ORRF US Equity☆

ITEM 1A – RISK FACTORS

An investment in our common stock is subject to risks inherent in our business. The material risks and uncertainties that management believes affect us are described below. This report is qualified in its entirety by these risk factors.

Before making an investment decision, you should carefully consider the risks and uncertainties described below together with all of the other information included or incorporated by reference in this report and our other filings with the SEC. The risks and uncertainties described below are not the only ones facing us. Additional risks and uncertainties that management is not aware of or focused on or that management currently deems immaterial may also impair our business operations.

If any of the following risks actually materialize, our business, financial condition and results of operations could be materially and adversely affected. If this were to happen, the market price of our common stock could decline significantly, and you could lose all or part of your investment.

Risks Related to Credit

Difficult and volatile economic and market conditions in the U.S. and globally as well as changes in fiscal, monetary, trade and regulatory policies can adversely affect the financial services industry and may materially and adversely affect us.

Our operations are sensitive to general business and economic conditions in the U.S. The economy in the U.S. and globally has experienced volatility in recent years and may continue to experience such volatility for the foreseeable future. Unfavorable or uncertain economic conditions can be caused by declines in economic growth, business activity, or investor or business confidence; limitations on the availability of or increases in the cost of credit and capital; increases in inflation or interest rates; uncertainties regarding fiscal and monetary policies; the timing and impact of changing governmental policies, including changes in guidance and interpretation by regulatory authorities; changes in trade policies by the U.S. or other countries, such as tariffs or retaliatory tariffs such as those proposed or imposed by the U.S. Administration; supply chain disruptions; consumer spending; employment levels; labor shortages; challenging labor market conditions; wage stagnation; federal government shutdowns; energy prices; home prices; commercial property values; bankruptcies and a default by a significant market participant or class of counterparties; natural disasters; climate change; epidemics; future pandemics; terrorist attacks; acts of war; or a combination of these or other factors.

Volatile business and economic conditions could have adverse effects on our business, including the following:

•investors may have less confidence in the equity markets in general and in financial services industry stocks in particular, which could place downward pressure on our stock price and resulting market valuation;

•economic and market developments may further affect consumer and business confidence levels and may cause declines in credit usage and adverse changes in payment patterns, causing increases in delinquencies and default rates;

•our ability to assess the creditworthiness of our customers may be impaired if the models and approaches we use to select, manage, and underwrite loans become less predictive of future behaviors;

•we could suffer decreases in demand for loans or other financial products and services or decreased deposits or other investments in accounts with us; and

•the value of loans and other assets or collateral securing loans may decrease.

If our allowance for credit losses is not sufficient to cover actual losses, our earnings would decrease.

The ACL is recorded as a reduction to loans and leases and the reserve for unfunded lending commitments is included in other liabilities on the consolidated balance sheets. While we believe that our ACL as of December 31, 2024 was sufficient to cover losses in the loan and lease portfolio on that date, we may need to increase our provision for credit losses in future periods due to changes in the risk characteristics of the loan and lease portfolio, thereby negatively impacting our results of operations.

The ACL is determined based on various factors impacting the quality of the loan and lease portfolio as indicated by our borrowers' financial condition, payment performance, the value of the underlying collateral and the support from a guarantor, in addition to the impact from economic conditions, government macroeconomic policies, interest rates and the regulatory environment. The experience and expertise of our loan officers, credit analysts and special assets group are essential to

13

Table of Contents

performing credit quality reviews, in addition to analyzing trends in delinquencies, levels of non-accruing and criticized loans and leases and modifications to loan terms. The ACL may also be influenced by other factors, including concentrations by the type of loan, collateral, borrower or location of the collateral or borrower. Such concentrations could increase the possibility that similarly situated borrowers and their collateral may collectively be affected by certain economic conditions.

Determining the ACL inherently involves a high degree of subjectivity and requires us to make significant estimates of current credit risks and trends, all of which may undergo material changes. We cannot be sure that we will be able to identify deteriorating credits before they become nonperforming assets or that we will be able to limit losses on those loans and leases that are identified. We have in the past been, and in the future may be, required to increase our ACL for any of several reasons. State and federal regulators, in reviewing our loan and lease portfolio as part of a regulatory examination, may request that we increase the ACL. Changes in economic conditions or individual business or personal circumstances affecting borrowers, new information regarding existing loans and leases, identification of additional problem loans and leases and other factors, both within and outside of our control, may require an increase in the ACL.

If our assessment of and expectations concerning the above-mentioned factors differ from actual developments, we may be required to increase our ACL, which could have an adverse effect on our financial condition, results of operations and our regulatory capital.

Commercial real estate lending may expose us to a greater risk of loss and impact our earnings and profitability.

Our business strategy includes making loans secured by commercial real estate. These types of loans generally have higher risk-adjusted returns and shorter maturities than other loans. Loans secured by commercial real estate properties are generally for larger amounts and may involve a greater degree of risk than other loans. Payments on loans secured by these properties are often dependent on the income produced by the underlying properties which, in turn, depends on the successful operation and management of the properties and the businesses that operate within them. Accordingly, repayment of these loans is subject to conditions in the real estate market or the local economy. Additionally, the COVID-19 pandemic has had a potentially long-term negative impact on certain commercial real estate assets due to the risk that tenants may reduce the office space they lease as some portion of the workforce continues to work remotely on a hybrid or full-time basis. In challenging economic conditions and as a result of changing demand for office space, these loans represent higher risk and could result in internal risk rating downgrades and an increase in our total net charge-offs, requiring us to increase our ACL, which could have a material adverse effect on our financial condition or results of operations. While we seek to minimize these risks in a variety of ways, there can be no assurance that these measures will protect against credit-related losses.

Our loan portfolio has a significant concentration in commercial real estate loans.

Our loan portfolio includes a large amount of commercial real estate loans. The federal banking agencies have promulgated guidance governing banks with concentrations in commercial real estate lending. The guidance provides that a bank has a concentration in commercial real estate lending if (i) total reported loans for construction, land development and other land represent 100% or more of total risk-based capital or (ii) total commercial real estate loans represent 300% or more of total risk-based capital and that bank’s commercial real estate loan portfolio has increased 50% or more during the prior thirty-six months. Owner-occupied commercial real estate loans are excluded from this second category. If a bank is deemed to have a concentration in commercial real estate loans, it will be required to employ heightened risk management practices that address board and management oversight and strategic planning, portfolio management, development of underwriting standards, risk assessment and monitoring through market analysis and stress testing and maintenance of increased capital levels as needed to support the level of commercial real estate lending. At December 31, 2024, the Bank’s construction, land development and other land balances were 54% of total risk-based capital, commercial real estate loans were 320% of total risk-based capital and the Bank’s commercial real estate loan portfolio had increased by 129% during the prior thirty-six months, which was partially impacted by the acquired loans from the Merger. In addition, the Bank's office space portfolio was 54% of total risk-based capital at December 31, 2024. The Bank believes it has taken the appropriate steps to implement appropriate risk management practices, which are subject to regulatory examination, including enhanced market analysis, stress testing and sensitivity analysis. If our regulators conclude that we have not implemented appropriate risk management practices, it could adversely affect our business, and could result in the requirement to maintain increased capital levels or restrict our ability to originate new loans secured by commercial real estate. We can provide no assurance that capital would be available, or available on terms favorable to us, at that time.

The credit risk related to commercial and industrial loans is greater than the risk related to residential loans.

Commercial and industrial loans generally carry larger loan balances and involve a greater degree of risk of nonpayment or late payment than home equity loans or residential mortgage loans. Commercial and industrial loans include advances to local and regional businesses for general commercial purposes and include permanent and short-term working capital, machinery and equipment financing, and may be either in the form of lines of credit or term loans. Although commercial and industrial loans may be unsecured to our highest rated borrowers, the majority of these loans are secured by the borrower’s

14

Table of Contents

accounts receivable, inventory and machinery and equipment. In a significant number of these loans, the collateral also includes the business real estate or the business owner’s personal real estate or assets. Commercial and industrial loans are more susceptible to risk of loss during a downturn in the economy, as borrowers may have greater difficulty in meeting their debt service requirements and the value of the collateral may decline. We attempt to mitigate this risk through our underwriting standards, including evaluating the creditworthiness of the borrower, regular monitoring, and, to the extent available, credit ratings on the business. However, these procedures cannot entirely eliminate the risk of loss associated with commercial and industrial lending.

Environmental liability associated with our lending activities could result in losses.

In the course of business, we may acquire, through foreclosure, properties securing loans originated or purchased that are in default. Particularly in commercial real estate lending, there is a risk that material environmental violations could be discovered on these properties. In this event, we might be required to remedy these violations at the affected properties at our sole cost and expense. The cost of remedial action could substantially exceed the value of affected properties. We may not have adequate remedies against the prior owner or other responsible parties and could find it difficult or impossible to sell the affected properties. These events could have an adverse effect on our financial condition and results of operations.

Risks Related to Interest Rates and Investments

Changes in interest rates could adversely impact our financial condition and results of operations.

Our operations are subject to risks and uncertainties surrounding our exposure to changes in the interest rate environment. Earnings and liquidity depend to a great extent on our interest rates. Interest rates are highly sensitive to many factors beyond our control, including competition, general economic conditions, geopolitical tensions and monetary and fiscal policies of various governmental and regulatory authorities, including the FRB. Conditions such as inflation, deflation, recession, unemployment and other factors beyond our control may also affect interest rates. The nature and timing of any changes in interest rates or general economic conditions and their effect on us cannot be controlled and are difficult to predict. If the rate of interest we pay on our interest-bearing liabilities increases more than the rate of interest we receive on our interest-earning assets, our net interest income, and therefore our earnings, could contract and be materially adversely affected. Our earnings could also be materially adversely affected if the rates on interest-earning assets fall more quickly than those on our interest-bearing liabilities. Changes in interest rates could also create competitive pressures, which could impact our liquidity position.

Changes in interest rates also can affect our ability to originate loans, our ability to obtain and retain deposits, and the value of interest-earning assets, and the ability to realize gains from the sale of such assets, which could all negatively impact shareholder's equity and regulatory capital. Additional increases in interest rates could have a negative impact on our results of operations by reducing the ability of borrowers to repay their current loan obligations, which could not only result in increased loan defaults, foreclosures and charge-offs, but could also necessitate further increases to our ACL and reduce net income. In addition, an increase in the general level of interest rates may negatively affect the market value of the investment portfolio depending on the duration of certain securities included in the investment portfolio. Conversely, decreases in interest rates may trigger loan prepayments, which may serve to reduce net interest income if we are unable to lend these funds to other borrowers or invest the funds at the same or higher interest rates.

Our subordinated notes, issued in December 2018, had a 6.0% fixed interest rate through December 30, 2023, after which the interest rate converted to a variable rate of three-month CME term SOFR rate, plus a spread adjustment of 0.26161% and a margin of 3.16% through maturity on December 30, 2028. At December 31, 2024, the interest rate on our subordinated debt was 8.03%. In connection with the completion of the Codorus Valley Merger, on July 1, 2024, we assumed Codorus Valley’s obligations with respect to its outstanding subordinated notes and trust preferred debt, consisting of 4.50% fixed to floating rate notes due December 9, 2030 with an aggregate principal amount not in excess of $31.0 million, floating rate junior subordinated deferrable interest debentures (CVB Statutory Trust No. I) due December 15, 2034 in an aggregate principal amount not in excess of $3.1 million and junior subordinated debt securities (CVB Statutory Trust No. II) due July 7, 2036 in an aggregate principal amount not in excess of $7.2 million. The assumption of subordinated notes from the Merger have a fixed rate of interest equal to 4.50% until December 30, 2025. After that term, the variable rate of interest is equal to the three-month CME term SOFR rate plus 4.04%. The trust preferred debt issued through CVB Statutory Trust No. I has variable rate of three-month CME term SOFR rate, plus a spread adjustment of 0.26161% and a margin of 2.02% through maturity and the trust preferred debt issued through CVB Statutory Trust No. II has a variable rate of three-month CME term SOFR rate, plus a spread adjustment 0.26161% and a margin of 1.54% through maturity. At December 31, 2024, the interest rates on our trust preferred debt were 6.64% for CVB Statutory Trust No. I and 6.46% for CVB Statutory Trust No. II. An increase in the interest rate on our subordinated debt and trust preferred debt could have a material adverse effect on our results of operations.

15

Table of Contents

Our securities portfolio performance in difficult market conditions could have adverse effects on our results of operations.

Unrealized losses on investment securities result from changes in credit spreads and liquidity issues in the marketplace, along with changes in the credit profile of individual securities issuers. Under GAAP, we are required to review our investment portfolio periodically for the presence of impairment of our securities, taking into consideration current and future market conditions, the extent and nature of changes in fair value, issuer rating changes and trends, volatility of earnings, current analysts' evaluations, our ability and intent to hold investments until a recovery of fair value, as well as other factors. Adverse developments with respect to one or more of the foregoing factors may require us to deem particular securities to be impaired, with the credit-related portion of the reduction in the value recognized as a charge to our earnings through an allowance. Subsequent valuations, in light of factors prevailing at that time, may result in significant changes in the values of these securities in future periods. Any of these factors could require us to recognize further impairments in the value of our securities portfolio, which may have an adverse effect on our results of operations in future periods.

Potential downgrades of U.S. government securities by one or more of the credit ratings agencies could have a material adverse effect on our operations, earnings and financial condition.

A possible future downgrade of the sovereign credit ratings of the U.S. government and a decline in the perceived creditworthiness of U.S. government-related obligations could impact our ability to obtain funding that is collateralized by affected instruments, as well as affect the pricing of that funding when it is available. A downgrade may also adversely affect the market value of such instruments. We cannot predict if, when or how any changes to the credit ratings or perceived creditworthiness of these organizations will affect economic conditions. Among other things, a downgrade in the U.S. government’s credit rating could adversely impact the value of our securities portfolio and may trigger requirements that we post additional collateral for trades relative to these securities. A downgrade of the sovereign credit ratings of the U.S. government or the credit ratings of related institutions, agencies or instruments could significantly exacerbate the other risks to which we are subject and could have related adverse effects on our business, financial condition and results of operations.

Risks Related to Competition and to Our Business Strategy

Because our business is concentrated in south central Pennsylvania, the greater Baltimore region, and Washington County, Maryland, our financial performance could be materially adversely affected by economic conditions and real estate values in these market areas.

Our operations and the properties securing our loans are primarily located in south central Pennsylvania, the greater Baltimore region, and Washington County, Maryland. Our operating results depend largely on economic conditions and real estate valuations in these and surrounding areas. A deterioration in economic conditions, increased unemployment, inflation, and a decline in real estate values in these market areas or other factors beyond our control could materially adversely affect our operations.

We face significant competition in the financial services industry.

We face significant competition in originating loans, attracting deposits and providing other financial services from financial and non-financial services firms, including traditional banks and credit unions, online banks, mortgage banking companies, wealth management companies, financial technology companies and others. Some of our competitors enjoy advantages, including greater financial resources and higher lending limits, more expansive marketing campaigns, better brand recognition, a wider geographic presence, more accessible branch office locations, the ability to offer a wider array of services or more favorable pricing alternatives, as well as lower origination and operating costs. Emerging technologies have the potential to intensify competition and accelerate disruption in the financial services industry. In recent years, non-financial services firms, such as financial technology companies, have been offering services traditionally provided by financial institutions. These firms use technology and mobile platforms to enhance the ability of companies and individuals to borrow, save and invest money. Our ability to compete successfully depends on a number of factors, including our ability to develop and execute strategic plans and initiatives; to develop competitive products and technologies; and to attract, retain and develop a highly skilled employee workforce. If we are not able to compete successfully, we could be placed at a competitive disadvantage, which could result in the loss of clients and market share, and our business, results of operations and financial condition could suffer.

Our business may be adversely affected if we fail to adapt our products and services to technological advances, evolving industry standards and consumer preferences.

The banking industry undergoes constant technological change with frequent introductions of new technology-driven products and services. The widespread adoption of new technologies, including internet services and payment systems, could require substantial expenditures to modify or adapt our existing products and services as we grow and develop our internet banking and mobile banking channel strategies in addition to remote connectivity solutions. We might not be successful in

16

Table of Contents

developing or introducing new products and services, integrating new products or services into our existing offerings, responding or adapting to changes in consumer behavior, preferences, spending, investing and/or saving habits, achieving market acceptance of our products and services, reducing costs in response to pressures to deliver products and services at lower prices or sufficiently developing and maintaining loyal clients. Our future success may depend, in part, on our ability to address the needs of our current and prospective clients by using technology to provide products and services that will satisfy demands for convenience, as well as to create additional efficiencies in operations.

Development of new products, services and technologies may impose additional costs on us and may expose us to increased operational risk.

The introduction of new products and services can involve significant time and resources, including to obtain regulatory approvals. Substantial risks and uncertainties are associated with the introduction of new products and services, including technical and control requirements that may need to be developed and implemented, rapid technological change in the industry, our ability to access technical and other information from our clients, the significant and ongoing investments required to bring new products and services to market in a timely manner at competitive prices and the preparation of marketing, sales and other materials that fully and accurately describe the product or service and its underlying risks. Our failure to manage these risks and uncertainties would also expose us to enhanced risk of operational lapses which may result in the recognition of financial statement liabilities. Regulatory and internal control requirements, capital requirements, competitive alternatives, vendor relationships and shifting market preferences may also determine if such initiatives can be brought to market in a manner that is timely and attractive to our clients. Products and services relying on internet and mobile technologies may expose us to fraud and cybersecurity risks. Implementation of certain new technologies, such as those related to artificial intelligence, automation and algorithms, may have unintended consequences due to their limitations, potential manipulation, or our failure to use them effectively. Failure to successfully manage these risks in the development and implementation of new products or services could have a material adverse effect on our business and reputation, as well as on our consolidated results of operations and financial condition.

We may incur significant losses as a result of ineffective risk management processes and strategies.

We seek to monitor and control our risk exposure through a risk and control framework encompassing a variety of separate but complementary financial, credit, operational, compliance, and legal reporting systems; internal controls; management review processes; and other mechanisms. While we employ a broad and diversified set of risk monitoring and risk mitigation techniques, those techniques and the judgments that accompany their application may not be effective and may not anticipate every economic and financial outcome in all market environments or the specifics and timing of such outcomes.

We face continuing and growing security risks to our information base, including the information we maintain relating to our clients.

In the ordinary course of business, we rely on electronic communications and information systems to conduct our business and to store sensitive data, including financial information regarding clients. Our electronic communications and information systems infrastructure, as well as the systems infrastructures of the vendors we use to meet our data processing and communication needs, could be susceptible to cyber-attacks, such as denial of service attacks, hacking, terrorist activities or identity theft. Financial services institutions and companies engaged in data processing have reported breaches in the security of their websites or other systems, some of which have involved sophisticated and targeted attacks intended to obtain unauthorized access to confidential information, destroy data, disable or degrade service or sabotage systems, often through the introduction of computer viruses or malware, cyber-attacks and other means. Denial of service attacks have been launched against a number of large financial services institutions. Hacking and identity theft risks, in particular, could cause serious reputational harm. Cyber threats are rapidly evolving and we may not be able to anticipate or prevent all such attacks. Although, to date we have not experienced any material losses relating to cyber-attacks or other information security breaches, there can be no assurance that we will not suffer such losses in the future. No matter how well designed or implemented our controls are, we will not be able to anticipate all security breaches of these types, and we may not be able to implement effective preventive measures against such security breaches in a timely manner. A failure or circumvention of our security systems could have a material adverse effect on our business operations and financial condition.

We regularly assess and test our security systems and disaster preparedness, including back-up systems, but the risks are substantially escalating. As a result, cybersecurity and the continued enhancement of our controls and processes to protect our systems, data and networks from attacks, unauthorized access or significant damage remain a priority. Accordingly, we may be required to expend additional resources to enhance our protective measures or to investigate and remediate any information security vulnerabilities or exposures. Any breach of our system security could result in disruption of our operations, unauthorized access to confidential client information, significant regulatory costs, litigation exposure and other possible damages, loss or liability. Such costs or losses could exceed the amount of available insurance coverage, if any, and would adversely affect our earnings. Also, any failure to prevent a security breach, or to quickly and effectively deal with such a

17

Table of Contents

breach, could negatively impact client confidence, damaging our reputation and undermining our ability to attract and keep clients.

We may not be able to successfully implement future information technology system enhancements, which could adversely affect our business operations and profitability.

We invest significant resources in information technology system enhancements in order to provide functionality and security at an appropriate level. We may not be able to successfully implement and integrate future system enhancements, which could adversely impact the ability to provide timely and accurate financial information in compliance with legal and regulatory requirements, which could negatively impact our growth and profitability and could result in regulatory scrutiny. In addition, future system enhancements could have higher than expected costs and/or result in operating inefficiencies, which could increase the costs associated with the implementation as well as ongoing operations.

Failure to properly utilize system enhancements that are implemented in the future could result in significant costs to remediate or replace the defective components, which would adversely impact our financial condition and results of operations. In addition, we may incur significant training, licensing, maintenance, consulting and amortization expenses during and after systems implementations, and any such costs may continue for an extended period of time.

We may become subject to claims and litigation pertaining to fiduciary responsibility.

We provide fiduciary services through OFA. From time to time, clients may make claims and take legal action with regard to the performance of our fiduciary responsibilities. Whether such claims and legal actions are founded or unfounded, if such claims or legal actions are not resolved in a manner favorable to us, the claims or related actions may result in significant financial expense and liability to us and/or adversely affect our reputation in the marketplace, as well as adversely impact client demand for our products and services. Any financial liability or reputation damage could have a material adverse effect on our business, which, in turn, could have a material adverse effect on our financial condition and results of operations.

Climate change may adversely affect our business and results of operations.

Current and anticipated effects of climate change could negatively impact us and our clients. Weather-related events, such as severe storms, hurricanes, flooding and droughts, can present risks to us and our clients, including property damage, change in the value of properties securing our loans, changes in client behavior and preferences, and disruption of business operations, all which can increase credit risk and result in loss of revenue and additional expenses. These concerns over the impacts of climate change have gained political and social attention resulting in many legislative and regulatory initiatives to lessen the effects of climate change, which also may result in heightened supervisory expectations on banks’ risk management practices. Despite recent changes in the U.S. Administration, Congressional leadership and regulatory agency leadership, state legislatures and federal and state regulatory agencies may continue to propose and advance numerous legislative and regulatory initiatives seeking to mitigate the effects of climate change which may result in increases to compliance and operating costs, which could have a negative impact on our financial condition and results of operations.

Risks Related to Mergers and Acquisitions

Our business may be negatively impacted by risk associated with acquisitions.

We intend to pursue a growth plan consistent with our business strategy, including growth by acquisition, as well as leveraging our existing branch network. On July 1, 2024, we completed the Codorus Valley Merger. We may wish to seek to acquire other companies in the future. Our business may be negatively impacted by certain risks inherent with the acquisition of Codorus Valley or other future acquisitions. Some of these risks include the following:

•we may incur substantial expenses in pursuing acquisitions;

•management may divert its attention from other aspects of our business;

•we may assume potential and unknown liabilities of the acquired company;

•the acquired business may not perform in accordance with management's expectations, including potentially losing key clients of the acquired business;

•difficulties may arise in connection with the integration of the operations of the acquired business with our businesses; and

•we may lose key employees of the combined business.

Our ability to manage growth successfully will depend on our ability to attract qualified personnel and maintain cost controls and asset quality while attracting additional loans and deposits on favorable terms, as well as on factors beyond our control, such as economic conditions and competition. If we grow too quickly and are not able to attract qualified personnel,

18

Table of Contents

control costs and maintain asset quality, this continued rapid growth could materially adversely affect our financial performance.

Goodwill generated in acquisitions may negatively affect our financial condition.

To the extent that merger consideration, consisting of cash and shares of our common stock, exceeds the fair value of the net assets acquired, including identifiable intangibles, that amount will be reported as goodwill by us. In accordance with current accounting guidance, goodwill will not be amortized, but will be evaluated for impairment annually or more frequently as warranted by specific events or circumstances. A failure to realize the expected benefits of a merger could adversely impact the carrying value of the goodwill recognized in such merger and, in turn, negatively affect our financial results.

The market price of our common stock after acquisitions may be affected by factors different from those affecting our shares currently.

The businesses of us and acquired entities may differ and, accordingly, the results of operations of the combined company and the market price of the shares of common stock of the combined company may be affected by factors different from those currently affecting the independent results of operations and market prices of common stock of each separate entity. The market value of our common stock fluctuates based upon various factors, including changes in our business, operations or prospects, market assessments of a merger, regulatory considerations, market and economic considerations, and other factors. Further, the market price of our common stock after an acquisition may be affected by factors different from those currently affecting our common stock. Additionally, future business acquisitions may result in the issuance and payment of additional shares of stock, which would dilute current shareholders’ ownership interests, and may involve the payment of a premium over book and market values. Therefore, dilution of our tangible book value and net income per common share could occur in connection with any future transaction.

We may continue to incur substantial costs related to the Codorus Valley Merger and the integration of Codorus Valley, and these costs may be greater than anticipated due to unexpected events.

We have incurred and expect to incur a number of non-recurring costs associated with the Codorus Valley Merger, including facilities and systems consolidation costs and employment-related costs. We may also incur additional costs to maintain employee morale and to retain key employees. There are a large number of processes, policies, procedures, operations, technologies and systems that will need to be integrated, including purchasing, accounting and finance, payroll, compliance, treasury management, branch operations, vendor management, risk management, lines of business, pricing and benefits. There are many factors beyond our control that could affect the total amount or the timing of the integration costs. Moreover, many of the additional costs that will be incurred are, by their nature, difficult to estimate accurately. These integration costs may result in the combined company taking additional charges against earnings, and the amount and timing of such charges are uncertain at present. There can be no assurances that the expected benefits and efficiencies related to the Codorus Valley Merger will be realized to offset these transaction and integration costs over time.

We may fail to realize the anticipated benefits of the Codorus Valley Merger.

The success of Codorus Valley Merger will depend on, among other things, the ability to realize the anticipated cost savings. To realize the anticipated benefits and cost savings from the Codorus Valley Merger, we must successfully integrate and combine our businesses in a manner that permits those cost savings to be realized without adversely affecting current revenues and future growth. If we are not able to successfully achieve these objectives, the anticipated benefits of the Codorus Valley Merger may not be realized fully or at all or may take longer to realize than expected. In addition, the actual cost savings of the Codorus Valley Merger could be less than anticipated, and integration may result in additional and unforeseen expenses.

An inability to realize the full extent of the anticipated benefits of the Codorus Valley Merger, as well as any delays encountered in the integration process, could have an adverse effect upon the revenues, levels of expenses and operating results of the combined company following the completion of the Codorus Valley Merger, which may adversely affect the value of the common stock of the combined company following the completion of the Codorus Valley Merger.

Our future results following our recently completed Codorus Valley Merger may suffer if the combined company does not effectively manage its expanded operations.

The size of our business increased significantly as a result of the Codorus Valley Merger. Our future success will depend, in part, upon our ability to manage this expanded business, which may pose challenges for management, including challenges related to the management and monitoring of new operations and associated increased costs and complexity. We may also face increased scrutiny from governmental authorities as a result of the increased size of our business. There can be no assurances

19

Table of Contents

that we will be successful or that we will realize the expected operating efficiencies, revenue enhancement or other benefits currently anticipated from the Codorus Valley Merger.

Risks Related to Regulatory Compliance and Legal Matters

We operate in a highly regulated industry, and laws and regulations, or changes in them, could limit or restrict our activities and could have a material adverse effect on our operations.

We and our subsidiaries are subject to extensive state and federal regulation and supervision. Federal and state laws and regulations govern numerous matters affecting us, including changes in the ownership or control of banks and bank holding companies, maintenance of adequate capital and the financial condition of a financial institution, permissible types, amounts and terms of extensions of credit and investments, permissible non-banking activities, the level of reserves against deposits and restrictions on dividend payments. The FRB and the state banking regulators have the power to issue cease and desist orders to prevent or remedy unsafe or unsound practices or violations of law by banks subject to their regulation, and the FRB possesses similar powers with respect to bank holding companies. These and other restrictions limit the manner in which we and our subsidiaries may conduct business and obtain financing.

The laws, rules, regulations, and supervisory guidance and policies applicable to us are subject to regular modification and change. We expect to become subject to future laws, rules and regulations beyond those currently proposed, adopted or contemplated in the U.S., as well as evolving interpretations of existing and future laws, rules and regulations. These changes could, among other things, subject us to additional costs, including costs of compliance; limit the types of financial services and products we may offer; and/or increase the ability of non-banks to offer competing financial services and products. Failure to comply with laws, regulations, policies, or supervisory guidance could result in enforcement and other legal actions by federal or state authorities, including criminal and civil penalties, the loss of FDIC insurance, revocation of a banking charter, other sanctions by regulatory agencies, civil money penalties, and/or reputational damage, which could have a material adverse effect on our business, financial condition, and results of operations. See the "Supervision and Regulation" section of Item 1, "Business."

Altering our overdraft fee practices could materially adversely affect our fee income and results of operations.

Overdraft fee practices of banks have recently come under increased regulatory scrutiny and been the subject of litigation. This increased scrutiny and litigation have prompted many larger banks to reform their overdraft fee practices or cease charging overdraft fees altogether. Reforming, reducing or eliminating overdraft fees could materially adversely affect our fee income and results of operations. Pending or future legal proceeding, regarding our overdraft fee practices, may result in judgments, settlements, fines, penalties, defense costs, or other results adverse to us, which could materially adversely affect our business, financial condition or results of operations, or cause serious reputational harm to us.

Legislative, regulatory and legal developments involving income and other taxes could materially adversely affect our results of operations and cash flows.

We are subject to U.S. federal and U.S. state income, payroll, property, sales and use, and other types of taxes, including the Pennsylvania Bank Shares Tax. Significant judgment is required in determining our provisions for income taxes. Changes in tax rates, enactments of new tax laws, revisions of tax regulations, and claims or litigation with taxing authorities could result in substantially higher taxes, and therefore, could have a significant adverse effect on our results of operations, financial condition and liquidity. Increases in the assessment rate for the Pennsylvania Bank Shares Tax, which is calculated on the outstanding equity of the Bank, may also materially adversely affect our results of operations.

We are required to use judgment in applying accounting policies and different estimates and assumptions in the application of these policies could result in a decrease in capital and/or other material changes to the reports of financial condition and results of operations.

Material estimates that are particularly susceptible to significant change relate to the determination of the ACL, the fair value of certain financial instruments, particularly securities, and goodwill and purchase accounting. While we have identified those accounting policies that we consider critical and have procedures in place to facilitate the associated judgments, different assumptions in the application of these policies could have a material adverse effect on our financial condition and results of operations.

20

Table of Contents

Changes in our accounting policies or in accounting standards could materially affect how we report our financial results and condition.

From time to time, the FASB, SEC and other regulatory bodies change the financial accounting and reporting standards that govern the preparation of our consolidated financial statements. These changes can be operationally complex to implement and can materially impact how we report our financial condition and results of operations.

We are subject to stringent capital requirements which may adversely impact return on equity, require additional capital raises, or limit the ability to pay dividends or repurchase shares.

Federal regulations establish minimum capital requirements for insured depository institutions, including minimum risk-based capital and leverage ratios, and define “capital” for calculating these ratios. The minimum capital requirements are: (i) a common equity Tier 1 capital ratio of 4.5%; (ii) a Tier 1 to risk-based assets capital ratio of 6%; (iii) a total capital ratio of 8%; and (iv) a Tier 1 leverage ratio of 4%. The regulations also establish a “capital conservation buffer” of 2.5%, which if complied with will result in the following minimum ratios: (i) a common equity Tier 1 capital ratio of 7.0%; (ii) a Tier 1 to risk-based assets capital ratio of 8.5%; and (iii) a total capital ratio of 10.5%. The application of these capital requirements could, among other things, require us to maintain higher capital, resulting in lower returns on equity, and we may be required to obtain additional capital or be subject to adverse regulatory actions, including limitations on our ability to pay dividends or repurchase shares, if we are unable to comply with such requirements.

The FRB may require us to commit capital resources to support the Bank.

Federal law requires that a holding company act as a source of financial and managerial strength to its subsidiary bank and to commit resources to support such subsidiary bank. Under the “source of strength” doctrine, the FRB may require a holding company to make capital injections into a troubled subsidiary bank and may charge the holding company with engaging in unsafe and unsound practices for failure to commit resources to a subsidiary bank. A capital injection may be required at times when the holding company may not have the resources to provide it and therefore may require the holding company to borrow the funds or raise capital on terms considered unfavorable to shareholders. Any loans by a holding company to its subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. In the event of a holding company’s bankruptcy, the bankruptcy trustee will assume any commitment by the holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank. Moreover, bankruptcy law provides that claims based on any such commitment will be entitled to a priority of payment over the claims of the institution’s general unsecured creditors, including the holders of its note obligations. Thus, any borrowing that must be done by us to make a required capital injection becomes more difficult and expensive and could have an adverse effect on our business, financial condition and results of operations.

We are subject to numerous laws designed to protect consumers, including the Community Reinvestment Act and fair lending laws, and failure to comply with these laws could lead to a wide variety of sanctions.

The Community Reinvestment Act, the Equal Credit Opportunity Act, the Fair Housing Act, and other fair lending laws and regulations impose community investment and nondiscriminatory lending requirements on financial institutions. The CFPB, the FRB, the Department of Justice and other federal agencies are responsible for enforcing these laws and regulations. A successful regulatory challenge to an institution’s performance under the Community Reinvestment Act, the Equal Credit Opportunity Act, the Fair Housing Act or other fair lending laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions, restrictions on expansion and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition and results of operations.

We may become subject to enforcement actions even though noncompliance was inadvertent or unintentional.

The financial services industry is subject to intense scrutiny from bank supervisors in the examination process and aggressive enforcement of federal and state regulations, particularly with respect to mortgage-related practices and other consumer compliance matters, and compliance with anti-money laundering, Bank Secrecy Act and Office of Foreign Assets Control regulations, and economic sanctions against certain foreign countries and nationals. Enforcement actions may be initiated for violations of laws and regulations and unsafe or unsound practices. We maintain systems and procedures designed to ensure that we comply with applicable laws and regulations; however, some legal/regulatory frameworks provide for the imposition of fines or penalties for noncompliance even though the noncompliance was inadvertent or unintentional and even though systems and procedures designed to ensure compliance were in place at the time. Failure to comply with these and other regulations, and supervisory expectations related thereto, may result in fines, penalties, lawsuits, regulatory sanctions, reputation damage, or restrictions on our business.

21

Table of Contents

We face significant legal risks, both from regulatory investigations and proceedings and from private actions brought against us.

As a participant in the financial services industry, many aspects of our business involve substantial risk of legal liability. From time to time we are named as a defendant or are otherwise involved in various legal proceedings, including regulatory enforcement actions, class actions and other litigation or disputes with third parties. Litigation pending against us, if any, is described in Note 23, Contingencies, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statement and Supplementary Data," of this Annual Report on Form 10-K. There is no assurance that regulatory enforcement actions or litigation with private parties will not increase in the future. Pending or future legal proceedings against us may result in judgments, settlements, fines, penalties, indemnification costs, defense costs, or other results adverse to us, which could materially adversely affect our business, financial condition or results of operations, or cause serious reputational harm to us.

Risks Related to Liquidity

If we are unable to access the capital markets, have prolonged net deposit outflows, or our borrowing costs increase, our liquidity and competitive position will be negatively affected.

Liquidity is essential to our business. We must maintain sufficient funds to respond to the needs of depositors and borrowers. To manage liquidity, we draw upon a number of funding sources in addition to in-market deposit growth and repayments and maturities of loans and investments. Any inability to access the capital markets, illiquidity or volatility in the capital markets, the decrease in value of eligible collateral or increased collateral requirements (including as a result of credit concerns for short-term borrowing), changes to our relationships with our funding providers based on real or perceived changes in our risk profile, prolonged federal government shutdowns, or changes in regulations or regulatory guidance, or other events could negatively affect our access to or cost of funding, affecting our ongoing ability to accommodate liability maturities and deposit withdrawals, meet contractual obligations, or fund asset growth and new business initiatives at a reasonable cost, in a timely manner and without adverse consequences. Additionally, our liquidity or cost of funds may be negatively impacted by the unwillingness or inability of the FRB to act as lender of last resort, unexpected simultaneous draws on lines of credit or deposits, the withdrawal of or failure to attract customer deposits, or increased regulatory liquidity, capital and margin requirements.

Although we maintain a liquid asset portfolio and have implemented strategies to maintain sufficient and diverse sources of funding to accommodate planned, as well as unanticipated, changes in assets, liabilities, and off-balance sheet commitments under various economic conditions, a substantial, unexpected, or prolonged change in the level or cost of liquidity could have a material adverse effect on us. If the cost effectiveness or the availability of supply in these credit markets is reduced for a prolonged period of time, our funding needs may require us to access funding and manage liquidity by other means. These alternatives may include generating client deposits, extending the maturity of wholesale borrowings, borrowing under certain secured borrowing arrangements, using relationships developed with a variety of fixed income investors, securitizing or selling loans, and further managing loan growth and investment opportunities. These alternative means of funding may result in an increase to the overall cost of funds and may not be available under stressed conditions, which would cause us to liquidate a portion of our liquid asset portfolio to meet any funding needs. In the event of additional liquidity is needed, we have access to liquidity from the FHLB, the FRB discount window and other sources.

At December 31, 2024, we have combined borrowing capacity from the FHLB and FRB of approximately $1.7 billion. Accessing these sources of liquidity may impose additional borrowing costs on us.

Loss of deposits or a change in deposit mix could increase our cost of funding.

Deposits are a stable source of funding for which costs are typically lower than other financing options. We compete with banks and other financial institutions for deposits, as well as institutions offering uninsured investment alternatives, including money market funds and Treasury Bill alternatives. Our competitors may offer higher interest rates than we do, which could decrease the deposits that we attract or require us to increase our rates to retain existing deposits or obtain new deposits. Bank failures could negatively impact depositor confidence in us or the banking industry and cause our deposits to decline. Funding costs may increase if we lose deposits and are forced to replace them with more expensive sources of funding, if clients shift their deposits into higher cost products or if we need to raise interest rates to avoid losing deposits. Higher funding costs reduce our net interest margin and net income. Increased deposit competition could materially adversely affect our ability to fund lending operations. As a result, we may need to seek other sources of funds that could increase our cost of funds.

Wholesale funding sources may prove insufficient to replace deposits at maturity and support our operations and future growth.

We must maintain sufficient funds to respond to the needs of depositors and borrowers. To manage liquidity, we draw upon a number of funding sources in addition to core deposit growth and repayments and maturities of loans and investments.

22

Table of Contents

These sources may include Federal Home Loan Bank advances, proceeds from the sale of investments and loans, and liquidity resources at the holding company. Our ability to manage liquidity will be severely constrained if we are unable to maintain access to funding or if adequate financing is not available to accommodate future growth at acceptable costs. In addition, if we are required to rely more heavily on more expensive funding sources to support future growth, our revenues may not increase proportionately to cover our costs. In this case, operating margins and profitability would be adversely affected. Turbulence in the capital and credit markets may adversely affect our liquidity and financial condition and the willingness of certain counterparties and clients to do business with us. Our ability to borrow from other financial institutions or to access the debt or equity capital markets on favorable terms or at all could be adversely affected by disruptions in the capital markets or other events, including actions by rating agencies and deteriorating investor expectations.

The Parent Company is a holding company dependent on liquidity through payments, including dividends, from its bank subsidiary, which is subject to restrictions.

The Parent Company is a holding company, separate from the Bank, and must provide for its own liquidity. The Parent Company depends on dividends, distributions and other payments from the Bank to fund dividend payments and stock repurchases, if permitted, and to fund all payments on obligations. The FRB requires a BHC to act as a source of financial and managerial strength for its subsidiary banks. The FRB could require us to commit resources to the Bank when doing so is not otherwise in the interests of our shareholders or creditors. The Bank is subject to laws that restrict dividend payments or authorize regulatory bodies to prohibit or reduce the flow of funds from it to us. If the Bank is unable to pay dividends to us, we may not be able to service our debt, pay dividends on our common stock or engage in stock repurchases. A reduction or elimination of dividends could adversely affect the market price of our common stock and would adversely affect our business, financial condition, results of operations and prospects. In addition, our right to participate in a distribution of assets upon the Bank’s liquidation or reorganization is subject to the prior claims of the Bank’s creditors, including its depositors. Restrictions on the Bank’s ability to dividend funds to the Company are included in Note 17, Shareholders' Equity and Regulatory Capital, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data."

Concerns about the soundness of other financial institutions could adversely affect us.

Our ability to engage in routine funding and other transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. As a result, defaults by, or even rumors or questions about, one or more financial services institutions, or the financial services industry generally, have historically led to market-wide liquidity problems, losses of depositor, creditor and counterparty confidence and could lead to losses or defaults by us or by other institutions. Bank failures could negatively impact client and investor confidence in us, which could negatively impact our earnings, stock price or liquidity. We could experience increases in deposits and assets as a result of other banks’ difficulties or failure, which would increase the capital we are required to maintain to support such growth.

Risks Related to Owning Our Stock

If we want, or are compelled, to raise additional capital in the future, that capital may not be available when it is needed or on terms favorable to current shareholders.

Federal banking regulators require us to maintain adequate levels of capital to support our operations. These capital levels are determined and dictated by law, regulation and banking regulatory agencies. In addition, capital levels are also determined by our management and board of directors based on capital levels that they believe are necessary to support our business operations. Changes in our financial condition or results of operations, applicable accounting standards, laws and regulations and other factors could make it necessary or advisable for us to raise additional capital. Under such circumstances, our ability to raise additional capital will depend on conditions in the capital markets at that time, which are outside of our control, and on our financial performance. Accordingly, we cannot provide assurance of our ability to raise additional capital on terms and time frames acceptable to us or to raise additional capital at all. Additionally, the inability to raise capital in sufficient amounts may adversely affect our operations, financial condition and results of operations. Our ability to borrow could also be impaired by factors that are nonspecific to us, such as severe disruption of the financial markets or negative news and expectations about the prospects for the financial services industry as a whole. If we raise capital through the issuance of additional shares of our common stock or other securities, we would likely dilute the ownership interests of current investors by diluting earnings per share of our common stock and potentially diluting book value per share, depending on the issuance price. The price at which we issue additional shares of stock could be less than the current market price of our common stock. Furthermore, a capital raise through the issuance of additional shares may have an adverse impact on our stock price. In addition, a capital raise involving the issuance of debt securities could negatively impact our earnings and liquidity.

23

Table of Contents

The market price of our common stock is subject to volatility.

The market price of our common stock has been subject to fluctuations in response to numerous factors, many of which are beyond our control. These factors include actual or anticipated variations in our operational results and cash flows, changes in financial estimates by securities analysts, trading volume, large purchases or sales of our common stock, market conditions within the banking industry, the general state of the securities markets and the market for stocks of financial institutions, as well as general economic conditions. The impact of the large bank failures on the price of securities issued by financial institutions, generally, is one example of a situation in which factors outside of our control can negatively impact the market price of our securities. In addition, if our common stock ceases to be included in the Russell 2000 index, which is reconstituted in June of each year, this could result in decreased liquidity in, and demand for, our common stock, which could cause the market price of our common stock to decline.

A reduction in our credit rating could adversely affect our access to capital and could increase our cost of funds.

A credit rating agency regularly evaluates the Parent Company and the Bank, and credit ratings are based on a number of factors, including our financial strength and ability to generate earnings, as well as factors not entirely within our control, including conditions affecting the financial services industry, the economy, and changes in rating methodologies. There can be no assurance that we will maintain our current credit ratings. A downgrade of the credit ratings of the Parent Company or the Bank could adversely affect our access to liquidity and capital, and could significantly increase our cost of funds, trigger additional collateral or funding requirements, and decrease the number of investors and counterparties willing to lend to us or purchase our securities. This could affect our growth, profitability, and financial condition, including liquidity.

General Risk Factors

We may not be able to attract and retain skilled people.

Competition for the best people in most activities engaged in by us can be intense, and we may not be able to attract and hire sufficiently skilled people to fill open and newly created positions or to retain current or future employees. This competition for talented, skilled and diverse employees has been intensified by the increase in remote and flexible work arrangements, wage pressures and opportunities in the labor market. An inability to attract and retain individuals with the necessary skills to fill open positions, or the unexpected loss of services of one or more of our key personnel, could have a material adverse impact on our business due to the loss of their skills, knowledge of our markets, years of industry experience or the difficulty of promptly finding qualified replacement personnel.

We believe that our continued growth and future success will depend in large part on the skills of our management team and our ability to motivate and retain these individuals and other key personnel. The loss of service of one or more of our executive officers or key personnel could delay or reduce our ability to successfully implement our long-term business strategy, our business could suffer, and the value of our stock could be materially adversely affected. Leadership changes will occur from time to time, and we cannot predict whether significant resignations will occur or whether we will be able to recruit additional qualified personnel. We believe our management team possesses valuable knowledge about the banking industry and that their knowledge and relationships could be very difficult to replicate. Our success also depends on the experience of our branch managers and lending officers and on their relationships with the clients and communities they serve. The loss of these key personnel could negatively impact our banking operations. The loss of key personnel, or the inability to recruit and retain qualified personnel in the future, could have an adverse effect on our business, financial condition, or operating results.

We could be adversely affected by a failure in our internal controls.

We rely on our employees to design, manage, and operate our systems and controls to assure that we properly enter into, record and manage processes, transactions and other relationships with clients, suppliers and other parties with whom we do business. In some cases, we rely on employees of third parties to perform these tasks. We also depend on employees and the systems and controls for which they are responsible to assure that we identify and mitigate the risks that are inherent in our relationships and activities. When we change processes or procedures, introduce new products or services, or implement new technologies, we may fail to adequately identify or manage operational risks resulting from such changes.

As a result of our reliance on employees, whether ours or those of third parties, we are subject to human vulnerabilities. These range from innocent human error to misconduct or malfeasance, potentially leading to operational breakdowns or other failures. Our controls may not be adequate to prevent problems resulting from human involvement in our business, including risks associated with the design, operation and monitoring of automated systems. Errors by our employees or others responsible for systems and controls on which we depend and any resulting failures of those systems and controls could result in significant harm to us. This could include client remediation costs, regulatory fines or penalties, litigation or enforcement actions, or limitations on our business activities. We could also suffer damage to our reputation, impacting our ability to attract and retain clients and employees.

24

Table of Contents

Management regularly reviews and updates our internal controls, disclosure controls and procedures, and corporate governance policies and procedures. Any system of controls, however well-designed and operated, is based in part on certain assumptions and can provide only reasonable, not absolute, assurances that the objectives of the system are met. Any failure or circumvention of the controls and procedures or failure to comply with regulations related to controls and procedures could have a material adverse effect on our business, results of operations and financial condition.

Negative public opinion could damage our reputation and adversely affect our earnings.

Reputational risk, or the risk to our earnings and capital from negative public opinion, is inherent in our business. Negative public opinion can result from the actual or perceived manner in which we conduct our business activities, including banking operations and trust and investment operations, our management of actual or potential conflicts of interest and ethical issues, and our protection of confidential client information. Negative public opinion can also result from events occurring in the banking industry, such as bank failures, which are outside of our control. Negative public opinion can adversely affect our ability to keep and attract clients and can expose us to litigation and regulatory action. Although we take steps to minimize reputation risk in the way we conduct our business activities and deal with our clients, communities and vendors, these steps may not be effective. The proliferation of social media websites utilized by us and other third parties, as well as the personal use of social media by our employees and others, including personal blogs and social network profiles, also may increase the risk that negative, inappropriate or unauthorized information may be posted or released publicly that could harm our reputation or have other negative consequences, including as a result of our employees interacting with our clients in an unauthorized manner in various social media outlets. Any damage to our reputation could affect our ability to retain and develop the business relationships necessary to conduct business, which in turn could negatively impact our financial condition, results of operations, and the market price of our common stock.

Acts of terrorism, natural disasters, global climate change, future pandemics, wars and global conflicts may have a negative impact on our business and operations.

Acts of terrorism, natural disasters, global climate change, future pandemics, wars, global conflicts or other similar events could disrupt our operations, result in damage to our properties, reduce or destroy the value of the collateral for our loans and otherwise have a negative impact on our business and operations. While we have in place business continuity plans, such events could still damage our facilities, disrupt or delay the normal operations of our business (including communications and technology), result in harm to, or cause travel limitations on, our employees, and have a similar impact on our clients, suppliers, third-party vendors and counterparties. These events also could impact us negatively to the extent that they result in reduced capital markets activity, lower asset price levels, or disruptions in general economic activity in the U.S. or abroad, or in financial market settlement functions. In addition, these or similar events may impact economic growth negatively, which could have an adverse effect on our business and operations, and may have other adverse effects on us in ways that we are unable to predict.

Anti-takeover provisions could negatively impact our shareholders.

Provisions of Pennsylvania law and provisions of our articles of incorporation and bylaws could make it more difficult for a third party to acquire control of us or have the effect of discouraging a third party from attempting to acquire control of us, even if a merger might be in the best interest of our shareholders. Our articles of incorporation authorize our Board of Directors to issue preferred stock without shareholder approval and such preferred stock could be issued as a defensive measure in response to a takeover proposal. These and other provisions could make it more difficult for a third party to acquire us.

ITEM 1B – UNRESOLVED STAFF COMMENTS

None.

ITEM 1C – CYBERSECURITY

We use, store and process data for and about our customers and employees. We have implemented a cybersecurity risk management program that is designed to identify, assess, and mitigate risks from cybersecurity threats to this data and our systems.We did not experience any cybersecurity incidents in 2024 that materially affected the Company.

Risk Management Oversight and Governance

Under the ultimate direction of our Chief Executive Officer and executive management team, our Information Security Core Committee has primary responsibility for overseeing our management of cybersecurity risks. This committee is chaired by our Chief Information Security Officer, or CISO, who reports directly to our Chief Risk Officer. Other members of the committee include representatives from Information Technology, Operations, Privacy, Compliance, BSA, Audit. Business

25

Table of Contents

Continuity, Vendor Management, Human Resources, Physical Security, Unified Fraud, Retail, Wealth Management, Lending, and Enterprise Risk Management.

Our CISO, working with his team and the Information Security Core Committee, has primary responsibility for assessing and managing our cybersecurity threat management program. He has more than 25 years of experience in building and leading information security teams and has worked at a technology start-up and a large, publicly-traded financial institution before joining the Company. His experience as a technology engineer has prepared him to lead a variety of teams, both large and small, design, implement and execute executive cyber and information security controls. He studied Computer Science at the University of Virginia and holds a Certified Information Systems Security Professional ("CISSP") certification.

In addition to frequent electronic communication, the committee meets monthly and more frequently, as circumstances warrant, to discuss and monitor prevention, detection, mitigation and remediation of risks from cybersecurity threats. When appropriate, meetings will also include our Chief Risk Officer, Chief Financial Officer, General Counsel and members of our disclosure committee. On a regular basis, the CISO also updates the executive management team on developments within the cybersecurity sphere.

The Board of Directors has delegated oversight of the Company’s cybersecurity program to the Enterprise Risk Management Committee of the Board of Directors. The Enterprise Risk Management Committee is responsible for reviewing reports on data management and security initiatives and significant existing and emerging cybersecurity risks, including cybersecurity incidents, the impact on the Company and its stakeholders of any significant cybersecurity incident and any disclosure obligations arising from any such incidents.

Our CISO meets quarterly with the Enterprise Risk Management Committee of the Board of Directors to discuss management’s ongoing cybersecurity risk management programs. He provides information about the sources and nature of risks the Company faces, how management assesses such risks – including in terms of likelihood and severity of impact, progress on vulnerability remediation and current developments in the cybersecurity landscape. This presentation is shared with the full Board of Directors to enable discussion of cybersecurity risk management at the full board level.

Processes for the Identification of Cybersecurity Threats

Under the guidance of the Information Security Core Committee and the CISO, we have adopted a cybersecurity risk management program that addresses, among other areas:

•Identification of assets at risk from cybersecurity threats;

•Identification of potential sources of cybersecurity threats;

•Assessment of the status of protections in place to prevent or mitigate cybersecurity threats; and

•Given that landscape, how to manage cybersecurity risks.

Our risk assessment and mitigation program is centered on three key components:

•Identification of risks, which involves input from different groups across the Company;

•Evaluation of the likelihood of the risks manifesting, the severity of the potential consequences and prioritization of different risk items based on, among other things, importance to the business and cost/benefit analysis to fully address; and

•Execution – establishment of a program to address.

Our information security team is responsible for monitoring our information systems for vulnerabilities and mitigating any issues. It works with other groups in the Company to understand the severity of the potential consequences of a cybersecurity incident and to make decisions about how to prioritize mitigation and other initiatives based on, among other things, materiality to the business. The information security team has processes designed to keep the Company apprised of the different threats in the cybersecurity landscape – this includes interacting with intelligence networks, working with researchers, discussions with peers at other companies, monitoring social media, reviewing government alerts and other news items and attending security conferences. The team also regularly monitors our internal network and out customer-facing network to identify security risks.

Our Internal Audit function updates the Enterprise Risk Management Committee of our Board of Directors on a quarterly basis about the Company’s enterprise risk management program. These reports are the culmination of a process that involves discussions with leaders across the Company and incorporates a multitude of enterprise risk factors, including cybersecurity threats. The Enterprise Risk Management Committee Chair, in turn, reports to the full Board of Directors a summary of the enterprise risk management presentation.

26

Table of Contents

We have an employee education program that is designed to raise awareness of cybersecurity threats to reduce our vulnerability as well as to encourage consideration of cybersecurity risks across functions.

As part of the assessment of the protections we have in place to mitigate risks from cybersecurity threats, we engage third parties to conduct risk assessments on our systems. To assess the effectiveness of our program, we also have engaged consultants to conduct penetration testing and other vulnerability analyses. Over a cycle of several years, our Internal Audit function, with the assistance of outside technical advisors, will conduct an assessment of different systems to provide the Enterprise Risk Management Committee with information on our risk management processes, including cybersecurity risk.

Cyber Risks Related to Third Parties

Risks from cybersecurity threats associated with our use of third-party service providers or third-party technology or other solutions are addressed as part of our overall cybersecurity risk management program. Before purchasing third party technology or other solutions that involve exposure to the Company’s assets and electronic information, our information technology team requires those companies to complete a security review before being approved to work with the Company. To help control cyber risks at third parties and protect customer data and systems on an ongoing basis, we also conduct periodic information security assessments of certain of our third-party service providers.

ITEM 2 – PROPERTIES

Our principal executive offices are located at 4750 Lindle Road, Harrisburg, Pennsylvania, with additional executive and administrative offices at 77 East King Street, Shippensburg, Pennsylvania and 105 Leader Heights Road, York, Pennsylvania. These facilities are owned by the Bank, which also maintains its principal and additional executive and administrative offices at those locations.

We own or lease other premises for use in conducting our business activities, including bank branches, an operations center, and offices in Cumberland, Dauphin, Franklin, Lancaster, and Perry Counties, Pennsylvania and Anne Arundel, Baltimore, Harford, Howard, and Washington Counties, Maryland. We believe that the properties currently owned and leased are adequate for present levels of operation. We are constantly evaluating the best and most efficient mix of branch locations to service our clients due to evolving trends in our industry and increased client engagement through digital channels.

In November 2024, Orrstown closed six of its branches between Pennsylvania and Maryland, including three branches owned by the Bank. After these branch closures were completed, the Bank has 38 full-service branches and seven limited purpose branches.

ITEM 3 – LEGAL PROCEEDINGS

Information regarding legal proceedings is included in Note 23, Contingencies, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statement and Supplementary Data."

ITEM 4 – MINE SAFETY DISCLOSURES

Not applicable.

27

Table of Contents

PART II

ITEM 5 – MARKET FOR REGISTRANT’S COMMON EQUITY, RELATED STOCKHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Market Information

Our common stock is traded on the NASDAQ Capital Market under the symbol “ORRF.” At the close of business on March 10, 2025, there were 3,148 shareholders of record.

The Board declared cash dividends of $0.86 and $0.80 per common share in 2024 and 2023, respectively. Although the Company cannot guarantee the amount of future dividend payments, the Board understands the importance of the dividend to our shareholders and is committed to paying regular cash dividends; however, there can be no assurance as to future dividends because they are dependent on our future earnings, capital requirements and financial condition. Restrictions on the payment of dividends are discussed in Note 17, Shareholders' Equity and Regulatory Capital, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data." On January 31, 2025, the Board declared a cash dividend of $0.26 per common share, which was paid on February 21, 2025, to shareholders of record as of February 14, 2025.

Securities Authorized for Issuance under Equity Compensation Plans

Information regarding the Company's equity compensation plans is included in Part III, Item 12, Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters.

Issuer Purchases of Equity Securities

(a) (b) (c) (d)

Total — $ — —

In September 2015, the Board of Directors of the Company authorized a share repurchase program pursuant to which the Company could repurchase up to 416,000 shares of the Company's outstanding shares of common stock in accordance with all applicable securities laws and regulations, including Rule 10b-18 of the Exchange Act. On April 19, 2021, the Board of Directors authorized the additional future repurchase of up to 562,000 shares of its outstanding common stock for a total of 978,000 shares. When and if appropriate, repurchases may be made in open market or privately negotiated transactions, depending on market conditions, regulatory requirements and other corporate considerations, as determined by management. Share repurchases may not occur and may be discontinued at any time. For the three and twelve months ended December 31, 2024, the Company repurchased zero shares of its common stock. At December 31, 2024, 949,533 shares had been repurchased under the program at a total cost of $21.2 million, or $22.36 per share. Common stock available for future repurchase totals approximately 28,467 shares, or 0.1% of the Company's outstanding common stock at December 31, 2024.

28

Table of Contents

PERFORMANCE GRAPH

The performance graph below compares the cumulative total shareholder return on our common stock with other indexes: the S&P U.S. SmallCap Banks index of banks with assets between $1.0 billion and $5.0 billion, the S&P 500 Index, and the NASDAQ Composite index. The graph assumes an investment of $100 on December 31, 2019 and reinvestment of dividends on the date of payment without commissions. Shareholder returns on our common stock are based on trades on the NASDAQ Stock Market. The performance graph represents past performance and should not be considered to be an indication of future performance.

Period Ending

Source: S&P Global Market Intelligence © 2025

In accordance with the rules of the SEC, this section captioned “Performance Graph” shall not be incorporated by reference into any of our future filings made under the Exchange Act or the Securities Act. The Performance Graph and its accompanying table are not deemed to be soliciting material or to be considered filed under the Exchange Act or the Securities Act.

Recent Sales of Unregistered Securities

The Company has not, within the past three years, sold any equity securities, which were not registered under the Securities Act.

29

Table of Contents

ITEM 6 – [RESERVED]

ITEM 7 – MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

The following discussion and analysis is intended to assist readers in understanding the consolidated financial condition and results of operations of the Company and should be read in conjunction with our Consolidated Financial Statements and notes thereto included in this Annual Report on Form 10-K. Certain prior period amounts presented in this discussion and analysis have been reclassified to conform to current period classifications. These reclassifications did not have a material impact on the Company's consolidated financial condition, results of operations or statement of consolidated cash flows.

Overview

The Company, headquartered in Harrisburg, Pennsylvania, is a one-bank holding company that has elected status as a financial holding company. The consolidated financial information presented herein reflects the Company and its wholly-owned subsidiary, the Bank. At December 31, 2024, the Company had total assets of $5.4 billion, total liabilities of $4.9 billion and total shareholders' equity of $516.7 million as reported in the consolidated balance sheets.

The Company acquired Codorus Valley and its wholly-owned bank subsidiary PeoplesBank, A Codorus Valley Company on July 1, 2024. The merger and acquisition method of accounting was used to account for the transaction with the Company as the acquirer. The Company recorded the assets and liabilities of Codorus Valley at their respective fair values as of July 1, 2024. The transaction was valued at $233.4 million and expanded the Bank’s footprint into the York, Pennsylvania market while increasing its market penetration in its existing markets. The Bank has 38 full-service branches and seven limited purpose branches.

The Company incurred merger-related expenses of $22.7 million, a provision for legal settlement of $478 thousand and restructuring expenses of $296 thousand for the year ended December 31, 2024. For the year ended December 31, 2023, the Company incurred merger-related expenses of $1.1 million. The merger-related and other non-recurring expenses are included in non-interest expenses in the consolidated statements of income under Part II, Item 8, "Financial Statements and Supplemental Data."

Critical Accounting Estimates

The Company’s accounting and reporting policies are in accordance with GAAP and follow accounting and reporting guidelines prescribed by bank regulatory authorities and general practices within the financial services industry in which it operates. Our financial position and results of operations are affected by management's application of accounting policies, including estimates, and assumptions and judgments that affect the amounts reported in the consolidated financial statements and accompanying notes. The most significant accounting policies followed by the Company are presented in Note 1, Summary of Significant Accounting Policies, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data." These estimates, assumptions, and judgments are based on information available as of the balance sheet date and through the date the financial statements are filed with the SEC. In applying those accounting policies, the Company's management is required to exercise judgment in determining many of the methodologies, assumptions and estimates to be utilized. Certain of the critical accounting estimates are more dependent on such judgment and, in some cases, may contribute to volatility in our reported financial performance should the assumptions and estimates used change over time due to changes in circumstances. The more critical accounting estimates include accounting for credit losses, income tax methodologies and accounting for business combinations.

Business Combinations

The Company accounts for its mergers and acquisitions using the acquisition method of accounting under the provisions of FASB ASC Topic 805 ("ASC 805"), Business Combinations. Under ASC 805, the assets acquired, including identified intangible assets such as core deposit intangibles and customer relationship intangibles, and liabilities assumed in a business combination are recognized at their acquisition-date fair value, while transaction costs and restructuring costs associated with the business combination are expensed as incurred. The excess of the merger consideration over the fair value of assets acquired and liabilities assumed, if any, is allocated to goodwill.

The valuations are based upon management’s assumptions of future growth rates, future attrition, discount rates and other relevant factors, which involves a significant level of estimation and uncertainty. In addition, management engaged independent third-party specialists to assist in the development of the fair values of the acquired assets and assumed liabilities. The preliminary estimates of fair values may be adjusted for a period of time subsequent to the acquisition date if new information is obtained about facts and circumstances that existed as of the merger date that, if known, would have affected the measurement of the amounts recognized as of that date. Adjustments would be recorded to goodwill during the current reporting period.

30

Table of Contents

Examples of the impacted acquired loans and assumed liabilities includes loans, deposits, identifiable intangible assets, borrowings and certain other assets and liabilities.

For acquired loans at the merger date, management evaluated and classified loans based upon whether the loans had experienced a more-than-insignificant amount of credit deteriorating since origination. To determine the fair value of the loans, significant estimates and assumptions were applied, including projected cash flows, discount rates, repayment speeds, credit loss severity rates, default rates and realizable collateral values. At acquisition, the allowance on PCD loans is booked directly to the ACL using the Company’s existing ACL methodology, but there is no initial impact to net income. Subsequent to acquisition, future changes in estimates of expected credit losses on PCD loans are recognized as provision expense (or reversal of provision expense). The ACL for non-PCD loans is recognized as a provision for credit losses in the same reporting period as the business acquisition, using the Company’s existing ACL methodology.

These critical accounting estimates are discussed in detail in "Management's Discussion and Analysis of Financial Condition and Results of Operations" in our Annual Report on Form 10-K for the year ended December 31, 2024. Significant accounting policies and any changes in accounting principles and effects of new accounting pronouncements are discussed in Note 1, Summary of Significant Accounting Policies, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data," in our Annual Report on Form 10-K for the year ended December 31, 2024.

Accounting for Credit Losses - Loans

The ACL represents the amount that, in management’s judgment, appropriately reflects credit losses inherent in the loan portfolio at the balance sheet date. A provision for credit losses is recorded to adjust the level of the ACL as determined by management. In accordance with ASU 2016-13, the CECL methodology requires an organization to measure all expected credit losses over the contractual term for financial assets measured at amortized cost based on historical credit loss experience, current conditions, and reasonable and supportable forecasts.

Determining the ACL inherently involves a high degree of subjectivity and requires the Company to make significant estimates of current credit risks and trends, all of which may undergo material changes, including expected probabilities of default, expected loss given default, the timing of expected future cash flows including the impact from unexpected changes in prepayment speeds, estimated losses based on historical credit loss experience and forecasted economic conditions. To the extent actual results differ from management's estimates, additional provisions for credit losses may be required that could adversely impact results of operations and regulatory capital in future periods.

The ACL is maintained at a level considered appropriate to absorb credit losses over the expected life of the loan. The ACL for expected credit losses is determined based on a quantitative assessment of two categories of loans: collectively evaluated loans and individually evaluated loans. In addition, the ACL also includes a qualitative component, which adjusts the CECL model results for risk factors that are not considered within the CECL model, but are relevant in assessing the expected credit losses within the loan classes.

The ACL on loans is measured on a collective basis when similar risk characteristics exist within the Company's loan segments between commercial and consumer. Each of these loan segments are broken down into multiple loan classes, which are characterized by loan type, collateral type, risk attributions and the manner in which management monitors the performance of the borrower. The risks associated with lending activities differ and are subject to the impact of changes in interest rates, market conditions, the collateral securing the loans, and general economic conditions.

The ACL for loans collectively evaluated is measured using a lifetime expected loss rate model that considers historical loss performance and past events in addition to forecasts of future economic conditions. Based on management's analysis, adjustments may be applied for additional factors impacting the risk of loss in the loan portfolio beyond the quantitatively calculated reserve on collectively evaluated loans. As the quantitative reserve calculation incorporates historical conditions, management may consider an additional or reduced reserve is warranted through qualitative risk factors based on current and expected conditions. Management uses the best available information to complete these evaluations; however, future adjustments to the ACL may be necessary if conditions significantly differ from the assumptions used in making the evaluations.

Utilizing a third-party vendor, the ACL for loans collectively evaluated is measured using a lifetime expected loss rate model under the vendor's neutral scenario that considers historical loss performance and past events in addition to forecasts of future economic conditions. The Company elected to use the DCF methodology for the quantitative analysis for the majority of its loan segments, which applies the probability of default to future cash flows, using a loss driver model and loss given default factors, and then adjusts to the net present value to derive the required reserve. The probability of default estimates are derived through the application of reasonable and supportable economic forecasts to the regression models, which incorporates the Company's and peer loss-rate data, unemployment rate and GDP and can be obtained from the Federal Reserve Economic Database. The reasonable and supportable forecasts of the selected economic metrics are then input into the regression model to

31

Table of Contents

calculate an expected default rate. The expected default rates are then applied to expected loan balances estimated through the consideration of contractual repayment terms and expected prepayments. The prepayment and curtailment assumptions adjust the contractual terms of the loan to arrive at the expected cash flows, which are obtained from the third-party vendor. The model incorporates an annualized prepayment rate and a twelve-month rate for curtailment based on a "statistical tendency to repay." Changes in the prepayment and curtailment speeds that vary from the current model inputs could result in an inaccurate of expected credit losses. The development and validation of credit models also included determining the length of the reasonable and supportable forecast and regression period and utilizing national peer group historical loss rates, which a four-quarter forecast period followed by a four-quarter straight-line reversion period were applied.

Management incorporates the national unemployment rate and GDP as the drivers of the quantitative portion of collectively evaluated reserves on loan classes reliant upon the DCF methodology, primarily as a result of high correlation coefficients identified in regression modeling, which represents a significant judgment in determining the ACL; however, changes in the macroeconomic forecast could significantly impact the calculated ACL. For the consumer loan segment, the quantitative reserve was calculated using the remaining life methodology where the average historical bank-specific and peer loss rates are applied to expected loan balances over an estimated remaining life of loans. The estimated remaining life is calculated using historical bank-specific loan attrition data.

See Note 1, Summary of Significant Accounting Policies, and Note 4, Loans and Allowance for Credit Losses, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplemental Data," for details on the ACL evaluation.

Accounting for Income Taxes

The Company is subject to federal and state income taxes in the jurisdictions in which it operates. Due to the complexity of the tax laws, management may make judgments in computing income tax expense, which are subject to varying interpretations by management and the taxing authorities, and could result in changes upon final determination. Income tax expense is based upon income before taxes, adjusted for the effect of certain tax-exempt income, non-deductible expenses and credits. Temporary differences may occur as a result of certain income and expense items being reported in different periods for financial reporting and tax purposes. Deferred taxes are calculated, using the applicable enacted marginal tax rate, based on the differences between the tax basis and carrying value of the asset or liability on the financial statement. The Company recognizes, when applicable, interest and penalties related to unrecognized tax benefits in income tax expense in the consolidated statements of income. Under FASB ASC 740, Income Taxes, the Company must apply a more likely than not probability threshold on its tax positions before a financial statement benefit is recognized. A valuation allowance would be recognized if any deferred tax assets were determined to be more likely than not unrecoverable. See Note 8, Income Taxes, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplemental Data," for details on our income tax expense and deferred tax assets and liabilities.

Readers of the Company's consolidated financial statements should be aware that the estimates and assumptions used may need to be updated in future financial presentations for changes in circumstances, business or economic conditions, in order to fairly represent the condition of the Company at that time.

Economic Climate, Inflation and Interest Rates

Preliminary real GDP was 2.3% on an annualized basis for the fourth quarter of 2024, which was a decrease from 3.1% for the third quarter of 2024 and from 3.4% during the fourth quarter of 2023. The decline from the third quarter of 2024 was due to a decline in investments and exports despite an increase in consumer spending. Fluctuations in real GDP in recent periods, due to inflation, credit conditions and geopolitical tensions, continue to create uncertainty in the current economic environment. The personal consumption expenditures ("PCE") price index increased by 2.4% in the fourth quarter of 2024 compared to an increase of 1.5% for third quarter of 2024 and 1.9% for the fourth quarter of 2023. Excluding food and energy prices, the PCE price index increased by 2.7% in the fourth quarter of 2024 compared to 2.2% in the third quarter of 2024 and 2.0% in the fourth quarter of 2023.

The national unemployment rate was 4.1% in December 2024 compared to 3.8% in December 2023. Within the Company's geographic footprint, the unemployment rate in Pennsylvania was 3.7% in December 2024 compared to 3.4% in December 2023. The unemployment rate in Maryland increased from 2.7% in December 2023 to 3.1% in December 2024. Despite the increases in both states since December 2023, the unemployment rates in Pennsylvania and Maryland both remain significantly below the national level. These state-wide unemployment rates are consistent with those experienced by the counties in which the Company operates branches and other corporate offices.

At December 31, 2024, the 10-year Treasury bond yield was 4.58%, an increase from 3.88% at December 31, 2023. In addition, the FOMC reduced the Federal Funds rate by 50 basis points in September 2024 and 25 basis points in December

32

Table of Contents

2024. The decrease was based on the progress towards the FOMC's 2.0% inflation target and the unemployment rate remaining low despite recent slowing in job gains.

The majority of the assets and liabilities of a financial institution are monetary in nature and, therefore, differ greatly from most commercial and industrial companies that have significant investments in fixed assets or inventories. However, inflation does have an impact on the Company, particularly with respect to the growth of total assets and noninterest expenses, which tend to rise during periods of general inflation. Risks also exist due to supply and demand imbalances, employment shortages, the interest rate environment, and geopolitical tensions. It is possible that estimates made in the financial statements could be materially and adversely impacted in the near term as a result of these conditions, including expected credit losses on loans and the fair value of financial instruments that are carried at fair value.

As the Company’s balance sheet consists primarily of financial instruments, interest income and interest expense are greatly influenced by the level of interest rates and the slope of the yield curve, as well as the mix of assets and funding. The Company has been able to grow its net interest income by $50.4 million from 2023 to 2024, which is attributed to the Merger that was completed on July 1, 2024 and continued success with the balance of organic commercial loan growth and pricing. Competition for quality lending opportunities and deposits remains intense, which, together with a flat yield curve and changing economic environment, will continue to challenge the Company's ability to grow its net interest margin and to manage its overhead expenses.

Results of Operations

Summary

Net income totaled $22.1 million, $35.7 million and $22.0 million for 2024, 2023 and 2022, respectively. Diluted earnings per share totaled $1.48, $3.42 and $2.06 for 2024, 2023 and 2022, respectively. For the year ended December 31, 2024, the Company incurred merger-related expenses of $22.7 million, provision for credit losses on acquired non-PCD loans of $15.5 million, retirement expenses for an executive of $4.8 million and a provision for legal settlement of $478 thousand, which were included in non-interest expenses of the consolidated statements of income. Excluding these non-recurring expenses, net income and diluted earnings per share totaled $56.1 million and $3.76, respectively, for the year ended December 31, 2024. Net income was $36.6 million and diluted earnings per share was $3.51 for the year ended December 31, 2023 excluding $1.1 million of merger-related expenses for the year ended December 31, 2023. The Company recorded a gain of $1.2 million from the sale of the Bank's Path Valley branch during the year ended December 31, 2023. Net income was $34.8 million and diluted earnings per share was $3.25 for the year ended December 31, 2022, excluding the financial impact of a legal settlement and restructuring expenses. See “Supplemental Reporting of Non-GAAP Measures.”

Net interest income totaled $155.3 million, $104.9 million and $99.6 million for 2024, 2023 and 2022, respectively. The increase in net interest income reflected the deployment of cash into higher yielding commercial loans and investment securities and the impact of the rising interest rates on interest-earning asset yields, partially offset by the impact of an increase in cost of funds and increases in interest-bearing liabilities. In addition, the increase in interest income during 2024 reflects the impact of the Merger, including net accretion of purchase accounting marks on loans, deposits and borrowings.

The provision for credit losses on loans totaled $17.4 million, $1.7 million and $4.2 million in 2024, 2023 and 2022, respectively. For the year ended December 31, 2024, the provision for credit losses increased primarily due to $15.5 million of reserves on acquired non-PCD loans as a result of the Merger. During the first quarter of 2023, the Company adopted the new accounting standard for CECL, which resulted in the change from the incurred loss model based on historical loss experience to the expected loss model, which reflects the projected credit losses over the expected life of financial assets and commitments.

Noninterest income totaled $37.4 million, $25.7 million and $27.0 million for 2024, 2023 and 2022, respectively. The increase of $11.7 million from 2023 to 2024 was primarily due to an increase in wealth management income of $5.0 million and increases in service charges and interchange income of $2.8 million, partially driven by the Merger. The remainder of the increase is across several line items primarily due to the Merger. These increase in 2024 compared to 2023 were partially offset by the gain of $1.2 million recorded to other income from the sale of the Path Valley branch for the year ended December 31, 2023. The decrease in noninterest income of $1.3 million from 2022 to 2023 was primarily due to a decrease of $1.6 million in swap fee income, partially offset by an increase in in mortgage banking activities of $184 thousand and the before mentioned gain on sale of the Path Valley branch in 2023. Other income in 2022 included realized gains on the Company's investment in a non-housing limited partnership of $1.1 million.

Noninterest expenses totaled $148.3 million, $83.8 million and $95.8 million for 2024, 2023 and 2022, respectively. The increase of $64.5 million from 2023 to 2024 includes non-recurring expenses of $43.4 million. The remainder of the increase is across several line items primarily due to impact from the Merger. The decrease of $11.9 million in non-interest expenses from 2022 to 2023 was due to a legal settlement of $13.0 million and a restructuring charge of $3.2 million during 2022, partially

33

Table of Contents

offset by an increase of $3.0 million in salaries and employee benefits expenses and merger-related expenses of $1.1 million during 2023.

Income tax expense totaled $5.8 million, $9.4 million and $4.6 million for 2024, 2023 and 2022, or an effective tax rate of 20.7%, 20.8% and 17.2% respectively. The Company’s effective tax rate is less than the 21% federal statutory rate due to tax-exempt income, including interest earned on tax-exempt loans and investment securities and income from life insurance policies and tax credits.

Net Interest Income

Net interest income is the primary component of the Company's net income. Interest-earning assets include loans, investment securities and interest-bearing bank balances. Interest-bearing liabilities include primarily deposits and borrowed funds.

Net interest income is affected by changes in interest rates, the volume of interest-earning assets and interest-bearing liabilities, and the composition of those assets and liabilities. “Net interest spread” and “net interest margin” are two common statistics related to changes in net interest income. Net interest spread represents the difference between the yields earned on interest-earning assets and the rates paid for interest-bearing liabilities. Net interest margin is the ratio of net interest income to average earning asset balances.

The FRB influences the general market rates of interest, including the deposit and loan rates offered by many financial institutions. Starting in March 2022, the FOMC increased the Federal Funds rate by 425 basis points during 2022 and 100 basis points during 2023 as an attempt to combat the impact of inflation, the rising consumer price index, supply chain disruptions, the state of the labor market and geopolitical tensions. In the second half of 2024, the FOMC reduced the Federal Funds rate by 75 basis points based on the progress towards the 2.0% inflation target and the state of unemployment.

Core deposits are deposits that are stable, lower cost and generally reprice more slowly than other deposits when interest rates change. Core deposits, which exclude certificates of deposit, are typically funds of local clients who also have a borrowing or other relationship with the Bank. The Company is primarily funded by core deposits, with noninterest-bearing demand deposits historically being a source of funds. During 2022, the lower-cost funding base had a positive impact on the Bank's net interest income and net interest margin in the rising interest rate environment. However, as the Federal Funds rate continued to increase, the competition for deposits also increased in the latter part of 2022 and continued throughout 2024 with clients utilizing their funds at a higher frequency and additional liquidity was needed to meet the demands of our clients. In addition, decreases in demand deposits and savings deposits were primarily due to clients shifting to higher-yielding products within the Bank, including time deposits with promotional offerings of up to 18-month terms.

34

Table of Contents

The following table presents net interest income, net interest spread and net interest margin on a taxable-equivalent basis for 2024, 2023 and 2022. Taxable-equivalent adjustments are the result of increasing income from tax-exempt loans and investment securities by an amount equal to the taxes that would be paid if the income were fully taxable based on a 21% federal corporate tax rate for 2024, 2023 and 2022, reflecting our statutory tax rates for those years.

Assets

Liabilities and Shareholders’ Equity

Taxable-equivalent net interest margin 3.92 % 3.80 % 3.81 %

35

Table of Contents

NOTES TO ANALYSIS OF NET INTEREST INCOME:

(2) Average balance of investment securities is computed at fair value.

(3) Average balances include nonaccrual loans.

The following table presents changes in net interest income on a taxable-equivalent basis for 2024 and 2023 by rate and volume components.

AverageVolume AverageRate Total AverageVolume AverageRate Total

Interest Income

Interest Expense

2024 versus 2023

Interest income on loans increased by $83.7 million, from $126.6 million in 2023 to $210.3 million in 2024, and interest income on investment securities increased by $9.4 million, from $21.5 million in 2023 to $30.9 million in 2024. Total interest expense increased by $48.7 million from $45.0 million in 2023 to $93.7 million in 2024. Interest expense on deposits increased by $46.7 million from $37.5 million in 2023 to $84.2 million in 2024, and interest expense on borrowed funds increased by $1.9 million to $7.5 million in 2023 to $9.4 million in 2024.

Net interest income on a taxable-equivalent basis increased by $50.4 million, or 48%, from $104.9 million in 2023 to $155.3 million in 2024. The Company’s net interest spread decreased by three basis points from 3.39% in 2023 to 3.36% in 2024 primarily due to an increase in cost of funds.

Taxable-equivalent net interest margin increased by twelve basis points to 3.92% in 2024 from 3.80% in 2023. The recognition of interest income previously applied to principal of $1.6 million from the payoff of a commercial real estate loan on nonaccrual status contributed four basis points to the Company's net interest margin during the year ended December 31, 2024. The taxable-equivalent yield on interest-earning assets increased by 86 basis points to 6.26% in 2024 from 5.40% in

36

Table of Contents

2023, due primarily to the accretion recognized on fair value marks to loans and securities assumed in the Merger. The increase in yield was more than offset by an increase of 89 basis points in the cost of interest-bearing liabilities from 2.02% in 2023 to 2.91% in 2024 due primarily to increased funding costs on deposits from higher market interest rates and competitive pressures, an increase in the interest rate on Orrstown Financial Services, Inc.'s subordinated notes, which converted from a fixed rate to a floating rate on December 30, 2023, and the assumption of subordinated notes and trust preferred debt from the Merger.

Average loans increased by $910.9 million from $2.2 billion during 2023 to $3.2 billion during 2024. Average investment securities increased by $169.7 million from $520.5 million in 2023 to $690.2 million during 2024. Average interest-bearing liabilities increased by $990.0 million from $2.2 billion in 2023 to $3.2 billion during 2024.

The yield on loans increased by 100 basis points to 6.68% in 2024 from 5.68% in 2023. Taxable-equivalent interest income earned on loans increased by $83.9 million from $127.1 million in 2023 to $211.0 million in 2024 primarily due to an increase in the average balances, which was attributed to the acquired loans from the Merger and from the impact of the interest rate environment.

The average balance of commercial loans increased by $725.2 million from $1.8 billion during 2023 to $2.5 billion during 2024. Average residential mortgage loans increased by $120.7 million from $246.7 million for 2023 to $367.4 million for 2024. Average home equity loans increased by $57.8 million from $189.6 million for 2023 to $247.4 million for 2024. Average installment and other consumer loans increased by $7.2 million from $20.0 million for 2023 to $27.2 million for 2024.

Accretion of purchase accounting adjustments included in interest income was $15.2 million during 2024 compared to $748 thousand in 2023. The increase in accretion was due to the recognition of fair value marks from the Merger. Accelerated accretion totaled $5.4 million during 2024 compared to $269 thousand during 2023. Prepayment income on commercial loans increased from $826 thousand during 2023 to $1.1 million during 2024.

Interest income on investment securities on a tax-equivalent basis increased by $9.4 million to $31.8 million for 2024 from $22.4 million for 2023, with the taxable equivalent yield increasing by 29 basis points from 4.31% for 2023 to 4.60% for 2024. This increase reflects the impact from the higher interest rates as well as the accretion of discounts recorded on investment securities assumed from the Merger. Average investment securities increased by $169.7 million from $520.5 million in 2023 to $690.2 million during 2024 due primarily to the Merger.

Interest income on federal funds sold and interest-bearing bank balances on a tax-equivalent basis increased by $6.0 million to $7.8 million for 2024 from $1.8 million for 2023. The average balance of federal funds sold and interest-bearing bank balances increased by $109.6 million from $40.9 million for 2023 to $150.5 million for 2024. The Federal Funds rate had remained unchanged from the prior rate increase of 25 basis points in July 2023 until the FOMC cut the Federal Funds rate by 50 basis points in September 2024 and 25 basis points in December 2024.

Interest expense on deposits increased by $46.7 million from $37.5 million in 2023 to $84.2 million in 2024 as the cost of borrowings increased by 95 basis points from 1.82% in 2023 to 2.77% in 2024 as funding costs increased due to higher market interest rates and competitive pressures on deposit pricing. The average balance of interest-bearing deposits increased by $971.1 million from $2.1 billion in 2023 to $3.0 billion in 2024. Average time deposits increased by $394.3 million in 2024, which resulted in increased interest expense on time deposits of $11.6 million. The cost of time deposits increased by 149 basis points from 2.95% in 2023 to 4.44% in 2024 as clients sought higher-yielding products during the rising interest rate environment, including the Bank's promotional offerings for time deposits with terms up to 18-months. Amortization expense of fair value marks on acquired time deposits was $2.1 million for the year ended December 31, 2024. The increase in deposit balances was primarily due to the Merger.

Interest expense on borrowings increased by $1.9 million to $9.4 million in 2024 from $7.5 million in 2023 despite the cost of borrowings decreasing by 24 basis points from 4.32% in 2023 to 4.08% in 2024. Average borrowings increased by $18.8 million from $169.9 million in 2023 to $188.7 million in 2024, which included $50.4 million in average subordinated notes and trust preferred debt for the year ended December 31, 2024, an increase of $18.3 million, from $32.1 million for the year ended December 31, 2023. This increase is due to the assumption of subordinated debt of $31.0 million and trust preferred debt of $10.3 million from the Merger. The interest rate increased on Orrstown Financial Services, Inc.'s outstanding subordinated notes of $32.5 million, which converted from a fixed rate of 6.00% to a floating rate of 8.78% on December 30, 2023. The interest rate on the Company's subordinated notes at December 31, 2024 was 8.03%. The subordinated notes assumed from the Merger have a fixed rate of interest equal to 4.50% until December 30, 2025. The trust preferred debt issuances have a variable rate of three-month CME term SOFR, plus a spread adjustment and margin. Amortization expense of fair value marks on acquired borrowings was $294 thousand for the year ended December 31, 2024.

37

Table of Contents

2023 versus 2022

Net interest income increased by $5.3 million from $99.6 million in 2022 to $104.9 million in 2023. Similarly, net interest income on a taxable-equivalent basis for 2023 increased by $5.3 million compared with 2022. The Company’s net interest spread decreased by 31 basis points from 3.70% in 2022 to 3.39% in 2023 primarily due to the increase in the cost of funds.

Interest income on loans increased by $33.1 million, from $93.5 million in 2022 to $126.6 million in 2023, and interest income on investment securities increased by $7.1 million, from $14.4 million in 2022 to $21.5 million in 2023. Total interest expense increased by $36.0 million from $9.0 million in 2022 to $45.0 million in 2023. Interest expense on deposits increased by $31.2 million from $6.3 million in 2022 to $37.5 million in 2023, and interest expense on borrowed funds increased by $4.9 million to $2.6 million in 2022 to $7.5 million in 2023.

Taxable-equivalent net interest margin decreased by one basis point to 3.80% in 2023 from 3.81% in 2022. The taxable-equivalent yield on interest-earning assets increased by 125 basis points to 5.40% in 2023 from 4.15% in 2022, reflecting both the deployment of cash into higher yielding loans and investment securities and the impact of elevated interest rates on these interest-earning assets. The increase in yield was partially offset by an increase of 157 basis points in the cost of interest-bearing liabilities from 0.45% in 2022 to 2.02% in 2023 due to increased funding costs from higher market interest rates, competitive pressures and an increase in higher cost borrowings.

Average loans increased by $197.2 million from $2.0 billion during 2022 to $2.2 billion during 2023. Average investment securities increased by $10.9 million from $509.6 million in 2022 to $520.5 million during 2023 due to net investment purchases and a decrease in unrealized losses from 2022. Average interest-bearing liabilities increased by $241.3 million from $2.0 billion in 2022 to $2.2 billion during 2023. The competition for deposits increased in the latter part of 2022 and continued throughout 2023, which was coupled with clients utilizing their funds at a higher frequency. Therefore, additional liquidity was needed to meet demands of our clients, which resulted in an increase in higher cost borrowings.

The yield on loans increased by 109 basis points to 5.68% in 2023 from 4.59% in 2022. Taxable-equivalent interest income earned on loans increased by $33.3 million from $93.8 million in 2022 to $127.1 million in 2023 primarily due to an increase in the average balances of commercial, residential mortgage and home equity loans and from the impact of the rising rate environment. The increase in interest income from loan growth and higher rates was partially offset by a decrease in interest income from SBA PPP loans due to a lower amount of forgiveness activity during 2023 compared to 2022.

The average balance of commercial loans, excluding SBA PPP loans, increased by $211.9 million from $1.6 billion during 2022 to $1.8 billion during 2023. SBA PPP loans, net of deferred fees and costs, averaged $8.8 million during 2023, a decrease of $58.3 million from an average of $67.1 million in 2022. This decrease was due to forgiveness of SBA PPP loans since 2022. Average residential mortgage loans increased by $35.7 million from $211.0 million for 2022 to $246.7 million for 2023 due primarily to adjustable-rate and jumbo mortgage loans originated for the portfolio. Average home equity loans increased by $14.1 million from $175.5 million for 2022 to $189.6 million for 2023. Average installment and other consumer loans decreased by $6.3 million from $26.3 million for 2022 to $20.0 million for 2023.

For 2023, interest income on loans included $192 thousand of interest and net deferred fee income associated with the SBA PPP loans compared to $6.1 million for 2022. Accretion of purchase accounting adjustments included in interest income was $748 thousand during 2023 compared to $1.1 million in 2022. The decrease in accretion was due to a decline in accelerated accretion from acquired loan payoffs or significant payments from the prior year. During 2023, accelerated accretion was $269 thousand compared to $724 thousand in 2022. Prepayment income on commercial loans decreased from $1.0 million during 2022 to $826 thousand during 2023.

Interest income on investment securities on a tax-equivalent basis increased by $7.0 million to $22.4 million for 2023 from $15.4 million for 2022, with the taxable equivalent yield increasing by 128 basis points from 3.03% for 2022 to 4.31% for 2023. The increase reflects the impact from higher interest rates since March 2022 and the impact of investment security purchases at higher yields. The average balance of investment securities was impacted by purchases of $45.6 million and unrealized gains of $14.0 million, which were partially offset by investment security sales totaling $22.0 million during 2023.

The average balance of federal funds sold and interest-bearing bank balances decreased by $57.9 million from $98.8 million for 2022 to $40.9 million for 2023, due primarily to the deployment of cash into loans and investment securities. The related interest income increased by $1.0 million to $1.8 million for 2023 from $774 thousand for 2022. This increase was caused by 525 basis points of Fed Funds rate increases by the FOMC since March 2022.

Interest expense on deposits increased by $31.2 million from $6.3 million in 2022 to $37.5 million in 2023. The average balance of interest-bearing deposits increased by $141.4 million from $1.9 billion in 2022 to $2.1 billion 2023 and the cost of funds increased by 149 basis points from 0.33% in 2022 to 1.82% in 2023. Average time deposits increased by $64.9 million in 2023, which the change in volume increased interest expense on time deposits by $401 thousand. The cost of time deposits

38

Table of Contents

increased by 233 basis points from 0.62% in 2022 to 2.95% in 2023 as clients sought higher-yielding products during the rising interest rate environment, including the Bank's promotional offerings for time deposits with terms up to 18-months. Average interest-bearing demand deposits increased by $111.0 million in 2023. Interest expense for interest-bearing demand deposits increased by $22.6 million, with the cost of funds increasing by 147 basis points from 0.30% in 2022 to 1.77% in 2023 as a result of deposit rate increases during 2023.

Interest expense on borrowings increased by $4.9 million to $7.5 million in 2023 from $2.6 million in 2022, as the cost of borrowings increased by 31 basis points from 4.01% in 2022 to 4.32% in 2023. Average borrowings increased by $108.0 million from $15.7 million in 2022 to $123.7 million in 2023, as the Bank opted to borrow funds to provide additional liquidity to meet the credit needs of its clients. On December 31, 2023, the Company's subordinated notes converted from a fixed rate at 6.0% to a variable rate of three-month CME term SOFR rate plus 3.16%, or 8.78%.

Provision for Credit Losses

The Company recorded a provision for credit losses of $17.4 million, $1.7 million and $4.2 million in 2024, 2023 and 2022, respectively. On January 1, 2023, the Company adopted the new accounting standard, referred to as CECL, which transitioned from the incurred loss model based on historical loss experience and economic and market conditions to the expected loss model. The CECL standard reflects expected credit losses over the expected life of the financial assets and commitments, primarily based on the DCF methodology for the majority of the loan segments, which applies the probability of default and loss given default factors to future cash flows, and adjusts to the net present value to derive the required reserve. Macroeconomic conditions are incorporated into the model for unemployment and gross domestic product, in addition to model assumptions for discount rate and prepayment and curtailment speeds.

The ACL to total loan ratio decreased from 1.25% at December 31, 2023 to 1.24% at December 31, 2024. In 2024, the provision for credit losses increased primarily due to $15.5 million of reserves on acquired non-PCD loans, which was partially offset by a reversal of the provision for credit losses for off-balance sheet credit exposures of $862 thousand. The remaining provision expense recorded for the year ended December 31, 2024 was due to commercial loan growth, partially offset by changes to qualitative factors during 2024; specifically the Economic Conditions qualitative factor was reduced and the Other External Factors qualitative factor is no longer assigned to the impacted loan segments. These changes were based on improved economic factors, as well as concerns subsiding from the prior year about liquidity conditions within the banking industry. The Economic Conditions qualitative factor for the residential mortgage loan segment was removed and there was a decrease in the Collateral Valuation Trends qualitative factor from a moderate to low level in the ACL model for the residential mortgage and installment and other loan segments. These changes were based on the stabilization in real estate collateral valuation, housing demand and overall portfolio performance. In 2023 and 2022, the provision for credit losses was driven primarily by increases in commercial loans, excluding SBA PPP loan forgiveness activity, of $118.3 million and $299.9 million, respectively, in addition to the overall increase in expected loss rates under CECL. During 2023, the Delinquency and Classified Loan Trends qualitative factor was increased for the commercial & industrial and owner-occupied commercial real estate loan classes, which was based on a trend of increases in loans downgraded to the special mention or classified risk rating. All other qualitative factors were unchanged from levels at adoption of CECL. During 2022, qualitative factors were unchanged, except for a reduction in the National and Local Economic Conditions factor, which reduced the provision by $726 thousand.

Net charge-offs totaled $3.3 million in 2024, compared to net charge-offs of $581 thousand in 2023. The increase in net charge-offs was due primarily to a charge-off of $2.4 million for one commercial and industrial relationship and charge-offs of $595 thousand associated with a loan sale. Nonaccrual loans were 0.61% of gross loans at December 31, 2024, compared with 1.11% of gross loans at December 31, 2023. Nonaccrual loans decreased by $1.4 million from $25.5 million at December 31, 2023 to $24.1 million at December 31, 2024 due to the payoffs of two commercial real estate loans with outstanding balances totaling $15.0 million and a sale of mostly commercial and industrial loans on nonaccrual status of $2.6 million, mostly offset by acquired loans on nonaccrual status of $12.8 million from the Merger and other additions in commercial and industrial and CRE loans. See further discussion in the “Asset Quality” and “Credit Risk Management” sections of this Management’s Discussion and Analysis of Financial Condition and Results of Operations.

39

Table of Contents

Noninterest Income

The following table compares noninterest income for 2024, 2023 and 2022.

2024 versus 2023

Noninterest income increased by $11.7 million from 2023 to 2024. The primary driver of the overall increase was the impact of the Merger. The following were significant factors in the net increase:

•Wealth management income increased by $5.0 million due to strong market performance and growth in managed assets, both organically and through the acquisition of two registered investment advisory firms since September 2023 with total assets under management of $151 million. From the Merger, the Company generated an additional $3.2 million in wealth management income.

•Swap fee income increased by $637 thousand as swap fee income will fluctuate based on market conditions and client demand.

•Mortgage banking income increased by $1.2 million. Mortgage loans sold totaled $45.8 million in 2024, which included a $7.2 million portfolio sold to another institution, compared to $23.8 million during 2023.

•Other income decreased by $204 thousand due primarily to a gain of $1.2 million from the sale of the Bank's Path Valley branch during 2023, partially offset by $408 thousand of solar tax credit income recognized in 2024.

•The gain on investment securities in 2024 was due to a $4.6 million security redemption, resulting in a gain of $181 thousand and the mark-to-market activity on an equity security. During 2023, the Company sold three U.S. Treasury securities with a principal balance of $19.9 million for a nominal gain and six securities issued by state and political subdivisions with a principal balance of $2.2 million for a net loss of $44 thousand.

•Other line items within noninterest income showed fluctuations attributable to normal business operations and the impact of the Merger.

2023 versus 2022

Noninterest income decreased by $1.3 million from 2022 to 2023. The following were significant factors in the net decrease:

•Other service charges, commissions and fees increased by $129 thousand due primarily to increases of $58 thousand in credit card fee income and $51 thousand in loan fees charged to clients for loan workout and forbearance agreements.

•Swap fee income decreased by $1.6 million as swap fee income will fluctuate based on market conditions and client demand.

•Mortgage banking income increased by $184 thousand from 2022 to 2023 due to a decline in the fair value losses on the Bank's held-for-sale loans caused by a significant increase in mortgage interest rates during 2022 compared to

40

Table of Contents

the fluctuation during the current year. The fair value mark declined $323 thousand in 2023 compared to a decrease of $1.3 million in 2022. However, market conditions and elevated interest rates continued to hinder mortgage production during 2023. Most mortgage production remains in adjustable-rate products, which are held in portfolio, and thus have resulted in a reduction in the residential mortgage loan pipeline and secondary market sales. Mortgage loans sold totaled $23.8 million during 2023 compared to $76.2 million during 2022.

•Other income decreased by $306 thousand from 2022 to 2023 primarily due to distribution of $964 thousand from investments in non-housing limited partnerships, gains on the sales of two SBA loans totaling $306 thousand and tax credits of $102 thousand recognized from the Bank's investment in solar energy renewable energy partnerships during 2022, partially offset by a gain of $1.1 million from the sale of the Bank's Path Valley branch during 2023.

•Investment securities losses declined by $113 thousand due primarily to a loss of $171 thousand during 2022 recorded on one non-agency CMO security, which was called at a price below par. During 2023, the Company sold three U.S. Treasury securities with a principal balance of $19.9 million for a nominal gain and six securities issued by state and political subdivisions with a principal balance of $2.2 million for a net loss of $44 thousand. During the year ended December 31, 2022, the Company sold 19 securities with a principal balance of $31.3 million for a net gain of $32 thousand.

Noninterest Expenses

The following table compares noninterest expenses for 2024, 2023 and 2022.

$ Change % Change

2024 versus 2023

Noninterest expenses increased by $64.5 million from 2023 to 2024. The primary driver of the overall increase was the impact of the Merger. The following were significant factors in the net increase:

•Merger-related expenses increased by $21.6 million, which primarily included employee separation costs, vendor contract terminations and professional fees incurred in connection with the Merger.

•Salaries and employee benefits expense includes a $4.8 million charge associated with the retirement of an executive.

•Data processing expense increased by $1.2 million due to the use of two core processing systems. The system conversion process was completed in November 2024.

•Intangible asset amortization increased by $4.8 million due to the amortization expense recognized on the core deposit intangible and customer relationship intangible recorded as a result of the Merger.

•The Company agreed to settle a litigation matter, which resulted in a provision for legal settlement of $478 thousand in the fourth quarter of 2024.

41

Table of Contents

•Restructuring expense of $296 thousand was recorded due to the closure of six branch locations during the fourth quarter of 2024.

•Other line items within noninterest expense showed fluctuations attributable to normal business operations and the impact of the Merger.

2023 versus 2022

Noninterest expenses decreased by $12.0 million from 2022 to 2023. The following were significant factors in the net decrease:

•Salaries and employee benefits expense increased by $3.0 million, or 6%, due primarily to staff additions that filled vacancies, merit-based and incentive compensation increases, higher employee benefit costs from increased claims volume and employee severance costs.

•Occupancy expense decreased by $387 thousand, or 8%, due primarily to operating efficiencies from branch closures in 2022.

•Data processing expense increased by $353 thousand, or 8%, due primarily to an increase in core system costs and investments in new technology as the Company focused on the evolving needs of its clients.

•FDIC insurance expense increased by $877 thousand, or 81%, due to increases in the assessment rate caused by an annualized two-basis point increase assessed by the FDIC to increase its deposit insurance fund and increases commercial loans and total assets.

•Professional services decreased by $349 thousand, or 11%, due primarily to a reduction in legal expenses following the settlement of outstanding litigation.

•Taxes other than income decreased by $341 thousand, or 25%, due to a decrease in the Pennsylvania Bank Shares Tax expense, which was driven by a decrease in the Bank's total equity balance from the increase in unrealized losses on investment securities and charges in the third quarter of 2022 for a legal settlement and restructuring expenses.

•Intangible asset amortization decreased by $152 thousand, or 14%, due to amortization of the core deposit intangible assets on an accelerated basis.

•During the fourth quarter of 2023, the Company announced it entered into an agreement to merge with Codorus Valley. Merger-related expenses totaled $1.1 million, which included due diligence costs, legal expenses and a fairness opinion.

•The Company agreed to settle a litigation matter, which resulted in a provision for legal settlement of $13.0 million recorded in the third quarter of 2022.

•During the third quarter of 2022, the Company announced that five branch locations would be closing and staffing model adjustments would be made to drive long-term growth and improve operating efficiencies in 2023 and forward. As a result of these initiatives, the Company recorded a restructuring charge of $3.2 million.

Income Taxes

Income tax expense totaled $5.8 million, $9.4 million and $4.6 million for 2024, 2023 and 2022, respectively. The effective tax rate for 2024 was 20.7% compared with 20.8% for 2023 and 17.2% for 2022. Generally, the Company’s effective tax rate is less than the 21% federal statutory rate due to tax-exempt income, including interest earned on tax-exempt loans and investment securities, income from life insurance policies and tax credits, partially offset by disallowed interest expense and state income taxes. Although the change in the effective tax rate was minimal year-over-year, the rate in 2024 was impacted by non-deductible merger-related expenses, which were greater than in 2023. With the rising interest rates, each year was impacted by the portion of interest expense disallowed as a deduction against earnings under the TEFRA and an increase in state taxes as a result of a greater percentage of taxable income earned in a state with a state income tax.

Note 8, Income Taxes, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data," includes a reconciliation of our federal statutory tax rate to the Company's effective tax rate, which is a meaningful comparison between years and measures income tax expense as a percentage of pretax income.

42

Table of Contents

Financial Condition

Management devotes substantial time to overseeing the investment in and costs to fund loans and investment securities through deposits and borrowings as well as the formulation and adherence to policies directed toward enhancing profitability and managing the risks associated with these investments.

Investment Securities

The Company utilizes investment securities to manage interest rate risk, enhance income through interest and dividend income and collateralize certain deposits and borrowings.

The Company has established investment policies and an asset management policy to assist in administering its investment portfolio. Decisions to purchase or sell these securities are based on economic conditions and management’s strategy to respond to changes in interest rates, liquidity, pledges to secure deposits and repurchase agreements and other factors while trying to maximize return on the investments. The Company may segregate its investment security portfolio into three categories: “securities held-to-maturity,” “trading securities” and “securities available-for-sale.” At December 31, 2024 and 2023, management classified the entire investment securities portfolio as AFS, which is accounted for at current market value with non-credit losses and gains reported in OCI, net of income taxes.

The Company's investment securities portfolio includes debt investments that are subject to varying degrees of credit and market risks, which arise from general market conditions, and factors impacting specific industries, as well as news that may impact specific issues. Management monitors its debt securities, using various indicators in determining whether unrealized losses on debit securities are credit-related and require an ACL. These indicators include the amount of time the security has been in an unrealized loss position, the cause and extent of the unrealized loss and the credit quality of the issuer and underlying assets. In addition, management assesses whether it is likely the Company will have to sell the investment security prior to recovery, or it expects to be able to hold the investment security until the price recovers. The Company determined that the declines in market value were due to increases in interest rates and market movements, and not due to credit factors. The Company does not intend to sell these securities with unrealized losses and it is more likely than not that the Company will not be required to sell them before recovery of their amortized cost basis, which may be maturity. Therefore, the Company has concluded that the unrealized losses on the AFS securities did not require an ACL at December 31, 2024 and 2023. Under the prior OTTI framework, the Company did not record any cumulative OTTI expense at December 31, 2022.

The following table summarizes the fair value of AFS securities at December 31, 2024, 2023 and 2022.

Corporate bonds 1,954 — —

At December 31, 2024, AFS securities totaled $829.7 million, an increase of $316.2 million, from $513.5 million at December 31, 2023. Pursuant to the Merger, the Company acquired AFS securities with a fair value totaling $327.1 million. To align with the Company's investment strategy and to achieve higher yielding results, $162.7 million of the acquired AFS securities were sold, which included $91.5 million of MBS and CMO's, $27.1 million of corporate debt securities, $24.4 million of securities issued by state and political subdivisions and $19.7 million of securities issued by U.S. government agencies. The sales resulted in no gain or loss as the securities were sold at book value due to the proximity of the sales to the closing date of the Merger. Most of the proceeds from the sales of the acquired AFS securities were reinvested. During 2024, the Company purchased investment securities totaling $227.1 million, which included $224.8 million of agency MBS and CMO securities, $1.5 million of non-agency CMO securities and $788 thousand of investment securities issued by state and political subdivisions.

43

Table of Contents

In addition, calls of non-agency CMO securities totaled $18.0 million and there were paydowns of $58.2 million. The balance of investment securities included net unrealized losses of $35.2 million at December 31, 2024 compared to net unrealized losses of $35.6 million at December 31, 2023 for a decrease of $361 thousand. This decrease in net unrealized losses was primarily due to lower treasury rates and narrower credit spreads compared to December 31, 2023. The Company has sufficient access to liquidity such that management does not believe it would be necessary to sell any of its investment securities at a loss to offset any unexpected deposit outflows. Management believes the structure of the Company's investment security portfolio is appropriately aligned with the rest of the balance sheet to protect against volatile interest rate environments, to provide a source of liquidity and to generate steady earnings.

At December 31, 2023, AFS securities totaled $513.5 million, an increase of $209 thousand, from $513.7 million at December 31, 2022. During 2023, the Company purchased investment securities totaling $45.6 million, which included $19.8 million of U.S. Treasury securities, $15.3 million of agency MBS and CMO securities, $8.9 million of non-agency CMO securities and $972 thousand of asset-backed securities. During 2023, the Company sold three U.S. Treasury securities with a total principal balance of $19.9 million for a nominal gain and six securities issued by state and political subdivisions with a total principal balance of $2.2 million for a net loss of $44 thousand. The sale of the securities issued by state and political subdivisions in net unrealized loss position was to redeploy funds from the lower yielding investment securities to higher yielding assets. The balance of investment securities included net unrealized losses of $35.6 million at December 31, 2023 compared to net unrealized losses of $49.6 million at December 31, 2022 for a reduction in unrealized losses of $14.0 million. The decrease in net unrealized losses was primarily due to lower treasury rates and contracting credit spreads during 2023 compared to 2022. The Company has sufficient access to liquidity such that management does not believe it would be necessary to sell any of its investment securities at a loss to offset any unexpected deposit outflows. Management believes the structure of the Company's investment securities portfolio is appropriately aligned with the remainder of the balance sheet to protect against volatile interest rate environments and to generate steady earnings.

44

Table of Contents

The following table shows the maturities of investment securities at book value at December 31, 2024, and weighted average yields of such investment securities. Yields are shown on a tax equivalent basis, assuming a 21% federal income tax rate.

U.S. Treasury securities

Yield — % 1.05 % — % — % 1.05 %

Average maturity (years) — 3.3 — — 3.3

U. S. Government Agencies

Yield — % — % 6.46 % — % 6.46 %

Average maturity (years) — — 7.0 — 7.0

States and political subdivisions

GSE residential mortgage-backed securities

Average maturity (years) — — 7.7 28.0 27.8

GSE commercial mortgage-backed securities

Average maturity (years) — — 0.1 0.2 14.3

GSE residential CMOs

Average maturity (years) — — 9.3 30.3 30.2

Non-agency CMOs

Asset-backed

Average maturity (years) — — 8.9 20.3 20.3

Corporate bonds

Yield — % 5.84 % — % — % 5.84 %

Average maturity (years) — 3.3 — — 3.3

Other

Book value $ — $ — $ — $ 194 $ 194

Yield — % — % — % — % — %

Average maturity (years) — — — — —

Total

45

Table of Contents

The average maturity is based on the contractual terms of the debt or mortgage-backed securities, and does not factor in required repayments or anticipated prepayments. At December 31, 2024, the weighted average estimated life is 29 years for mortgage-backed and CMO securities, and 20 years for asset-backed securities, based on current interest rates and anticipated prepayment speeds. The overall duration of the Company's investment security portfolio is 4.1 years and 4.3 years at December 31, 2024 and 2023, respectively.

The following table summarizes the credit ratings and collateral associated with the Company's AFS investment securities portfolio, excluding equity securities, at December 31, 2024:

Small Business Administration 1 5,926 6,263 — 100 — — — SBA Guarantee (4)

(1) 97% guaranteed by U.S. government

(2) PACE acronym represents Property Assessed Clean Energy loans

(3) Non-agency reverse mortgages with current structural credit enhancements

(4) Guaranteed by U.S. government or U.S government agencies

Loan Portfolio

The Company offers a variety of products to meet the credit needs of its borrowers, principally commercial real estate loans, commercial and industrial loans, retail loans secured by residential properties, and to a lesser extent, installment loans. No loans are extended to non-domestic borrowers or governments.