PROSPERITY BANCSHARES INC [PB] Filings

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2023

OR

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from to

Commission File Number 001-35388

PROSPERITY BANCSHARES, INC.®

(Exact name of registrant as specified in its charter)

Registrant’s Telephone Number, Including Area Code: (281) 269-7199

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☒ No ☐

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

The aggregate market value of the shares of common stock held by non-affiliates as of June 30, 2023, based on the closing price of the common stock on the New York Stock Exchange on June 30, 2023 was approximately $5.08 billion.

As of February 26, 2024, the number of outstanding shares of common stock was 93,529,541.

PROSPERITY BANCSHARES, INC.®

2023 ANNUAL REPORT ON FORM 10-K

TABLE OF CONTENTS

PART I

ITEM 1. BUSINESS

General

Prosperity Bancshares, Inc.®, a Texas corporation (the “Company”), was formed in 1983 as a vehicle to acquire the former Allied Bank in Edna, Texas, which was chartered in 1949 as The First National Bank of Edna and is now known as Prosperity Bank. The Company is a registered financial holding company that derives substantially all of its revenues and income from the operation of its bank subsidiary, Prosperity Bank® (“Prosperity Bank®” or the “Bank”). The Bank provides a wide array of financial products and services to businesses and consumers throughout Texas and Oklahoma. As of December 31, 2023, the Bank operated 285 full service banking locations: 65 in the Houston area, including The Woodlands; 30 in the South Texas area including Corpus Christi and Victoria; 62 in the Dallas/Fort Worth area; 22 in the East Texas area; 32 in the Central Texas area including Austin and San Antonio; 44 in the West Texas area including Lubbock, Midland-Odessa, Abilene; Amarillo and Wichita Falls; 16 in the Bryan/College Station area, 6 in the Central Oklahoma area; and 8 in the Tulsa, Oklahoma area. The Company’s principal executive office is located at Prosperity Bank Plaza, 4295 San Felipe in Houston, Texas and its telephone number is (281) 269-7199. The Company’s website address is www.prosperitybankusa.com.

The Company’s market consists of the communities served by its banking centers. The diverse nature of the economies in each local market served by the Company provides the Company with a varied customer base and allows the Company to spread its lending risk throughout a number of different industries including professional service firms and their principals, manufacturing, tourism, recreation, petrochemicals, farming and ranching. The Company’s market areas outside of Houston, Dallas, Corpus Christi, San Antonio, Lubbock, Austin, Tulsa and Oklahoma City are dominated by either small community banks or branches of larger regional banks. Management believes that the Company, through its responsive customer service and community banking philosophy, combined with the sophistication of a larger regional bank holding company, has a competitive advantage in its market areas and excellent growth opportunities through acquisitions, new banking center locations and additional business development.

Operating under a community banking philosophy, the Company seeks to develop broad customer relationships based on service and convenience while maintaining its prudent approach to lending and sound asset quality. The Company has grown through a combination of internal growth, merger and acquisition transactions and the opening of new banking centers. As a result of its stable customer relationships, the Company is able to maintain a low cost of funds. Utilizing that and employing stringent cost controls, the Company has been profitable in every year of its existence, including the periods of adverse economic conditions in Texas and Oklahoma.

In addition to internal growth, the Company completed the following acquisitions within the last ten years (through December 31, 2023):

Recent Acquisition

Merger of First Bancshares of Texas, Inc. (“First Bancshares”) — Effective May 1, 2023, the Company completed the merger of First Bancshares into the Company and the subsequent merger of its wholly owned subsidiary, FirstCapital Bank of Texas, N.A. (“FirstCapital Bank”), into the Bank (collectively, the “Merger”). FirstCapital Bank operated 16 full-service banking offices in six different markets in West, North and Central Texas areas, including its main office in Midland, Texas, and banking offices in Midland, Lubbock, Amarillo, Wichita Falls, Burkburnett, Byers, Henrietta, Dallas, Horseshoe Bay, Marble Falls and Fredericksburg, Texas. As of March 31, 2023, First Bancshares, on a consolidated basis, reported total assets of $2.14 billion, total loans of $1.65 billion and total deposits of $1.71 billion.

Pursuant to the terms of the definitive agreement, the Company issued 3,583,370 shares of its common stock and approximately $91.5 million in cash for all outstanding shares of First Bancshares capital stock. As of December 31, 2023, the Company recognized goodwill of $164.5 million which does not include all the subsequent fair value adjustments that have not yet been finalized. During the second quarter of 2023, the Company completed the operational conversion of FirstCapital Bank.

Pending Acquisition

Pending Acquisition of Lone Star State Bancshares, Inc. (“Lone Star”) — On October 11, 2022, the Company and Lone Star jointly announced the signing of a definitive merger agreement whereby Lone Star, the parent company of Lone Star State Bank of West Texas (“Lone Star Bank”), will merge with and into the Company. Lone Star Bank operates five banking offices in the West Texas area, including its main office in Lubbock, and one banking center in each of Brownfield, Midland, Odessa and Big Spring, Texas. As of December 31, 2023, Lone Star, on a consolidated basis, reported total assets of $1.37 billion, total loans of $1.08 billion and total deposits of $1.21 billion.

Under the terms of the definitive agreement, the Company will issue 2,376,182 shares of its common stock plus $64.1 million in cash for all outstanding shares of Lone Star capital stock, subject to certain conditions and potential adjustments. Based on the closing price of the Company’s common stock of $69.27 on October 7, 2022, the total consideration was valued at approximately $228.7 million. The transaction is subject to customary closing conditions, including the receipt of regulatory approvals. The shareholders of Lone Star approved the transaction on March 28, 2023.

Available Information

The Company’s website address is www.prosperitybankusa.com. The Company makes available free of charge on or through its website its Annual Report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and all amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended (“Exchange Act”), as soon as reasonably practicable after such material is electronically filed with or furnished to the Securities and Exchange Commission. Information contained on the Company’s website is not incorporated by reference into this Annual Report on Form 10-K and is not part of this or any other report.

Human Capital

The Company’s culture is defined by its high standards and corporate values of soundness, profitability, service, professionalism, integrity, and citizenship. The Company’s goal is to develop highly productive associates who will contribute to the success of the Company while making better lives for themselves and their families. The Company believes in maintaining progressive employment policies, as well as a competitive wage and benefit package. The Company considers its relations with associates to be good.

As of December 31, 2023, the Company had 3,850 full-time equivalent associates, 1,099 of whom were officers of the Bank. Neither the Company nor the Bank is a party to any collective bargaining agreement.

Diversity and Inclusion. The Company is committed to fostering, cultivating and preserving a culture of diversity and inclusion. It is committed to including, integrating and serving individuals who represent different groups as defined by race, ethnicity, gender, sexual orientation, religion, age, disability, socioeconomic and family status, political affiliation, and national origin. This commitment can be seen throughout the Company, from its associates to its community outreach efforts. The Company’s associates bring a diversity of backgrounds, perspectives, and experiences that are reflective of the communities and customers the Company serves. The unique capabilities and talents that its associates invest in their work represent a significant part of not only the Company’s culture but its reputation and achievements as well.

The Company is fully committed to the concept and practice of equal opportunity through diversity and inclusion. In 2023, its workforce, from senior officers to tellers, was 49% minority and 74% female. Through its commitment to a diverse workforce, the Company has implemented the following initiatives:

Compensation and Benefits. The Company believes in maintaining progressive employment policies, as well as a competitive wage and benefit package. The Company has invested heavily in its officers and associates by recruiting talented officers in its market areas and providing them with economic incentives. The senior management team, including area leadership, has substantial experience in the Company’s business and market areas. Most banking center locations are overseen by a local president or manager with knowledge of the community and lending expertise in the specific industries found in the community. The Company operates each banking center as a separate profit center, maintaining separate data with respect to each banking center’s net interest income, efficiency ratio, deposit growth, loan growth and overall profitability. Banking center presidents and managers are accountable for performance in these areas and compensated accordingly. The Company also has lending groups focused on specific business segments. The performance of these groups is also reviewed when setting lender compensation.

The Company offers a variety of benefits to full-time associates, including Medical Insurance, Dental Insurance, Vision Insurance, Basic Life Insurance, Voluntary Life Insurance, Spouse/Dependent Life Insurance, Short Term Disability, Long Term Disability, Worksite Supplemental Benefits, Flexible Spending Account, 401K/Profit Sharing Plan, Vacation Leave, Sick Leave and Paid Holidays.

Recruiting, Training, Development and Retention. In order to provide current associates with the opportunity for advancement, the Company posts job opportunities internally for three calendar days before making them available to the public. Of the approximately 1,545 open positions filled in 2023, 27% were filled by internal associates.

The Company recognizes that employee training and development are business imperatives essential to employee retention and providing excellent service. Associates receive formal and informal position specific training on various regulatory compliance topics, person to person functional and product training, policy and procedure documentation, online webinars and videos. The Company has position specific required training delivered annually, and as industry or bank policy and procedure changes dictate. Associates are encouraged to explore and achieve a full range of training and development opportunities to personalize career development and to prioritize their unique needs and growth opportunities. The Company fosters an environment where associates are encouraged to reach their full potential by enhancing current skills, work toward a future role, or take steps to build new skills through hands-on learning involving common customer interaction scenarios, coaching conversations, mentor relationships, feedback, performance appraisals and working with role models.

The Company recognizes that associates play a valuable role in its overall success. The Company strives to keep associates motivated and focused through its commitment to diversity and inclusion, compensation and benefits, and career development. All related programs or benefits contribute to the Company’s overall productivity and performance and play a vital role in attracting and retaining associates.

Business Culture. The Company’s directors and officers are important to the Company’s success and play a key role in the Company’s business development efforts by actively participating in civic and public service activities in the communities served by the Company.

Banking Activities

The Company, through the Bank, offers a variety of traditional loan and deposit products to its customers, which consist primarily of individual consumers and businesses throughout Texas and Oklahoma. At December 31, 2023, the Bank maintained approximately 813,000 separate deposit accounts including certificates of deposit and 72,500 separate loan accounts. At December 31, 2023, noninterest-bearing demand deposits were 36.0% of the Bank’s total deposits. For the year ended December 31, 2023, the Company’s average cost of funds was 1.54% and the Company’s average cost of deposits (excluding all borrowings) was 1.00%.

The Company has been an active real estate lender, with commercial real estate (including farmland and multi-family residential), 1-4 family residential (including home equity) and construction, land development and other land loans comprising 29.6%, 38.5% and 14.5%, respectively, of the Company’s total loans as of December 31, 2023. The Company is active in commercial and industrial lending, with commercial loans comprising 10.9% of the Company’s total loans as of December 31, 2023. The Company also offers agricultural loans, loans for automobiles and other consumer durables, home equity loans, debit and credit cards, digital banking solutions, trust and wealth management, retail brokerage services, mortgage services and treasury management. The Company offers businesses a broad array of loan products including term loans, lines of credit and loans for working capital, business expansion and the purchase of equipment and machinery; land development and interim construction loans for builders; and owner-occupied and non-owner occupied commercial real estate loans. The Company has a Warehouse Purchase Program that allows

mortgage banking company customers to close one-to-four-family real estate loans in their own name and manage their cash flow needs until the loans are sold to investors.

By offering certificates of deposit, interest checking accounts, money market accounts and savings accounts at competitive rates, the Company gives its depositors a full range of traditional deposit products.

As of December 31, 2023, the Company’s trust department maintained total assets of $2.67 billion, including managed assets of $2.26 billion. The trust department provides trust services in the Company’s various market areas.

Business Strategies

The Company’s main objective is to increase deposits and loans through internal growth, as well as through acquisition opportunities, while maintaining efficiency, providing individualized customer service and maximizing profitability. To achieve this objective, the Company has employed the following strategic goals:

Continue Community Banking Emphasis. Although the Company has significantly grown in the last several years, it intends to continue operating as a community banking organization focused on meeting the specific needs of consumers and businesses in its market areas. The Company provides a high degree of responsiveness combined with a wide variety of banking products and services. The Company staffs its banking centers with experienced bankers who possess lending expertise to effectively serve their community and gives them authority with centralized support to make certain pricing and credit decisions, avoiding the bureaucratic structure of larger banks. Each banking center has its own listed local business telephone number. Customers are served by a local banker with decision making authority. The Company also maintains specialty commercial lending lines of business staffed by bankers with lending expertise in the various business lines—commercial middle market, energy, mortgage warehouse and insurance lending.

Expand Market Share Through Internal Growth and a Disciplined Acquisition Strategy. The Company intends to continue seeking opportunities, both inside and outside its existing markets, to expand either by acquiring existing banks or branches of banks or by establishing new banking centers. All of the Company’s acquisitions have been accretive to earnings within 12 months after acquisition date and generally have supplied the Company with relatively low-cost deposits which have been used to fund the Company’s lending and investing activities. However, future acquisitions, if any, may not be accretive to earnings within any particular time period. Factors used by the Company to evaluate expansion opportunities include (1) the similarity in management and operating philosophies, (2) whether the acquisition will be accretive to earnings and enhance shareholder value, (3) whether the acquisition will strategically expand the Company’s geographic footprint and (4) the opportunity to enhance the Company’s market presence in existing market areas.

Increase Loan Volume and Diversify Loan Portfolio. While maintaining its prudent approach to lending, the Company has emphasized both new and existing loan products, focusing on increasing its commercial real estate, commercial and industrial, and residential real estate loan portfolios. Loans at December 31, 2023 were $21.18 billion compared with $18.84 billion at December 31, 2022, an increase of $2.34 billion or 12.4%. Commercial and industrial loans were $2.31 billion and represented 10.9% of the total loan portfolio as of December 31, 2023. Commercial real estate loans (including multifamily residential and excluding farmland) were $5.66 billion and represented 26.8% of the total portfolio as of December 31, 2023. One-to-four-family residential loans (excluding home equity) were $7.20 billion and represented 34.0% of the total loan portfolio as of December 31, 2023. Construction, land development and other land loans were $3.08 billion and represented 14.5% of the total loan portfolio as of December 31, 2023. Warehouse Purchase Program loans were $822.2 million and represented 3.9% of the total loan portfolio as of December 31, 2023.

Maintain Sound Asset Quality. The Company continues to maintain the sound asset quality that has been representative of its historical loan portfolio. As the Company continues to diversify and increase its lending activities and acquire loans in acquisitions, it may face higher risks of nonpayment and increased risks in the event of prolonged economic downturns. The Company intends to continue to employ the strict underwriting guidelines and comprehensive loan review processes that have contributed to its low incidence of nonperforming assets and minimal charge-offs in relation to its size. Nonperforming assets were 0.34% of total loans and other real estate at December 31, 2023. Excluding Warehouse Purchase Program loans, nonperforming assets were 0.36% of total loans and other real estate at December 31, 2023. All Warehouse Purchase Program loans were performing loans at December 31, 2023.

Continue Focus on Efficiency. The Company plans to maintain its stringent cost control practices and policies. The Company has invested significantly in the infrastructure required to centralize many of its critical operations, such as data processing and loan and deposit processing. For its banking centers, which the Company operates as independent profit centers, the Company supplies complete support in the areas of loan review, appraisals, loan and deposit processing, internal audit, compliance and training. Management believes that this centralized infrastructure can accommodate additional growth while enabling the Company to minimize operational costs through economies of scale.

Enhance Cross-Selling. The Company uses incentives and friendly competition to encourage cross-selling efforts and increase cross-selling results among its associates. Officers and associates have access to each customer’s existing and related account relationships and are better able to inform customers of additional products when customers visit or call the various banking centers or use their drive-in facilities. In addition, the Company includes product information on its web page and in monthly statements and other mailings.

Competition

The banking business is highly competitive, and the profitability of the Company depends principally on its ability to compete in its market areas. The Company competes with other commercial banks, savings banks, savings and loan associations, credit unions, finance companies, mutual funds, insurance companies, brokerage and investment banking firms, asset-based nonbank lenders, financial technology companies and certain other nonfinancial entities, including retail stores that may maintain their own credit programs and certain governmental organizations that may offer more favorable financing than the Company. Continued consolidation and rapid technological changes within the financial services industry will likely change the nature and intensity of competition, but should also create opportunities for the Company to demonstrate and leverage its competitive advantages. The Company believes it has been able to compete effectively with other financial institutions by emphasizing customer service, technology and responsive decision-making with respect to loans, by establishing long-term customer relationships and building customer loyalty and by providing products and services designed to address the specific needs of its customers.

Supervision and Regulation

The supervision and regulation of bank holding companies and their subsidiaries is intended primarily for the protection of depositors, the Deposit Insurance Fund (“DIF”) of the Federal Deposit Insurance Corporation (“FDIC”) and the banking system as a whole, and not for the protection of the bank holding company’s shareholders or creditors. The banking agencies have broad enforcement power over bank holding companies and banks including the power to impose substantial fines and other penalties for violations of laws and regulations.

The following description summarizes some of the laws to which the Company and the Bank are subject. References in this Annual Report on Form 10-K to applicable statutes and regulations are brief summaries thereof, do not purport to be complete, and are qualified in their entirety by reference to such statutes and regulations.

The Company

The Company is a financial holding company pursuant to the Gramm-Leach-Bliley Act and a bank holding company registered under the Bank Holding Company Act of 1956, as amended (“BHCA”). Accordingly, the Company is subject to primary supervision, regulation and examination by the Board of Governors of the Federal Reserve System (“Federal Reserve Board”). The Gramm-Leach-Bliley Act, the BHCA and other federal laws subject financial and bank holding companies to particular restrictions on the types of activities in which they may engage, and to a range of supervisory requirements and activities, including regulatory enforcement actions for violations of laws and regulations. Further, as a public company, the Company also files reports with the U.S. Securities and Exchange Commission (“SEC”) and is subject to its regulatory authority, including the disclosure and regulatory requirements of the Securities Act of 1933, as amended, and the Securities Exchange Act of 1934, as amended, with respect to the Company’s securities, financial reporting and certain governance matters. Because the Company’s securities are listed on the New York Stock Exchange (“NYSE”), the Company is subject to NYSE's rules for listed companies, including rules relating to corporate governance.

Regulatory Restrictions on Dividends and Repurchases. The Company is regarded as a legal entity separate and distinct from the Bank. The principal source of the Company’s revenues is dividends received from the Bank. As described in more detail below, federal and state law places limitations on the amount that banks may pay in dividends, which the Bank must adhere to when paying dividends to the Company. It is the policy of the Federal Reserve Board that bank holding companies should pay cash dividends on common stock only out of income available over the past year and only if the prospective rate of earnings retention is consistent with the organization’s expected capital needs and financial condition. The Federal Reserve Board’s policy provides that bank holding companies should not maintain a level of cash dividends that undermines the bank holding company’s ability to serve as a source of strength to its banking subsidiaries. The Federal Reserve Board is authorized to limit or prohibit the payment of dividends if, in the Federal Reserve Board’s opinion, the payment of dividends would constitute an unsafe or unsound practice in light of a bank holding company’s financial condition. Federal Reserve Board policy also provides that a bank holding company should inform the Federal Reserve Board reasonably in advance of declaring or paying a dividend that exceeds earnings for the period for which the dividend is being paid or that could result in a material adverse change to the bank holding company's capital structure.

In July 2019, the federal bank regulators adopted final rules that, among other things, eliminated the standalone prior approval requirement in the Basel III Capital Rules for any repurchase of common stock. In certain circumstances, the Company’s repurchases

of its common stock may be subject to a prior approval or notice requirement under other regulations, policies or supervisory expectations of the Federal Reserve Board. Any redemption or repurchase of preferred stock or subordinated debt remains subject to the prior approval of the Federal Reserve Board.

In August 2022, the Inflation Reduction Act of 2022 (the “IRA”) was enacted. Among other things, the IRA imposes a new 1% excise tax on the fair market value of stock repurchased after December 31, 2022 by publicly traded U.S. corporations. With certain exceptions, the value of stock repurchased is determined net of stock issued in the year, including shares issued pursuant to compensatory arrangements.

Source of Strength. Federal Reserve Board policy and federal law require a bank holding company to act as a source of financial strength to each of its banking subsidiaries. Under this requirement, the Company is expected to commit resources to support the Bank, including support at times when the Company may not be in a financial position to provide such resources. Any capital loans by a bank holding company to any of its subsidiary banks are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary banks. As discussed below, a bank holding company, in certain circumstances, could be required to guarantee the capital plan of an undercapitalized banking subsidiary.

In the event of a bank holding company’s bankruptcy under Chapter 11 of the U.S. Bankruptcy Code, the trustee will be deemed to have assumed and is required to cure immediately any deficit under any commitment by the debtor holding company to any of the federal banking agencies to maintain the capital of an insured depository institution. Any claim for breach of such obligation will generally have priority over most other unsecured claims.

Scope of Permissible Activities. Under the BHCA, bank holding companies generally may not acquire a direct or indirect interest in or control of more than 5% of the voting shares of any company that is not a bank or bank holding company and may not engage in activities other than those of banking, managing or controlling banks or furnishing services to or performing services for its subsidiaries, except that it may engage in, directly or indirectly, certain activities that the Federal Reserve Board has determined to be so closely related to banking or managing and controlling banks as to be a proper incident thereto. In approving acquisitions or the addition of activities, the Federal Reserve Board considers, among other things, whether the acquisition or the additional activities can reasonably be expected to produce benefits to the public, such as greater convenience, increased competition, or gains in efficiency, that outweigh such possible adverse effects as undue concentration of resources, decreased or unfair competition, conflicts of interest or unsound banking practices.

Notwithstanding the foregoing, the Gramm-Leach-Bliley Act eliminated the barriers to affiliations among banks, securities firms, insurance companies and other financial service providers and permits bank holding companies to become financial holding companies and thereby affiliate with securities firms and insurance companies and engage in other activities that are financial in nature. The Gramm-Leach-Bliley Act defines “financial in nature” to include securities underwriting, dealing and market making; sponsoring mutual funds and investment companies; insurance underwriting and agency; merchant banking activities; and activities that the Federal Reserve Board has determined to be closely related to banking. Generally, no regulatory approval will be required for a financial holding company, such as the Company, to acquire a company, other than a bank or savings association, engaged in activities that are financial in nature or incidental to activities that are financial in nature as determined by the Federal Reserve Board.

The Company’s financial holding company status depends upon it maintaining its status as “well capitalized” and “well managed” under applicable Federal Reserve Board regulations. If a financial holding company ceases to meet these requirements, the Federal Reserve Board may impose corrective capital and/or managerial requirements on the financial holding company and place limitations on its ability to conduct the broader financial activities permissible for financial holding companies. Until the financial holding company returns to compliance, it may not acquire a company engaged in such financial activities without prior approval of the Federal Reserve Board. In addition, the Federal Reserve Board may require divestiture of the holding company’s depository institutions and/or its non-bank subsidiaries if the deficiencies persist.

While the Federal Reserve Board is the “umbrella” regulator for financial holding companies and has the power to examine banking organizations engaged in new activities, regulation and supervision of activities which are financial in nature or determined to be incidental to such financial activities will be handled along functional lines. Accordingly, activities of subsidiaries of a financial holding company will be regulated by the agency or authorities with the most experience regulating that activity as it is conducted in a financial holding company.

Safe and Sound Banking Practices. Bank holding companies are not permitted to engage in unsafe and unsound banking practices. The Federal Reserve Board’s Regulation Y, for example, generally requires a holding company to give the Federal Reserve Board prior notice of any redemption or repurchase of its own equity securities if the consideration to be paid, together with the consideration paid for any repurchases or redemptions in the preceding year, is equal to 10% or more of the company’s consolidated net worth. The Federal Reserve Board may oppose the transaction if it believes that the transaction would constitute an unsafe or

unsound practice or would violate any law or regulation. Depending upon the circumstances, the Federal Reserve Board could take the position that paying a dividend would constitute an unsafe or unsound banking practice.

The Federal Reserve Board has broad authority to prohibit activities of bank holding companies and their nonbanking subsidiaries which represent unsafe and unsound banking practices or which constitute violations of laws or regulations, and can assess civil money penalties for certain activities conducted on a knowing and reckless basis if those activities caused a substantial loss to a depository institution. The penalties can be in excess of $1.0 million for each day the activity continues.

Anti-Tying Restrictions. Bank holding companies and their affiliates are prohibited from tying the provision of certain services, such as extensions of credit, to other services offered by a holding company or its affiliates.

Basel III Capital Adequacy Requirements. The Company and the Bank are required to comply with applicable capital adequacy standards adopted by the Federal Reserve Board and the FDIC (the “Basel III Capital Rules”). The Basel III Capital Rules define the components of capital and address other issues affecting the numerator in banking institutions’ regulatory capital ratio calculations and also address risk weights and other issues affecting the denominator.

The Basel III Capital Rules require the Company to maintain a capital conservation buffer of Common Equity Tier 1 (“CET1”) of 2.5%, effectively resulting in minimum ratios of (1) CET1 to risk-weighted assets of 7.0%, (2) Tier 1 capital to risk-weighted assets of 8.5%, (3) total capital (that is, Tier 1 plus Tier 2) to risk-weighted assets of 10.5% and (4) Tier 1 capital to average quarterly assets as reported on consolidated financial statements (known as the “leverage ratio”) of 4.0%. As of December 31, 2023, the Company’s ratio of CET1 to risk-weighted assets was 15.54%, Tier 1 capital to risk-weighted assets was 15.54%, total capital to risk-weighted assets was 16.56% and Tier 1 capital to average quarterly assets was 10.39%.

Banking institutions that fail to meet the effective minimum ratios once the capital conservation buffer is taken into account, as detailed above, will be subject to constraints on capital distributions, including dividends and share repurchases, and certain discretionary executive compensation. The severity of the constraints depends on the amount of the shortfall and the institution’s “eligible retained income” (that is, four quarter trailing net income, net of distributions and tax effects not reflected in net income).

With respect to the Bank, the Basel III Capital Rules also revised the “prompt corrective action” regulations as discussed below under “The Bank—Corrective Measures for Capital Deficiencies.”

In response to the novel strain of coronavirus disease (“COVID-19”) pandemic, in March 2020 the joint federal bank regulatory agencies issued an interim final rule that allowed banking organizations that implemented ASU 2016-13, “Financial Instruments-Credit Losses (Topic 326) – Measurement of Credit Losses on Financial Instruments” (“CECL”) in 2020 to mitigate the effects of the CECL accounting standard in their regulatory capital for two years. This two-year delay is in addition to the three-year transition period that the agencies had already made available. The Company adopted the option provided by the interim final rule, which delayed the effects of CECL on its regulatory capital through 2021, after which the effects will be phased in over a three-year period from January 1, 2022 through December 31, 2024. Under the interim final rule, the amount of adjustments to regulatory capital deferred until the phase-in period include both the initial impact of the Company’s adoption of CECL on January 1, 2020 and 25% of subsequent changes in the Company’s allowance for credit losses during each quarter of the two-year period ending December 31, 2021. The cumulative amount of the transition adjustments is being phased in over the three-year transition period that began on January 1, 2022, with 75% recognized in 2022, 50% recognized in 2023, and 25% recognized in 2024.

The Basel III Capital Rules prescribe a standardized approach for risk weightings that expands the risk-weighting categories from the general risk-based capital rules to a larger and more risk-sensitive number of categories, depending on the nature of the assets, generally ranging from 0% for U.S. government and agency securities, to 600% for certain equity exposures, and resulting in higher risk weights for a variety of asset categories.

In July 2023, the federal banking regulators proposed revisions to the Basel III capital rules to implement the Basel Committee’s 2017 standards and make other changes to the Basel III capital rules. The proposal introduces revised credit risk, equity risk, operational risk, credit evaluation risk, and market risk requirements, among other changes. However, the revised capital requirements of the proposed rule would not apply to the Company or the Bank because they each have less than $100 billion in total consolidated assets and trading assets and liabilities below the threshold for the market risk requirements.

The federal banking agencies’ risk-based and leverage capital ratios are minimum supervisory ratios generally applicable to banking organizations that meet certain specified criteria. Banking organizations not meeting these criteria are expected to operate with capital positions well above the minimum ratios. The federal bank regulatory agencies may set capital requirements for a particular banking organization that are higher than the minimum ratios when circumstances warrant. Federal Reserve Board

guidelines also provide that banking organizations experiencing internal growth or making acquisitions will be expected to maintain strong capital positions substantially above the minimum supervisory levels, without significant reliance on intangible assets.

Liquidity Requirements. The Basel III liquidity framework requires some banks and bank holding companies to measure their liquidity against specific liquidity tests. One test, referred to as the liquidity coverage ratio (“LCR”), is designed to ensure that a banking entity maintains an adequate level of unencumbered high-quality liquid assets equal to the entity’s expected net cash outflow for a 30-day time horizon (or, if greater, 25% of its expected total cash outflow) under an acute liquidity stress scenario. The other test, referred to as the net stable funding ratio (“NSFR”), is designed to promote more medium- and long-term funding of the assets and activities of banking entities over a one-year time horizon. Neither the LCR rule nor the NSFR rule apply to the Company and the Bank.

Imposition of Liability for Undercapitalized Subsidiaries. Bank regulators are required to take “prompt corrective action” to resolve problems associated with insured depository institutions whose capital declines below certain levels. If an institution becomes “undercapitalized,” it must submit a capital restoration plan. The capital restoration plan will not be accepted by the regulators unless each company having control of the undercapitalized institution guarantees the subsidiary’s compliance with the capital restoration plan up to a certain specified amount. Any such guarantee from a depository institution’s holding company is entitled to a priority of payment in bankruptcy.

The aggregate liability of the holding company of an undercapitalized bank is limited to the lesser of 5% of the institution’s assets at the time it became undercapitalized or the amount necessary to cause the institution to be “adequately capitalized.” The bank regulators have greater power in situations where an institution becomes “significantly” or “critically” undercapitalized or fails to submit a capital restoration plan. For example, a bank holding company controlling such an institution can be required to obtain prior Federal Reserve Board approval of proposed dividends or might be required to consent to a consolidation or to divest the troubled institution or other affiliates.

Acquisitions by Bank Holding Companies. The BHCA requires every bank holding company to obtain the prior approval of the Federal Reserve Board before it may acquire all or substantially all of the assets of any bank, or ownership or control of any voting shares of any bank, if after such acquisition it would own or control, directly or indirectly, 5% or more of the voting shares of such bank. In approving bank acquisitions by bank holding companies, the Federal Reserve Board is required to consider, among other things, the financial and managerial resources and future prospects of the bank holding company and the banks concerned, the convenience and needs of the communities to be served and various competitive factors.

Control Acquisitions. The Change in Bank Control Act prohibits a person or group of persons from acquiring “control” of a bank holding company unless the Federal Reserve Board has been notified and has not objected to the transaction. Under a rebuttable presumption established by the Federal Reserve Board, the acquisition of 10% or more of a class of voting stock of a bank holding company with a class of securities registered under Section 12 of the Exchange Act, such as the Company, would, under the circumstances set forth in the presumption, constitute acquisition of control of the Company. In addition, a person may not acquire 25% (5% in the case of an acquiror that is a bank holding company) or more of a bank holding company’s or bank’s voting securities, or otherwise obtain control or a controlling influence over a bank holding company or bank without the approval of the Federal Reserve Board.

In January 2020, the Federal Reserve Board approved a final rule that clarifies the framework for when a company controls a bank holding company or bank under the BHCA. In particular, the final rule sets forth tiered presumptions of control in the Federal Reserve Board’s regulations. Under the BHCA, a company controls a bank holding company if it controls 25 percent or more of any class of voting securities of the bank holding company. A company that controls less than 5 percent of any class of voting securities of a bank holding company is presumed not to control the bank holding company. In instances in which a company owns at least 5 percent but less than 25 percent, the Federal Reserve Board considers the full facts and circumstances of the relationship between the company and the bank holding company to determine whether the company controls the bank holding company. As part of its determination as to control, the Federal Reserve Board considers, among other things, level of ownership of voting and non-voting securities, board representation, business relationships, senior management interlocks, contractual limits on major operational or policy decisions, proxies on issues, threats to dispose of securities, and management agreements. The rule also provides several additional examples of presumptions of control and noncontrol, along with various ancillary provisions such as definitions of terms used in the presumptions.

The Volcker Rule. The Volcker Rule under the Dodd-Frank Wall Street Reform and Consumer Protection Act ("Dodd-Frank Act") prohibits banks and their affiliates from engaging in proprietary trading and investing in and sponsoring certain hedge funds and private equity funds. Since neither the Company nor the Bank engages in the types of trading or investing covered by the Volcker Rule, the Volcker Rule does not currently have any effect on the operations of the Company or the Bank.

The Bank

The Bank is a Texas-chartered banking association, the deposits of which are insured by the DIF of the FDIC. The Bank is not a member of the Federal Reserve System; therefore, the Bank is subject to supervision and regulation by the FDIC and the Texas Department of Banking. Such supervision and regulation subject the Bank to special restrictions, requirements, potential enforcement actions and periodic examination by the FDIC and the Texas Department of Banking. Because the Federal Reserve Board regulates the Company, the Federal Reserve Board also has supervisory authority which affects the Bank. Further, because the Bank has total assets of over $10 billion, the Bank is also subject to supervision and regulation by the Consumer Financial Protection Bureau (“CFPB”). The CFPB regulates the offering and provision of consumer financial products and services under the federal consumer financial laws.

Equivalence to National Bank Powers. The Texas Constitution, as amended in 1986, provides that a Texas-chartered bank has the same rights and privileges that are or may be granted to national banks domiciled in Texas. To the extent that the Texas laws and regulations may have allowed state-chartered banks to engage in a broader range of activities than national banks, the Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”) has operated to limit this authority. FDICIA provides that no state bank or subsidiary thereof may engage as principal in any activity not permitted for national banks, unless the institution complies with applicable capital requirements and the FDIC determines that the activity poses no significant risk to the DIF. In general, statutory restrictions on the activities of banks are aimed at protecting the safety and soundness of depository institutions.

Financial Modernization. Under the Gramm-Leach-Bliley Act, a national bank may establish a financial subsidiary and engage, subject to limitations on investment, in activities that are financial in nature other than insurance underwriting as principal, insurance company portfolio investment, real estate development, real estate investment, annuity issuance and merchant banking activities. To do so, a bank must be well capitalized, well managed and have a CRA rating of satisfactory or better. Subsidiary banks of a financial holding company or national banks with financial subsidiaries must remain well capitalized and well managed in order to continue to engage in activities that are financial in nature without regulatory actions or restrictions, which could include divestiture of the financial-in-nature subsidiary or subsidiaries. In addition, a financial holding company or a bank may not acquire a company that is engaged in activities that are financial in nature unless each of the subsidiary banks of the financial holding company or the bank has a CRA rating of satisfactory or better.

Although the powers of state chartered banks are not specifically addressed in the Gramm-Leach-Bliley Act, Texas-chartered banks such as the Bank, will have the same if not greater powers as national banks through the parity provision contained in the Texas Constitution.

Branching. Pursuant to the Dodd-Frank Act, banks are permitted to engage in de novo interstate branching if the laws of the state where the new branch is to be established would permit the establishment of the branch if it were chartered by such state, subject to applicable regulatory review and approval requirements. The Dodd-Frank Act also modified certain regulatory requirements for interstate mergers and acquisitions, including that the acquiring bank must be well capitalized and well managed. Texas law provides that a Texas-chartered bank can establish a branch anywhere in Texas or any other state, subject to federal law requirements, provided that the branch is approved in advance by the Texas Department of Banking. The branch must also be approved by the FDIC, which considers a number of factors, including financial history, capital adequacy, earnings prospects, character of management, needs of the community and consistency with corporate powers.

Restrictions on Transactions with Affiliates and Insiders. Transactions between the Bank and its nonbanking affiliates, including the Company, are subject to Section 23A and Section 23B of the Federal Reserve Act. In general, Section 23A imposes limits on the amount of such transactions to 10% of the Bank’s capital stock and surplus and requires that such transactions be secured by designated amounts of specified collateral. It also limits the amount of advances to third parties which are collateralized by the securities or obligations of the Company or its subsidiaries. Section 23B generally requires that certain transactions between the Bank and its affiliates be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with or involving other nonaffiliated persons.

Loans to directors, executive officers, principal shareholders and their related interests (collectively referred to herein as “insiders”) are subject to restrictions contained in the Federal Reserve Act and Regulation O, which apply to all insured institutions and their subsidiaries and holding companies. Insiders are subject to enforcement actions for knowingly accepting loans in violation of applicable restrictions.

Restrictions on Distribution of Subsidiary Bank Dividends and Assets. Dividends paid by the Bank have provided a substantial part of the Company’s operating funds, and it is anticipated that dividends paid by the Bank to the Company will continue to be the Company’s principal source of operating funds. Capital adequacy requirements serve to limit the amount of dividends that may be paid by the Bank. Under federal law, the Bank cannot pay a dividend if, after paying the dividend, the Bank will be

“undercapitalized.” The FDIC may declare a dividend payment to be unsafe and unsound even though the Bank would continue to meet its capital requirements after the dividend. The Bank is also subject to limitations on the payment of dividends under Texas law. Because the Company is a legal entity separate and distinct from its subsidiaries, its right to participate in the distribution of assets of any subsidiary upon the subsidiary’s liquidation or reorganization will be subject to the prior claims of the subsidiary’s creditors. In the event of a liquidation or other resolution of an insured depository institution, the claims of depositors and other general or subordinated creditors are entitled to a priority of payment over the claims of holders of any obligation of the institution to its shareholders, including any depository institution holding company (such as the Company) or any shareholder or creditor thereof.

Consumer Financial Protection. The Bank is subject to a number of federal and state consumer protection laws that extensively govern its relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Service Members Civil Relief Act and these laws’ respective state-law counterparts, as well as state usury laws and laws regarding unfair and deceptive acts and practices. These and other federal laws, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive and abusive practices, restrict the Bank’s ability to raise interest rates and subject the Bank to substantial regulatory oversight. Violations of applicable consumer protection laws can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights and civil money penalties in each jurisdiction in which the Bank operates. Failure to comply with consumer protection requirements may also result in the Bank’s failure to obtain any required regulatory approval for merger or other acquisition transactions the Bank may wish to pursue or its prohibition from engaging in such transactions even if approval is not required.

The Dodd-Frank Act established the CFPB, which has supervisory, examination and enforcement authority over depository institutions with total assets of $10 billion or greater and other providers of consumer financial products or services. The CFPB has broad rulemaking authority for a wide range of federal consumer financial laws, including, among other things, the authority to prohibit “unfair, deceptive or abusive” acts and practices. The CFPB can issue cease-and-desist orders against banks and other entities that violate federal consumer financial laws and may also institute a civil action against an entity in violation of federal consumer financial laws in order to impose a civil penalty or injunction.

In October 2023, the CFPB proposed a new rule that would require a provider of payment accounts or products, such as a bank, to make data available to consumers upon request regarding the products or services they obtain from the provider. Any such data provider would also have to make such data available to third parties, with the consumer’s express authorization and through an interface that satisfies formatting, performance and security standards, for the purpose of such third parties providing the consumer with financial products or services requested by the consumer. Data that would be required to be made available under the rule would include transaction information, account balance, account and routing numbers, terms and conditions, upcoming bill information, and certain account verification data. The proposed rule is intended to give consumers control over their financial data, including with whom it is shared, and encourage competition in the provision of consumer financial products or services. For banks with over $50 billion and less than $500 billion in total assets, compliance would be required approximately one year after adoption of the final rule.

Customer Information Security. The federal banking agencies have adopted guidelines for safeguarding confidential, personal, nonpublic customer information. These guidelines require each financial institution, under the supervision and ongoing oversight of its board of directors or an appropriate committee thereof, to create, implement and maintain a comprehensive written information security program designed to ensure the security and confidentiality of customer information, protect against any anticipated threats or hazard to the security or integrity of such information and protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer. The Bank has adopted a customer information security program to comply with these requirements.

Examinations. The FDIC periodically examines and evaluates state non-member banks, such as the Bank. The Texas Department of Banking also conducts examinations of Texas-chartered banks, but may accept the results of a federal examination in lieu of conducting an independent examination. Additionally, the FDIC and Texas Department of Banking may elect to conduct a joint examination. Because the Bank has total assets of over $10 billion, the CFPB also has examination authority with respect to the Bank’s compliance with federal consumer protection laws.

Capital Adequacy Requirements. The FDIC has adopted regulations establishing minimum requirements for the capital adequacy of insured institutions. The FDIC may establish higher minimum requirements if, for example, a bank has previously received special attention or has a high susceptibility to interest rate risk.

The FDIC’s risk-based capital guidelines generally require state banks to have minimum ratios of CET1 to risk-weighted assets of 4.5%, Tier 1 capital to total risk-weighted assets of 6.0% and total capital to total risk-weighted assets of 8.0%. The capital categories have the same definitions for the Bank as for the Company. As of December 31, 2023, the Bank’s ratio of CET1 to risk-weighted assets was 15.48%, Tier 1 capital to total risk-weighted assets was 15.48% and total capital to total risk-weighted assets was 16.50%.

The FDIC’s leverage guidelines require state banks to maintain Tier 1 capital of no less than 4.0% of average total assets. As of December 31, 2023, the Bank’s ratio of Tier 1 capital to average quarterly assets (leverage ratio) was 10.35%.

Corrective Measures for Capital Deficiencies. The federal banking regulators are required to take “prompt corrective action” with respect to capital-deficient institutions. Agency regulations define, for each capital category, the levels at which institutions are “well-capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” and “critically undercapitalized.”

At December 31, 2023, the Bank was classified as “well-capitalized” for purposes of the FDIC’s prompt corrective action regulations in effect as of such date.

In addition to requiring undercapitalized institutions to submit a capital restoration plan, agency regulations contain broad restrictions on certain activities of undercapitalized institutions including asset growth, acquisitions, branch establishment and expansion into new lines of business. With certain exceptions, an insured depository institution is prohibited from making capital distributions, including dividends, and is prohibited from paying management fees to control persons if the institution would be undercapitalized after any such distribution or payment.

As an institution’s capital decreases, the FDIC’s enforcement powers become more severe. A significantly undercapitalized institution is subject to mandated capital raising activities, restrictions on interest rates paid and transactions with affiliates, removal of management and other restrictions. The FDIC has only very limited discretion in dealing with a critically undercapitalized institution and is virtually required to appoint a receiver or conservator.

Banks with risk-based capital and leverage ratios below the required minimums may also be subject to certain administrative actions, including the termination of deposit insurance upon notice and hearing, or a temporary suspension of insurance without a hearing if the institution has no tangible capital.

In addition, the Federal Deposit Insurance Act prohibits an insured depository institution from accepting brokered deposits or offering interest rates on any deposits significantly higher than the prevailing rate in the bank’s normal market area or nationally (depending upon where the deposits are solicited), unless it is well capitalized or is adequately capitalized and receives a waiver from the FDIC.

Deposit Insurance Assessments. The deposits of the Bank are insured up to applicable limits by the DIF, and the Bank must pay deposit insurance assessments to the FDIC for such deposit insurance protection. A depository institution’s DIF assessment is calculated by multiplying its assessment rate by the assessment base, which is defined as the average consolidated total assets less the average tangible equity of the depository institution. The initial base assessment rate is based on its capital level and CAMELS ratings, certain financial measures to assess an institution’s ability to withstand asset related stress and funding related stress and, in some cases, additional discretionary adjustments by the FDIC to reflect additional risk factors.

On June 22, 2020, the FDIC issued a final rule that mitigates the deposit insurance assessment effects of participating in the Paycheck Protection Program (“PPP”). Pursuant to the final rule, the FDIC will generally remove the effect of PPP lending in

calculating an institution’s deposit insurance assessment. The final rule also provides an offset to an institution's total assessment amount for the increase in its assessment base attributable to participation in the PPP and the Money Market Mutual Liquidity Fund.

On February 16, 2021, the FDIC adopted a final rule to address the temporary deposit insurance assessment effects resulting from the optional regulatory capital transition provisions related to the CECL implementation. The final rule removed the double counting of a portion of the CECL transition amounts in certain financial measures that are used to determine deposit insurance assessment rates for large or highly complex insured depository institutions.

In October 2022, the FDIC adopted a final rule to increase the initial base deposit insurance assessment rate schedules uniformly by 2 basis points beginning with the first quarterly assessment period of 2023. The increased assessment is intended to increase the likelihood that the DIF reserve ratio would reach the statutory minimum of 1.35% by the statutory deadline prescribed under the FDIC's amended restoration plan.

In November 2023, the FDIC adopted a final rule to implement a special assessment to recover the losses to the DIF associated with several bank failures that occurred during early 2023. The assessment base for the special assessment is equal to estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion, to be collected at a quarterly rate of approximately 3.36 basis points for an anticipated total of eight quarterly assessment periods, beginning in the first quarter of 2024. As a result, the Company accrued a special assessment of $19.9 million, or $0.17 per diluted common share net of tax in the fourth quarter of 2023. Under the final rule, the estimated loss pursuant to the systemic risk determination will be periodically adjusted, and the FDIC has retained the ability to cease collection early, extend the special assessment collection period and impose a final shortfall special assessment on a one-time basis. The extent to which any additional future assessments will impact our future deposit insurance expense is currently uncertain.

Interchange Fees. Under the Durbin Amendment to the Dodd-Frank Act, the Federal Reserve Board adopted rules establishing standards for assessing whether the interchange fees that may be charged with respect to certain electronic debit transactions are “reasonable and proportional” to the costs incurred by issuers for processing such transactions. Interchange fees, or “swipe” fees, are charges that merchants pay to the Bank and other card-issuing banks for processing electronic payment transactions. Federal Reserve Board rules applicable to financial institutions that have assets of $10 billion or more provide that the maximum permissible interchange fee for an electronic debit transaction is the sum of 21 cents per transaction and 5 basis points multiplied by the value of the transaction. An upward adjustment of no more than 1 cent to an issuer’s debit card interchange fee is allowed if the card issuer develops and implements policies and procedures reasonably designed to achieve certain fraud-prevention standards. The Federal Reserve Board also has rules governing routing and exclusivity that require issuers to offer at least two unaffiliated networks for routing transactions on each debit or prepaid product. On October 25, 2023, the Federal Reserve Board issued a proposal under which the maximum permissible interchange fee for an electronic debit transaction would be the sum of 14.4 cents per transaction and 4 basis points multiplied by the value of the transaction. Furthermore, the fraud-prevention adjustment would increase from a maximum of 1 cent to 1.3 cents. The proposal would adopt an approach for future adjustments to the interchange fee cap, which would occur every other year based on issuer cost data gathered by the Federal Reserve from large debit card issuers.

Concentrated Commercial Real Estate Lending. The federal banking agencies, including the FDIC, have promulgated guidance governing financial institutions with concentrations in commercial real estate lending. The guidance provides that a bank has a concentration in commercial real estate lending if (1) total reported loans for construction, land development and other land represent 100% or more of total capital or (2) total reported loans secured by multifamily and non-farm residential properties and loans for construction, land development and other land represent 300% or more of total capital and the bank’s commercial real estate loan portfolio has increased 50% or more during the prior 36 months. Owner occupied loans are excluded from this second category. If a concentration is present, management must employ heightened risk management practices that address the following key elements: board and management oversight and strategic planning, portfolio management, development of underwriting standards, risk assessment and monitoring through market analysis and stress testing, and maintenance of increased capital levels as needed to support the level of commercial real estate lending.

Community Reinvestment Act. The Community Reinvestment Act of 1977 (“CRA”) and the regulations issued thereunder are intended to encourage banks to help meet the credit needs of their communities, including low and moderate income neighborhoods, consistent with the safe and sound operations of the banks. These regulations also provide for regulatory assessment of a bank’s CRA record when considering applications to establish branches, merger applications and applications to acquire the assets and assume the liabilities of another bank. The Financial Institutions Reform, Recovery, and Enforcement Act (“FIRREA”) requires federal banking agencies to make public a rating of a bank’s performance under the CRA. In the case of a financial holding company or a bank holding company, the CRA performance records of the banks involved in the transaction are reviewed in connection with the filing of an application to acquire ownership or control of shares or assets of a bank or to merge with any other bank holding company. An unsatisfactory record can substantially delay or block the transaction.

On October 24, 2023, the Office of the Comptroller of the Currency (“OCC”), Federal Reserve Board, and FDIC issued a final rule to modernize their respective CRA regulations. The revised rules substantially alter the methodology for assessing compliance with the CRA, with material aspects taking effect January 1, 2026, and revised data reporting requirements taking effect January 1, 2027. Among other things, the revised rules evaluate lending outside traditional assessment areas generated by the growth of non-branch delivery systems, such as online and mobile banking, apply a metrics-based benchmarking approach to assessment, and clarify eligible CRA activities.

Anti-Money Laundering and Anti-Terrorism Legislation. A major focus of governmental policy on financial institutions in recent years has been aimed at combating money laundering and terrorist financing. The USA PATRIOT Act of 2001 (the “USA Patriot Act”) substantially broadened the scope of United States anti-money laundering laws and regulations by imposing significant new compliance and due diligence obligations, creating new crimes and penalties and expanding the extra-territorial jurisdiction of the United States. The United States Treasury Department has issued, and in some cases proposed, a number of regulations that apply various requirements of the USA Patriot Act to financial institutions. These regulations impose obligations on financial institutions to maintain appropriate policies, procedures and controls to detect, prevent and report money laundering and terrorist financing and to verify the identity of their customers. The regulations also impose specific due diligence requirements on financial institutions that maintain correspondent or private banking relationships with non-U.S. financial institutions or persons. Failure of a financial institution to maintain and implement adequate programs to combat money laundering and terrorist financing, or to comply with all of the relevant laws or regulations, could have serious financial, legal and reputational consequences for the institution and could block or substantially delay a merger or other acquisition transaction.

The Anti-Money Laundering Act of 2020 (“AMLA”), which amends the Bank Secrecy Act of 1970 (“BSA”), was enacted in January 2021. The AMLA is intended to be a comprehensive reform and modernization to U.S. bank secrecy and anti-money laundering laws. Among other things, it codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the U.S. Department of the Treasury to promulgate priorities for anti-money laundering and countering the financing of terrorism policy; requires the development of standards for evaluating technology and internal processes for BSA compliance; expands enforcement- and investigation-related authority, including increasing available sanctions for certain BSA violations and expands BSA whistleblower incentives and protections. Many of the statutory provisions in the AMLA will require additional rulemakings, reports and other measures, and the impact of the AMLA will depend on, among other things, rulemaking and implementation guidance. In June 2021, the Financial Crimes Enforcement Network, a bureau of the U.S. Department of the Treasury, issued the priorities for anti-money laundering and countering the financing of terrorism policy required under the AMLA. The priorities include: corruption, cybercrime, terrorist financing, fraud, transnational crime, drug trafficking, human trafficking and proliferation financing.

Office of Foreign Assets Control Regulation. The United States has imposed economic sanctions that affect transactions with designated foreign countries, nationals and others. These are typically known as the “OFAC” rules based on their administration by the U.S. Treasury Department Office of Foreign Assets Control (“OFAC”). The OFAC-administered sanctions targeting countries take many different forms. Generally, however, they contain one or more of the following elements: (1) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on “U.S. persons” engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country; and (2) a blocking of assets in which the government or specially designated nationals of the sanctioned country have an interest, by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (e.g., property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. Failure to comply with these sanctions could have serious financial, legal and reputational consequences, including substantial delay or blocking of a merger or other acquisition transaction.

Incentive Compensation. In June 2010, the Federal Reserve Board, OCC and FDIC issued comprehensive final guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon the key principles that a banking organization’s incentive compensation arrangements should (1) provide incentives that do not encourage risk-taking beyond the organization’s ability to effectively identify and manage risks, (2) be compatible with effective internal controls and risk management and (3) be supported by strong corporate governance, including active and effective oversight by the organization’s Board of Directors. As of December 31, 2023, these proposed rules have not been adopted.

These three principles are incorporated into the proposed revised rules on incentive-based payment arrangements at specified covered institutions released in May 2016 by a number of federal agencies, including the Federal Reserve Board, FDIC and SEC. The proposed revised rules would establish general qualitative requirements applicable to all covered institutions, including the Company and the Bank, that have at least $1 billion in total assets, which would include (1) prohibiting incentive arrangements that encourage

inappropriate risks by providing excessive compensation; (2) prohibiting incentive arrangements that encourage inappropriate risks that could lead to a material financial loss; (3) establishing requirements for performance measures to appropriately balance risk and reward; (4) requiring Board of Director oversight of incentive arrangements; and (5) mandating appropriate record-keeping. Under the proposed rule, larger financial institutions with total consolidated assets of at least $50 billion would also be subject to additional requirements.

The Federal Reserve Board and FDIC review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as the Company, that are not “large, complex banking organizations.” These reviews are tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of this supervisory initiative will be included in reports of examination. Deficiencies will be incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

In October 2022, the SEC adopted a final rule directing national securities exchanges and associations, including the NYSE, to implement listing standards that require listed companies to adopt policies mandating the recovery or “clawback” of excess incentive-based compensation earned by a current or former executive officer during the three fiscal years preceding the date the listed company is required to prepare an accounting restatement, including to correct an error that would result in a material misstatement if the error were corrected in the current period or left uncorrected in the current period. The NYSE’s listing standards pursuant to the SEC’s rule became effective on October 2, 2023. The Company adopted a compensation recovery policy pursuant to the NYSE listing standards on November 13, 2023. The Policy is included as Exhibit 97.1 to this Form 10-K.

Cybersecurity. In February 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. These SEC guidelines, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations. In addition, in March 2022, the SEC proposed rules that would require disclosure of material cybersecurity incidents as well as cybersecurity risk management, strategy and governance.

The federal banking regulators regularly issue new guidance and standards, and update existing guidance and standards, regarding cybersecurity intended to enhance cyber risk management among financial institutions. Financial institutions are expected to comply with such guidance and standards and to accordingly develop appropriate security controls and risk management processes. If the Company fails to observe such regulatory guidance or standards, the Company could be subject to various regulatory sanctions, including financial penalties.

In November 2021, the federal banking agencies adopted a final rule that requires banking organizations to notify their primary banking regulator within 36 hours of determining that a “computer-security incident” has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, the banking organization’s ability to carry out banking operations or deliver banking products and services to a material portion of its customer base, its businesses and operations that would result in material loss, or its operations that would impact the stability of the United States. In 2023, the SEC issued a final rule that requires disclosure of material cybersecurity incidents, as well as cybersecurity risk management, strategy, and governance. Under this rule, banking organizations that are SEC registrants must generally disclose information about a material cybersecurity incident within four business days of determining it is material, with periodic updates as to the status of the incident in subsequent filings as necessary.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs, and many states, including Texas, have also recently implemented or modified their data breach notification, information security and data privacy requirements. The Company expects this trend of state-level activity in those areas to continue and are continually monitoring developments in the states in which its customers are located.

Risks and exposures related to cybersecurity attacks, including litigation and enforcement risks, are expected to be elevated for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking and other technology-based products and services by the Company and its customers.

Legislative and Regulatory Initiatives

From time to time, various legislative and regulatory initiatives are introduced in Congress and state legislatures, as well as by regulatory agencies. Such initiatives may include proposals to expand or contract the powers of bank holding companies and depository institutions or proposals to substantially change the financial institution regulatory system. Such legislation could change banking statutes and the operating environment of the Company in substantial and unpredictable ways. If enacted, such legislation

could increase or decrease the cost of doing business, limit or expand permissible activities or affect the competitive balance among banks, savings associations, credit unions, and other financial institutions. The Company cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it, or any implementing regulations, would have on the financial condition or results of operations of the Company. A change in statutes, regulations or regulatory policies applicable to the Company or the Bank could have a material effect on the Company’s business, financial condition and results of operations.

Effect on Economic Environment

The policies of regulatory authorities, including the monetary policy of the Federal Reserve Board, have a significant effect on the operating results of bank holding companies and their subsidiaries. Among the means available to the Federal Reserve Board to affect the money supply are open market operations in U.S. government securities, changes in the discount rate on member bank borrowings and changes in reserve requirements against member bank deposits. These means are used in varying combinations to influence overall growth and distribution of bank loans, investments and deposits; and their use may affect interest rates charged on loans or paid for deposits.

Federal Reserve Board monetary policies have materially affected the operating results of commercial banks in the past and are expected to continue to do so in the future. The nature of future monetary policies and the effect of such policies on the business and earnings of the Company and its subsidiaries cannot be predicted.

ITEM 1A. RISK FACTORS

An investment in the Company’s common stock involves risks. The following is a description of the material risks and uncertainties that the Company believes affect its business and an investment in the common stock. Additional risks and uncertainties that the Company is unaware of, or that it currently deems immaterial, also may become important factors that affect the Company and its business. If any of the risks described in this Annual Report on Form 10-K were to occur, the Company’s financial condition, results of operations and cash flows could be materially and adversely affected. If this were to happen, the value of the common stock could decline significantly and all or part of an investment could be lost.

Risks Associated with the Company’s Business

Interest Rate Risks

The Company’s business is subject to interest rate risk, and fluctuations in interest rates may adversely affect its financial condition and results of operations.

The majority of the Company’s assets are monetary in nature, and, as a result, the Company is subject to significant risk from changes in interest rates. Changes in interest rates can impact the Company’s net interest income as well as the valuation of its assets and liabilities. The Company’s earnings are significantly dependent on its net interest income. Net interest income is the difference between the interest income earned on loans, investments and other interest-earning assets and the interest expense paid on deposits, borrowings and other interest-bearing liabilities.

Interest rates are highly sensitive to many factors that are beyond the Company’s control, including general economic conditions, inflationary trends, changes in government spending and debt issuances and policies of various governmental and regulatory agencies and, in particular, the Federal Open Market Committee. Changes in monetary policy, including changes in interest rates, could influence the interest the Company receives on loans and securities and the amount of interest it pays on deposits and borrowings, and could also affect (1) the Company’s ability to originate loans, such as decreased demand due to higher interest rates, and obtain deposits, (2) the fair value of the Company’s financial assets and liabilities and (3) the average duration of the Company’s mortgage-backed securities portfolio. Beginning early in 2022, in response to growing signs of inflation, the Federal Reserve Board increased interest rates rapidly. Further, the Federal Reserve Board announced an intention to take further actions to mitigate inflationary pressures. Rapid changes in interest rates may make it difficult for the Company to balance its loan and deposit portfolios. If the interest rates paid on deposits and other borrowings increase at a faster rate than the interest rates received on loans and other investments, the Company’s net interest income, and therefore earnings, could be adversely affected. Earnings also could be adversely affected if the interest rates received on loans and other investments decrease more quickly than the interest rates paid on deposits and other borrowings. Decreasing interest rates reduces the Company’s yield on its variable rate loans and on its new loans, which reduces its net interest income. In addition, lower interest rates may reduce the Company’s realized yields on investment securities which would reduce its net interest income and cause downward pressure on net interest margin in future periods. Further, the Company’s assets and liabilities may react differently to changes in overall market rates or conditions because there may be mismatches between the repricing or maturity characteristics of the assets and liabilities. Any substantial, unexpected, prolonged change in market interest rates could have a material adverse effect on the Company’s business, financial condition and results of operations.

Although the Federal Reserve Board increased the target federal funds rate in 2023 to combat inflationary trends, the Federal Reserve Board held the federal funds rate steady in December 2023 for the third consecutive time and indicated that the rate is likely to be decreased in 2024 and beyond. The Company is unable to predict changes in interest rates, which are affected by factors beyond its control, including inflation, deflation, recession, unemployment, money supply, and other changes in financial markets.

Credit and Lending Risks

The Company’s business depends on its ability to successfully manage credit risk.

The Company’s business depends on its ability to successfully measure and manage credit risk. As a lender, the Company is exposed to the risk that the principal of, or interest on, a loan will not be repaid timely or at all or that the value of any collateral supporting a loan will be insufficient to cover the Company’s outstanding exposure. In addition, the Company is exposed to risks with respect to the period of time over which the loan may be repaid, risks relating to proper loan underwriting, risks resulting from changes in economic and industry conditions, and risks inherent in dealing with individual loans and borrowers. The creditworthiness of a borrower is affected by many factors including local market conditions and general economic conditions. If the overall economic climate in the United States, generally, or the Company’s market areas, specifically, experiences material disruption, the Company’s borrowers may experience difficulties in repaying their loans, the collateral the Company holds may decrease in value or become illiquid, and the level of nonperforming loans, charge-offs and delinquencies could rise and require significant additional provisions for credit losses. Additional factors related to the credit quality of commercial loans include the quality of the management of the business and the borrower's ability to properly evaluate changes in the supply and demand characteristics affecting their market for products and services, to evaluate regulatory changes affecting their products and services, such as climate change regulation, and to effectively respond to those changes. Additional factors related to the credit quality of commercial real estate loans include tenant vacancy rates and the quality of management of the property.

In addition, financial markets and global supply chains may be adversely affected by the current or anticipated impact of military conflict, including conflicts in Ukraine and the Middle East, terrorism or other geopolitical events. Current economic conditions are significantly affected by elevated levels of inflation and rising interest rates throughout 2022 and 2023. Continuing inflationary pressures in 2024 could lead to increased costs to the Company’s customers, making it more difficult for them to repay their loans or other obligations, which would increase the Company’s credit risk. Sustained higher interest rates by the Federal Reserve Board may be needed to address persistent inflationary price pressures, which could push down asset prices and weaken economic activity. Meanwhile, economic and inflationary pressure on consumers and uncertainty regarding the prospects for economic improvement could alter consumer and business spending, borrowing and savings habits. A deterioration in economic conditions in the United States and the Company’s markets could result in an increase in loan delinquencies and nonperforming assets, decreases in loan collateral values and a decrease in demand for its products and services, all of which, in turn, would adversely affect its business, financial condition and results of operations. Furthermore, evolving responses from federal and state governments and other regulators, and the Company’s customers or vendors, to new challenges such as climate change have impacted and could continue to impact the economic and political conditions under which the Company operates, which could have a material adverse effect on the Company’s business, financial condition and results of operations.

The Company’s risk management practices, such as monitoring the concentration of the Company’s loans within specific industries and the Company’s credit approval, review and administrative practices, may not adequately reduce credit risk, and the Company’s credit administration personnel, policies and procedures may not adequately adapt to changes in economic or any other conditions affecting customers and the quality of the loan portfolio. Many of the Company’s loans are made to businesses that are less able to withstand competitive, economic and financial pressures than larger borrowers. Consequently, the Company may have significant exposure if any of these borrowers becomes unable to pay their loan obligations as a result of economic or market conditions, or personal circumstances, such as divorce or death. A failure to effectively measure and limit the credit risk associated with the Company’s loan portfolio may result in loan defaults, foreclosures and additional charge-offs, and may require the Company to significantly increase its allowance for credit losses, each of which could adversely affect the Company’s net income. As a result, the Company’s inability to successfully manage credit risk could have a material adverse effect on the Company’s business, financial condition and results of operations.

The Company’s allowance for credit losses may not be sufficient to cover actual credit losses, which could adversely affect its earnings.

As a lender, the Company is exposed to the risk that its loan customers may not repay their loans according to the terms of these loans and the collateral securing the payment of these loans may be insufficient to fully compensate the Company for the outstanding balance of the loan plus the costs to dispose of the collateral. The Company maintains an allowance for credit losses in an attempt to cover estimated losses inherent in its loan portfolio. Additional credit losses could occur in the future and may occur at a rate greater than the Company has experienced to date. The determination of the appropriate level of the allowance inherently involves a high

degree of subjectivity and requires the Company to make significant estimates of current credit risks, future trends and general economic conditions, including inflation and recession, all of which may undergo material changes. If the Company’s assumptions prove to be incorrect or if it experiences significant credit losses in future periods, its current allowance may not be sufficient to cover actual credit losses and adjustments may be necessary to allow for different economic conditions or adverse developments in its loan portfolio. A material addition to the allowance could cause net income, and possibly capital, to decrease.

In addition, federal and state regulators periodically review the Company’s allowance for credit losses and may require the Company to increase its provision for credit losses or recognize further charge-offs, based on judgments different than those of the Company’s management. An increase in the Company’s allowance for credit losses or charge-offs as required by these regulatory agencies could have a material adverse effect on the Company’s operating results and financial condition.

The Company’s profitability depends significantly on local economic conditions.

The Company’s success depends primarily on the general economic conditions of the primary markets in Texas and Oklahoma in which it operates and where its loans are concentrated. The local economic conditions in Texas and Oklahoma have a significant impact on the Company’s commercial, real estate and construction, land development and other land loans; the ability of its borrowers to repay their loans; and the value of the collateral securing these loans. Accordingly, if the population or income growth in the Company’s market areas is slower than projected, income levels, deposits and housing starts could be adversely affected and could result in a reduction of the Company’s expansion, growth and profitability. In addition, due to the large number of oil and gas companies in the Company’s market areas, the volatility in oil prices may negatively impact economic conditions in these areas. If the Company’s market areas experience a downturn or a recession for a prolonged period of time, the Company could experience significant increases in nonperforming loans, which could lead to operating losses, impaired liquidity and eroding capital. A significant decline in general economic conditions, caused by inflation, an increase or decline in commodity prices, recession, weather extremes, acts of terrorism, outbreaks of hostilities or other international or domestic calamities, unemployment or other factors could impact these local economic conditions and could negatively affect the Company’s financial condition, results of operations and cash flows.

The Company’s dependence on loans secured by real estate subjects it to risks relating to fluctuations in the real estate market that could adversely affect its financial condition, results of operations and cash flows.

Approximately 82.6% of the Company’s total loans as of December 31, 2023 consisted of loans included in the real estate loan portfolio, with 29.6% in commercial real estate (including farmland and multifamily residential), 38.5% in residential real estate (including home equity) and 14.5% in construction, land development and other land loans. The real estate collateral in each case provides an alternate source of repayment in the event of default by the borrower and may deteriorate in value during the time the credit is extended. The market value for real estate can fluctuate significantly over a relatively short period as a result of conditions in the Company’s primary market areas, due to economic downturns, changes in the economic health of industries heavily concentrated in a particular market area, or changes in market interest rates. A weakening of the real estate market in the Company’s primary market areas could have an adverse effect on the demand for new loans, the ability of borrowers to repay outstanding loans, the value of real estate and other collateral securing the loans and the value of real estate owned by the Company. If real estate values decline, it is also more likely that the Company would be required to increase its allowance for credit losses, which could adversely affect its financial condition, results of operations and cash flows.

The Company’s commercial real estate and commercial loans expose it to increased credit risks, and these risks will increase if the Company succeeds in increasing these types of loans.

The Company has emphasized both new and existing loan products, focusing on managing its commercial real estate (including farmland and multifamily residential) and commercial loan portfolios, and intends to continue to increase its lending activities and acquire loans in possible future acquisitions. As a result, commercial real estate and commercial loans as a proportion of its portfolio could increase. As of December 31, 2023, commercial real estate (including farmland and multifamily residential) and commercial loans totaled $8.57 billion. In general, commercial real estate loans and commercial loans pose greater credit risks than do owner-occupied residential real estate loans. These types of loans are also typically larger than residential real estate loans. Accordingly, the deterioration of one or several of these loans could cause a significant increase in nonperforming loans, which could result in a loss of earnings from these loans and an increase in the provision for credit losses and net charge-offs.

The Company makes both secured and some unsecured commercial loans. Unsecured loans generally involve a higher degree of risk of loss than do secured loans because, without collateral, repayment is wholly dependent upon the success of the borrowers’ businesses. Secured commercial loans are generally collateralized by accounts receivable, inventory, equipment or other assets owned by the borrower and include a personal guaranty of the business owner. Compared to real estate, that type of collateral is more difficult to monitor, its value is harder to ascertain, it may depreciate more rapidly and it may not be as readily saleable if repossessed. Further, commercial loans generally will be serviced primarily from the operation of the business, which may not be successful, while

commercial real estate loans generally will be serviced from income on the properties securing the loans. As the Company’s various commercial loan portfolios increase, the corresponding risks and potential for losses from these loans will also increase.

The Company may be adversely affected by weaknesses in the commercial real estate market.

As of December 31, 2023, commercial real estate loans (including multifamily residential and excluding farmland) comprised approximately 26.8% of the Company’s loan portfolio. Commercial real estate loans generally involve a greater degree of credit risk than residential real estate loans because they typically have larger balances and are more affected by adverse conditions in the economy. Because payments on loans secured by commercial real estate often depend upon the successful operation and management of the properties and the businesses which operate from within them, repayment of such loans may be affected by factors outside the borrower’s control, such as adverse conditions in the real estate market or the economy or changes in government regulations. Commercial real estate markets have been impacted by the economic disruptions caused by the COVID-19 pandemic. The COVID-19 pandemic has also been a catalyst for the evolution of various remote work options that could have an adverse effect on the long-term performance of some types of office properties within the Company’s commercial real estate portfolio. A failure by the Company to have adequate risk management policies, procedures and controls could adversely affect the Company’s ability to increase this portfolio going forward and could result in an increased rate of delinquencies in, and increased losses from, this portfolio, which, accordingly, could have a material adverse effect on the Company’s business, financial condition and results of operations.

The Company’s Warehouse Purchase Program balances can fluctuate widely.

Because Warehouse Purchase Program balances are contingent upon residential mortgage lending activity, changes in the residential real estate market nationwide can lead to wide fluctuations of balances in this product, materially impacting both interest and non-interest income. Additionally, Warehouse Purchase Program period-end balances are generally higher than the average balance during the period due to increased mortgage activity that occurs at the end of a month, which can significantly impact the Company’s reported capital ratios.

The Company’s loan portfolio, and specifically its energy lending portfolio, could be adversely affected by declines in the prices of oil and natural gas, as well as other factors.

As of December 31, 2023, the Company had $368.3 million (net of discount and excluding PPP loans totaling $2.6 million) in funded commitments outstanding to oil and gas production and service companies and $471.7 million in unfunded commitments, for a total of $840.0 million (net of discount and excluding PPP loans totaling $2.6 million). The funded commitments to oil and gas production and service companies are reported as commercial and industrial loans and represented 1.7% of total loans, excluding Warehouse Purchase Program loans. As a result, the factors that impact the energy sector may have an effect on the Company. Companies with exposure to the energy sector, whether directly or indirectly, are subject to volatile fluctuations in price and supply of oil and gas. Many factors affect the supply of and demand for crude oil and natural gas and, therefore, influence prices of these commodities, including:

Further, the economy in Texas as a whole could be negatively impacted if there are a high number of jobs lost related to a decline in oil production in the state, or if the impact of lower oil prices negatively affects other industries. A decline in the Texas economy related to oil production decline could impact the Company’s loan portfolios outside of the energy portfolio, if borrowers experience unemployment or loss of income and are unable to make payments on their loans.

The Company is subject to losses due to fraudulent and negligent acts.

Financial institutions are inherently exposed to fraud risk. Fraudulent activity can take many forms and has escalated as more tools for accessing financial services emerge, such as real-time payments. Fraud schemes are broad and continuously evolving. A fraud can be perpetrated by a customer of the Company, an employee, a vendor, or members of the general public. The Company is subject to fraud risk in connection with the origination of loans, ACH transactions, wire transactions, digital payments, ATM transactions, checking and other transactions. Although the Company seeks to mitigate fraud risk and losses through continued investment in systems, resources, and controls, the Company’s efforts may not be effective in detecting fraud and the Company could experience fraud losses or incur costs or other damage related to such fraud, at levels that adversely affect its financial results or reputation.

The Company is subject to losses resulting from fraudulent and negligent acts on the part of loan applicants, correspondents or other third parties.

The Company relies heavily upon information supplied by third parties, including the information contained in credit applications, property appraisals, title information, equipment pricing and valuation and employment and income documentation, in deciding which loans the Company will originate, as well as the terms of those loans. If any of the information upon which the Company relies is misrepresented, either fraudulently or inadvertently, and the misrepresentation is not detected prior to asset funding, the value of the asset may be significantly lower than expected, or the Company may fund a loan that it would not have funded or on terms it would not have extended. Whether a misrepresentation is made by the applicant or another third party, the Company generally bears the risk of loss associated with the misrepresentation. A loan subject to a material misrepresentation is typically unsellable or subject to repurchase if it is sold prior to detection of the misrepresentation. The sources of the misrepresentations are often difficult to locate, and it is often difficult to recover any of the monetary losses the Company may suffer. The Company believes it has underwriting and operational controls in place to prevent or detect such fraud, but these controls may not be effective in detecting fraud and the Company could experience fraud losses or incur costs or other damage related to such fraud, at levels that adversely affect financial results or reputation. The Company’s lending customers may also experience fraud in their businesses which could adversely affect their ability to repay their loans or make use of services. The Company’s and its customers’ exposure to fraud may increase the Company’s financial risk and reputation risk as it may result in unexpected loan losses that exceed those that have been provided for in the allowance for credit losses. Some level of fraud loss is unavoidable, and the risk of loss cannot be eliminated.

The Company’s financial conditions and results of operations may be adversely affected by changes in accounting policies, standards and interpretations.

The Financial Accounting Standards Board (“FASB”) and other bodies that establish accounting standards periodically change the financial accounting and reporting standards governing the preparation of the Company’s financial statements. Additionally, those bodies that establish and interpret the accounting standards (such as the FASB, SEC and banking regulators) may change prior interpretations or positions on how these standards should be applied. Changes resulting from these new standards may result in

materially different financial results and may require that the Company changes how it processes, analyzes and reports financial information and that it changes financial reporting controls.

The preparation of consolidated financial statements in conformity with GAAP, including the accounting rules and regulations of the SEC and the FASB, requires management to make significant estimates and assumptions that impact the Company’s financial statements by affecting the value of its assets or liabilities and results of operations. Some of the Company’s accounting policies are critical because they require management to make difficult, subjective and complex judgments about matters that are inherently uncertain and because materially different amounts may be reported if different estimates or assumptions are used. If such estimates or assumptions underlying its financial statements are incorrect, the Company’s financial condition and results of operations could be adversely affected.

The Company is subject to environmental liability risk associated with lending activities.

A significant portion of the Company’s loan portfolio is secured by real property. During the ordinary course of business, the Company may foreclose on and take title to properties securing certain loans, and there is a risk that hazardous or toxic substances could be found on these properties. If hazardous or toxic substances are found, the Company may be liable for remediation costs, as well as for personal injury and property damage. Environmental laws may require the Company to incur substantial expenses and may materially reduce the affected property’s value or limit the Company’s ability to use or sell the affected property. In addition, future laws or more stringent interpretations or enforcement policies with respect to existing laws may increase the Company’s exposure to environmental liability. Although the Company has policies and procedures to perform an environmental review before initiating any foreclosure action on real property, these reviews may not be sufficient to detect all potential environmental hazards. The remediation costs and any other financial liabilities associated with an environmental hazard could have a material adverse effect on the Company’s financial condition and results of operations.

Liquidity Risks

Liquidity risk could impair the Company’s ability to fund operations and jeopardize its financial condition.

Liquidity is essential to the Company’s business, and it monitors and manages its liquidity daily. An inability to raise funds through deposits, borrowings, the sale of loans and other sources could have a substantial negative effect on the Company’s liquidity. The Company’s access to funding sources in amounts adequate to finance its activities or on terms which are acceptable to it could be impaired by factors that affect the Company specifically or the financial services industry or economy in general. Factors that could detrimentally impact the Company’s access to liquidity sources include a decrease in the level of its business activity as a result of a downturn in the markets in which its loans are concentrated or adverse regulatory action against it. The Company’s ability to borrow could also be impaired by factors that are not specific to it, such as a disruption in the financial markets or negative views and expectations about the prospects for the financial services industry in light of the turmoil faced by banking organizations in 2023 and the continued deterioration in credit markets.

The Company relies on customer deposits as a significant source of funding, and its deposits may decrease in the future.

The Company relies on customer deposits as a significant source of funding. Competition among U.S. banks for customer deposits is intense, may increase the cost of deposits or prevent new deposits, and may otherwise negatively affect the Company’s ability to grow its deposit base. The Company’s deposit accounts may decrease in the future, and any such decrease could have an adverse impact on the Company’s sources of funding, which impact could be material. Any changes the Company makes to the rates offered on its deposit products to remain competitive with other financial institutions may adversely affect its profitability and liquidity. The demand for the deposit products the Company offers may also decline due to a variety of factors such as demographic patterns, changes in customer preferences, changes in interest rates, payment of interest on demand deposits by other financial institutions, reductions in consumers’ disposable income, regulatory actions that decrease customer access to particular products or the availability of competing products, including from new financial technology competitors or competitors that provide customers with alternate investment options.

Recent negative developments affecting the banking industry, and resulting media coverage, have eroded customer confidence in the banking system.

The high-profile closures of various banks in 2023, and concerns about similar future events, have generated significant market volatility among publicly traded bank holding companies and, in particular, regional banks like the Company. These market developments have negatively impacted customer confidence in the safety and soundness of regional banks. As a result, customers may choose to maintain deposits with larger financial institutions or invest in higher yielding short-term fixed income securities, all of which could materially adversely impact the Company’s liquidity, loan funding capacity, net interest margin, capital and results of operations. While the Department of the Treasury, the Federal Reserve Board, and the FDIC took action to ensure that depositors of

these failed banks had access to their deposits, including uninsured deposit accounts, such actions may not be successful in restoring customer confidence in regional banks and the banking system more broadly.

The Company may need to raise additional capital in the future and such capital may not be available when needed on acceptable terms or at all.

The Company may need to raise additional capital in the future to provide it with sufficient capital resources and liquidity to meet regulatory capital requirements or its commitments and business needs. In addition, the Company may elect to raise additional capital to support its business or to finance acquisitions, if any. If needed, the Company’s ability to raise additional capital will depend on many things, including conditions in the capital markets at that time, which are outside its control, and its financial performance.

Such capital may not be available to the Company on acceptable terms or at all. Any occurrence that may limit the Company’s access to the capital markets, such as a decline in the confidence of investors, depositors of the Bank or counterparties participating in the capital markets, may adversely affect the Company’s capital costs and its ability to raise capital and, in turn, its liquidity. Moreover, if the Company needs to raise capital in the future, it may have to do so when many other financial institutions are also seeking to raise capital and would have to compete with those institutions for investors. An inability to raise additional capital on acceptable terms when needed could have a material adverse effect on the Company’s business, financial condition and results of operations.

The fair value of the Company’s investment securities can fluctuate due to factors outside of its control.

Factors beyond the Company’s control can significantly influence the fair value of securities in its investment portfolio and can cause potential adverse changes to the fair value of these securities. These factors include, but are not limited to, rating agency actions in respect of the securities, defaults by the issuer or with respect to the underlying securities, and changes in market interest rates and continued instability in the capital markets. Any of these factors, among others, could cause an increase in the amount of the allowance for credit losses as it pertains to available for sale or held-to-maturity debt securities, which could have an adverse effect on the Company’s business, results of operations, financial condition and future prospects. The process for determining if a security has a credit loss often requires complex, subjective judgments about whether there has been a significant deterioration in the financial condition of the issuer, whether management has the intent or ability to hold a security for a period of time sufficient to allow for any anticipated recovery in fair value, the future financial performance and liquidity of the issuer and any collateral underlying the security, and other relevant factors.

Strategic Risks

If the Company is not able to continue its historical levels of growth, it may not be able to maintain its historical earnings trends.

To achieve its past levels of growth, the Company has focused on both internal growth and acquisitions. The Company may not be able to sustain its historical rate of growth or may not be able to grow at all in the future. More specifically, the Company may not be able to obtain the financing necessary to fund additional growth and may not be able to find suitable acquisition candidates. Various factors, such as economic conditions, competition and heightened regulatory scrutiny, may impede or prohibit the opening of new banking centers and the completion of acquisitions. Further, the Company may be unable to attract and retain experienced bankers, which could adversely affect its internal growth. If the Company is not able to continue its historical levels of growth, it may not be able to maintain its historical earnings trends.

If the Company is unable to manage its growth effectively, its operations and profitability could be negatively affected.

The Company faces a variety of risks and difficulties pursuing its growth strategy, including:

In addition, in order to manage its growth and maintain adequate information and reporting systems within its organization, the Company must identify, hire and retain additional qualified associates, particularly in the accounting and operational areas of its business.

If the Company does not manage its growth effectively, its business, financial condition, results of operations and future prospects could be negatively affected, and the Company may not be able to continue to implement its business strategy and successfully conduct its operations.

If the Company is unable to identify and acquire other financial institutions and successfully integrate its acquired businesses, its business and earnings may be negatively affected.

The market for acquisitions remains highly competitive, and the Company may be unable to find acquisition candidates in the future that fit its acquisition and growth strategy. To the extent that the Company is unable to find suitable acquisition candidates, an important component of its growth strategy may be lost. Additionally, the market for bank acquisitions was significantly and adversely impacted in 2023, and remains impacted, by a number of factors, including:

To the extent these factors, or other factors outside of the Company’s control, persist or arise, the Company’s ability to pursue and consummate acquisitions may be adversely impacted.

Acquisitions of financial institutions, such as the recent acquisition of First Bancshares and the pending acquisition of Lone Star, involve operational risks and uncertainties. Acquired companies may have unforeseen liabilities, exposure to asset quality problems, key employee and customer retention problems and other problems that could negatively affect the Company’s organization. The Company may not be able to complete future acquisitions; and, if completed, the Company may not be able to successfully integrate the operations, management, products and services of the entities that it acquires and eliminate redundancies. The integration process could result in the loss of key employees or disruption of the combined entity’s ongoing business or inconsistencies in standards, controls, procedures and policies that adversely affect the Company’s ability to maintain relationships with customers and employees or achieve the anticipated benefits of the transaction. The integration process may also require significant time and attention from the Company’s management that they would otherwise direct at servicing existing business and developing new business. The Company’s inability to find suitable acquisition candidates or failure to successfully integrate the entities it acquires into its existing operations may increase its operating costs significantly and adversely affect its business and earnings. Acquisitions may also result in potential dilution to existing shareholders of the Company’s earnings per share if the Company issues common stock in connection with an acquisition.

Regulatory approvals for acquisitions may be delayed, impeded, or prohibited.

Acquisitions by financial institutions are subject to approval by a variety of federal and state regulatory agencies. If the Company fails to receive the appropriate regulatory approvals, it will not be able to consummate an acquisition that it believes is in the Company’s best interests. Among other things, the Company’s regulators consider its capital, liquidity, profitability, regulatory compliance, including with respect to anti-money laundering obligations, consumer protection laws and CRA obligations and levels of goodwill and intangibles when considering acquisition and expansion proposals. The process for obtaining these required regulatory approvals has become substantially more difficult in recent years and may become even more challenging following the review of the merger application process by the federal banking agencies and potentially the CFPB and the review of the competitive effects process by the Department of Justice. Regulatory approvals have been and could continue to be delayed, impeded, restrictively conditioned or denied due to existing or new regulatory issues the Company has, or may have, with regulatory agencies, including, without limitation, issues related to Bank Secrecy Act compliance, Community Reinvestment Act issues, fair lending laws, fair housing laws, consumer protection laws, unfair, deceptive, or abusive acts or practices regulations and other similar laws and regulations. The Company may fail to pursue, evaluate or complete strategic and competitively significant acquisition opportunities as a result of its inability, or perceived or anticipated inability, to obtain regulatory approvals in a timely manner, under reasonable conditions or at all. Difficulties associated with potential acquisitions that may result from these factors could have a material adverse effect on the Company’s business, financial condition and results of operations.

If the goodwill that the Company recorded in connection with a business acquisition becomes impaired, it could require charges to earnings.

Goodwill represents the amount by which the acquisition cost exceeds the fair value of net assets the Company acquired in the purchase of another financial institution. The Company reviews goodwill for impairment at least annually, or more frequently if events or changes in circumstances indicate the carrying value of the asset might be impaired.

The Company determines impairment by comparing the implied fair value of the reporting unit goodwill with the carrying amount of that goodwill. If the carrying amount of the reporting unit goodwill exceeds the implied fair value of that goodwill, an impairment loss is recognized in an amount equal to that excess. Any such adjustments are reflected in the Company’s results of operations in the periods in which they become known. At December 31, 2023, the Company’s goodwill totaled $3.40 billion. Although the Company has not recorded any such impairment charges since it initially recorded the goodwill, the Company’s future evaluations of goodwill could result in findings of impairment and related write-downs, which may have a material adverse effect on its financial condition and results of operations.

Operational Risks

The Company’s accounting estimates and risk management processes rely on analytical and forecasting models and tools that may prove to be inaccurate.

The processes the Company uses to estimate its expected credit losses and to measure the fair value of financial instruments, as well as the processes used to estimate the effects of changing interest rates and other market measures on the Company’s financial condition and results of operations, depend upon the use of analytical and forecasting models and tools. These models and tools reflect assumptions that may not be accurate, particularly in times of market stress or other unforeseen circumstances. Even if these assumptions are accurate, the models and tools may prove to be inadequate or inaccurate because of other flaws in their design or their implementation. Any such failure in the Company’s analytical or forecasting models and tools could have a material adverse effect on the Company’s business, financial condition and results of operations.

An interruption in or breach in security of the Company’s information systems may result in a loss of customer business and have an adverse effect on the Company’s results of operations, financial condition and cash flows.

The Company relies heavily on communications and information systems to conduct its business and store sensitive data. Any failure, interruption or breach in security of these systems, whether caused by physical damage, hackers, viruses or other malware, could jeopardize the security of information stored in and transmitted through the Company’s computer systems and network infrastructure as well as result in failures or disruptions in the Company’s customer relationship management, general ledger, deposits, servicing or loan origination systems. The amount of specific “cyber” insurance coverage that the Company maintains and expects would apply in the event of various breach scenarios may not be adequate in any particular case. In addition, cyber threat scenarios are inherently difficult to predict and can take many forms, some of which may not be covered under the Company’s cyber insurance coverage. Security measures that the Company, with the help of third-party service providers, has implemented or intends to continue to implement to prevent damage from cyberattacks may not entirely mitigate these risks. In addition, increases in cyber threats and the sophistication of bad actors, advances in computer capabilities, new discoveries in the field of cryptography or other developments could result in a compromise or breach of the algorithms the Company and its third-party service providers use to protect client transaction data. The Company’s efforts to maintain the security and integrity of its information systems and its measures to manage the risks of a security breach or disruption may not be effective, and attempted security breaches or disruptions could be successful or damaging. Breaches also may occur as a result of remote working arrangements. The occurrence of any such failures, interruptions or security breaches could result in significant disruptions to the Company’s operations and could damage the Company’s reputation, result in a loss of customer business, subject the Company to additional regulatory scrutiny or expose the Company to civil litigation and possible financial liability, any of which could have a material adverse effect on the Company’s results of operations, financial condition and cash flows.

Breaches of the Company’s or vendors’ systems, thefts of data and other breaches and criminal activity may result in significant costs to respond or remediate losses, damage to the Company’s customer relationships, regulatory scrutiny and enforcement and loss of future business opportunities due to reputational damage. Even the most well-protected information, networks, systems and facilities remain potentially vulnerable because attempted security breaches, particularly cyber-attacks and intrusions, or disruptions will occur in the future, and because the techniques used in such attempts are rapidly and constantly evolving and generally are not recognized until launched against a target, in some cases are designed not to be detected and, in fact, may not be detected for a period of time or at all. Accordingly, the Company may be unable to anticipate or be prepared for these techniques or to implement adequate security barriers or other preventative measures, and thus it is not possible for the Company to entirely mitigate this risk. Data privacy laws also continue to evolve, with states increasingly proposing or enacting legislation that relates to data privacy and data protection.

The Company may be required to incur additional expense to comply with these evolving regulations and could face penalties for violating any of these regulations.

The Company is subject to certain risks in connection with its use of technology.

The financial services industry is undergoing rapid technological changes with frequent introductions of new technology-driven products and services. The Company’s future success depends in part upon its ability to address the needs of its customers by using technology to provide products and services that will satisfy customer demands for convenience as well as create additional efficiencies in its operations. Many of the Company’s competitors have substantially greater resources to invest in technological improvements. The Company may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to its customers, which may negatively affect the Company’s results of operations, financial condition and cash flows. The Company also may not succeed in anticipating its future technology needs, the technology demands of its customers, or the competitive landscape for technology. Further, as technology advances, the ability to initiate transactions and access data has become more widely distributed among mobile devices, personal computers, automated teller machines, remote deposit capture sites and similar access points. These technological advances increase cybersecurity risk. The Company’s programs that are intended to prevent or limit the effects of cybersecurity risk may not be sufficient to eliminate all unauthorized transactions or unauthorized access to customer information. The financial, reputational and regulatory impact of unauthorized transactions or unauthorized access to customer information could be significant.

The Company’s operations rely on external vendors, which may fail to provide adequate services.

The Company relies on certain external vendors to provide products and services necessary to maintain its day-to-day operations. These third parties provide key components of the Company’s business operations such as data processing, recording and monitoring transactions, online banking interfaces and services, internet connections and network access, but the Company does not control their actions. Any complications caused by these third parties, including those resulting from disruptions in communication services provided by a vendor, failure of a vendor to handle current or higher volumes, cyber-attacks and security breaches at a vendor, failure of a vendor to provide services for any reason or poor performance of services, could adversely affect the Company’s ability to deliver products and services to its customers and otherwise conduct its business. Financial or operational difficulties of a third-party vendor could also hurt the Company’s operations if those difficulties interfere with the vendor’s ability to provide services. Furthermore, the Company’s vendors could also be sources of operational and information security risk, including from breakdowns or failures of their own systems or capacity constraints, and reputational risk. Replacing these third-party vendors could also create significant delay and expense. Problems caused by external vendors could be disruptive to the Company’s operations, which could have a material adverse impact on the Company’s business and, in turn, the Company’s financial condition and results of operations.

The Company’s business may be adversely affected by consolidations of technology vendors.

The Company relies on certain external vendors for core products and services. Consolidations among core vendors may have the effect of decreasing price competition that may lead to higher vendor costs and may also increase systemic risk from vendors that could affect the Company’s operations.

The Company’s business may be adversely affected by security breaches at third parties.

The Company’s customers interact with their own and other third-party systems, which pose operational risks to the Company. The Company may be adversely affected by data breaches at retailers and other third parties who maintain data relating to the Company’s customers that involve the theft of customer data, including the theft of customers’ debit card, credit card, wire transfer and other identifying and/or access information used to make purchases or payments at such retailers and to other third parties. Despite third-party security risks that are beyond the Company’s control, the Company offers its customers protection against fraud and attendant losses for unauthorized use of debit and credit cards in order to stay competitive in the marketplace. Offering such protection to customers exposes the Company to significant expenses and potential losses related to reimbursing the Company’s customers for fraud losses, reissuing the compromised cards and increased monitoring for suspicious activity. If a data breach of considerable magnitude were to occur at one or more retailers, the Company’s business, financial condition and results of operations may be adversely affected.

The Company’s risk management framework may not be effective in identifying, managing or mitigating risks and/or losses to it.

The Company has implemented a risk management framework to identify and manage its risk exposure, which is reviewed and overseen by the Company’s Risk Committee. This framework consists of various processes, systems and strategies, and is designed to manage the types of risk to which the Company is subject, including, among others, credit, market, liquidity, operational, financial, interest rate, legal and regulatory, compliance, strategic, reputation, fiduciary and general economic risks. The Company’s framework also includes financial or other modeling methodologies, which involves management assumptions and judgment. In addition, under this framework, the Company has developed a risk appetite statement to detail its risk tolerance levels at an enterprise-wide level. This

risk management framework may not be effective under all circumstances, and it may not adequately identify, manage or mitigate all or any risk or loss to the Company. If this framework is not effective, the Company may be subject to potentially adverse regulatory consequences and could suffer unexpected losses and its financial condition or results of operations could be materially adversely affected.

The Company is subject to risk arising from the failure or circumvention of internal controls and procedures.

The Company’s internal controls, including fraud detection and controls, disclosure controls and procedures, and corporate governance procedures are based in part on certain assumptions and can provide only reasonable, not absolute, assurances that the objectives of the controls and procedures are met. Any failure or circumvention of controls and procedures; failure to comply with regulations related to controls and procedures; or failure to comply with corporate governance procedures could have a material adverse effect on the Company’s reputation, business, financial condition and results of operations, including subjecting us to litigation, regulatory fines, penalties or other sanctions. Furthermore, notwithstanding the proliferation of technology and technology-based risk and control systems, the Company’s business ultimately relies on people as its greatest resource, and the Company is subject to the risk that they make mistakes or engage in violations of applicable policies, laws, rules or procedures that in the past have not, and in the future may not always be prevented by the Company’s technological processes or by the controls and other procedures intended to prevent and detect such errors or violations. Human errors, malfeasance and other misconduct, even if promptly discovered and remediated, can result in reputational damage or legal risk and have a material adverse effect on the Company’s business, financial condition and results of operations.

Legal, Regulatory and Compliance Risks

The Company operates in a highly regulated environment and, as a result, is subject to extensive regulation and supervision.

The Company and the Bank are subject to extensive federal and state regulation and supervision. Banking regulations are primarily intended to protect depositors’ funds, federal deposit insurance funds and the banking system as a whole, not the Company’s shareholders. These regulations affect the Company’s lending practices, capital structure, investment practices, dividend policy and growth, among other things. Congress and federal regulatory agencies continually review banking laws, regulations and policies for possible changes. Any change in applicable regulations or federal or state legislation could have a substantial impact on the Company, the Bank and their respective operations.

The Dodd-Frank Act, enacted in July 2010, instituted major changes to the banking and financial institutions regulatory regimes in light of the performance of and government intervention in the financial services sector during the several years prior to the implementation of such Act. Additional legislation and regulations or regulatory policies and other changes in interpretation or implementation of statutes, regulations or policies, could significantly affect the Company’s powers, authority and operations, or the powers, authority and operations of the Bank in substantial and unpredictable ways. Further, regulators have significant discretion and power to prevent or remedy unsafe or unsound practices or violations of laws by banks and bank holding companies in the performance of their supervisory and enforcement duties. Government authorities, including the bank regulatory agencies, are pursuing aggressive enforcement actions with respect to compliance and other legal matters involving financial activities, which heightens the risks associated with actual and perceived compliance failures. The exercise of this regulatory discretion and power could have a negative impact on the Company. Further, failure to comply with laws, regulations or policies could result in sanctions by regulatory agencies, civil money penalties and/or reputation damage. In some instances, directives issued to enforce such actions may be confidential and thus, in those instances, the Company would not be permitted to publicly disclose these actions. Any of the foregoing could have a material adverse effect on the Company’s business, financial condition and results of operations.

In addition, the Company expects increased regulatory scrutiny during routine examinations and otherwise, and new regulations adopted in response to recent negative developments in the banking industry, which may increase the Company’s cost of doing business and reduce its profitability. Among other actions, there may be increased attention by both regulators and investors on deposit composition, the amount of uninsured deposits, brokered deposits, unrealized losses in securities portfolios, liquidity, commercial real estate loan composition and concentrations, and capital, as well as the Company’s general oversight and control of such matters. The Company could face increased scrutiny or be viewed as higher risk by regulators or investors, which could have a material adverse effect on the Company’s business, financial condition, and results of operations.

The Company is subject to claims and litigation pertaining to intellectual property.

Banking and other financial services companies, such as the Company, rely on technology companies to provide information technology products and services necessary to support their day-to-day operations. Technology companies frequently enter into litigation based on allegations of patent infringement or other violations of intellectual property rights. In addition, patent holding companies seek to monetize patents they have purchased or otherwise obtained. Competitors of the Company, the Company’s vendors, or other individuals or companies, have from time to time claimed to hold intellectual property sold to the Company by its vendors. Such claims may increase in the future as the financial services sector becomes more reliant on information technology vendors. The plaintiffs in these actions frequently seek injunctions and substantial damages.

Regardless of the scope or validity of such patents or other intellectual property rights, or the merits of any claims by potential or actual litigants, the Company may have to engage in protracted litigation. Such litigation is often expensive, time-consuming, disruptive to the Company’s operations and distracting to management. If the Company were found to have infringed one or more patents or other intellectual property rights, it may be required to pay substantial damages or royalties to a third-party. In certain cases, the Company may consider entering into licensing agreements for disputed intellectual property, although no assurance can be given that such licenses can be obtained on acceptable terms or that litigation will not occur. These licenses may also significantly increase the Company’s operating expenses. If legal matters related to intellectual property claims were resolved against the Company or settled, the Company could be required to make payments in amounts that could have a material adverse effect on its business, financial condition and results of operations.

The Company is subject to claims and litigation pertaining to fiduciary responsibility.

From time to time, customers make claims and take legal action pertaining to the Company’s performance of its fiduciary responsibilities. Whether customer claims and legal action related to the Company’s performance of its fiduciary responsibilities are founded or unfounded, if such claims and legal actions are not resolved in a manner favorable to the Company, they may result in significant financial liability, adversely affect the market perception of the Company and its products and services and/or impact customer demand for those products and services. Any financial liability or reputation damage could have a material adverse effect on the Company’s business, financial condition and results of operations.

Environmental, Social and Governance Risks

Severe weather, natural disasters and other adverse external climate events could significantly impact the Company’s business and customers.

A significant portion of the Company’s business is generated from markets that have been, and may continue to be, damaged by hurricanes, floods, tropical storms, tornadoes and other natural disasters and adverse weather, which may grow more severe and could have a significant impact on the Company’s ability to conduct business. In addition, such events could affect the stability of the Company’s deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue and/or cause the Company to incur additional expenses. Furthermore, the occurrence of any such event in the future could have a material adverse effect on the Company’s business, which, in turn, could have a material adverse effect on the Company’s financial condition and results of operations.

Climate change could have a material negative impact on the Company and its customers

The Company’s business, as well as the operations and activities of its customers, could be negatively impacted by climate change. Climate change presents both immediate and long-term risks to the Company and its customers and these risks are expected to increase over time. These risks include (i) operational risk from the physical effects of climate events on the Company’s facilities and other assets as well as those of customers; (ii) credit risk from borrowers with significant exposure to climate risk; and (iii) reputational risk from stakeholder concerns about the Company’s practices related to climate change, the Company’s carbon footprint and the Company’s business relationships with customers who operate in carbon-intensive industries. The Company’s business, reputation and ability to attract and retain employees may also be harmed if its response to climate change is perceived to be ineffective or insufficient.

Climate change exposes the Company to physical risk as its effects may lead to more frequent and more extreme weather events, such as prolonged droughts or flooding, tornadoes, hurricanes, wildfires and extreme seasonal weather; and longer-term shifts, such as increasing average temperatures, ozone depletion and rising sea levels. Such events and long-term shifts may damage, destroy or otherwise impact the value or productivity of the Company’s properties and other assets; reduce the availability or increase the cost of insurance; and/or disrupt the Company’s operations and other activities through prolonged outages. Such events and long-term shifts may also have a significant impact on the Company’s customers, which could amplify credit risk by diminishing borrowers’ repayment capacity or collateral values, and other businesses counterparties of the Company, which could have a broader impact on the economy, supply chains and distribution networks.

Climate change also exposes the Company to risks associated with the transition to a less carbon-dependent economy. These transition risks may result from changes in policies, laws and regulations, technologies, and/or market preferences to address climate change. Such changes could have a material adverse effect on the Company’s business, results of operations, financial condition and/or reputation, in addition to having a similar impact on the Company’s customers. The Company has customers who operate in carbon-intensive industries, such as the oil and gas industry, that are exposed to risks related to the transition to a less carbon-dependent economy, as well as customers who operate in low-carbon industries that may be subject to risks associated with new technologies.

Increasing scrutiny and evolving expectations from customers, regulators, investors, and other stakeholders with respect to the Company’s environmental, social and governance practices may impose additional costs on the Company or expose it to new or additional risks.

Banking regulators and supervisory authorities, investors and other stakeholders have increasingly viewed financial institutions as important in helping to address the risks related to climate change both directly and with respect to their customers, which may result in financial institutions coming under increased pressure regarding the disclosure and management of their climate risks and related lending and investment activities. Given that climate change could impose systemic risks upon the financial sector, either via disruptions in economic activity resulting from the physical impacts of climate change or changes in policies as the economy transitions to a less carbon-intensive environment, the Company faces regulatory risk of increasing focus on its resilience to climate-related risks, including in the context of stress testing for various climate stress scenarios. Ongoing legislative or regulatory uncertainties and changes regarding climate risk management and practices may result in higher regulatory, compliance, credit and reputational risks and costs.

Risks Associated with the Company’s Common Stock

The Company’s corporate organizational documents and the provisions of Texas law to which it is subject may delay or prevent a change in control of the Company that a shareholder may favor.

The Company’s amended and restated articles of incorporation and amended and restated bylaws contain various provisions which may delay, discourage or prevent an attempted acquisition or change of control of the Company. These provisions include:

The Company’s articles of incorporation provide for noncumulative voting for directors and authorize the Board of Directors to issue shares of its preferred stock without shareholder approval and upon such terms as the Board of Directors may determine. The issuance of the Company’s preferred stock could have the effect of making it more difficult for a third party to acquire, or of discouraging a third party from acquiring, a controlling interest in the Company. In addition, certain provisions of Texas law, including a provision which restricts certain business combinations between a Texas corporation and certain affiliated shareholders, may delay, discourage or prevent an attempted acquisition or change in control of the Company.

There are restrictions on the Company’s ability to pay dividends.

Holders of the Company’s common stock are only entitled to receive such dividends as the Company’s Board of Directors may declare out of funds legally available for such payments. Although the Company has historically declared cash dividends on its common stock, it is not required to do so and there can be no assurance that the Company will pay dividends in the future. Any declaration and payment of dividends on common stock will depend upon the Company’s earnings and financial condition, liquidity and capital requirements, the general economic and regulatory climate, the Company’s ability to service any equity or debt obligations senior to the common stock and other factors deemed relevant by the Board of Directors.

The Company’s principal source of funds to pay dividends on the shares of common stock is cash dividends that the Company receives from the Bank. Various banking laws applicable to the Bank limit the payment of dividends and other distributions by the Bank to the Company, and may therefore limit the Company’s ability to pay dividends on its common stock.

There may be substantial fluctuations in the Company’s stock price.

The trading price for the Company’s common stock may fluctuate significantly in response to a variety of factors outside the Company’s control, including, among other things:

General Risks

Negative publicity could damage the Company’s reputation and business.

Reputation risk, or the risk to earnings and capital from negative public opinion, is inherent in the Company’s business. Negative public opinion could result from the Company’s actual or alleged conduct in any number of activities, including lending practices, corporate governance, regulatory compliance, mergers and acquisitions, and disclosure, sharing or inadequate protection of customer information, and from actions taken by government regulators and community organizations in response to that conduct. Negative public opinion could also result from adverse news or publicity that impairs the reputation of the financial services industry generally. Negative public opinion could adversely affect the Company’s ability to keep and attract customers and expose it to adverse legal and regulatory consequences.

Public companies face increasing public scrutiny related to environmental, social and governance ("ESG") activities. For example, in March 2022, the SEC issued a proposed rule on the enhancement and standardization of climate-related disclosures for investors. The proposed rule would require public issuers, including the Company, to significantly expand the scope of climate-related disclosures in their SEC filings. The SEC has also announced plans to propose rules to require enhanced disclosure regarding human capital management and board diversity for public issuers. The Company risks damage to its brand and reputation if it fails to act responsibly in a number of areas, such as human capital management, support for local communities, corporate governance and transparency and environmental stewardship, or fails to consider ESG factors in its business operations. Additionally, investors and shareholder advocates are placing ever increasing emphasis on how corporations address ESG issues in their business strategy when making investment decisions and when developing their proxy recommendations. The Company may incur meaningful costs with respect to its ESG efforts and if such efforts are negatively perceived, the Company’s reputation and stock price may suffer.

Failure to compete effectively for customers could adversely affect the Company’s growth and profitability, which could have a material adverse effect on the Company’s business, financial condition and results of operations.

The Company faces substantial competition in all areas of its operations from a variety of different competitors, many of which are larger and may have more financial resources. These competitors primarily include national, regional, and community banks within the various markets where the Company operates. The Company also faces competition from many other types of financial institutions, including savings and loans, credit unions, finance companies, brokerage firms, insurance companies, financial technology (fintech) companies and other financial intermediaries. The financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Also, technology and other changes have lowered barriers to entry and made it possible for non-banks to offer products and services functionally equivalent to those provided by banks. In addition, the emergence, adoption and evolution of new technologies that do not require intermediation, including distributed ledgers such as digital assets and blockchain, as well as advances in robotic process automation, could significantly affect the competition for financial services. The process of eliminating banks as intermediaries, known as “disintermediation,” could result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. Further, many of the Company’s competitors have fewer regulatory constraints and may have lower cost structures. Additionally, due to their size, many competitors may be able to achieve economies of scale and, as a result, may offer a broader range of products and services as well as better pricing for those products and services than the Company can. Failure to compete effectively for deposit, loan and other banking customers in the Company’s market areas could adversely affect the Company’s growth and profitability, which, in turn, could have a material adverse effect on the Company’s business, financial condition and results of operations.

The Company may be adversely affected by the soundness of other financial institutions.

Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. The Company has exposure to many different industries and counterparties, and routinely executes transactions with counterparties in the financial services industry, including commercial banks, brokers and dealers, investment banks and other institutional clients. Many of these transactions expose the Company to credit risk in the event of a default by a counterparty or client. In addition, the Company’s credit risk may be exacerbated when the collateral held by the Company cannot be realized upon or is liquidated at prices not sufficient to recover the full amount of the credit or derivative exposure due to the Company. Any such losses could have a material adverse effect on the Company’s financial condition, results of operations and cash flows.

New lines of business or new products and services may subject the Company to additional risks.

From time to time, the Company may implement or acquire new lines of business or offer new products and services within existing lines of business. There are substantial risks and uncertainties associated with these efforts, particularly in instances where the markets are not fully developed. In developing and marketing new lines of business and/or new products and services, the Company may invest significant time and resources. Initial timetables for the introduction and development of new lines of business and/or new products or services may not be achieved and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives and shifting market preferences, may also impact the successful implementation of a new line of business or a new product or service. Furthermore, any new line of business and/or new product or service could have a significant impact on the effectiveness of the Company’s system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or new products or services could have a material adverse effect on the Company’s business, financial condition and results of operations.

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

ITEM 1C. CYBERSECURITY

Risk Management and Strategy

The Company’s risk management program is designed to identify, assess, and mitigate risks across various areas and functions, including financial, operational, technological, regulatory, reputational, and legal. Cybersecurity is a critical component of this program, given the increasing reliance on technology and potential of cyber threats. The Company’s Chief Information Security Officer is primarily responsible for this cybersecurity component and is a key member of the risk management organization, reporting directly to the Chief Risk Officer and as discussed below, periodically to the Strategic Technology Committee of the Bank’s board of directors.

The Company’s objective for managing cybersecurity risk is to avoid or minimize the impacts of external threat events or other efforts to penetrate, disrupt or misuse its systems or information. The structure of the Company’s information security program is designed around the National Institute of Standards and Technology Cybersecurity Framework, regulatory guidance, and other industry standards. In addition, the Company leverages certain industry and government associations, third-party benchmarking, audits, and threat intelligence feeds to facilitate and promote program effectiveness. The Chief Information Security Officer and Chief Information Officer, who reports directly to the Director of Corporate Strategy, along with key members of their teams, regularly collaborate with peer banks and industry groups to discuss cybersecurity trends and issues and identify best practices. The information security program is periodically reviewed by such personnel with the goal of addressing changing threats and conditions.

The Company employs an in-depth, layered, defensive strategy that embraces a “trust by design” philosophy when designing new products, services, and technology. The Company leverages people, processes, and technology as part of its efforts to manage and maintain cybersecurity controls. It also employs a variety of preventative and detective tools designed to monitor, block, and provide alerts regarding suspicious activity, as well as to report on suspected advanced persistent threats. The Company has established processes and systems designed to mitigate cyber risk, including regular and on-going education and training for employees, preparedness simulations and tabletop exercises, and recovery and resilience tests. It engages in regular assessments of its infrastructure, software systems, and network architecture, using internal cybersecurity experts and third-party specialists. The Company also maintains a third-party risk management program designed to identify, assess, and manage risks, including cybersecurity risks, associated with external service providers and its supply chain. The Company also actively monitors its email gateways for malicious phishing email campaigns and monitors remote connections as a portion of its workforce has the option to work remotely. The Company leverages internal and external auditors and independent external partners to periodically review its processes, systems, and controls, including with respect to its information security program, to assess their design and operating effectiveness and make recommendations to strengthen its risk management program.

The Company maintains an Information Security Incident Response Policy (“Incident Response Policy”) and related procedures that provide a documented framework for responding to actual or potential cybersecurity incidents, including timely notification of and escalation to the Crisis Management Team and to the appropriate regulatory and governmental authorities. As needed, the notification may include the CEO and/or the Company’s and Bank’s Board of Directors. The Incident Response Policy and procedures are coordinated through the Chief Risk Officer and key members of management are embedded into the procedures by their design. The Incident Response Policy facilitates coordination across multiple parts of the organization and is evaluated at least annually.

Notwithstanding the Company’s defensive measures and processes, the threat posed by cyber-attacks is severe. The Company’s internal systems, processes, and controls are designed to mitigate loss from cyber-attacks and, while it has experienced cybersecurity incidents in the past, to date, risks from cybersecurity threats have not materially affected the Company. For further discussion of risks from cybersecurity threats, see the section captioned “An interruption in or breach in security of the Company’s information systems may result in a loss of customer business and have an adverse effect on the Company’s results of operations, financial condition and cash flows” in Item 1A. Risk Factors.

Governance

The Chief Information Security Officer is accountable for managing the enterprise information security department and delivering the information security program. The responsibilities of this department include cybersecurity risk assessment, a portion of defense operations, incident response, vulnerability assessment, threat intelligence, identity access governance and third-party risk management. The Company’s information technology department works together with information security in defense operations and is responsible for business resilience. The foregoing responsibilities are covered on a day-to-day basis by a first line of defense function, and the Company’s second line of defense function, including the Chief Information Security Officer, provides guidance, oversight, monitoring and challenge of the first line’s activities. The second line of defense function is separated from the first line of defense function through organizational structure and ultimately reports directly to the Chief Risk Officer. The department consists of information security professionals with varying degrees of education and experience. Individuals within the department are generally subject to professional education and certification requirements. The Company’s Chief Information Security Officer has substantial relevant expertise and formal training in the areas of information security and cybersecurity risk management.

The Bank’s board of directors has approved the management level Operations Committee, which focuses on business impact, and the Enterprise Risk Management Committee (“ERM Committee”), which also focuses on business impact and provides oversight and governance of the information security program, and the board level Strategic Technology Oversight Committee (“STOC”), which focuses on technology impact and provides oversight and governance of the technology program. The Operations Committee is chaired by the Chief Operating Officer and includes the Chief Information Security Officer and Chief Information Officer and other key departmental managers from throughout the Company. This committee generally meets bi-weekly to discuss various operational

strategy and issues, including information technology and information security policies, practices, controls, and mitigation and prevention efforts.

The ERM Committee meets quarterly and oversees the information security program. It approves the broad objectives, strategies and major policies governing the Company’s protection of data assets and provides agreement on the definition and scope of the information security framework. Along with reviewing, approving, and prioritizing information security efforts, it reviews and challenges the results and adequacy of information security practices. From an enterprise perspective, the ERM Committee reviews the cybersecurity risk profile on a quarterly basis and reports on cyber risk to the Risk Committee of the Company’s board of directors.

STOC is responsible for overseeing the Company’s technology program, including management’s actions to identify, assess, mitigate, and remediate or prevent material cybersecurity issues and risks. The Company’s Chief Information Security Officer and its Chief Information Officer provide quarterly reports to the STOC regarding the information security program and the technology program, key enterprise cybersecurity initiatives, and other matters relating to cybersecurity processes. The Chief Information Security Officer also reports summaries of key issues, including significant cybersecurity and/or privacy incidents.

ITEM 2. PROPERTIES

As of December 31, 2023, the Company conducted business at 285 full-service banking centers. The Company’s principal executive office is located at Prosperity Bank Plaza, 4295 San Felipe, Houston, Texas. The Company also owns or leases other facilities in which its banking centers are located as listed below by geographical market area. The Company also owns or leases various corporate and operations offices. The expiration dates of the leases range from 2024 to 2032 and do not include renewal periods which may be available at the Company’s option.

The following table sets forth specific information regarding the banking centers located in each of the Company’s geographical market areas at December 31, 2023:

ITEM 3. LEGAL PROCEEDINGS

The Company and the Bank are defendants, from time to time, in legal actions arising from transactions conducted in the ordinary course of business. The Company and the Bank believe, after consultations with legal counsel, that the ultimate liability, if any, arising from such actions will not have a material adverse effect on their financial statements.

ITEM 4. MINE SAFETY DISCLOSURES

Not applicable.

PART II.

ITEM 5. MARKET FOR REGISTRANT’S COMMON EQUITY, RELATED SHAREHOLDER MATTERS AND ISSUER PURCHASES OF EQUITY SECURITIES

Common Stock Information

The Company’s common stock is listed on the New York Stock Exchange under the symbol “PB.” As of February 26, 2024, there were 93,529,541 shares outstanding and 4,710 shareholders of record. The number of beneficial owners is unknown to the Company at this time.

Dividends

Holders of common stock are entitled to receive dividends when, as and if declared by the Company’s Board of Directors out of funds legally available therefor. Although the Company has declared dividends on its common stock since 1994, and paid quarterly dividends aggregating $2.21 per share for 2023 and $2.11 per share for 2022, the Company could discontinue payment of dividends in the future. Future dividends on the common stock will depend upon the Company’s earnings and financial condition, liquidity and capital requirements, the general economic and regulatory climate, the Company’s ability to service any equity or debt obligations senior to the common stock and other factors deemed relevant by the Board of Directors of the Company.

As a holding company, the Company is ultimately dependent upon its subsidiaries to provide funding for its operating expenses, debt service and dividends. Various banking laws applicable to the Bank limit the payment of dividends and other distributions by the Bank to the Company and may therefore limit the Company’s ability to pay dividends on its common stock. Regulatory authorities could impose administratively stricter limitations on the ability of the Bank to pay dividends to the Company if such limits were deemed appropriate to preserve certain capital adequacy requirements.

In addition, the Federal Reserve Board has indicated that bank holding companies should carefully review their dividend policy in relation to the organization’s overall asset quality, level of current and prospective earnings and level, composition and quality of capital. The guidance provides that the Company should inform and consult with the Federal Reserve Board prior to declaring and paying a dividend that exceeds earnings for the period for which the dividend is being paid or that could result in an adverse change to the Company’s capital structure.

The cash dividends declared per share by quarter (and paid on the first business day of the subsequent quarter) for the Company’s last two fiscal years were as follows:

Recent Sales of Unregistered Securities

None.

Securities Authorized for Issuance under Equity Compensation Plans

The following table provides information as of December 31, 2023 regarding the Company’s equity compensation plan under which the Company’s equity securities are authorized for issuance. As of December 31, 2023, the Company had shares of restricted stock outstanding under its 2020 Stock Incentive Plan, which was approved by the Company’s shareholders:

Purchases of Equity Securities by the Issuer and Affiliated Purchasers

On January 17, 2023, Prosperity Bancshares announced a stock repurchase program under which up to 5%, or approximately 4.6 million shares, of its outstanding common stock may be acquired over a one-year period expiring on January 17, 2024, at the discretion of management. Under the 2023 stock repurchase program, Prosperity Bancshares repurchased approximately 1.21 million shares of its common stock at an average weighted price of $59.88 per share during the year ended December 31, 2023. On January 16, 2024, Prosperity Bancshares announced a stock repurchase program under which up to 5%, or approximately 4.7 million shares, of its outstanding common stock may be acquired over a one-year period expiring on January 16, 2025, at the discretion of management. Under the 2024 stock repurchase program, the Company may repurchase shares from time to time at prevailing market prices, through open-market purchases or privately negotiated transactions, depending upon market conditions. See “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Financial Condition—Share Repurchases” for additional information.

Performance Graph

The following Performance Graph compares the cumulative total shareholder return on the Company’s common stock for the period beginning at the close of trading on December 31, 2018 to December 31, 2023, with the cumulative total return of the S&P 500 Total Return Index and the Nasdaq Bank Index for the same period. Dividend reinvestment has been assumed. The Performance Graph assumes $100 invested on December 31, 2018 in the Company’s common stock, the S&P 500 Total Return Index and the Nasdaq Bank Index. The historical stock price performance for the Company’s common stock shown on the graph below is not necessarily indicative of future stock performance.

* $100 invested on 12/31/18 in stock or index, including reinvestment of dividends. Fiscal year ended December 31.

Copyright© 2024 Standard & Poor's, a division of S&P Global. All rights reserved.

ITEM 6. [RESERVED]

ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

Special Cautionary Notice Regarding Forward-Looking Statements

Statements and financial discussion and analysis contained in this Annual Report on Form 10-K that are not statements of historical fact constitute forward-looking statements made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995. These forward-looking statements are based on assumptions and involve a number of risks and uncertainties, many of which are beyond the Company’s control. Forward-looking statements can be identified by words such as “believes,” “intends,” “expects,” “plans,” “will” and similar references to future periods. Many possible events or factors could affect the future financial results and performance of the Company and could cause such results or performance to differ materially from those expressed in the forward-looking statements. These possible events or factors include, but are not limited to:

A forward-looking statement may include a statement of the assumptions or bases underlying the forward-looking statement. The Company believes it has chosen these assumptions or bases in good faith and that they are reasonable. However, the Company cautions that assumptions or bases almost always vary from actual results, and the differences between assumptions or bases and actual results can be material. Therefore, the Company cautions against placing undue reliance on its forward-looking statements. The forward-looking statements speak only as of the date the statements are made. The Company undertakes no obligation to publicly update or otherwise revise any forward-looking statements, whether as a result of new information, future events or otherwise.

Management’s Discussion and Analysis of Financial Condition and Results of Operations analyzes the major elements of the Company’s balance sheets and statements of income. This section should be read in conjunction with the Company’s consolidated financial statements and accompanying notes and other detailed information appearing elsewhere in this Annual Report on Form 10‑K.

Overview

The Company generates the majority of its revenues from interest income on loans, service charges and fees on customer accounts and income from investment in securities. The Company also earns revenues from various additional products and services it provides, including trust services, mortgage lending, brokerage, credit card and independent sales organization sponsorship operations. The Company’s revenues are partially offset by interest expense paid on deposits and other borrowings and noninterest expenses such as administrative and occupancy expenses. Net interest income is the difference between interest income on earning assets such as loans and securities and interest expense on liabilities such as deposits and borrowings which are used to fund those assets. Net

interest income is the Company’s largest source of revenue. The level of interest rates and the volume and mix of earning assets and interest-bearing liabilities impact net interest income and margin.

Three principal components of the Company’s growth strategy are internal growth, efficient operations and acquisitions, including strategic merger transactions. The Company focuses on continual internal growth. Each banking center is operated as a separate profit center, maintaining separate data with respect to its net interest income, efficiency ratio, deposit growth, loan growth and overall profitability. The Company also focuses on maintaining efficiency and stringent cost control practices and policies. The Company has centralized many of its critical operations, such as data processing and loan and deposit processing. Management believes that this centralized infrastructure can accommodate substantial additional growth while enabling the Company to minimize operational costs through certain economies of scale. The Company also intends to continue to seek expansion opportunities. On May 1, 2023, the Company acquired First Bancshares, as described under “—Recent Acquisition” below. On October 11, 2022, the Company announced the signing of a definitive merger agreement with Lone Star, as described under “—Pending Acquisition” below.

Net income was $419.3 million, $524.5 million and $519.3 million for the years ended December 31, 2023, 2022 and 2021, respectively, and diluted earnings per share were $4.51, $5.73 and $5.60, respectively, for these same periods. The change in net income and earnings per diluted share for the year ended December 31, 2023 was primarily due to lower net interest income, the FDIC special assessment of $19.9 million, merger related provision for credit losses of $18.5 million, merger related expenses of $15.1 million and additional expenses related to the merger of First Bancshares. During the fourth quarter of 2023, Prosperity accrued for the FDIC special assessment of $19.9 million, which was imposed by the FDIC to recover the cost associated with protecting uninsured depositors following the closures of Silicon Valley Bank and Signature Bank in early 2023. The increase in net income and earnings per diluted share for the year ended December 31, 2022 was primarily due to an increase in average balances and average rates on investment securities, partially offset by a decrease in PPP fees and interest income of $44.6 million, a decrease in loan discount accretion of $31.9 million and an increase in the average rates on interest-bearing liabilities.

The Company posted returns on average assets of 1.08%, 1.39% and 1.44% and returns on average common equity of 6.03%, 7.97% and 8.21% for the years ended December 31, 2023, 2022 and 2021, respectively. The Company’s efficiency ratio was 50.26% in 2023, 42.23% in 2022 and 41.83% in 2021. The efficiency ratio is calculated by dividing total noninterest expense (excluding net gains and losses on the sale or write down of assets and securities) by the sum of net interest income and noninterest income. Because the ratio is a measure of revenues and expenses resulting from the Company’s lending activities and fee-based banking services, net gains and losses on the sale of assets and securities are not included. Additionally, taxes are not part of this calculation.

Total assets at December 31, 2023 and 2022 were $38.55 billion and $37.69 billion, respectively. Total deposits were $27.18 billion at December 31, 2023, a decrease of $1.35 billion or 4.7% compared with $28.53 billion at December 31, 2022. Total loans were $21.18 billion at December 31, 2023, an increase of $2.34 billion or 12.4% compared with $18.84 billion at December 31, 2022. At December 31, 2023, the Company had $70.9 million in nonperforming loans, and its allowance for credit losses on loans was $332.4 million compared with $25.5 million in nonperforming loans and an allowance for credit losses on loans of $281.6 million at December 31, 2022. Shareholders’ equity was $7.08 billion and $6.70 billion at December 31, 2023 and 2022, respectively.

Recent Acquisition

Merger of First Bancshares of Texas, Inc. — Effective May 1, 2023, the Company completed the merger of First Bancshares into the Company and the subsequent merger of its wholly owned subsidiary, FirstCapital Bank, into the Bank (collectively, the “Merger”). FirstCapital Bank operated 16 full-service banking offices in six different markets in West, North and Central Texas areas, including its main office in Midland, Texas and banking offices in Midland, Lubbock, Amarillo, Wichita Falls, Burkburnett, Byers, Henrietta, Dallas, Horseshoe Bay, Marble Falls and Fredericksburg, Texas. As of March 31, 2023, First Bancshares, on a consolidated basis, reported total assets of $2.14 billion, total loans of $1.65 billion and total deposits of $1.71 billion.

Pursuant to the terms of the definitive agreement, the Company issued 3,583,370 shares of its common stock and approximately $91.5 million in cash for all outstanding shares of First Bancshares capital stock. As of December 31, 2023, the Company recognized goodwill of $164.5 million which does not include all the subsequent fair value adjustments that have not yet been finalized. During the second quarter of 2023, the Company completed the operational conversion of FirstCapital Bank.

Pending Acquisition

Pending Acquisition of Lone Star State Bancshares, Inc. — On October 11, 2022, the Company and Lone Star jointly announced the signing of a definitive merger agreement whereby Lone Star, the parent company of Lone Star State Bank, will merge with and into the Company. Lone Star Bank operates five banking offices in the West Texas area, including its main office in

Lubbock, and one banking center in each of Brownfield, Midland, Odessa and Big Spring, Texas. As of December 31, 2023, Lone Star, on a consolidated basis, reported total assets of $1.37 billion, total loans of $1.08 billion and total deposits of $1.21 billion.

Under the terms of the definitive agreement, Bancshares will issue 2,376,182 shares of its common stock plus $64.1 million in cash for all outstanding shares of Lone Star capital stock, subject to certain conditions and potential adjustments. Based on the closing price of Bancshares' common stock of $69.27 on October 7, 2022, the total consideration was valued at approximately $228.7 million. The transaction is subject to customary closing conditions, including the receipt of regulatory approvals. The shareholders of Lone Star approved the transaction on March 28, 2023.

Critical Accounting Estimates

The preparation of financial statements in conformity with GAAP requires the Company to establish accounting policies and make estimates that affect amounts reported in the consolidated financial statements. An accounting estimate requires assumptions and judgments about uncertain matters that could have a material effect on the consolidated financial statements. Estimates are made using facts and circumstances known at a point in time. Changes in those facts and circumstances could produce results substantially different from those estimates. The Company’s accounting policies are described in detail in Note 1 to the consolidated financial statements, appearing elsewhere in this Annual Report on Form 10-K. The Company believes that of its significant accounting policies, the following may involve a higher degree of judgment and complexity:

Business Combinations—Generally, acquisitions are accounted for under the acquisition method of accounting in accordance with Financial Accounting Standards Board (“FASB”) Accounting Standards Codification (“ASC”) 805, Business Combinations. A business combination occurs when the Company acquires net assets that constitute a business and obtains control over that business. Business combinations are effected through the transfer of consideration consisting of cash and/or common stock and are accounted for using the acquisition method. Accordingly, the assets and liabilities of the acquired business are recorded at their respective fair values at the acquisition date. Determining the fair value of assets and liabilities, especially the loan portfolio, is a process involving significant judgment regarding methods and assumptions used to calculate estimated fair values. Fair values are subject to refinement for up to one year after the closing date of the acquisition as information relative to closing date fair values becomes available. The results of operations of an acquired entity are included in the Company’s consolidated results from acquisition date, and prior periods are not restated.

Allowance for Credit Losses— The allowance for credit losses is accounted for in accordance with ASU 2016-13, “Financial Instruments-Credit Losses (Topic 326) – Measurement of Credit Losses on Financial Instruments” (“CECL”) which replaced the incurred loss methodology with an expected loss methodology that is referred to as the current expected credit loss methodology. CECL requires a financial asset (or a group of financial assets) measured at amortized cost basis to be presented at the net amount expected to be collected. The allowance for credit losses is an allowance available for losses on loans and held-to-maturity securities. The allowance for credit losses is adjusted through charges to earnings in the form of a provision for credit losses. All losses are charged to the allowance when the loss actually occurs or when a determination is made that such a loss is likely and can be reasonably estimated. Recoveries are credited to the allowance at the time of recovery.

The Company’s allowance for credit losses consists of two elements: (1) specific valuation allowances based on expected losses on impaired loans and certain purchased credit-deteriorated loans (“PCD”); and (2) a general valuation allowance based on historical lifetime loan loss experience, current economic conditions, reasonable and supportable forecasted economic conditions and other qualitative risk factors both internal and external to the Company. Management has established an allowance for credit losses which it believes is adequate for estimated losses in the Company’s loan portfolio. Based on an evaluation of the portfolio, management presents a quarterly review of the allowance for credit losses to the Bank’s Board of Directors, indicating any change in the allowance since the last review and any recommendations as to adjustments in the allowance. In making its evaluation, management considers factors such as historical lifetime loan loss experience, the amount of nonperforming assets and related collateral, the volume, growth and composition of the portfolio, current economic conditions and reasonable and supportable forecasted economic conditions that may affect borrower ability to pay and the value of collateral, the evaluation of the portfolio through its internal loan review process and other relevant factors. Portions of the allowance may be allocated for specific credits; however, the entire allowance is available for any credit that, in management’s judgment, should be charged off. Charge-offs occur when loans are deemed to be uncollectible. Pursuant to the Company's adoption of ASU 2022-02 effective January 1, 2023, the Company prospectively discontinued troubled debt restructurings accounting and no longer measures the economic concession for loan modifications occurring on or after the adoption date. In addition, modifications to loans previously designated as troubled debt restructurings that occur on or after January 1, 2023, are accounted for under the newly adopted ASU and result in the elimination of any prior economic concession recorded in the allowance related to such loans. For further discussion of the methodology used in the determination of the allowance for credit losses, see “Accounting for Acquired Loans and the Allowance for Acquired Credit Losses”, “Financial Condition—Allowance for Credit Losses” sections below and Note 1 to the consolidated financial statements.

Accounting for Acquired Loans and the Allowance for Acquired Credit Losses — The Company accounts for its acquisitions using the acquisition method of accounting. Accordingly, the assets, including loans, and liabilities of the acquired entity were recorded at their fair values at the acquisition date. These fair value estimates associated with acquired loans, based on a discounted cash flow model, include estimates related to market interest rates and undiscounted projections of future cash flows that incorporate expectations of prepayments and the amount and timing of principal, interest and other cash flows, as well as any shortfalls thereof. For further discussion of the methodology used in the determination of the allowance for credit losses for acquired loans, see “Accounting for Acquired Loans and the Allowance for Acquired Credit Losses” in Note 1 to the consolidated financial statements and “Financial Condition—Allowance for Credit Losses on Loans” below.

Goodwill and Intangible Assets—Goodwill and intangible assets that have indefinite useful lives are subject to an impairment test at least annually, or more often, if events or circumstances indicate that it is more likely than not that the fair value of the Company’s reporting unit is below the carrying value of its equity. Under ASC Topic 350-20, “Intangibles—Goodwill and Other—Goodwill,” companies have the option to first assess qualitative factors to determine whether it is more likely than not that the fair value of a reporting unit is less than its carrying amount as a basis for determining the need to perform step one of the annual test for goodwill impairment. An entity has an unconditional option to bypass the qualitative assessment described in the following paragraph for any reporting unit in any period and proceed directly to performing the first step of the goodwill impairment test. An entity may resume performing the qualitative assessment in any subsequent period. If the estimated fair value of the reporting unit exceeds its carrying value, goodwill of the reporting unit is not impaired.

The Company had no intangible assets with indefinite useful lives at December 31, 2023. Core deposit intangible assets that are subject to amortization are being amortized on a non-pro rata basis over the years expected to be benefited, which the Company believes is between ten and fifteen years. These core deposit intangible assets are reviewed for impairment if circumstances indicate their value may not be recoverable based on a comparison of fair value to carrying value. The Company performs an evaluation annually, and more frequently if a triggering event occurs, of whether any impairment of the goodwill and other intangibles has occurred. Based on the Company’s annual goodwill impairment test as of October 1, 2023, management does not believe any of its goodwill is impaired as of December 31, 2023, because the fair value of the Company’s equity exceeded its carrying value. While the Company believes no impairment existed at December 31, 2023, under accounting standards applicable at that date, different conditions or assumptions, or changes in cash flows or profitability, if significantly negative or unfavorable, could have a material adverse effect on the outcome of the Company’s impairment evaluation and financial condition or future results of operations.

Results of Operations

Net Interest Income

The Company’s operating results depend primarily on its net interest income, which is the difference between interest income on interest-earning assets, including securities and loans, and interest expense incurred on interest-bearing liabilities, including deposits and other borrowed funds. Interest rate fluctuations, as well as changes in the amount and type of earning assets and liabilities, combine to affect net interest income. The Company’s net interest income is affected by changes in the amount and mix of interest-earning assets and interest-bearing liabilities, referred to as a “volume change.” It is also affected by changes in yields earned on interest-earning assets and rates paid on interest-bearing deposits and other borrowed funds, referred to as a “rate change.”

2023 versus 2022. Net interest income before the provision for credit losses for 2023 was $956.4 million compared with $1.01 billion for 2022, a decrease of $48.8 million or 4.9%. The change was primarily due to an increase in the average balances and average rates on other borrowings and an increase in the average rates on interest-bearing deposits, partially offset by increases in the average balances and average rates on loans. Interest income was $1.44 billion in 2023, an increase of $349.7 million or 31.9% compared with 2022. Interest income on loans was $1.15 billion for 2023, an increase of $317.8 million or 38.2% compared with 2022, primarily due an increase in the average balances and average rates on loans. The Company had $27.9 million of total outstanding accretable discounts on Non-PCD loans and PCD loans at December 31, 2023. Interest income on securities was $283.3 million during 2023, an increase of $22.9 million or 8.8% compared with 2022 due primarily to an increase the average rates on investment securities, partially offset by a decrease in the average balances on investment securities. Average interest-bearing liabilities increased $1.50 billion or 7.5% during 2023 compared with 2022. The average rate on interest-bearing liabilities increased from 0.45% to 2.27% during the same time period, resulting in an increase in interest expense of $398.5 million. The total cost of funds increased to 1.54% during 2023 compared to 0.29% during 2022.

Net interest margin, defined as net interest income divided by average interest-earning assets, was 2.78% on a tax equivalent basis for 2023, a decrease of 22 basis points compared with 3.00% for 2022.

2022 versus 2021. Net interest income before the provision for credit losses for 2022 was $1.01 billion compared with $993.3 million for 2021, an increase of $11.9 million or 1.2%. The change was primarily due to an increase in average balances and average

rates on investment securities, partially offset by a decrease in PPP fees and interest income of $44.6 million, a decrease in loan discount accretion of $31.9 million and an increase in the average rates on interest-bearing liabilities. Interest income was $1.09 billion in 2022, an increase of $47.9 million or 4.6% compared with 2021. Interest income on loans was $831.2 million for 2022, a decrease of $38.7 million or 4.5% compared with 2021, primarily due to a decrease in PPP fees and interest income of $44.6 million and a decrease in loan discount accretion of $31.9 million, partially offset by an increase in loan interest income for loans held for investment. The Company had $5.6 million of total outstanding accretable discounts on Non-PCD loans and PCD loans at December 31, 2022. Interest income on securities was $260.4 million during 2022, an increase of $85.0 million or 48.4% compared with 2021 due primarily to an increase in average balances and average rates on investment securities. Average interest-bearing liabilities increased $625.4 million or 3.2% during 2022 compared with 2021. The average rate on interest-bearing liabilities increased from 0.28% to 0.45% during the same time period, resulting in an increase in interest expense of $36.0 million. The total cost of funds increased to 0.29% during 2022 compared to 0.18% during 2021.

Net interest margin was 3.00% on a tax equivalent basis for 2022, a decrease of 14 basis points compared with 3.14% for 2021.

The following table presents, for the periods indicated, the total dollar amount of average balances, interest income from average interest-earning assets and the resultant yields, as well as the interest expense on average interest-bearing liabilities, expressed both in dollars and rates. Except as indicated in the footnotes, no tax-equivalent adjustments were made and all average balances are daily average balances. Any nonaccruing loans have been included in the table as loans carrying a zero yield.