as a financial services provider, and our relative size, make us and our business partners high-value targets for these bad actors to pursue, and any intrusion into our systems could result in material financial losses and operational problems. See “Operational, Strategic and Reputational Risks.”

Accordingly, we have developed an information security program and devoted resources for assessing, identifying and managing risks associated with cybersecurity threats, including:

•established a dedicated internal cybersecurity team that is responsible for conducting regular assessments of our information systems, existing controls, vulnerabilities and potential improvements;

•implemented continuous monitoring tools and a third-party Security Operations Center that can detect and respond to cybersecurity threats in real-time;

•perform ongoing due diligence with respect to our third-party service providers, including their cybersecurity practices, and requiring contractual commitments from our service providers to take certain measures to mitigate their cybersecurity risk;

•retain third-party cybersecurity consultants who conduct periodic penetration testing, vulnerability assessments and other procedures to identify potential weaknesses in our systems and processes;

•conduct frequent cybersecurity training and testing for our workforce;

•provide our board of directors with regular updates regarding threat levels, including analyses that demonstrate the overall cybersecurity posture and health of the organization;

•engage in periodic assessments of our cyber resilience with the Cybersecurity and Infrastructure Security Agency (CISA);

•conduct scheduled reviews of our Incident Response Plan to assess the responsiveness during a cybersecurity event or Ransomware attack; and

•maintain third party vendor management program, which includes requirements for how our partners transmit, store and use Bank information.

This information security program is a key part of our overall risk management system, which is administered by our Chief Risk Officer and Chief Information Security Officer. The program includes administrative, technical and physical safeguards to help ensure the security, integrity and confidentiality of customer records and information, and prohibit unauthorized access to our critical operating systems. These security and privacy policies and procedures are in effect across all of our businesses and geographic locations.

From time-to-time, we have identified cybersecurity threats and cybersecurity incidents, including with respect to our commercial customers and vendors, that require us to make changes to our processes and implement additional safeguards. While none of these identified threats or incidents have materially affected us, it is possible that future threats and incidents could have a material adverse effect on our business strategy, results of operations and financial condition, even if the threat or incident is promptly identified and countermeasures are implemented. Such events could lead to direct financial loss or require the expenditure of significant amounts to obtain the release of critical data and/or restore our operating systems or those of our customers and/or vendors if the incident was the result of a security breach for which we are held legally responsible.

Our management team is responsible for the day-to-day management of risks we face, including our Chief Information Security Officer. Our Chief Information Security Officer has over 20 years of information technology and information security experience, and before joining our Company has held the positions of Chief Technology Officer and Director of IT and Information Security Officer at his prior places of employment.

28

Table ofContents

In addition, our board of directors, as a whole and through its Risk Policy & Compliance Committee (the “Risk Committee”), is responsible for the oversight of risk management.In that role, our board of directors and Risk Committee, with support from the Company’s cybersecurity advisors, are responsible for ensuring that the risk management processes designed and implemented by management are adequate and functioning as designed. To carry out those duties, both our board of directors and the Risk Committee receive quarterly reports from our management team, including from our Chief Risk Officer and our Chief Information Security Officer regarding cybersecurity risks, and the Company’s efforts to prevent, detect, mitigate and remediate any cybersecurity incidents.

ITEM 2 – PROPERTIES

Our corporate headquarters office building is located at 1201 Network Centre Drive, Effingham, Illinois 62401. We own our corporate headquarters office building, which was built in 2011 and also houses our primary operations center. We have additional operations centers located in St. Louis, Missouri and Rockford, Illinois, supporting our banking and wealth management businesses. At December 31, 2025, the Bank operated a total of 53 full-service banking centers, including 42 located in Illinois and 11 located in the St. Louis metropolitan area. Of these facilities, 43 are owned, and 10 are leased from unaffiliated third parties.

We believe that the leases to which we are subject are generally on terms consistent with prevailing market terms. None of the leases are with our directors, officers, beneficial owners of more than 5% of our voting securities or any affiliates of the foregoing. We believe that our facilities are in good condition and are adequate to meet our operating needs for the foreseeable future.

ITEM 3 – LEGAL PROCEEDINGS

There are no material pending legal proceedings, other than ordinary routine litigation incidental to the business, to which we or any of our subsidiaries is a party or of which any of our property is the subject. However, given the nature, scope and complexity of the extensive legal and regulatory landscape applicable to our business, we, like all banking organizations, are subject to various legal proceedings from time to time, including those referenced in "Note 21 - Commitments, Contingencies and Credit Risk" to our consolidated financial statements.

ITEM 4 – MINE SAFETY DISCLOSURES

Not applicable.

PART II

ITEM 5 –MARKET FOR THE REGISTRANT’S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Shareholders

As of February 13, 2026, the Company had 987 common stock shareholders of record, and the closing price of the Company’s common stock, traded on the Nasdaq under the ticker symbol MSBI, was $22.97 per share.

Stock Performance Graph