10-K – 2026-02-13 – hban-20251231.htm

The Bank is a national banking association chartered under the laws of the U.S. As a national bank, the activities of the Bank are limited to those specifically authorized under the National Bank Act and OCC regulations. The Bank is subject to comprehensive primary supervision, regulation, and examination by the OCC. As a member of the DIF, the Bank is also subject to regulation and examination by the FDIC.
A principal objective of the U.S. bank regulatory regime is to protect depositors and customers, the DIF, the U.S. banking and financial system, and financial markets as a whole, by ensuring the financial safety and soundness of BHCs and banks, including Huntington and the Bank. Bank regulators regularly examine the operations of BHCs and banks. In addition, BHCs and banks are subject to periodic reporting and filing requirements.
The Federal Reserve, OCC, and FDIC have broad supervisory and enforcement authority with regard to BHCs and banks, including the power to conduct examinations and investigations, impose nonpublic supervisory agreements, issue cease and desist orders, impose fines and other civil and criminal penalties, terminate deposit insurance, and appoint a conservator or receiver. In addition, Huntington, the Bank, and other Huntington subsidiaries are subject to supervision, regulation, and examination by the CFPB, which is the primary administrator of most federal consumer financial statutes and Huntington’s primary consumer financial regulator. Supervision and examinations are confidential, and the outcomes of these actions may not be made public.
Bank regulators have various remedies available if they determine that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity, or other aspects of a banking organization’s operations are unsatisfactory. The regulators may also take action if they determine that the banking organization or its management is violating or has violated any law or regulation. The regulators have the power to, among other things, (1) prohibit unsafe or unsound practices, (2) require affirmative actions to correct any violation or practice, (3) issue administrative orders that can be judicially enforced, (4) direct increases in capital, (5) direct the sale of subsidiaries or other assets, (6) limit dividends and distributions, (7) restrict growth, (8) assess civil monetary penalties, (9) remove officers and directors, and (10) terminate deposit insurance.
Engaging in unsafe or unsound practices or failing to comply with applicable laws, regulations, and supervisory agreements could subject the Company, its subsidiaries, and their respective officers, directors, and institution-affiliated parties to the remedies described above, and other sanctions. In addition, the FDIC may terminate a bank’s deposit insurance upon a finding that the bank’s financial condition is unsafe or unsound or that the bank has engaged in unsafe or unsound practices or has violated an applicable rule, regulation, order, or condition enacted or imposed by the bank’s regulatory agency.
Huntington is subject to the Federal Reserve’s LFI Rating System, which places a greater emphasis on capital and liquidity, including related planning and risk management practices, as compared to the supervisory rating system applicable to smaller BHCs. These ratings are confidential. The LFI Rating System includes three components: capital planning and positions, liquidity risk management and positions, and governance and controls, and each component has four potential ratings: broadly meets expectations, conditionally meets expectations, deficient-1, or deficient-2.
In November 2025, the Federal Reserve adopted a final notice to revise its LFI Rating System for large BHCs with total consolidated assets of $100 billion or more. The Federal Reserve’s LFI Rating System prior to the notice provided that any firm that had one or more deficient-1 ratings was not considered “well managed.” The final notice amended the LFI Rating System by considering a firm with no more than one deficient-1 rating to be “well managed.” Firms that do not meet this standard, as well as firms with a deficient-2 rating for any component, would not be deemed “well managed” and would face limitations on certain acquisitions and new activities.
Bank Acquisitions by Huntington
BHCs, such as Huntington, must obtain prior approval of the Federal Reserve in connection with any acquisition that results in the BHC owning or controlling 5% or more of any class of voting securities of a bank or another BHC.
The standards by which bank and financial institution acquisitions would be evaluated may be subject to change. In September 2024, the OCC adopted a final rule and policy statement regarding its review of Bank Merger Act applications for OCC-supervised institutions, including the Bank. In May 2025, the OCC adopted a final rule that restored the ability for Bank Merger Act applicants to file a streamlined application form for certain types of acquisitions and the expedited review process for Bank Merger Act applications, which had been removed by the 2024 final rule, and rescinded the 2024 policy statement.
12 Huntington Bancshares Incorporated

Table of Contents

In September 2024, the DOJ withdrew its 1995 Bank Merger Guidelines and issued the 2024 Banking Addendum. The DOJ clarified that it will assess competition considerations in connection with bank and BHC mergers using its 2023 Merger Guidelines, which is the general merger review framework the DOJ now uses to evaluate transactions in all segments of the economy, and the 2024 Banking Addendum. The 2024 Banking Addendum provides guidance on how the DOJ will assess competition in the context of bank and BHC mergers. An analysis under the 2023 Merger Guidelines and 2024 Banking Addendum may include consideration of theories of harm and relevant markets not considered under the 1995 Bank Merger Guidelines, which focused primarily on concentrations of deposits and branches.
Acquisitions of Ownership of the Company
Acquisitions of Huntington’s voting stock above certain thresholds are subject to prior regulatory notice or approval under federal banking laws, including the BHC Act and the Change in Bank Control Act of 1978. Under the Change in Bank Control Act, a person or entity generally must provide prior notice to the Federal Reserve before acquiring the power to vote 10% or more of our outstanding common stock. Investors should be aware of these requirements when acquiring shares in our stock.
Interstate Banking
Under the Riegle-Neal Act, a BHC may acquire banks in states other than its home state, subject to any state requirement that the bank has been organized and operating for a minimum period of time, not to exceed five years, and the requirement that the BHC not control, prior to or following the proposed acquisition, more than 10% of the total amount of deposits of insured depository institutions nationwide or, unless the acquisition is the BHC’s initial entry into the state, more than 30% of such deposits in the state (or such lesser or greater amount set by the state). The Riegle-Neal Act also authorizes banks to merge across state lines, thereby creating interstate branches. A national bank, such as the Bank, with the approval of the OCC may open a branch in any state if the law of that state would permit a state bank chartered in that state to establish the branch.
Enhanced Prudential Standards
BHCs with consolidated assets of more than $100 billion, such as Huntington, are currently subject to certain enhanced prudential standards. As a result, Huntington is subject to more stringent standards, including liquidity and capital requirements, leverage limits, stress testing, resolution planning, and risk management standards, than those applicable to institutions with less than $100 billion in total consolidated assets. Huntington is a Category IV banking organization and therefore is subject to the least restrictive enhanced prudential standards applicable to firms with $100 billion or more in total consolidated assets. Once Huntington exceeds $250 billion in total average consolidated assets, including following consummating the acquisition of Cadence, and not exceed certain risk-based thresholds, Huntington and the Bank will each qualify as a Category III banking organization and become subject to additional enhanced prudential standards, such as limitations on Huntington’s aggregate net credit exposures to any single, unaffiliated company (referred to as SCCL).
Liquidity Requirements
Huntington and the Bank, as Category IV banking organizations with less than $50 billion in weighted short-term wholesale funding, are exempt from the LCR and NSFR requirements.
The LCR would require each of Huntington and the Bank to hold an amount of eligible HQLA that equals or exceeds 100% of its respective projected adjusted net cash outflows over a 30-day period. The LCR would require each of Huntington and the Bank to calculate its respective LCR daily. When Huntington becomes a Category III institution with less than $75 billion in weighted average short-term wholesale funding, Huntington’s and the Bank’s total net cash outflows will be multiplied by an outflow adjustment percentage of 85%. In addition, Huntington will also be required to make quarterly public disclosures of its LCR and certain related quantitative liquidity metrics, along with a qualitative discussion of its LCR.
2025 Form 10-K 13

Table of Contents

The NSFR would require each of Huntington and the Bank to maintain an amount of available stable funding, which is a weighted measure of a company’s funding sources over a one-year time horizon, calculated by applying standardized weightings to equity and liabilities based on their expected stability, that is no less than a specified percentage of its required stable funding, which is calculated by applying standardized weightings to assets, derivatives exposures, and certain other items based on their liquidity characteristics. When Huntington becomes a Category III institution with less than $75 billion in weighted average short-term wholesale funding, Huntington and the Bank will be each required to maintain available stable funding in an amount at least equal to 85% of its required stable funding. In addition, Huntington will be required to make public disclosures of its NSFR every second and fourth quarter, including certain quantitative metrics and a qualitative discussion of its NSFR drivers and results.
As a Category IV banking organization, Huntington is subject to internal liquidity stress tests and standards. When Huntington becomes a Category III banking organization, Huntington will continue to be subject to internal liquidity stress tests and standards to which Category IV banking organizations are subject, but the frequency of its liquidity stress tests will change from a quarterly basis to a monthly basis.
Long-term Debt Requirements
In August 2023, the U.S. banking agencies issued a proposed rule that would require certain large banking organizations such as Huntington to comply with long-term debt requirements and “clean holding company requirements” similar to those that currently only apply to U.S. global systemically important banking organizations. This proposal would also impose a long-term debt requirement on certain categories of insured depository institutions that are not consolidated subsidiaries of U.S. global systematically important banking organizations, including insured depository institutions with $100 billion or more in total assets, such as the Bank. If adopted, this proposal would require Huntington and the Bank to each maintain a minimum outstanding eligible long-term debt amount of no less than the greater of (i) 6% of total risk-weighted assets, (ii) 2.5% of total leverage exposure (if subject to the supplementary leverage ratio), or (iii) 3.5% of average total consolidated assets. To comply with the requirement, the Bank would be required to issue the minimum amount of eligible long-term debt to Huntington, and Huntington would be required to issue the minimum amount of eligible long-term debt externally. The proposal allows banking organizations to include, as part of the required minimum outstanding eligible long-term debt amounts, certain existing long-term debt. If the rule is finalized as proposed, covered institutions would have three years to comply with the new requirements following a phased-in approach, with 25% of the long-term debt requirement by one year after finalization of the rule, 50% after two years, and 100% after three years.
In addition, if adopted as proposed, the “clean holding company requirements” would limit or prohibit Huntington from entering into certain transactions that could impede its orderly resolution, including, for example, prohibiting Huntington from entering into transactions that could spread losses to subsidiaries and third parties, as well as limiting the amount of the Company’s liabilities that are not eligible long-term debt. The timing and form of any final rule implementing the long-term debt requirements and clean holding company requirements remains uncertain.
14 Huntington Bancshares Incorporated

Table of Contents

Regulatory Capital Requirements
Huntington and the Bank are subject to certain risk-based capital and leverage ratio requirements under the U.S. Basel III capital rules adopted by the Federal Reserve, for Huntington, and by the OCC, for the Bank. These quantitative calculations are minimums, and the Federal Reserve and OCC may determine that a banking organization, based on its size, complexity, or risk profile, must maintain a higher level of capital in order to operate in a safe and sound manner.
Under the U.S. Basel III capital rules, Huntington’s and the Bank’s assets, exposures, and certain off-balance sheet items are subject to risk weights used to determine the institutions’ risk-weighted assets. These risk-weighted assets are used to calculate the following minimum capital ratios for Huntington and the Bank:
• CET1 Risk-Based Capital Ratio , equal to the ratio of CET1 capital to risk-weighted assets. CET1 capital primarily includes common shareholders’ equity subject to certain regulatory adjustments and deductions, including goodwill, intangible assets, certain deferred tax assets, and AOCI.
• Tier 1 Risk-Based Capital Ratio , equal to the ratio of Tier 1 capital to risk-weighted assets. Tier 1 capital is primarily comprised of CET1 capital, perpetual preferred stock, and certain qualifying capital instruments.
• Total Risk-Based Capital Ratio , equal to the ratio of total capital, including CET1 capital, Tier 1 capital, and Tier 2 capital, to risk-weighted assets. Tier 2 capital primarily includes qualifying subordinated debt and qualifying ALLL. Tier 2 capital also includes, among other things, certain trust preferred securities.
• Tier 1 Leverage Ratio , equal to the ratio of Tier 1 capital to quarterly average assets (net of goodwill, certain other intangible assets, and certain other deductions).
In addition, when Huntington and the Bank become Category III banking organizations, they will become subject to the Supplementary Leverage Ratio, which is equal to the ratio of Tier 1 capital to total leverage exposure, including on-balance sheet assets as well as certain off-balance sheet items, including loan commitments and potential future exposure of derivative contracts.
The total minimum regulatory capital ratios and well-capitalized minimum ratios are reflected in the table below in this section. The Federal Reserve has not yet revised the well-capitalized standard for BHCs to reflect the higher capital requirements imposed under the U.S. Basel III capital rules. For purposes of the Federal Reserve’s Regulation Y, including determining whether a BHC meets the requirements to be an FHC, BHCs, such as Huntington, must maintain a Tier 1 Risk-Based Capital Ratio of 6.0% or greater and a Total Risk-Based Capital Ratio of 10.0% or greater. If the Federal Reserve were to apply the same or a very similar well-capitalized standard to BHCs as that applicable to the Bank, Huntington’s capital ratios as of December 31, 2025, would exceed such revised well-capitalized standard. The Federal Reserve may require BHCs, including Huntington, to maintain capital ratios substantially in excess of mandated minimum levels, depending upon general economic conditions and a BHC’s particular condition, risk profile, and growth plans.
Failure to be well-capitalized or to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators that, if undertaken, could have an adverse material effect on our operations or financial condition. Failure to be well-capitalized or to meet minimum capital requirements could also result in restrictions on Huntington’s or the Bank’s ability to pay dividends or otherwise distribute capital or to receive regulatory approval of applications.
In addition to meeting the minimum capital requirements under the U.S. Basel III capital rules, Huntington and the Bank must maintain the applicable capital buffer (SCB and CCB, respectively) requirements to avoid becoming subject to restrictions on capital distributions and certain discretionary bonus payments to management. Huntington and the Bank are subject to a SCB of 2.5%. Refer to the SCB Requirements section below for further details. The Tier 1 Leverage Ratio is not impacted by the SCB or CCB, and a banking institution may be considered well-capitalized while remaining out of compliance with the SCB or CCB. Further, when Huntington and the Bank become Category III banking organizations, each will become subject to the CCyB. The CCyB is currently set at zero, but could increase up to 2.5%. Any determination to increase the CCyB generally would be effective twelve months after the announcement of such an increase, unless the federal banking agencies set an earlier effective date.
2025 Form 10-K 15

Table of Contents

The following table presents the minimum regulatory capital ratios, minimum ratio plus the capital buffer, and well-capitalized minimums compared with Huntington’s and the Bank’s regulatory capital ratios as of December 31, 2025, calculated using the regulatory capital methodology applicable as of the end of 2025.

Minimum Regulatory Capital Ratio Minimum Ratio + Capital Buffer (1) Well-Capitalized
Minimums (2)
Actual as of December 31, 2025

Ratios:

CET1 risk-based capital ratio Consolidated 4.5  % 7.0  % N/A 10.4  %
Bank 4.5  7.0  6.5  % 11.7 
Tier 1 risk-based capital ratio Consolidated 6.0  8.5  6.0  12.0 
Bank 6.0  8.5  8.0  12.4 
Total risk-based capital ratio Consolidated 8.0  10.5  10.0  14.2 
Bank 8.0  10.5  10.0  14.0 
Tier 1 leverage ratio Consolidated 4.0  N/A N/A 9.3 
Bank 4.0  N/A 5.0  9.6 

(1)    Reflects a SCB of 2.5% for both Huntington and the Bank.
(2)    Reflects the well-capitalized standard applicable to Huntington under Federal Reserve Regulation Y and the well-capitalized standard applicable to the Bank.
Huntington has the ability to provide additional capital to the Bank to maintain the Bank’s risk-based capital ratios at levels that would be considered well-capitalized.
As of December 31, 2025, Huntington’s and the Bank’s regulatory capital ratios were above the well-capitalized standards and met the applicable capital buffer requirements.
Basel III Endgame Proposal
In July 2023, the U.S. banking agencies issued a proposed rule to implement the Basel III endgame agreement for large banks (2023 Basel III Endgame Proposal). The proposal was aimed at significantly increasing capital requirements for large banks, particularly in the US, by mandating them to hold more capital against potential risks like credit, market, and operational risks.
The Federal Reserve announced that it would publish a re-proposal of its regulations to implement the Basel III endgame agreement. It is uncertain if and when a final rule will be adopted, and if so, whether and to what extent it will differ from the 2023 Basel III Endgame Proposal. As a result, the timing and content of any final rule, and the potential effects of any final rule on Huntington and the Bank, remain uncertain.
Capital Planning and Stress Testing
Huntington is required to develop, maintain, and submit to the Federal Reserve a capital plan every year, which is subject to supervisory review in connection with the Federal Reserve’s CCAR process. Huntington is required to include within its capital plan an assessment of the expected uses and sources of capital and a description of all planned capital actions over a nine-quarter planning horizon, a detailed description of the process for assessing capital adequacy, its capital policy, and a discussion of any expected changes to its business plan that are likely to have a material impact on its capital adequacy. Under the stress buffer requirements, the CCAR process is used to determine a BHC’s SCB requirement. Please refer to the SCB Requirements section below for further details.
16 Huntington Bancshares Incorporated

Table of Contents

The Federal Reserve expects BHCs subject to CCAR, such as Huntington, to have sufficient capital to withstand a highly adverse operating environment and to be able to continue operations, maintain ready access to funding, meet obligations to creditors and counterparties, and serve as credit intermediaries. In addition, the Federal Reserve evaluates the planned capital actions of these BHCs, including planned capital distributions such as dividend payments or stock repurchases. This involves a quantitative assessment of capital based on supervisory-run stress tests that assess the ability to maintain capital levels above certain minimum ratios, after taking into consideration all capital actions included in a BHC’s capital plan, under baseline and stressful conditions throughout the nine-quarter planning horizon. As part of CCAR, the Federal Reserve evaluates whether BHCs have sufficient capital to continue operations throughout times of economic and financial market stress and whether they have robust, forward-looking capital planning processes that account for their unique risks. We are generally prohibited from making a capital distribution unless, after giving effect to the distribution, we will meet all minimum regulatory capital ratios. Huntington may increase certain types of capital distributions in excess of the amount included in its capital plan without seeking prior approval from the Federal Reserve as long as it otherwise complies with the automatic restrictions on distributions under the Federal Reserve’s capital rules.
Although the Federal Reserve is no longer allowed to object to the capital plan of a large and non-complex BHC, such as Huntington, on a qualitative, as opposed to quantitative, basis, the Federal Reserve may evaluate the strength of Huntington’s qualitative capital planning process through the regular supervisory process and targeted horizontal reviews of particular aspects of capital planning.
In October 2025, the Federal Reserve proposed revisions to its supervisory stress testing framework through two related proposals. The first proposal would modify the timeline and operation of the annual supervisory stress test, including through revisions to the Federal Reserve’s supervisory stress testing policy statements, and solicits comment on the Federal Reserve’s supervisory stress testing models. The second proposal solicits comment on the Federal Reserve’s proposed scenarios for the 2026 supervisory stress test.
When Huntington and the Bank become Category III banking organizations, each would become required to conduct its own company-run stress test and to publicly disclose the results on a biennial basis.
SCB Requirements
For risk-based capital requirements, Huntington, as a large BHC, is provided an SCB by the Federal Reserve that is determined annually based on the greater of (i) the difference between its starting and minimum projected CET1 Risk-Based Capital Ratio under the severely adverse scenario in the supervisory-run stress test, plus the sum of the dollar amount of Huntington’s planned common stock dividends for each of the fourth through seventh quarters of the planning horizon as a percentage of risk-weighted assets, or (ii) 2.5%. Huntington’s SCB requirement is 2.5%. Huntington submitted its 2025 Capital Plan to the Federal Reserve for supervisory review, as required by the April 5, 2025 deadline. The Federal Reserve informed Huntington that, effective October 1, 2025, its SCB requirement associated with its 2025 Capital Plan is the prescribed minimum SCB of 2.5%, the same SCB requirement Huntington received in 2024. As a Category IV banking organization, Huntington is subject to the Federal Reserve’s supervisory-run stress test on a biennial basis. Although Huntington was not subject to, and did not elect to participate in, the Federal Reserve’s 2025 supervisory-run stress test, its SCB was reviewed for the dividend add-on component of the SCB but its SCB did not change. When Huntington becomes a Category III banking organization, the frequency of being required to participate in the Federal Reserve’s supervisory-run stress test would change from a biennial basis to an annual basis.
Huntington is authorized to make capital distributions that are consistent with the requirements in the Federal Reserve’s capital rule, inclusive of the SCB requirement. Provided that Huntington is otherwise in compliance with automatic restrictions on distributions under the Federal Reserve’s capital rules, Huntington is not required to seek prior approval to make capital distributions in excess of those included in its capital plan.
In April 2025, the Federal Reserve issued a notice of proposed rulemaking to amend its capital planning and stress testing framework applicable to large banking organizations, including Huntington. The proposal would average stress test results over two consecutive years to reduce volatility in the SCB requirement that results from the stress test. The proposal would also modify the annual effective date of the SCB requirement from October 1 to January 1 of the following year to provide banking organizations with additional time to incorporate the results of the stress test into capital planning and management.
2025 Form 10-K 17

Table of Contents

Restrictions on Dividends
Huntington is a legal entity separate and distinct from its banking and non-banking subsidiaries. Since our consolidated net income consists largely of net income of Huntington’s subsidiaries, our ability to make capital distributions, including paying dividends and repurchasing shares, depends upon our receipt of dividends from these subsidiaries. Under federal law, there are various limitations on the extent to which the Bank can declare and pay dividends to Huntington, including those related to regulatory capital requirements, general regulatory oversight to prevent unsafe or unsound practices, and federal banking law requirements concerning the payment of dividends out of net profits, surplus, and available earnings. Certain contractual restrictions also may limit the ability of the Bank to pay dividends to Huntington. No assurances can be given that the Bank will, in any circumstances, pay dividends to Huntington.
Huntington’s ability to declare and pay dividends to our shareholders is similarly limited by federal banking law and Federal Reserve regulations and policy. As discussed in the Capital Planning section above, in general, a BHC may pay dividends and repurchase stock only in accordance with a capital plan that has been reviewed by the Federal Reserve and as to which the Federal Reserve has not objected. Additionally, all of Huntington’s preferred stock outstanding has preference over its common stock with respect to payment of dividends.
Huntington and the Bank must maintain the applicable capital buffer requirements to avoid becoming subject to restrictions on capital distributions, including dividends. For more information on the capital buffer requirements, see the SCB Requirements and the Regulatory Capital Requirements sections above.
The Federal Reserve has indicated generally that it may be an unsafe or unsound practice for a BHC to pay dividends unless its net income is sufficient to fund the dividends and its expected rate of earnings retention is consistent with its capital needs, asset quality, and overall financial condition. The Federal Reserve could prohibit or limit the payment of dividends by a BHC if it determines that payment of the dividend would constitute an unsafe or unsound practice.
Volcker Rule
Under the Volcker Rule, we are prohibited from (1) engaging in short-term proprietary trading for our own account and (2) having certain ownership interests in and relationships with hedge funds or private equity funds (covered funds). The Volcker Rule regulations contain exemptions for market-making, hedging, underwriting, and trading in U.S. government and agency obligations, as well as permit certain ownership interests in certain types of covered funds to be retained. They also permit the offering and sponsoring of covered funds under certain conditions. The Volcker Rule regulations impose significant compliance and reporting obligations on banking entities, such as Huntington. We have put in place the compliance programs required by the Volcker Rule, and any holdings in illiquid covered funds are in compliance with the Volcker Rule.
Resolution Planning
Huntington does not exceed $250 billion total average consolidated assets, therefore, Huntington is not required to submit a 165(d) Resolution Plan to the Federal Reserve and the FDIC. Once Huntington exceeds $250 billion in total average consolidated assets, Huntington will be required to submit to the Federal Reserve and the FDIC every three years a 165(d) Resolution Plan for its orderly resolution in the event it faces material financial distress or failure, with submissions alternating between a full resolution plan and a targeted resolution plan. Following review of a plan, the Federal Reserve and the FDIC may jointly determine that a 165(d) Resolution Plan is not credible or would not facilitate an orderly resolution under the U.S. Bankruptcy Code. If Huntington were to fail to adequately address deficiencies jointly identified by the Federal Reserve and FDIC in a timely manner, it may be subject to more stringent capital, leverage, or liquidity requirements, or restrictions on growth, activities, or operations.
18 Huntington Bancshares Incorporated

Table of Contents

As an insured depository institution, the Bank is required to file its own resolution plan with the FDIC. In June 2024, the FDIC adopted a final rule to modify the required frequency and informational content of IDI Resolution Plans, which are applicable to insured depository institutions with $50 billion or more in total assets, including the Bank, and describe the insured depository institution’s strategy for a rapid and orderly resolution in the event of material financial distress or failure. As a result of the final rule, the Bank will be required to submit to the FDIC full IDI Resolution Plans every three years and interim targeted information between full resolution plan submissions. In addition, the final rule introduced a credibility standard that will be used to evaluate full IDI Resolution Plan submissions. If the FDIC finds an IDI Resolution Plan to be not credible, it could subject the insured depository institution to an enforcement action. The Bank submitted its first full IDI Resolution Plan under the final rule on July 1, 2025. The Bank will submit an interim supplement in 2026.
Source of Strength
Huntington is required to serve as a source of financial and managerial strength to the Bank and, under appropriate conditions, to commit resources to support the Bank. This support may be required by the Federal Reserve at times when we might otherwise determine not to provide it or when doing so is not otherwise in the interests of Huntington or our shareholders or creditors. The Federal Reserve may require a BHC to make capital injections into a troubled subsidiary bank and may charge the BHC with engaging in unsafe and unsound practices if the BHC fails to commit resources to such a subsidiary bank or if it undertakes actions that the Federal Reserve believes might jeopardize the BHC’s ability to commit resources to such subsidiary bank.
Under these requirements, Huntington may in the future be required to provide financial assistance to the Bank should it experience financial distress. Capital loans by Huntington to the Bank would be subordinate in right of payment to deposits and certain other debts of the Bank. In the event of Huntington’s bankruptcy, any commitment by Huntington to a federal bank regulatory agency to maintain the capital of the Bank would be assumed by the bankruptcy trustee and entitled to a priority of payment.
FDIC as Receiver or Conservator of Huntington
Upon the insolvency of an insured depository institution, such as the Bank, the FDIC may be appointed as the conservator or receiver of the institution. Under the Orderly Liquidation Authority, upon the insolvency of a BHC, such as Huntington, the FDIC may be appointed as conservator or receiver of the BHC, if certain findings are made by the FDIC, the Federal Reserve, and the Secretary of the Treasury, in consultation with the President. Acting as a conservator or receiver, the FDIC would have broad powers to transfer any assets or liabilities of the institution without the approval of the institution’s creditors.
Depositor Preference
The FDIA provides that, in the event of the liquidation or other resolution of an insured depository institution, including the Bank, the claims of depositors of the institution (including the claims of the FDIC as subrogee of insured depositors) and certain claims for administrative expenses of the FDIC as a receiver would have priority over other general unsecured claims against the institution. If the Bank were to fail, insured and uninsured depositors, along with the FDIC, would have priority in payment ahead of unsecured, non-deposit creditors, including Huntington, with respect to any extensions of credit they have made to such insured depository institution.
Transactions between a Bank and its Affiliates
Federal banking laws and regulations impose qualitative standards and quantitative limitations upon certain transactions between a bank and its affiliates, including between a bank and its holding company and companies that the BHC may be deemed to control for these purposes. Transactions covered by these provisions must be on arm’s-length terms and cannot exceed certain amounts which are determined with reference to the Bank’s regulatory capital. Moreover, if the transaction is a loan or other extension of credit, it must be secured by collateral in an amount and quality expressly prescribed by statute, and if the affiliate is unable to pledge sufficient collateral, the BHC may be required to provide it. The coverage and scope of these requirements apply to the credit exposure arising under derivative transactions, repurchase and reverse repurchase agreements, and securities borrowing and lending transactions. Federal banking laws also place similar restrictions on loans and other extensions of credit by FDIC-insured banks, such as the Bank, and their subsidiaries to their directors, executive officers, and principal shareholders.
2025 Form 10-K 19

Table of Contents

Lending Standards and Guidance
The federal bank regulatory agencies have adopted uniform regulations prescribing standards for extensions of credit that are secured by liens or interests in real estate or made for the purpose of financing permanent improvements to real estate. Under these regulations, all insured depository institutions, such as the Bank, must adopt and maintain written policies establishing appropriate limits and standards for extensions of credit that are secured by liens or interests in real estate or are made for the purpose of financing permanent improvements to real estate. These policies must establish loan portfolio diversification standards, prudent underwriting standards (including loan-to-value limits) that are clear and measurable, loan administration procedures, and documentation, approval, and reporting requirements. The real estate lending policies must reflect consideration of the federal bank regulatory agencies’ Interagency Guidelines for Real Estate Lending Policies.
Heightened Governance and Risk Management Standards
The OCC has published guidelines to set expectations for the governance and risk management practices of national banks with total assets equal to or greater than $50 billion, including the Bank. The guidelines require covered institutions to establish and adhere to a written governance framework in order to manage and control their risk-taking activities. In addition, the guidelines provide standards for the institutions’ boards of directors to oversee the risk governance framework. As discussed in the “ Risk Management and Capital ” section of the MD&A, the Bank currently has a written governance framework and associated controls.
On December 23, 2025, the OCC issued a notice of proposed rulemaking that would increase the threshold at which the heightened standards apply from $50 billion to $700 billion in total assets. If finalized as proposed, the Bank would no longer be subject to the OCC's heightened standards unless the OCC made a determination to apply some or all of the heightened standards to the Bank.
Anti-Money Laundering
The Bank Secrecy Act, as amended by the Patriot Act and Anti-Money Laundering Act of 2020, contains anti-money laundering and financial transparency provisions intended to detect and prevent the use of the U.S. financial system for money laundering and terrorist financing activities. The Bank Secrecy Act requires financial institutions such as depository institutions to undertake activities, including maintaining an AML program, verifying the identity of customers, verifying the identity of certain beneficial owners for legal entity customers, monitoring for and reporting suspicious transactions, reporting on cash transactions exceeding specified thresholds, and responding to requests for information by regulatory authorities and law enforcement agencies. The Bank is subject to the Bank Secrecy Act and, therefore, is required to implement compliance policies, procedures, and internal controls, provide its employees with AML training, designate an AML compliance officer, and undergo periodic independent auditing and testing to assess the effectiveness of its AML program, among other requirements. The Bank has implemented an AML compliance program, including policies, procedures, and internal controls that are designed to comply with these AML requirements. Bank regulators continue to focus their examinations on AML compliance, and we will continue to monitor and augment, where necessary, our AML compliance programs, including the Bank’s. The federal banking agencies are required, when reviewing bank and BHC acquisition or merger applications, to take into account the effectiveness of the AML activities of the applicant.
The Anti-Money Laundering Act of 2020, enacted as part of the National Defense Authorization Act, requires the U.S. Treasury to issue National Anti-Money Laundering and Countering the Financing of Terrorism Priorities, and conduct studies and issue regulations that may, over the next few years, significantly alter some of the due diligence, recordkeeping, and reporting requirements that the Bank Secrecy Act imposes on banks. The Anti-Money Laundering Act of 2020 also contains provisions that promote increased information-sharing and use of technology and increases penalties for violations of the Bank Secrecy Act and includes whistleblower incentives, both of which could increase the prospect of regulatory enforcement.
20 Huntington Bancshares Incorporated

Table of Contents

OFAC Regulation
OFAC is the primary U.S. regulatory authority responsible for administering economic sanctions that affect transactions with designated foreign countries and territories, nationals, and others, as defined by various Executive Orders and in various legislation. OFAC-administered sanctions take many different forms. For example, sanctions may include: (1) restrictions on trade with or investment in a sanctioned country or territory, including prohibitions against direct or indirect imports from and exports to a sanctioned country or territory, and prohibitions on U.S. persons engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country or territory; and (2) a blocking of assets in which the government or “specially designated nationals” of the sanctioned country or territory, or other sanctioned individuals or entities, have an interest by prohibiting transfers of property subject to U.S. jurisdiction, including property in the possession or control of U.S. persons. OFAC also publishes lists of blocked or designated persons, organizations, and entities, including the Specially Designated Nationals and Blocked Persons List. Blocked assets, for example property and bank deposits, cannot be paid out, withdrawn, set off, or transferred in any manner without a license from OFAC. Failure to comply with these sanctions could have serious legal and reputational consequences. Other jurisdictions and multilateral bodies also administer and impose sanctions.
Cybersecurity and Data Privacy
Federal and state legislation and regulations contain extensive cybersecurity and data privacy provisions. Our regulatory agencies including the CFPB, FDIC, Federal Reserve, and OCC also have oversight over us, the Bank, and our subsidiaries with respect to cybersecurity and data privacy. Huntington and its subsidiaries are subject to the rules and regulations promulgated under the authority of the CFPB and Federal Trade Commission, which regulates unfair or deceptive acts or practices, including with respect to cybersecurity and data privacy. Further, the GLBA, and its regulations such as Regulation P and Regulation S-P, require financial institutions to disclose their data privacy policies and practices relating to sharing personal information and enables retail customers to opt out of our ability to share their personal information with unaffiliated third parties under certain circumstances. The GLBA and its regulations require financial institutions to implement a comprehensive information security program that includes administrative, technical, and physical safeguards to ensure the security and confidentiality of customer records and information. An amendment to Regulation S-P, was adopted by the SEC on May 16, 2024 and requires registered investment advisers and broker-dealers to, among other things, adopt and implement an incident response program as part of their formal cybersecurity policies and procedures and report data breaches to affected individuals whose sensitive customer information was, or is reasonably likely to have been, accessed or used without authorization within 30 days of becoming aware of such data breach. Federal law also makes it a criminal offense, except in limited circumstances, to obtain or attempt to obtain customer information of a financial nature by fraudulent or deceptive means. Moreover, the U.S. Congress has recently considered, and will likely in the future consider, various proposals for more comprehensive cybersecurity and data privacy legislation, to which we may be subject if passed.
Like other lenders, the Bank and other of our subsidiaries also use credit bureau data in their underwriting activities. Use of such data is regulated under the FCRA, and the FCRA also regulates reporting information to credit bureaus, prescreening individuals for credit offers, sharing of information between affiliates, and using affiliate data for marketing purposes. Similar state laws may impose additional requirements on us and our subsidiaries.
2025 Form 10-K 21

Table of Contents

The CISA is intended to improve cybersecurity in the U.S. by enhanced sharing of information about security threats among the U.S. government and private sector entities, including financial institutions, and empowers the CISA Agency to oversee this information-sharing process. The CISA also authorizes companies to monitor their own systems notwithstanding any other provision of law and allows companies to carry out defensive measures on their own systems from cyber-attacks or other information or security breaches. The law includes liability protections for companies that share cyber-threat information with third parties so long as such sharing activity is conducted in accordance with the CISA. Although the CISA originally expired on September 30, 2025 and was temporarily reauthorized to remain in effect through January 30, 2026, the long-term status of the CISA remains uncertain pending further action by the U.S. Congress. In addition, the enactment of the CIRCIA in 2022, once rulemaking is complete, will require, among other things, certain companies to report significant cyber incidents to the CISA Agency within 72 hours from the time the company reasonably believes the incident occurred (and within 24 hours of making a ransom payment as a result of a ransomware attack). On April 4, 2024, the CISA Agency proposed a rule under the CIRCIA that would clarify the scope of cyber incidents to be reported and would further define covered entities subject to the CIRCIA to expressly include companies in the financial services industry that are required to report cyber incidents to their primary federal regulators. Although the CIRCIA originally required the CISA Agency to finalize its regulations by October 4, 2025, the CISA Agency has extended such deadline to May 2026.
In addition, the Federal Reserve, OCC, and FDIC require, among other things, a banking organization to notify its primary federal regulator as soon as possible and within 36 hours after identifying a “computer-security incident” that the banking organization believes in good faith could materially disrupt, degrade, or impair its business or operations in a manner that would, among other things, jeopardize the viability of its operations, result in customers being unable to access their deposit and other accounts, result in a material loss of revenue, profit, or franchise value, or pose a threat to the stability of the U.S. financial sector.
Cybersecurity and data privacy are also areas of increasing state legislative focus. For example, under California state law, the CCPA broadly defines personal information and substantially increases the rights of California residents to understand how their personal information is collected, used, and otherwise processed by commercial businesses, such as affording them the right to access and request deletion of their information and to opt out of certain sharing and sales of personal information. The CCPA contemplates civil penalties of up to $2,500 for each violation and up to $7,500 for each intentional violation and includes a private right of action (permitting lawsuits to be brought by private individuals instead of the state Attorney General or other government actor for certain breaches). Numerous other states have enacted, or are considering enacting, comprehensive data privacy laws that share similarities with the CCPA. In addition, laws in all 50 U.S. states require businesses to provide notice under certain circumstances to consumers whose personal information has been disclosed as a result of a data breach.
Our cybersecurity and data privacy policies and procedures for the protection of personal information are in effect across all businesses and geographic locations as applicable. See Item 1 C : C ybersecurity for a discussion of our cybersecurity risk management and strategy and cybersecurity governance framework.
FDIC Insurance
The DIF provides insurance coverage for certain deposits, up to a standard maximum deposit insurance amount of $250,000 per depositor, and is funded through assessments on insured depository institutions, based on the risk each institution poses to the DIF. The Bank accepts customer deposits that are insured by the DIF and, therefore, must pay insurance premiums. The FDIC may increase the Bank’s insurance premiums based on various factors, including the FDIC’s assessment of its risk profile.
The FDIC also requires large insured depository institutions, including the Bank, to maintain enhanced deposit account recordkeeping and related information technology system capabilities to facilitate prompt payment of insured deposits if such an institution were to fail.
22 Huntington Bancshares Incorporated

Table of Contents

The FDIC, as required under the FDIA, established a plan on September 15, 2020, to restore the DIF reserve ratio to meet or exceed the statutory minimum of 1.35% within eight years. This plan did not include an increase in the deposit insurance assessment rate. Based on the FDIC’s recent projections, however, the FDIC determined that the DIF reserve ratio is at risk of not reaching the statutory minimum by the statutory deadline of September 30, 2028 without increasing the deposit insurance assessment rates. In October 2022, the FDIC adopted a final rule to increase initial base deposit insurance assessment rate schedules uniformly by 2 basis points, beginning on January 1, 2023. The FDIC also concurrently maintained the Designated Reserve Ratio for the DIF at 2%.
In November 2023, the FDIC issued a final rule to implement a special assessment to recoup losses to the DIF associated with bank failures in the first half of 2023. Under the final rule, the assessment base for the special assessment is equal to an insured depository institution’s estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion of uninsured deposits. On December 16, 2025, the FDIC issued an interim final rule providing that the FDIC will collect the special assessment over an initial seven quarters of the collection period, which began in the second quarter of 2024, at a quarterly rate of 3.36 basis points, and reduce the rate which the special assessment will be collected in the eighth collection quarter, which will have an invoice payment date of March 30, 2026, to 2.97 basis points. Under the interim final rule, upon termination of the FDIC’s receiverships of Silicon Valley Bank and Signature Bank, the FDIC will either provide an offset to insured depository institutions, if the special assessment amount then-collected exceeds losses, or collect from insured depository institutions a one-time final shortfall special assessment, if losses exceed the special assessment amount then-collected. In addition, the FDIC will provide an offset to regular quarterly deposit insurance assessments for banks subject to the special assessment if, following the final resolution of litigation between the FDIC and SVB Financial Trust, the total amount collected through the special assessment exceeds the loss estimate at that time.
Compensation
Our compensation practices are subject to oversight by the Federal Reserve and, with respect to some of our subsidiaries and employees, by other financial regulatory bodies. The scope and content of compensation regulation in the financial industry are continuing to develop, and we expect that these regulations and resulting market practices will continue to evolve over a number of years.
The federal bank regulatory agencies have issued joint guidance on executive compensation designed to ensure that the incentive compensation policies of banking organizations, such as Huntington and the Bank, do not encourage imprudent risk taking and are consistent with the safety and soundness of the organization. The SEC has a rule that directs stock exchanges to require listed companies to implement clawback policies to recover incentive-based compensation from current or former executive officers in the event of certain financial restatements and requires companies to disclose their clawback policies and their actions under those policies.
Community Reinvestment Act
The CRA is intended to encourage banks to help meet the credit needs of their service areas, including low- and moderate-income neighborhoods, consistent with safe and soundness practices. The relevant federal bank regulatory agency, the OCC in the Bank’s case, examines each bank and assigns it a public CRA rating. A bank’s record of fair lending compliance is part of the resulting CRA examination report.
The CRA requires the relevant federal bank regulatory agency to consider a bank’s CRA assessment when considering the bank’s application to conduct certain mergers or acquisitions or to open or relocate a branch office. The Federal Reserve also must consider the CRA record of each subsidiary bank of a BHC in connection with any acquisition or merger application filed by the BHC. An unsatisfactory CRA record could substantially delay or result in the denial of an approval or application by Huntington or the Bank. The Bank received the highest possible overall CRA rating of “Outstanding” in its most recent examination.
In October 2023, the U.S. banking agencies issued a final rule to amend their regulations implementing the CRA. In July 2025, the federal banking agencies issued a notice of proposed rulemaking, which, if finalized, would rescind the CRA final rule issued in October 2023 and reinstate that CRA framework that existed prior to the issuance of that rule. Implementation of the October 2023 final rule, which was subject to an injunction and has not taken effect, would have materially changed the CRA framework, including imposing additional costs and changing how CRA performance would be assessed.
2025 Form 10-K 23

Table of Contents

Debit Interchange Fees
We are subject to a statutory requirement that interchange fees for electronic debit transactions that are paid to or charged by payment card issuers, including the Bank, be reasonable and proportional to the cost incurred by the issuer. Interchange fees for electronic debit transactions are limited to 21 cents plus 0.05% of the transaction, plus an additional one cent per transaction fraud adjustment. These fees impose requirements regarding routing and exclusivity of electronic debit transactions. As an issuer with over $10 billion in assets, the Bank is subject to, and in compliance with, Regulation II, which requires, among other things, that debit card issuers should enable all debit card transactions, including card-not-present transactions such as online payments, to be processed on at least two unaffiliated payment card networks.
In October 2023, the Federal Reserve released a notice of proposed rulemaking that would lower the maximum interchange fee that a large debit card issuer can receive on a debit card transaction. Under the proposal, the Federal Reserve would set the components of the maximum interchange fee to amounts lower than those in the currently applicable Regulation II. In addition, the proposal would adopt an approach for future adjustments to the interchange fee cap, which would occur every other year based on issuer cost data gathered from large debit card issuers.
Consumer Protection Regulation and Supervision
We are subject to supervision and regulation by the CFPB with respect to federal consumer protection laws. We are also subject to certain state consumer protection laws, and under the Dodd-Frank Act, state attorneys general and other state officials are empowered to enforce certain federal consumer protection laws and regulations. State authorities have increased their focus on and enforcement of consumer protection rules. These federal and state consumer protection laws apply to a broad range of our activities and to various aspects of our business and include laws relating to interest rates, fair lending, disclosures of credit terms and estimated transaction costs to consumer borrowers, debt collection practices, the use of and the provision of information to consumer reporting agencies, and the prohibition of unfair, deceptive, or abusive acts or practices in connection with the offer, sale, or provision of consumer financial products and services.
In May 2025, President Trump signed a Congressional Review Act resolution that overturned the CFPB’s December 2024 final rule, which would have taken effect October 1, 2025 and imposed certain requirements on overdraft fees, similar to those that apply to credit cards, unless the financial institution limited the amount of overdraft fees to the higher of the amount of costs and losses to provide overdraft services or $5.00.

Corporate Responsibility
The responsible way in which we operate our Company enables us to live Our Purpose of making people’s lives better, helping businesses thrive, and strengthening the communities we serve. We use the platform of Corporate Responsibility to help describe and report on the work we do every day to deliver value for our stakeholders.
As a public company, our economic impact begins with our commitment to creating sustainable, long-term shareholder value through top-tier performance, while maintaining an aggregate moderate-to-low, through-the-cycle risk appetite and a well-capitalized position.
As a regional bank, our economic impact includes helping individuals and families reach their goals of financial stability and homeownership; providing businesses, especially small and mid-sized businesses, with the resources to grow; serving and supporting the underbanked; and working in partnership to create more prosperous and resilient communities.
24 Huntington Bancshares Incorporated

Table of Contents

Governance and Ethics
With oversight from our Board of Directors and in furtherance of our business strategy, we are committed to implementing strong Corporate Responsibility practices. The following represents our integrated governance structure with respect to Corporate Responsibility:

Board of Directors

Nominating and Corporate Governance Committee
Audit Committee
Human Resource and Compensation Committee
Technology Committee
Risk Oversight Committee

    ò

CEO/Executive Leadership Team

Risk Management Committee Disclosure Review Committee

Each Board-level committee provides oversight of Corporate Responsibility matters as it pertains to their specific areas of expertise and focus. Further, Corporate Responsibility is incorporated throughout our risk management structure.
Our Board of Directors and ELT are committed to executing on our long-term vision and aligning our strategic objectives with the interests of our stakeholders. Our Board members are accomplished leaders, bringing the perspectives, skills, experience, and independent judgment necessary to provide effective oversight and drive continued success. Our Board oversees and approves the strategy, risk appetite, and Code of Business Conduct & Ethics for the entire organization. Our ELT operates our business and enterprise functions with high legal, ethical, and moral standards through clearly stated policies and procedures. Additionally, our leaders set the tone at the top and oversee compliance with our standards and direct the Company’s financial reporting and internal controls.
At the end of 2025, our Board consisted of 12 directors, comprised of our Chairman/President/CEO of Huntington Bancshares Incorporated and President/CEO of Huntington National Bank, our Huntington National Bank Chairman, and 10 independent directors. In connection with the Cadence acquisition, we appointed three new directors, all former directors of Cadence, including two independent directors. Our key risk and governance committees are comprised of a minimum of three independent directors and are chaired by an independent director with the knowledge and expertise to lead the committee. Each year, the Board evaluates its leadership organization to ensure it is best structured to provide oversight of the Company and execute against our strategy objectives.
Corporate Responsibility and Sustainability Executive
Our Corporate Responsibility and Sustainability Executive, who reports to our General Counsel, is responsible for advancing the enterprise corporate responsibility strategy and facilitating its implementation at the business levels, driving a consistent understanding of the strategy throughout the Company, leading regulatory compliance efforts, and overseeing goal setting (when appropriate), reporting, and monitoring. The Corporate Responsibility and Sustainability Executive also identifies innovation and advancement opportunities aligned with strategic planning.
Chief Risk Officer
Our Chief Risk Officer is responsible for providing regular updates on risk management issues to the Board’s Risk Oversight Committee, which could include climate-related credit risks.
Community Development
We are committed to delivering sustainable, long-term shareholder value through financial performance, while maintaining an aggregate moderate-to-low risk appetite and a well-capitalized position. We align our corporate strategy to our purpose of helping others and building upon our market-leading, purpose-driven bank through focused efforts on the environmental and social issues most important to our business and our stakeholders.
2025 Form 10-K 25

Table of Contents

In June 2021, we made a five-year $40 billion commitment toward our Community Plan to strengthen small businesses and foster opportunity throughout our footprint. Our Community Plan was developed to support communities by enabling and improving financial opportunities for people, businesses, and neighborhoods through commitments focusing on increasing lending, investing, and services to address areas of need. We have exceeded our commitment through 2025.
Environmental
Huntington supports environmental stewardship, including our commitment to reducing our reliance on natural resources. Our path to a more sustainable future is guided by our environmental and climate strategies, transitioning to renewable sources of energy, improving our energy efficiency, maintaining our renewable energy financing capabilities, and preparing for future regulatory and reporting requirements.
We report our commitment to environmental stewardship in our annual Climate Report, which can be found on our Investor Relations website under the heading “Corporate Responsibility”. The contents of our website, including our Climate Report, are not incorporated by reference into this report.
Human Capital and Inclusion
Huntington aspires to be a Category of One financial services institution: an organization that uniquely combines its culture and performance. Huntington had 20,424 average full-time equivalent colleagues during 2025, whom we encourage to support a shared purpose of making our colleagues’ and customers’ lives better, helping businesses thrive, and strengthening the communities we serve. We believe that our culture enriches the experience of colleagues, enhances our ability to perform as a company, and makes us a destination employer.
We engage with our colleagues to gain valuable feedback on a wide range of subjects related to the experience of working at Huntington, with a strategic focus on culture, trust, and engagement. We value the feedback colleagues choose to share and use the information which focuses on four key areas:
• Engagement
• Development
• Retention, and
• Attraction of talent
Engagement
At Huntington, we have highly engaged colleagues committed to looking out for each other and our customers with a balanced focus on “what we do” and “how we do it.” This synergy has proven to positively impact colleague performance and satisfaction. 2025 marked the eleventh consecutive year we conducted a company-wide engagement survey to measure our colleagues’ experience with a strategic focus on culture, trust, and engagement – and the results were reaffirming. In 2025, 85%, 83%, and 83% of colleagues responded favorably on trust, culture, and engagement, respectively. These results place Huntington in the top quartile of favorability for Culture and Trust among our benchmark peer group. 82% of colleagues responded they would recommend Huntington as a great place to work.
The annual company-wide engagement survey is just one element of our continual colleague feedback program, which includes a variety of listening strategies and surveys. These surveys enhance leader understanding of the colleague experience, position Huntington to respond to colleague needs, and provide strong support to colleagues as they deliver performance in the spirit of our Purpose and Values.
At Huntington, living our shared Purpose extends beyond our daily work. We believe that building connections between colleagues, their families, and our communities creates a meaningful, fulfilling, and inclusive colleague experience. During 2025, Huntington colleagues provided nearly 30,000 volunteer hours to approximately 1,200 organizations across our footprint, including foodbanks, homeless shelters, local schools, senior housing, and afterschool programs.
Our commitment to creating an inclusive environment involves embracing different skills, backgrounds, and perspectives, both in our communities and at work. We execute this strategy in multiple ways, including community engagement and through Inclusion Councils, Business Resource Groups, and Communities of Practice to support our commitment to engage, develop, retain, and attract talent.
26 Huntington Bancshares Incorporated

Table of Contents

Development
We have created specialized programs to help our colleagues grow and develop. These programs include an online library that allows colleagues to take ownership of their development via direct access to role-based content. The content is divided into three key areas of development: learning and growth, maximizing performance, and protecting the company. During 2025, colleagues at Huntington completed over 500,000 training hours. Huntington also provided several top talent development programs so that colleagues may further develop and accelerate their career growth. Additionally, we offer our full-time colleagues the ability to obtain post-secondary education with reimbursement of eligible tuition, including through two arrangements where tuition is reimbursed in advance. In addition to these programs, Huntington has also launched a program to capture the skills of all colleagues and match colleagues to internal job opportunities based on those skills.
Retention
Huntington is committed to maintaining a culture where everyone feels welcome, safe, and respected - empowering colleagues to perform at their best. With respect to pay, Huntington offers a minimum hourly rate of $21 per hour and competitive wages at all levels of the organization that we regularly benchmark against the marketplace. Our compensation structure includes benefit plans and programs focused on multiple facets of well-being, including physical, mental, and financial wellness. We also offer Workplace Flex, a program designed to help colleagues to achieve a healthy balance between work and life outside of work. The program includes, when available and appropriate: flexible scheduling (staggered hours, compressed workweeks, part-time schedules, and job-sharing), flexible work location (remote and in-office), and both health and financial wellness support beyond the basic medical/visual/dental programs (adoption and fertility, parental leave, on-site fitness and fitness discounts, mental health and financial counseling services, and support for chronic conditions).
We continue to identify and implement effective practices to promote pay equity, in compliance with laws. Huntington conducts a pay equity analysis annually, evaluating pay for colleagues performing the same work, designed to ensure equity.
Huntington’s inclusive and caring culture is one of the ways we continue to position Huntington as the country’s leading people-first, customer-centered bank.
Collectively, these strategies create a colleague experience that entices colleagues to stay and fulfill their goals with Huntington.
Attraction of Talent
We are dedicated to attracting highly talented colleagues and becoming a destination employer. We embrace a talent attraction model that supports our mission to provide every candidate and hiring manager with an exceptional experience that aligns with our people-first culture. Our Purpose Driven Hiring process is integrated into our leadership development program, which is designed for new leaders within their first 90 days of employment. Purpose Driven Hiring supports our approach to hiring for alignment with Huntington’s leadership behaviors, values, and skills, creating a streamlined, repeatable process that promotes fair treatment for all. We have made investments, including revamping our career site and leveraging a candidate management platform, to enhance communication that elevates the hiring experience for candidates, hiring managers, and recruiters alike. These practices will allow us to secure highly talented colleagues that will help shape our future.

Available Information
We are subject to the informational requirements of the Exchange Act and, in accordance with the Exchange Act, we file annual, quarterly, and current reports, proxy statements, and other information with the SEC. The SEC maintains a website that contains reports, proxy statements, and other information about issuers, like us, who file electronically with the SEC. The address of the website is http://www.sec.gov. The reports and other information, including any related amendments, filed by us with, or furnished by us to, the SEC are also available free of charge on the Investor Relations portion of our website as soon as reasonably practicable after such material is electronically filed with, or furnished to, the SEC. The address of the website is http://www.ir.huntington.com. Except as specifically incorporated by reference into this Annual Report on Form 10-K, information on those websites is not part of this report. Our reports, proxy statements, and other information about us is also available for inspection at the offices of the Nasdaq National Market at 33 Whitehall Street, New York, New York 10004.
2025 Form 10-K 27

Table of Contents

Item 1A: Risk Factors

Risk Factors Summary
The following is a summary of material risks that could adversely affect Huntington’s business, financial condition, results of operation, or business.
Credit Risks
• Our ACL level may prove to not be adequate or be negatively affected by credit risk exposures, which could adversely affect our net income and capital.
• Weakness in economic conditions could adversely affect our business.
• Our emphasis on commercial lending may expose us to increased lending risks.
Market Risks
• Changes in interest rates could reduce our net interest income, reduce transactional income, and negatively impact the value of our loans, securities, and other assets. This could have an adverse impact on our cash flows, financial condition, results of operations, and capital.
• Inflation could negatively impact our business, our profitability, and our stock price.
• Industry competition may have an adverse effect on our success.
Liquidity Risks
• Changes in Huntington’s financial condition or in the general banking industry, or changes in interest rates, could result in a loss of depositor confidence.
• We are a holding company and depend on dividends from our subsidiaries for liquidity needs.
• If we lose access to capital markets, we may not be able to meet the cash flow requirements of our depositors, creditors, and borrowers, or have the operating cash needed to fund corporate expansion and other corporate activities.
• A reduction in our credit rating could adversely affect our access to capital and could increase our cost of funds.
• Instability in global economic conditions and geopolitical matters, as well as volatility in financial markets, could have a material adverse effect on our results of operations and financial condition.
Operational Risks
• Our operational or security systems or infrastructure, or those of third parties, could fail or be breached, which could disrupt our business and adversely impact our operations, liquidity, and financial condition, as well as cause legal or reputational harm.
• We face risks from cyber-attacks and other information or security breaches, including denial of service attacks, hacking, social engineering attacks targeting our colleagues, contractors, and customers, malware intrusion or data corruption attempts, and identity theft that could result in the disclosure of confidential, proprietary, personal and other information, any of which could adversely affect our business or reputation, and create significant legal and financial exposure.
• We face significant operational risks which could lead to financial loss, expensive litigation, and loss of confidence by our customers, regulators, and capital markets.
• We grow our business in part by acquiring, from time to time, other financial services businesses and businesses with technologies or other assets valuable to us. Acquisitions present several risks and uncertainties related both to the acquisition transactions themselves and to the integration of the acquired businesses into Huntington after closing.
• Failure to maintain effective internal controls over financial reporting could impair our ability to accurately and timely report our financial results or prevent fraud, resulting in loss of investor confidence and adversely affecting our business and our stock price.
• We rely on quantitative models to measure risks and to estimate certain financial values.
• We rely on third parties to provide key components of our business infrastructure.
28 Huntington Bancshares Incorporated

Table of Contents

• Changes in accounting policies, standards, and interpretations could affect how we report our financial condition and results of operations.
• Impairment of goodwill could require charges to earnings, which could result in a negative impact on our results of operations.
• Climate change manifesting as physical or transition risks could adversely affect our operations, businesses, and customers.
• We use AI in connection with our business and operations, which exposes us to inherent risks that may expose us to material harm.
Compliance Risks
• We operate in a highly regulated industry, and the laws and regulations that govern our operations, corporate governance, executive compensation and financial accounting, or reporting, including changes in them, or our failure to comply with them, may adversely affect us and our business model.
• Legislative and regulatory actions taken now or in the future that impact the financial industry may materially adversely affect us by increasing our costs, adding complexity in doing business, impeding the efficiency of our internal business processes, negatively impacting the recoverability of certain of our recorded assets, requiring us to increase our regulatory capital, limiting our ability to pursue business opportunities, and otherwise resulting in a material adverse impact on our financial condition, results of operation, liquidity, or stock price.
• The resolution of significant pending litigation, if unfavorable, could have an adverse effect on our results of operations for a particular period.
• Noncompliance with the Bank Secrecy Act and other anti-money laundering statutes and regulations could cause us material financial loss.
• Cybersecurity and data privacy are areas of heightened legislative and regulatory focus.
Strategic Risks
• We operate in a highly competitive industry which depends on our ability to successfully execute our strategic plan and adapt our products and services to evolving industry standards and consumer preferences.
• We depend on our executive officers and key personnel to continue the implementation of our long-term business strategy and could be harmed by the loss of their services.
• Bank regulations regarding capital and liquidity, including the CCAR assessment process and the U.S. Basel III capital and liquidity standards, could require higher levels of capital and liquidity. Among other things, these regulations could impact our ability to pay common stock dividends, repurchase common stock, attract cost-effective sources of deposits, or require the retention of higher amounts of low yielding securities.
Reputational Risk
• Damage to our reputation could significantly harm our business, including our competitive position and business prospects.
Cadence Merger Risks
• We are expected to incur substantial costs related to the Cadence Merger and integration.
• Combining Huntington and Cadence may be more difficult, costly or time consuming than expected and Huntington and Cadence may fail to realize the anticipated benefits of the Cadence Merger.
• The future results of the combined company following the Cadence Merger may suffer if the combined company does not effectively manage its expanded operations.
• The combined company may be unable to retain Huntington or Cadence personnel successfully.
2025 Form 10-K 29

Table of Contents

The risks and uncertainties listed below present risks that could have a material impact on Huntington’s financial condition, results of operations, or its business. Some of these risks and uncertainties are interrelated and the occurrence of one or more of them may exacerbate the effect of others. The risks and uncertainties described below are not the only ones Huntington faces. Additional risks and uncertainties not presently known to Huntington or that Huntington believes to be immaterial may also adversely affect its business. Additionally, refer to factors set forth under the caption “Forward-Looking Statements.” For more information on how we manage risks, see discussion in the “ Risk Management ” section of our MD&A.
In addition to the other information included or incorporated by reference into this report, readers should carefully consider that the following important factors, among others, could negatively impact our business, future results of operations, and future cash flows materially.

Credit Risks:
Our ACL level may prove to not be adequate or be negatively affected by credit risk exposures, which could adversely affect our net income and capital.
Our business depends on the creditworthiness of our customers. Our ACL of $2.7 billion at December 31, 2025, represented management’s estimate of the current expected losses in our loan and lease portfolio (ALLL), as well as our unfunded lending commitments (AULC). We regularly review our ACL for appropriateness. In doing so, we consider probability of default, loss given default, and exposure at default depending on economic parameters for each month of the remaining contractual term of the credit exposure. The economic parameters are developed using available information relating to past events, current conditions, and reasonable and supportable forecasts. There is no certainty that our ACL will be appropriate over time to cover lifetime losses of the portfolio because of unanticipated adverse changes in the economy, market conditions, or events adversely affecting specific customers, industries, or markets. If the credit quality of our customer base materially decreases, if the risk profile of a market, industry, or group of customers changes materially, or if the ACL is not appropriate, our net income and capital could be materially adversely affected, which could have a material adverse effect on our financial condition and results of operations.
In addition, regulatory review of risk ratings and loan and lease losses may impact the level of our ACL and could have a material adverse effect on our financial condition and results of operations.
Weakness in economic conditions could adversely affect our business.
Continued economic uncertainty and a recessionary or stagnant economy could adversely affect our business, financial condition, and results of operations. Our performance could be negatively affected to the extent there is deterioration in business and economic conditions, including persistent inflation, rising interest rates, supply chain issues, labor shortages, or changes in U.S. trade policies, including the imposition of tariffs and retaliatory tariffs, which have direct or indirect material adverse impacts on us, our customers, and our counterparties. These conditions could result in one or more of the following:
• A decrease in the demand for loans and other products and services offered by us;
• A decrease in customer savings generally, and in the demand for savings and investment products offered by us;
• An increase in the number of customers and counterparties who become delinquent, file for protection under bankruptcy laws, or default on their loans or other obligations to us; and
• An increase in the number of delinquencies, bankruptcies, or defaults could result in a higher level of NPAs, NCOs, provision for credit losses, and valuation adjustments on loans held for sale.
The markets we serve are dependent on industrial and manufacturing businesses and, thus, are particularly vulnerable to adverse changes in economic conditions affecting these sectors.
30 Huntington Bancshares Incorporated

Table of Contents

A U.S. government debt default would have a material adverse impact on our business and financial performance, including a decrease in the value of Treasury bonds and other government securities held by us, which could negatively impact Huntington’s and the Bank’s capital positions and their ability to meet regulatory requirements. Other negative impacts of a U.S. government debt default, budget deficit concerns, government shutdown, or related credit ratings downgrades could include volatile capital markets, an adverse impact on the U.S. economy and the U.S. dollar, as well as increased default rates among borrowers in light of increased economic uncertainty. Some of these impacts might occur even in the absence of an actual default or government shutdown as a consequence of extended political negotiations around the threat of such a default or government shutdown.
Our emphasis on commercial lending may expose us to increased lending risks.
At December 31, 2025, 60% of our loan portfolio was comprised of loans in our commercial loan portfolio, which includes commercial and industrial loans, commercial real estate loans, and lease financing. While commercial loans are generally more interest rate sensitive and carry higher yields than residential mortgage loans, these types of loans generally expose a lender to greater risk of non-payment and loss than single-family residential mortgage loans because repayment of the loans often depend on the income stream of the borrowers or successful operation of the property. Such loans typically involve larger loan balances to single borrowers or groups of related borrowers compared to single-family residential mortgage loans. At December 31, 2025, we had $1.7 billion of reserves specifically allocated to loans in our commercial loan portfolio. We also monitor loan concentrations on an individual relationship and industry wide basis to evaluate the amount of risk we have in our loan portfolio.

Market Risks:
Changes in interest rates could reduce our net interest income, reduce transactional income, and negatively impact the value of our loans, securities, and other assets. This could have an adverse impact on our cash flows, financial condition, results of operations, and capital.
Our results of operations depend substantially on net interest income, which is the difference between interest earned on interest earning assets (such as investments and loans) and interest paid on interest bearing liabilities (such as deposits and borrowings). Interest rates are highly sensitive to many factors, including governmental monetary policies, inflation, and domestic and international economic and political conditions. Conditions such as inflation, deflation, recession, unemployment, money supply, and other factors beyond our control may also affect interest rates. In addition, the Federal Reserve’s monetary policies, including changes in the federal funds rate and increasing or reducing the size of its balance sheet, may also affect interest rates. If our interest earning assets mature or reprice faster than interest bearing liabilities in a declining interest rate environment, our net interest income could be materially adversely impacted. Likewise, if interest bearing liabilities mature or reprice more quickly than interest earning assets in a rising interest rate environment, our net interest income could be adversely impacted.
Changes in interest rates can affect the value of loans, securities, assets under management, and other assets, including mortgage servicing rights. An increase in interest rates that adversely affects the ability of borrowers to pay the principal or interest on loans and leases may lead to an increase in NPAs and a reduction of income recognized, which could have a material adverse effect on our results of operations and cash flows. When we place a loan on nonaccrual status, we reverse any accrued but unpaid interest receivable, which decreases interest income. However, we continue to incur interest expense as a cost of funding NALs without any corresponding interest income. In addition, transactional income, including trust income, brokerage income, and gain on sales of loans, can vary significantly from period-to-period based on a number of factors, including the interest rate environment. A decline in interest rates could result in declining net interest margins if longer duration assets reprice faster than deposits.
Rising interest rates reduce the value of our fixed-rate securities. Unrealized losses from available-for-sale securities impact our OCI, shareholders’ equity, and the Tangible Common Equity ratio. Any realized securities losses impact our regulatory capital ratios. For more information, refer to “ Market Risk ” section of the MD&A.
2025 Form 10-K 31

Table of Contents

Certain investment securities, notably mortgage-backed securities, are sensitive to rising and falling interest rates. Generally, when rates rise, prepayments of principal and interest will decrease, and the duration of mortgage-backed securities will increase. Conversely, when rates fall, prepayments of principal and interest will increase, and the duration of mortgage-backed securities will decrease. In either case, interest rates have a significant impact on the value of mortgage-backed securities.
MSR fair values are sensitive to movements in interest rates, as expected future net servicing income depends on the projected outstanding principal balances of the underlying loans, which can be reduced by prepayments. Prepayments usually increase when mortgage interest rates decline and decrease when mortgage interest rates rise.
In addition to volatility associated with interest rates, the Company also has exposure to equity markets related to the investments within our benefit plans and other income from client-based transactions.
Inflation could negatively impact our business, our profitability, and our stock price.
Prolonged periods of inflation may impact our profitability by negatively impacting our fixed costs and expenses, including increasing funding costs and expense related to talent acquisition and retention. Additionally, inflation may lead to a decrease in consumer and clients’ purchasing power and negatively affect the need or demand for our products and services. If significant inflation continues, our business could be negatively affected by, among other things, increased default rates leading to credit losses which could decrease our appetite for new credit extensions. These inflationary pressures could also result in missed earnings and budgetary projections causing our stock price to suffer.
Industry competition may have an adverse effect on our success.
Our profitability depends on our ability to compete successfully. We operate in a highly competitive environment, and we expect competition to intensify. Certain of our competitors are larger and have more resources than we do, enabling them to be more aggressive than us in competing for loans and deposits. Our competitors could be made larger through merger or consolidation. In our market areas, we face competition from other banks and financial service companies that offer similar services. Some of our non-bank competitors are not subject to the same extensive regulations we are and, therefore, may have greater flexibility in competing for business. Technological advances have made it possible for our non-bank competitors to offer products and services that traditionally were banking products and for financial institutions and other companies to provide electronic and internet-based financial solutions, including mobile payments, online deposit accounts, electronic payment processing, and marketplace lending, without having a physical presence where their customers are located. Legislative or regulatory changes also could lead to increased competition in the financial services sector. Our ability to compete successfully depends on a number of factors, including customer convenience, quality of service by investing in new products and services, electronic platforms, personal contacts, pricing, and range of products. If we are unable to successfully compete for new customers and retain our current customers, our business, financial condition, or results of operations may be adversely affected. In particular, if we experience an outflow of deposits as a result of our customers seeking investments with higher yields or greater financial stability, or a desire to do business with our competitors, we may be forced to rely more heavily on borrowings and other sources of funding to operate our business and meet withdrawal demands, thereby adversely affecting our net interest margin. For more information, refer to “ Competition ” section of Item 1: Business.

Liquidity Risks:
Changes in Huntington’s financial condition or in the general banking industry, or changes in interest rates, could result in a loss of depositor confidence.
Liquidity is the ability to meet cash flow needs on a timely basis at a reasonable cost. The Bank uses its liquidity to extend credit and to repay liabilities as they become due or as demanded by customers.
32 Huntington Bancshares Incorporated

Table of Contents

Our primary source of liquidity is our large supply of deposits from consumer and commercial customers. The continued availability of this supply depends on customer willingness to maintain deposit balances with banks in general, and with us in particular. The availability of deposits can also be impacted by regulatory changes (e.g., changes in FDIC insurance, liquidity requirements, etc.), changes in the financial condition of Huntington, other banks, or the banking industry in general, changes in the interest rates our competitors pay on their deposits, and other events which can impact the perceived safety or economic benefits of bank deposits. While we make significant efforts to consider and plan for hypothetical disruptions in our deposit funding, market-related, geopolitical, or other events could impact the liquidity derived from deposits.
We are a holding company and depend on dividends from our subsidiaries for liquidity needs.
Huntington is an entity separate and distinct from the Bank. The Bank conducts most of our operations, and Huntington depends upon dividends from the Bank to service Huntington’s operating costs and to pay dividends to Huntington’s shareholders. The availability of dividends from the Bank is limited by various statutes and regulations. It is possible, depending upon the financial condition, including liquidity and capital adequacy of the Bank, and other factors, that the OCC could limit the payment of dividends or other payments to Huntington by the Bank. In addition, the payment of dividends by our other subsidiaries is also subject to the laws of the subsidiary’s state of incorporation, and regulatory capital and liquidity requirements applicable to such subsidiaries. In the event that the Bank was unable to pay dividends to us, we in turn would likely have to reduce or stop paying dividends on our Preferred and Common Stock. Our failure to pay dividends on our Preferred and Common Stock could have a material adverse effect on the market price of our Preferred and Common Stock. Additional information regarding dividend restrictions is provided in Item 1: Business - “ Regulatory Matters .”
If we lose access to capital markets, we may not be able to meet the cash flow requirements of our depositors, creditors, and borrowers, or have the operating cash needed to fund corporate expansion and other corporate activities.
Wholesale funding sources can include securitization, federal funds purchased, securities sold under repurchase agreements, brokered deposits, and long-term debt. The Bank is also a member of the FHLB, which provides members access to funding through advances collateralized with mortgage-related assets. We maintain a portfolio of highly rated, marketable securities that is available as a source of liquidity.
Capital markets disruptions can directly impact the liquidity of Huntington and the Bank. Our ability to access the capital markets, if needed, will depend on a number of factors, including the state of the financial markets. Rising interest rates, disruptions in financial markets, negative perceptions of our business or our financial strength, negative perceptions of the overall banking industry or of other regional banks, or other factors may impact our ability to raise additional capital, if needed, on terms acceptable to us. For example, in the event of future turmoil in the banking industry or other idiosyncratic events, there is no guarantee that the U.S. government will invoke the systemic risk exception, create additional liquidity programs, or take any other action to stabilize the banking industry or provide liquidity. Any diminished ability to access short-term funding or capital markets to raise additional capital, if needed, could subject us to liability, restrict our ability to grow, require us to take actions that would affect our earnings negatively or otherwise adversely affect our business and our ability to implement our business plan, capital plan, and strategic goals.
A reduction in our credit rating could adversely affect our access to capital and could increase our cost of funds.
The credit rating agencies regularly evaluate Huntington and the Bank. Credit ratings are based on a number of factors, including our financial strength and ability to generate earnings, as well as factors not entirely within our control, including conditions affecting the financial services industry, the economy, and changes in rating methodologies. There can be no assurance that we will maintain our current credit ratings. A downgrade of the credit ratings of Huntington or the Bank could adversely affect our access to liquidity and capital, and could significantly increase our cost of funds, trigger additional collateral or funding requirements, and decrease the number of investors and counterparties willing to lend to us or purchase our securities. This could affect our growth, profitability, and financial condition, including liquidity.
2025 Form 10-K 33

Table of Contents

Instability in global economic conditions and geopolitical matters, as well as volatility in financial markets, could have a material adverse effect on our results of operations and financial condition.
Instability in global economic conditions and geopolitical matters, as well as volatility in financial markets, could have a material adverse effect on our results of operations and financial condition. The macroeconomic environment in the U.S. is susceptible to global events and volatility in financial markets. For example, global conflicts (including the continuing conflicts involving Ukraine and the Russian Federation and those in the Middle East) or other similar events, as well as government actions or other restrictions in connection with such events, and trade negotiations between the U.S. and other nations could adversely impact economic and market conditions for the Company and its clients and counterparties. In addition, global supply chain disruptions may cause prolonged inflation, adversely impact consumer and business confidence, and adversely affect the economy as well as our financial condition and results.

Operational Risks:
Our operational or security systems or infrastructure, or those of third parties, could fail or be breached, which could disrupt our business and adversely impact our operations, liquidity, and financial condition, as well as cause legal or reputational harm.
The potential for operational risk exposure exists throughout our business and, as a result of our interactions with, and reliance on, third parties, is not limited to our own internal operational functions. Our operational and security systems and infrastructure, including our computer systems, data management, and internal processes, as well as those of third parties, are integral to our performance. We rely on our employees and third parties in our day-to-day and ongoing operations, who may, as a result of human error, misconduct, malfeasance, failure, or breach of our or of third-party systems or infrastructure, expose us to risk. For example, our ability to conduct business may be adversely affected by any significant operational disruptions, compromises or failures of us or of third parties with which we do business or upon which we rely.
We face indirect technology, cybersecurity, data privacy and operational risks relating to the contractors, customers, clients, and other third parties with which we do business or upon which we rely to facilitate or enable our business activities, including, for example, financial counterparties, regulators, and providers of critical infrastructure such as internet access and electrical power. As a result of increasing consolidation, interdependence, and complexity of financial entities and technology systems and infrastructure, a disruption, compromise or failure that significantly degrades, damages or destroys the systems or infrastructure, or the confidential, proprietary, personal and other information stored or processed thereon, of one or more financial entities could have a material impact on counterparties or other market participants, including us. This consolidation, interconnectivity, and complexity increases the risk of operational disruption, compromise or failure. Any third-party disruption, compromise or failure, including any technology failure, cyber-attack or other information or security breach, termination, or constraint could, among other things, adversely affect our ability to effect transactions, service our clients, manage our exposure to risk, or expand our business.
Our financial, accounting, data processing, backup, or other operational or security systems and infrastructure may also fail to operate properly or become disabled or damaged as a result of a number of factors, including events that are wholly or partially beyond our control, which could adversely affect our ability to process transactions, provide services, or otherwise conduct business. Such events may include: sudden increases in customer transaction volume; electrical, telecommunications, or other major service outages; disruptions in client access to our digital platforms and mobile applications; disease pandemics; cyber-attacks or other information or security breaches; software or hardware failures; and events arising from local or larger scale political or social matters, including wars and terrorist attacks. Additional events beyond our control that could impact our business directly or indirectly include natural disasters such as wildfires, earthquakes, and weather events, including tornadoes, hurricanes, and floods. Neither the occurrence nor the potential impact of these events can be predicted, and the frequency and severity of weather events may be impacted by climate changes. In addition, we may need to take our systems or infrastructure off-line if they become subject to a cyber-attack or other information or security breach, such as becoming infected with malware or a computer virus.
34 Huntington Bancshares Incorporated

Table of Contents

We frequently update our systems and infrastructure to support our operations and growth and to remain compliant with applicable laws, rules, and regulations. These updates entail significant costs and create risks associated with implementing new systems and integrating them with existing ones, including business interruptions. Implementation and testing of controls related to our computer systems and infrastructure, security monitoring, and retaining and training personnel required to operate our systems and infrastructure also entail significant costs. For more information regarding the Company’s process for assessing, identifying, and managing material risks from cybersecurity threats, refer to Item 1C: Cybersecurity . There can be no guarantee that our updates to our systems and infrastructure or any other measures we take in order to prevent, mitigate or remediate any disruption, compromise or failure of our systems or infrastructure will be successful, adequate or otherwise result in our intended outcomes. For example, in the event that backup systems are utilized, they may not process data as quickly as our primary systems, and some data might not have been saved to backup systems, potentially resulting in a temporary or permanent loss of such data. In addition, our ability to implement backup systems and infrastructure and other safeguards with respect to third-party systems or infrastructure is more limited than with respect to our own systems and infrastructure. Even when a disruption, compromise, or failure is prevented, mitigated, or remediated in a timely manner, doing so may require substantial resources and management attention or other actions that could adversely affect customer satisfaction or retention, as well as harm our reputation. We also cannot be sure that our existing insurance coverage will continue to be available on acceptable terms, or at all, or that our insurers will not deny coverage to any future claim. Operational risk exposures could adversely impact our operations, liquidity, and financial condition, as well as cause reputational harm.
We face risks from cyber-attacks and other information or security breaches, including denial of service attacks, hacking, social engineering attacks targeting our colleagues, contractors, and customers, malware intrusion or data corruption attempts, and identity theft that could result in the disclosure of confidential, proprietary, personal and other information, any of which could adversely affect our business or reputation, and create significant legal and financial exposure.
Our computer and data management systems and network infrastructure, and those of third parties on which we are highly dependent, are subject to cybersecurity risks and could be susceptible to cyber-attacks or other information or security breaches. Our business relies on the secure processing, transmission, storage, and retrieval of confidential, proprietary, personal, and other information in our computer and data management systems and network infrastructure, and in the computer and data management systems and network infrastructure of third parties. In addition, to access our network, products, and services, our customers and other third parties may use personal mobile devices or computing devices that are outside of our network environment and are subject to their own cybersecurity risks.
We, along with our customers, regulators, and other third parties, including other financial services institutions and companies engaged in data processing, have been subject to, and are likely to continue to be the target of, cyber-attacks or other information or security breaches. These cyber-attacks or other information or security breaches include computer viruses, denial of service attacks, hacking, social engineering attacks (including phishing and smishing attacks) targeting our colleagues, contractors, and customers, malware intrusion or data corruption attempts, ransomware, improper access by employees or contractors, identity theft, and other security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss, destruction, or other processing of confidential, proprietary, personal, and other information of ours, our employees, our customers, or of third parties, damage our systems and infrastructure or otherwise materially disrupt our, our customers’, or other third parties’ network access or business operations. As cyber-attacks or other information or security breaches continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any cybersecurity vulnerabilities or cyber-attacks or other information or security breaches. Despite efforts to ensure the integrity of our systems and implement controls, processes, policies, and other protective measures, we may not be able to anticipate all security breaches, nor may we be able to implement sufficient preventive measures against such cyber-attacks or other information or security breaches, which may result in material losses or consequences for us.
2025 Form 10-K 35

Table of Contents

Cybersecurity risks for banking organizations have significantly increased in recent years in part because of the proliferation of new technologies, including AI, and the use of the internet and telecommunications technologies to conduct financial transactions. For example, cybersecurity risks may increase in the future as we continue to increase our mobile-payment and other internet-based product offerings and expand our internal usage of web-based products and applications. In addition, cybersecurity risks have significantly increased in recent years in part due to the increased sophistication and activities of cyber threat actors, such as organized crime affiliates, terrorist organizations, state-sponsored actors, hostile foreign governments, disgruntled employees or vendors, activists, and other external parties, including those involved in corporate espionage, any of whom may enhance their efforts through the use of AI. Even the most advanced internal control environment may be vulnerable to compromise. Due to increasing geopolitical tensions, nation state cyber-attacks and ransomware are both increasing in sophistication and prevalence. Targeted social engineering and email attacks (i.e., “spear phishing” attacks) are becoming more sophisticated and are extremely difficult to prevent. In such an attack, an attacker will attempt to fraudulently induce colleagues, contractors, customers, clients, or other users of our systems and infrastructure to disclose sensitive information in order to gain access to our, our customers’, or our clients’ systems and infrastructure, or the confidential, proprietary, personal, or other information stored or processed thereon. Persistent attackers may succeed in penetrating defenses given enough resources, time, and motive. The techniques used by cyber threat actors change frequently, may not be recognized until launched, and may not be recognized until well after a cyber-attack or other information or security breach has occurred. The speed at which new vulnerabilities are discovered and exploited, often before security patches are published, continues to rise. Remote work further increases the risk that we may experience cyber-attack or other information or security breaches as a result of our colleagues, contractors, and other third parties with which we do business or upon which we rely working remotely on less secure systems and environments.
The risk of a security breach caused by a cyber-attack or other information security breach at a third party with which we do business or upon which we rely, or by unauthorized access by such third party, has also increased in recent years. Additionally, the existence of cyber-attacks or other information or security breaches at such third parties with access to our confidential, proprietary, personal, and other information may not be disclosed to us in a timely manner. Further, our ability to monitor such third parties’ cybersecurity practices is limited. Although we generally have agreements relating to cybersecurity and data privacy in place with third parties, we cannot guarantee that such agreements will prevent a cyber-attack or other information or security breach impacting our confidential, proprietary, personal, or other information, or enable us to obtain adequate or any reimbursement from such third parties in the event we should suffer any disruption, compromise, failure, liability, reputational harm, or other cost or expense. Due to applicable laws and regulations or contractual obligations, we may be held responsible for cyber-attacks or other information or security breaches attributed to such third parties as they relate to the information we share with them.
Cyber-attacks or other information or security breaches, whether directed at us or third parties, may result in a material loss or have material consequences. Furthermore, the public perception that a cyber-attack or other information or security breach on our systems or infrastructure has been successful, whether or not this perception is correct, may damage our reputation with customers, clients, and third parties with which we do business. Risks related to the hacking of confidential, proprietary, personal, and other information and identity theft risks, in particular, could cause serious reputational harm. A successful penetration or circumvention of our cybersecurity measures could cause us serious negative consequences, including: loss of customers, clients, and business opportunities; costs associated with maintaining business relationships after a cyber-attack or other information or security breach; significant business disruption to our operations and business, misappropriation, exposure, or destruction of our confidential, proprietary, personal, and other information, intellectual property, funds, and/or those of our customers or clients; or damage to our, our customers’, our clients’, and/or third parties’ systems or infrastructure. The occurrence of any of these events could result in a violation of applicable data privacy laws and regulations and other laws and regulations, litigation exposure, regulatory fines, penalties or intervention, loss of confidence in our cybersecurity measures, reputational damage, reimbursement or other compensatory costs, additional compliance costs, and could adversely impact our results of operations, liquidity, and financial condition. In addition, we may not have adequate insurance coverage to compensate for losses from a major cyber-attack or other information or security breach. We also cannot be sure that our existing insurance coverage will continue to be available on acceptable terms or at all or that our insurers will not deny coverage to any future claim.
36 Huntington Bancshares Incorporated

Table of Contents

We face significant operational risks which could lead to financial loss, expensive litigation, and loss of confidence by our customers, regulators, and capital markets.
We are exposed to many types of operational risks, including the risk of fraud or theft by colleagues or outsiders, unauthorized transactions by colleagues or outsiders, operational errors by colleagues, business disruption, and system failures. Huntington executes against a significant number of controls, a large percent of which are manual and dependent on adequate execution by colleagues and third-party service providers. There is inherent risk that unknown single points of failure through the execution chain could give rise to material loss through inadvertent errors or malicious attack. These operational risks could lead to financial loss, expensive litigation, and loss of confidence by our customers, regulators, and the capital markets.
Moreover, negative public opinion can result from our actual or alleged conduct in any number of activities, including relating to our customers, products, and business practices; corporate governance; acquisitions; and from actions taken by government regulators and community organizations in response to those activities. Negative public opinion can adversely affect our ability to attract and retain customers and can also expose us to litigation and regulatory action.
We grow our business in part by acquiring, from time to time, other financial services businesses and businesses with technologies or other assets valuable to us. Acquisitions present several risks and uncertainties related both to the acquisition transactions themselves and to the integration of the acquired businesses into Huntington after closing.
Acquisitions of other companies or of financial assets, deposits, and other liabilities present risks and uncertainties to us, in addition to those presented by the nature of the business acquired, which may materially and adversely affect our results of operations. Many of the same risks arise when we engage in strategic partnerships. Our ability to analyze the risks presented by prospective acquisitions, as well as our ability to prepare in advance of closing and integration, may be limited to the extent that we cannot gather necessary or desirable information with respect to the business we are acquiring. We may also make certain assumptions related to an acquisition that may prove to be inaccurate and that may limit the anticipated benefits (such as cost savings from synergies or strategic gains from being able to offer enhanced product sets) or make the acquisition more expensive or take longer to complete and integrate than anticipated. Prior to closing, prospective acquirees are also subject to their own risks that we cannot manage or control. Our ability to complete an acquisition may be dependent on regulatory agencies with responsibilities for reviewing or approving the transaction, which could delay, restrictively condition, or result in denial of an acquisition, or otherwise limit the benefits of the acquisition. Changes in regulatory rules or standards or the application of those rules or standards, or future regulatory initiatives designed to promote competition or limit systematic risk and the potential for a financial institution to become too big to fail, may also limit our ability to complete an acquisition.
Acquisitions have their own risks that could impact the success of an acquisition and its integration into Huntington, such as:
• If a significant aspect of the value of the transaction is intellectual property, the extent to which the intellectual property may be utilized or protected and commercialized by Huntington.
• If the acquisition includes loan portfolios, the extent of actual credit losses and the required allowance for credit losses following completion of the acquisition.
• If the acquisition involves entering into new businesses or geographic or other markets, potential limitations on our ability to take advantage of those opportunities because of our inexperience with respect to them.
• The results of litigation and governmental investigations that may be pending at the time of the acquisition or that may be filed or commenced thereafter, because of an acquisition or otherwise, which are often hard to predict.
• Operational and compliance issues at an acquiree may not be fully identified or remediated until after the acquisition closes, potentially resulting in increased costs or penalties.
2025 Form 10-K 37

Table of Contents

• Models used by an acquiree, such as for capital planning and credit loss accounting, may be designed or implemented in a manner different than at Huntington, and our necessary reliance on these for a period of time, could materially impact our financial position or results of operations to the extent that our estimates based on these models are inaccurate.
• Enterprise risk management systems, policies, and procedures may be different and less mature than those of Huntington, and our necessary reliance on those for a period of time may limit our ability to identify, monitor, manage, and report risks, or subject us to heightened regulatory, legal, operational, or reputational risk.
After closing, the success of an acquisition is partially dependent on our ability to retain and expand upon the acquired company’s customer base. It is also frequently subject to risks related to human capital, including risks related to integrating the corporate culture of the acquired company and, to the extent being retained, the quality of leadership of the acquired company.
Failure to maintain effective internal controls over financial reporting could impair our ability to accurately and timely report our financial results or prevent fraud, resulting in loss of investor confidence and adversely affecting our business and our stock price.
Effective internal controls over financial reporting are necessary to provide reliable financial reports and prevent fraud. We are subject to regulation that focuses on effective internal controls and procedures. Such controls and procedures are modified, supplemented, and changed from time-to-time as necessitated by our growth and in reaction to external events and developments. Any failure to maintain an effective internal control environment could impact our ability to report our financial results on an accurate and timely basis, which could result in regulatory actions, loss of investor confidence, and an adverse impact on our business and our stock price.
We rely on quantitative models to measure risks and to estimate certain financial values.
Quantitative models may be used to help manage certain aspects of our business and to assist with certain business decisions, including estimating expected lifetime credit losses, measuring the fair value of financial instruments when reliable market prices are unavailable, estimating the effects of changing interest rates and other market measures on our financial condition and results of operations, managing risk, and for capital planning purposes (including during the CCAR capital planning and capital adequacy process). Our measurement methodologies rely on many assumptions, historical analyses, and correlations. These assumptions may not capture or fully incorporate conditions leading to losses, particularly in times of market distress, and the historical correlations on which we rely may no longer be relevant. Additionally, as businesses and markets evolve, our measurements may not accurately reflect this evolution. Even if the underlying assumptions and historical correlations used in our models are adequate, our models may be deficient due to errors in computer code, inaccurate data, misuse of data, or the use of a model for a purpose outside the scope of the model’s design.
All models have certain limitations. Reliance on models presents the risk that our business decisions based on information incorporated from models will be adversely affected due to incorrect, missing, or misleading information. In addition, our models may not capture or fully express the risks we face, may suggest that we have sufficient capitalization when we do not, or may lead us to misjudge the business and economic environment in which we will operate. If our models fail to produce reliable results on an ongoing basis, we may not make appropriate risk management, capital planning, or other business or financial decisions. Strategies that we employ to manage and govern the risks associated with our use of models may not be effective or fully reliable. Also, information that we provide to the public or regulators based on poorly designed models could be inaccurate or misleading.
Banking regulators continue to focus on the models used by banks and bank holding companies in their businesses. Some of our decisions that the regulators evaluate, including distributions to our shareholders, could be affected adversely due to their perception that the quality of the models used to generate the relevant information is insufficient.
38 Huntington Bancshares Incorporated

Table of Contents

We rely on third parties to provide key components of our business infrastructure.
We rely on third-party service providers, both domestically and offshore, to leverage subject matter expertise and industry best practice, provide enhanced products and services, and reduce costs. Although there are benefits in entering into third-party relationships with vendors and others, there are risks associated with such activities. When entering a third-party relationship, the risks associated with that activity are not passed to the third party but remain our responsibility. The Risk Oversight Committee of the Board of Directors provides oversight related to the overall risk management process associated with third-party relationships. Management is accountable for the review and evaluation of all new and existing third-party relationships. Management is responsible for ensuring that adequate controls are in place to protect us and our customers from the risks associated with vendor relationships.
Increased risk could occur based on poor planning, oversight, control, and inferior performance or service on the part of the third party and may result in legal costs or loss of business. While we have implemented a vendor management program to actively manage the risks associated with the use of third-party service providers, any problems caused by third-party service providers could adversely affect our ability to deliver products and services to our customers and to conduct our business. Replacing a third-party service provider could also take a long period of time and result in increased expenses.
Changes in accounting policies, standards, and interpretations could affect how we report our financial condition and results of operations.
The FASB, regulatory agencies, and other bodies that establish accounting standards periodically change the financial accounting and reporting standards governing the preparation of our financial statements. Additionally, those bodies that establish and interpret the accounting standards (such as the FASB, SEC, and banking regulators) may change prior interpretations or positions on how these standards should be applied. Any such changes could affect how we report our financial conditions and results of operations.
For further discussion, see Note 2 - “ Accounting Standards Update ” to the Consolidated Financial Statements.
Impairment of goodwill could require charges to earnings, which could result in a negative impact on our results of operations.
Our goodwill could become impaired in the future. If goodwill were to become impaired, it could limit the ability of the Bank to pay dividends to Huntington, adversely impacting Huntington liquidity and ability to pay dividends to shareholders or repay debt. Assumptions affecting our goodwill impairment evaluation include earnings projections, the discount rates used in the income approach to measure fair value, and observed peer multiples used in estimating the fair value under the market approach. We are required to test goodwill for impairment at least annually or when impairment indicators are present. If an impairment determination is made in a future reporting period, our earnings and book value of goodwill will be reduced by the amount of the impairment. If an impairment loss is recorded, it will have little or no impact on the tangible book value of our common stock, or our regulatory capital levels, but such an impairment loss could significantly reduce the Bank’s earnings and thereby restrict the Bank’s ability to make dividend payments to us without prior regulatory approval, which in turn could impact our ability to pay dividends. At December 31, 2025, the book value of our goodwill was $6.0 billion, substantially all of which was recorded at the Bank. Any such write down of goodwill or other acquisition-related intangibles will reduce Huntington’s earnings, as well.
2025 Form 10-K 39

Table of Contents

Climate change manifesting as physical or transition risks could adversely affect our operations, businesses, and customers.
There is an increasing concern over the risks of climate change and related environmental sustainability matters. The physical risks of climate change include discrete events, such as flooding, hurricanes, and wildfires, and longer-term shifts in climate patterns, such as extreme heat, sea level rise, and more frequent and prolonged drought. Under medium or longer-term scenarios, such events, if uninterrupted or unaddressed, could disrupt our operations or those of our customers or third parties on which we rely, including through direct damage to assets and indirect impacts from supply chain disruption and market volatility. Additionally, transitioning to a low-carbon economy may entail extensive policy, legal, technology, and market initiatives. Transition risks, including changes in consumer preferences and additional regulatory requirements or supervisory expectations or taxes, could increase our expenses and undermine our strategies. In addition, our reputation and client relationships may be damaged as a result of our practices related to climate change, including our involvement, or our customers’ involvement, in certain industries or projects, in the absence of mitigation and/or transition measures, associated with causing or exacerbating climate change, as well as any decisions we make to continue to conduct or change our activities in response to considerations relating to climate change. As climate risk is interconnected with all key risk types, we have established a formal climate risk program to embed climate risk considerations into our risk management processes across all established risk pillars, such as market, credit, and operational risks. While the timing and severity of climate change may not be entirely predictable and our risk management processes may not be effective in mitigating climate risk exposure, we continue to build capabilities to identify, assess, and manage climate risks.
We use AI in connection with our business and operations, which exposes us to inherent risks that may expose us to material harm.
We use AI in connection with our business and operations, including through the models we employ. AI is complex and rapidly evolving, and the introduction of AI, a relatively new and emerging technology in the early stages of commercial use, into our business and operations may subject us to new or heightened legal, regulatory, ethical, operational, reputational, or other risks. The models underlying AI may be incorrectly or inadequately designed or implemented and trained on, or otherwise use, data or algorithms that are, and output that may be, incomplete, inadequate, misleading, biased, poor-quality or otherwise flawed, any of which may not be easily detectable. Further, inappropriate or controversial data practices by developers and end-users or other factors adversely affecting public opinion of AI could impair the acceptance of AI, including those incorporated in our business and operations. If the AI that we use is deficient, inaccurate or controversial, we could incur operational inefficiencies, competitive harm, legal and regulatory action, brand or reputational harm, or other adverse impacts on our business and financial results. Further, there can be no assurance that our use of AI will be successful in enhancing our business or operations, be successfully adopted and deployed by our colleague base, or otherwise result in our intended outcomes, and our competitors may incorporate AI into their businesses or operations more quickly or more successfully than us.
AI and the use thereof is also subject to a variety of existing laws and regulations, including fair lending, consumer protection, intellectual property, cybersecurity, data privacy, and equal opportunity, and is expected to be subject to new laws and regulations or new applications of existing laws and regulations. AI is the subject of evolving review by various governmental and regulatory agencies, and changes in laws and regulations governing AI may adversely affect our ability to use AI. Additionally, various federal, state and foreign governments and regulators have implemented, or are considering implementing, general legal and regulatory frameworks for the appropriate use of AI. It is possible that we will not be able to anticipate how to respond to these rapidly developing laws and regulations. Further, if we do not have sufficient rights to use the data or algorithms on which our AI solutions rely or the output generated thereby, we also may incur liability through the violation of applicable laws and regulations, such as fair lending laws and regulations, third-party intellectual property, privacy or other rights, or contracts to which we are a party. We may not be able to sufficiently mitigate or detect any of the foregoing risks or concerns given our and other market participants’ lack of experience with using AI, the pace of technological change, and rapid adoption of AI by our business partners and competitors. Any actual or perceived failure to address risks or concerns relating to the use of AI, whether unfounded or not, could adversely affect our business and operations.
40 Huntington Bancshares Incorporated

Table of Contents

Compliance Risks:
We operate in a highly regulated industry, and the laws and regulations that govern our operations, corporate governance, executive compensation and financial accounting, or reporting, including changes in them, or our failure to comply with them, may adversely affect us and our business model.
The banking industry is highly regulated. We are subject to supervision, regulation, and examination by various federal and state regulators, including the Federal Reserve, OCC, SEC, CFPB, FDIC, FINRA, and various state regulatory agencies. The statutory and regulatory framework that governs us is generally intended to protect depositors and customers, the DIF, the U.S. banking and financial system, and financial markets as a whole - not to protect shareholders. These laws and regulations, many of which are discussed in Item 1: Business - “ Regulatory Matters ,” among other matters, prescribe minimum capital requirements, impose limitations on our business activities (including foreclosure and collection practices), limit the dividend or distributions that we can pay, restrict the ability of institutions to guarantee our debt, and impose certain specific accounting requirements that may be more restrictive and may result in greater or earlier charges to earnings or reductions in our capital than GAAP. Compliance with laws and regulations can be difficult and costly, and changes to laws and regulations often impose additional compliance costs. Such regulation and supervision may increase our costs and limit our ability to pursue business opportunities. Further, our failure to comply with these laws and regulations, even if the failure was inadvertent or reflects a difference in interpretation, could subject us to restrictions on our business activities, fines, and other penalties, any of which could adversely affect our results of operations, capital base, and the price of our securities. Further, any new laws, rules, and regulations could make compliance more difficult or expensive or otherwise adversely affect our business and financial condition.
Under the supervision of the CFPB, our consumer and business banking products and services are subject to heightened regulatory oversight and scrutiny with respect to compliance with consumer laws and regulations. We may face a greater number or wider scope of investigations, enforcement actions, and litigation in the future related to consumer practices, thereby increasing costs associated with responding to or defending such actions. Also, federal and state regulators have been increasingly focused on sales practices of branch personnel, including taking regulatory action against other financial institutions. In addition, increased regulatory inquiries and investigations, as well as any additional legislative or regulatory developments affecting our consumer businesses, and any required changes to our business operations resulting from these developments, could result in significant loss of revenue, require remuneration to our customers, trigger fines or penalties, limit the products or services we offer, limit the fees we are able to charge, require us to increase our prices and, therefore, reduce demand for our products, impose additional compliance costs on us, increase the cost of collection, cause harm to our reputation, or otherwise adversely affect our consumer businesses.
Legislative and regulatory actions taken now or in the future that impact the financial industry may materially adversely affect us by increasing our costs, adding complexity in doing business, impeding the efficiency of our internal business processes, negatively impacting the recoverability of certain of our recorded assets, requiring us to increase our regulatory capital, limiting our ability to pursue business opportunities, and otherwise resulting in a material adverse impact on our financial condition, results of operation, liquidity, or stock price.
Both the scope of the laws and regulations and the intensity of the supervision to which we are subject may increase in times of financial crisis, as well as a result of other factors such as technological and market changes. Compliance with these laws and regulations have resulted in and will continue to result in additional costs, which could be significant, and may have a material and adverse effect on our results of operations. In addition, if we do not appropriately comply with current or future legislation and regulations, especially those that apply to our consumer operations, which has been an area of heightened focus, we may be subject to fines, penalties or judgments, or material regulatory restrictions on our businesses, which could adversely affect operations and, in turn, financial results.
The Trump administration has sought to implement a regulatory reform agenda that is significantly different than that of the Biden administration. There have been changes in rulemaking, supervision, examination, and enforcement priorities of the federal banking agencies. The evolving regulatory and supervisory environment and uncertainty about the timing and scope of future laws, regulations, and policies may contribute to decisions we may make to suspend, reduce, or withdraw from existing businesses, activities, or initiatives, which may result in potential lost revenue or significant restructuring or related costs or exposures.
2025 Form 10-K 41

Table of Contents

In addition, regulatory responses in connection with severe market downturns or unforeseen stress events may alter or disrupt our planned future strategies and actions. Adverse developments affecting the overall strength and soundness of other financial institutions, the financial services industry as a whole, and the general economic climate and U.S. Treasury market could have a negative impact on perceptions about the strength and soundness of our business even if we are not subject to the same adverse developments. For example, during 2023, the FDIC took control and was appointed receiver of Silicon Valley Bank, Signature Bank, and First Republic Bank, respectively. The failure of other banks and financial institutions and the measures taken by governments and regulators in response to these events, including increased regulatory scrutiny and heightened supervisory expectations, could adversely impact our business, financial condition, and results of operations.
The resolution of significant pending litigation, if unfavorable, could have an adverse effect on our results of operations for a particular period.
We face legal risks in our businesses, and the volume of claims and amount of damages and penalties claimed in litigation and regulatory proceedings against financial institutions remain high. Substantial legal liability against us could have material adverse financial effects or cause significant reputational harm to us, which in turn could seriously harm our business prospects. It is possible that the ultimate resolution of these matters, if unfavorable, may be material to the results of operations for a particular reporting period.
For more information on litigation risks, see Note 22 - “ Commitments and Contingent Liabilities ” to the Consolidated Financial Statements.
Noncompliance with the Bank Secrecy Act and other anti-money laundering statutes and regulations could cause us material financial loss.
The Bank Secrecy Act contains anti-money laundering and financial transparency provisions intended to detect and prevent the use of the U.S. financial system for money laundering and terrorist financing activities. The Bank Secrecy Act requires financial institutions to undertake activities including maintaining an anti-money laundering program, verifying the identity of clients, monitoring for and reporting suspicious transactions, reporting on cash transactions exceeding specified thresholds, and responding to requests for information by regulatory authorities and law enforcement agencies. FinCEN, a unit of the Treasury Department that administers the Bank Secrecy Act, is authorized to impose significant civil money penalties for violations of those requirements and has recently engaged in coordinated enforcement efforts with the federal bank regulatory agencies, as well as the DOJ, Drug Enforcement Administration, and IRS.
There is also increased scrutiny of compliance with the rules enforced by the OFAC. If our policies, procedures, and systems are deemed deficient or the policies, procedures, and systems of the financial institutions that we have already acquired or may acquire in the future are deficient, we would be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain planned business activities, including acquisition plans, which would negatively impact our business, financial condition, and results of operations. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us.
For more information regarding the Bank Secrecy Act, Patriot Act, anti-money laundering requirements and OFAC-administered sanctions, refer to Item 1: Business - “ Regulatory Matters .”
Cybersecurity and data privacy are areas of heightened legislative and regulatory focus.
As cybersecurity and data privacy risks for banking organizations and the broader financial system have significantly increased in recent years, cybersecurity and data privacy issues have become the subject of increasing legislative and regulatory focus. For more information regarding applicable cybersecurity and data privacy legislation and regulations, refer to Item 1: Business - “ Regulatory Matters .”
42 Huntington Bancshares Incorporated

Table of Contents

We share, use, collect, disclose and otherwise process personal information of our customers and counterparties, including, but not limited to, personal financial information. The sharing, use, collection, disclosure, and other processing of this type of information is governed by increasingly stringent and evolving legislation and regulations, the intent of which is to protect the privacy of personal information, including personal financial information. We may become subject to new legislation or regulations concerning cybersecurity and data privacy. We could be adversely affected if new legislation or regulations are adopted or if existing legislation or regulations are modified such that we are required to change our business practices, policies, or systems or otherwise incur significant additional costs and expenses in order to comply.
Further, we make public statements about our sharing, use, collection, disclosure, and other processing of personal information through our privacy policies, information provided on our website, and press statements. Although we endeavor to comply with our public statements and documentation, we may at times fail to do so or be alleged to have failed to do so. Our public statements and documentation that provide promises and assurances about cybersecurity and data privacy can subject us to potential government or legal action if they are found to be deceptive, unfair, or misrepresent our actual practices.
If cybersecurity or data privacy legislation or regulations are implemented, interpreted, or applied in a manner inconsistent with our current practices, or if we fail to comply (or are perceived to have failed to comply) with applicable legislation and regulation relating to cybersecurity and data privacy, we may be subject to fines, civil or criminal penalties, sanctions, litigation (including class actions), investigations or inquiries, or regulatory enforcement actions or ordered to change our business practices, policies, or systems in a manner that adversely impacts our operating results.

Strategic Risks:
We operate in a highly competitive industry which depends on our ability to successfully execute our strategic plan and adapt our products and services to evolving industry standards and consumer preferences.
We are subject to intense competition from both other financial institutions and from non-bank entities, including FinTech companies. Technology has lowered the barriers to entry, with customers having a growing variety of traditional and nontraditional alternatives, such as crowdfunding, digital wallets, cryptocurrencies, and money transfer services. The continuous widespread adoption of new technologies, including internet services and mobile applications, and advanced ATM functionality, is influencing how individuals and firms conduct their financial affairs and is changing the delivery channels for financial services. Our “People-First, Customer-Centered” strategic plan considers the implications of these changes in technology and how it may impact our customers. Additionally, these changes require us to adapt our product and services, as well as our distribution of them, to evolving industry standards and customer preferences. Failure to address competitive pressures could make it more difficult for us to attract and retain customers across our businesses.
Our success depends, in part, on our ability to successfully implement our strategic plan as well as adapt existing products and services and develop competitive new products and services demanded by our customers. The widespread adoption of technologies will continue to require substantial investments to modify or adapt existing products and services and to develop new products or services. Additionally, we may not be successful in executing our strategic plan, introducing new products or services, achieving market acceptance of new products or services, anticipating or reacting to customers changing preferences, or attracting and retaining loyal customers.
2025 Form 10-K 43

Table of Contents

We depend on our executive officers and key personnel to continue the implementation of our long-term business strategy and could be harmed by the loss of their services.
We believe that our continued growth and future success will depend in large part on the skills of our management team and our ability to motivate and retain these individuals and other key personnel. The loss of service of one or more of our executive officers or key personnel could reduce our ability to successfully implement our long-term business strategy, our business could suffer, and the value of our stock could be materially adversely affected. Leadership changes will occur from time to time, and we cannot predict whether significant resignations will occur or whether we will be able to recruit additional qualified personnel. We believe our management team possesses valuable knowledge about the banking industry and that their knowledge and relationships would be very difficult to replicate. Our success also depends on the experience of our branch managers and lending officers and on their relationships with the customers and communities they serve. The loss of these key personnel could negatively impact our banking operations. The loss of key personnel, or the inability to recruit and retain qualified personnel in the future, could have an adverse effect on our business, financial condition, or operating results.
Bank regulations regarding capital and liquidity, including the CCAR assessment process and the U.S. Basel III capital and liquidity standards, could require higher levels of capital and liquidity. Among other things, these regulations could impact our ability to pay common stock dividends, repurchase common stock, attract cost-effective sources of deposits, or require the retention of higher amounts of low yielding securities.
The Federal Reserve administers CCAR, a periodic forward-looking quantitative assessment of Huntington’s capital adequacy and planned capital distributions and a review of the strength of Huntington’s practices to assess capital needs. The Federal Reserve makes a quantitative assessment of capital based on supervisory-run stress tests that assess the ability to maintain capital levels above each minimum regulatory capital ratio after making all capital actions included in Huntington’s capital plan, under baseline and stressful conditions throughout a nine-quarter planning horizon. The CCAR process is also used to determine Huntington’s SCB requirement. There can be no assurance that the Federal Reserve or OCC will respond favorably to our capital plans, planned capital actions, or stress test results, and the Federal Reserve, OCC, or other regulatory capital requirements may limit or otherwise restrict how we utilize our capital, including common stock dividends and stock repurchases.
We are also required to maintain minimum capital ratios and the Federal Reserve and OCC may determine that Huntington and/or the Bank, based on size, complexity, or risk profile, must maintain capital ratios above these minimums in order to operate in a safe and sound manner. In the event we are required to raise capital to maintain required minimum capital and leverage ratios or ratios above the required applicable minimums, we may be forced to do so when market conditions are undesirable or on terms that are less favorable to us than we would otherwise require. Furthermore, in order to prevent becoming subject to restrictions on our ability to distribute capital or make certain discretionary bonus payments to management, the Bank must maintain a CCB of 2.5%, and Huntington must maintain the applicable SCB determined as part of the CCAR process, which are in addition to our required minimum capital ratios.
We also face the risk of becoming subject to new or more stringent requirements in connection with the introduction of new regulations or modification of existing regulations, which could require us to hold more capital or liquidity or have other adverse effects on our businesses or profitability. For example, proposed changes to applicable capital and liquidity requirements, such as the Basel III Endgame Proposal and the long-term debt proposal, could result in increased expenses or cost of funding, which could negatively affect our financial results or our ability to pay dividends and engage in share repurchases.
For more information regarding CCAR, stress testing, and capital and liquidity requirements, refer to Item 1: Business - “ Regulatory Matters .”
44 Huntington Bancshares Incorporated

Table of Contents

Reputational Risk:
Damage to our reputation could significantly harm our business, including our competitive position and business prospects.
Our ability to attract and retain customers, clients, investors, and employees is affected by our reputation. Significant harm to our reputation can arise from various sources, including officer, director, or employee misconduct, actual or perceived unethical behavior, conflicts of interest, security breaches, litigation or regulatory outcomes, compensation practices, failing to deliver minimum or required standards of service and quality, failing to address customer and agency complaints, compliance failures, unauthorized release, gathering, monitoring, misuse, loss, destruction or other processing of confidential, proprietary, personal, and other information due to cyber-attacks or other information or security breaches, disruptions, compromises or failures of our systems or infrastructure, perception of our corporate responsibility or environmental practices and disclosures, and the activities of our clients, customers, and counterparties, including vendors. Reputational risk related to corporate policies and practices on corporate responsibility and ESG topics is increasingly complex. Divergent ideological and social views may create competing stakeholder, legislative, and regulatory scrutiny that may impact our reputation or operations. In particular, there is an increasing number of state-level anti-ESG initiatives in the U.S. that may conflict with other regulatory requirements or our various stakeholders’ expectations. Such divergent, sometimes conflicting, views on corporate responsibility and ESG-related matters increase the risk that any action or lack thereof by us on such matters will be perceived negatively by some stakeholders. Actions by the financial service industry generally or by institutions or individuals in the industry can adversely affect our reputation indirectly by association. In addition, adverse publicity or negative information posted on social media, whether or not factually correct, may affect our business prospects. All of these could adversely affect our growth, results of operation, and financial condition.

Cadence Merger Risks:
We are expected to incur substantial costs related to the Cadence Merger and integration.
We have incurred and will incur substantial expenses in connection with the negotiation and completion of the transactions contemplated by the Cadence Merger Agreement. These costs include legal, financial advisory, accounting, consulting and other advisory fees, public company filing fees and other regulatory fees and financial printing and other related costs.
We are expected to incur substantial costs in connection with the related integration of Cadence. There are a large number of processes, policies, procedures, operations, technologies, and systems that may need to be integrated, including purchasing, accounting and finance, payroll, compliance, treasury management, branch operations, vendor management, risk management, lines of business, pricing and benefits. While we have assumed that a certain level of costs will be incurred, there are many factors beyond our control that could affect the total amount or the timing of the integration costs. Moreover, many of the costs that will be incurred are, by their nature, difficult to estimate accurately. These integration costs may result in us taking charges against earnings following the completion of the Cadence Merger, and the amount and timing of such charges are uncertain at present.
Combining Huntington and Cadence may be more difficult, costly or time consuming than expected and Huntington and Cadence may fail to realize the anticipated benefits of the Cadence Merger.
The success of the Cadence Merger will depend, in part, on the ability to realize the anticipated cost savings from combining the businesses of Huntington and Cadence. To realize the anticipated benefits and cost savings from the Cadence Merger, Huntington and Cadence must successfully integrate and combine their businesses in a manner that permits those cost savings to be realized. If Huntington and Cadence are not able to successfully achieve these objectives, the anticipated benefits of the Cadence Merger may not be realized fully or at all or may take longer to realize than expected. In addition, the actual cost savings and anticipated benefits of the Cadence Merger could be less than anticipated, and integration may result in additional unforeseen expenses.
2025 Form 10-K 45

Table of Contents

Prior to completion of the Cadence Merger on February 1, 2026, Huntington and Cadence operated independently. It is possible that the integration process could result in the loss of key employees, the disruption of each company’s ongoing businesses or inconsistencies in standards, controls, procedures, and policies that adversely affect the companies’ ability to maintain relationships with clients, customers, depositors, and colleagues or to achieve the anticipated benefits and cost savings of the Cadence Merger. Integration efforts between the two companies may also divert management attention and resources. These integration matters could have an adverse effect on each of Huntington and Cadence during this transition period and for an undetermined period after completion of the Cadence Merger on the combined company.
The future results of the combined company following the Cadence Merger may suffer if the combined company does not effectively manage its expanded operations.
Following the Cadence Merger, the size of the business of the combined company will increase significantly beyond the current size of either Huntington’s or Cadence’s business. The combined company’s future success will depend, in part, upon its ability to manage this expanded business, which may pose challenges for management, including challenges related to the management and monitoring of new operations and associated increased costs and complexity. The combined company may also become subject to higher regulatory and supervisory standards from governmental authorities as a result of the significant increase in the size of its business after the consummation of the Cadence Merger, which will cause Huntington to become subject to standards currently applicable to Category III banking organizations under the Federal Reserve’s Regulation YY, following the applicable transition period. There can be no assurances that the combined company will be successful or that it will realize the expected operating efficiencies, cost savings, revenue enhancements or other benefits currently anticipated from the Cadence Merger.
The combined company may be unable to retain Huntington or Cadence personnel successfully.
The success of the Cadence Merger will depend in part on the combined company’s ability to retain the talents and dedication of key employees currently employed by Huntington and Cadence. It is possible that these employees may decide not to remain with Huntington or Cadence, as applicable. If Huntington and Cadence are unable to retain key employees, including management, who are critical to the successful integration and future operations of the companies, Huntington and Cadence could face disruptions in their operations, loss of existing customers, loss of key information, expertise or know-how and unanticipated additional recruitment costs. In addition, if key employees terminate their employment, or if an insufficient number of employees are retained to maintain effective operations, the combined company’s business activities may be adversely affected and management’s attention may be diverted from successfully integrating the Bank and Cadence to hiring suitable replacements, all of which may cause the combined company’s business to suffer. In addition, Huntington and Cadence may not be able to locate or retain suitable replacements for any key employees who leave any of the companies.

Item 1B: Unresolved Staff Comments
None.

Item 1C: Cybersecurity
Cybersecurity represents an important component of Huntington’s overall cross-functional approach to risk management. Our cybersecurity practices are integrated into Huntington’s ERM approach, and cybersecurity risks are among the core enterprise risks identified for oversight by our Board through our annual ERM assessment. See “ Risk Factors—Operational Risks ” for information on risks from cybersecurity threats. Our cybersecurity policies and practices are designed to follow the cybersecurity framework of the National Institute of Standards and Technology and other applicable industry standards.
46 Huntington Bancshares Incorporated

Table of Contents

Consistent with Huntington’s overall ERM policies and practices, our cybersecurity program includes:
• Vigilance: We maintain a global cybersecurity threat operation designed to detect, contain, and respond to cybersecurity threats and incidents in a prompt and effective manner with the goal of minimizing disruptions, compromises, and failures to our business.
• Collaboration: We have established collaboration mechanisms with public and private entities, including intelligence and enforcement agencies, industry groups, and third-party service providers to identify and assess cybersecurity risks.
• Systems Safeguards: We deploy technical safeguards that are designed to protect our information systems from cybersecurity threats, including firewalls, intrusion prevention and detection systems, anti-malware functionality, access controls, and ongoing vulnerability assessments.
• Third-Party Management: We maintain a risk-based approach to identifying and overseeing cybersecurity risks presented by third parties, such as vendors, service providers, and other users of our systems.
• Education: We provide periodic and ongoing training for personnel regarding cybersecurity threats, with such training scaled to reflect the roles, responsibilities, and access of relevant personnel.
• Incident Response Planning: We have established and maintain incident response plans that are designed to address our response to a cybersecurity incident, and such plans are tested at least annually, or more frequently as needed.
• Communication and Coordination: We utilize a cross-functional approach to evaluating the risk from cybersecurity threats and incidents, involving management personnel from our technology, operations, legal, risk management, internal audit, and other key business functions, as well as members of our Board and the Technology Committee of the Board (the “Technology Committee”).
• Governance: The Board’s oversight of cybersecurity risk management is supported by the Technology Committee, which has responsibility for the development, implementation, maintenance, and risk management of the cybersecurity program and regularly interacts with Huntington’s ERM function, individual members of management, and relevant management committees.
A key part of Huntington’s strategy for managing risks from cybersecurity threats is the ongoing assessment and testing of our processes and practices through auditing, assessments, tabletop exercises, and other exercises focused on evaluating effectiveness. We regularly engage third parties to perform assessments on our cybersecurity measures, including cybersecurity maturity assessments and independent reviews of our cybersecurity control environment and operating effectiveness. The results of such assessments and reviews are reported to the Technology Committee and the Board when appropriate, and we adjust our cybersecurity processes and practices as necessary based on the information provided by the third-party assessments and reviews.
The Technology Committee oversees the management of risks from cybersecurity threats, including the policies, processes and practices that management implements to address risks from cybersecurity threats. The Board and the Technology Committee each receive regular presentations and reports on cybersecurity risks, which address a wide range of topics including, for example, recent developments, evolving standards, vulnerability assessments, third-party and independent reviews, the threat environment, technological trends, and cybersecurity considerations arising with respect to peers and vendors. The Board and the Technology Committee are notified by the CEO regarding the occurrence of any potentially material cybersecurity incidents, including ongoing updates, when applicable. To keep the Technology Committee apprised of the continually shifting landscape, the Chief Information Security Officer provides updates to the Technology Committee on cybersecurity matters on at least a quarterly basis, and more frequently as necessary. The entire Board also participates in periodic cyber-related tabletop exercises.
Huntington’s Chief Information Security Officer is a member of our Information Technology Risk Committee, a management-level committee that is principally responsible for overseeing our cybersecurity risk management program, in partnership with other business leaders across Huntington. The Chief Information Security Officer also works with members of the ELT, which includes our Chief Executive Officer, Chief Financial Officer, Chief Risk Officer, Chief Information Officer, and General Counsel.
2025 Form 10-K 47

Table of Contents

The Chief Information Security Officer works collaboratively across Huntington to implement a program designed to identify and protect our information systems from cybersecurity threats and to promptly detect and respond to cybersecurity incidents. To facilitate this program, multi-disciplinary teams throughout Huntington are deployed to address cybersecurity threats and to respond to cybersecurity incidents in accordance with Huntington’s incident response plan. Through ongoing communications with these multi-disciplinary teams and across Huntington, the Chief Information Security Officer regularly monitors the prevention, detection, mitigation, and remediation of cybersecurity threats and incidents on an ongoing basis and reports such threats and incidents to the CEO, who then reports to the Technology Committee and the Board when appropriate, as discussed above.
We believe our Board and management, including the Chief Information Security Officer, have the appropriate expertise, background, and depth of experience to manage risks arising from cybersecurity threats, including applicable knowledge gained through industry experience, academia, ongoing internal and external training, and regular discussions with consultants and peers with applicable knowledge and expertise. In addition, members of our Board and management hold varying levels of relevant cybersecurity certifications.
While we, and the third parties with whom we work, have experienced cybersecurity incidents, as well as adverse impacts from such incidents, we have not experienced material losses or other material consequences resulting from cybersecurity incidents experienced by us or such third parties. However, we expect to continue to experience cybersecurity incidents resulting in adverse impacts with increased frequency and severity due to the evolving threat environment including the increasing use of AI by cyber threat actors, and there can be no assurance that future cybersecurity incidents, including incidents experienced by our third parties, will not have a material adverse impact on the Corporation, including its business strategy, results of operations and/or financial condition.

Item 2: Properties

Both the Company’s and Bank’s headquarters are located in the Huntington Center, a thirty-seven story office building located in Columbus, Ohio. Of the building’s total office space available, we lease approximately 22%. The lease term expires in 2030, with six five-year renewal options for up to 30 years but with no purchase option. The Bank has an indirect minority equity interest of 18% in the building. Our commercial headquarters is located in the Detroit Tower, a twenty story office building, located in Detroit, Michigan. We lease the entirety of the building’s total office space available. The lease term expires in 2044, with four seven-year renewal options for up to 28 years with no purchase option. The Bank has no ownership interest in the building.
We own or lease numerous other premises for use in conducting business activities, including operations centers, offices, and branches and other facilities. We consider the facilities owned or occupied under lease by our subsidiaries to be adequate for the purposes of our business operations. Additional information regarding our properties is set forth in Note 9 - “ Premises and Equipment ” and Note 10 - “ Operating Leases ” of the Notes to Consolidated Financial Statements and is incorporated into this item by reference.

Item 3: Legal Proceedings
Information required by this item is set forth in Note 22 - “ Commitments and Contingent Liabilities ” of the Notes to Consolidated Financial Statements under the caption “Litigation and Regulatory Matters” and is incorporated into this item by reference.

Item 4: Mine Safety Disclosures
Not applicable.
48 Huntington Bancshares Incorporated

Table of Contents

PART II

Item 5: Market for Registrant’s Common Equity, Related Shareholder Matters and Issuer Purchases of Equity Securities
The common stock of Huntington Bancshares Incorporated is traded on the Nasdaq Global Stock Market under the symbol “HBAN.” As of February 1, 2026, we had 32,327 shareholders of record. Huntington did not have any unregistered sales of equity securities during the three months ended December 31, 2025.
Information regarding restrictions on dividends, as required by this Item, is set forth in Item 1: “Business - Regulatory Matters ” and in Note 23 - “ Other Regulatory Matters ” of the Notes to Consolidated Financial Statements and incorporated into this Item by reference.
The following graph shows the changes, over the five-year period, in the value of $100 invested in (i) shares of Huntington’s Common Stock; (ii) the Standard & Poor’s 500 Stock Index (the S&P 500 Index) and (iii) Keefe, Bruyette & Woods (KBW) Bank Index, for the period December 31, 2020, through December 31, 2025. The KBW Bank Index is a market capitalization-weighted bank stock index published by Keefe, Bruyette & Woods. The index is composed of the largest banking companies and includes all money center banks and many regional banks, including Huntington. An investment of $100 on December 31, 2020, and the reinvestment of all dividends, are assumed. The plotted points represent the cumulative total return on the last trading day of the fiscal year indicated.

2020 2021 2022 2023 2024 2025
HBAN $100 $127 $122 $116 $155 $172
S&P 500 100 129 105 133 166 196
KBW Bank Index 100 138 109 108 148 196

In April 2025, our Board of Directors authorized the repurchase of up to $1.0 billion of our common shares. The timing of share repurchases depends upon marketplace conditions and other factors, and the program remains subject to the discretion of our Board of Directors.
2025 Form 10-K 49

Table of Contents

The following table provides information regarding Huntington’s purchases of its Common Stock during the three-month period ended December 31, 2025.

Period Total Number
of Shares
Purchased
Average
Price Paid
Per Share
Maximum Number of Shares (or
Approximate Dollar Value) that
May Yet Be Purchased Under
the Plans or Programs (1)

October 1, 2025 to October 31, 2025 —  $ —  $ 1,000,000,000 
November 1, 2025 to November 30, 2025 —  —  1,000,000,000 
December 1, 2025 to December 31, 2025 —  —  1,000,000,000 
Total —  $ —  $ 1,000,000,000 

(1) The number shown represents, as of the end of each period, the approximate dollar value of Common Stock that may yet be purchased under publicly announced share repurchase authorizations.
For information regarding securities authorized for issuance under Huntington’s equity compensation plans, see Part III, Item 12 .

Item 6:
[Reserved]
50 Huntington Bancshares Incorporated

Table of Contents

Item 7: Management’s Discussion and Analysis of Financial Condition and Results of Operations

INTRODUCTION
This MD&A provides information we believe necessary for understanding our financial condition, changes in financial condition, results of operations, and cash flows. The MD&A should be read in conjunction with the Consolidated Financial Statements , Notes to Consolidated Financial Statements , and other information contained in this report. The forward-looking statements in this section and other parts of this report involve assumptions, risks, uncertainties, and other factors, including statements regarding our plans, objectives, goals, strategies, and financial performance. Our actual results could differ materially from the results anticipated in these forward-looking statements as a result of factors set forth under the caption “ Forward-Looking Statements ” and those set forth in “ Item 1A : Risk Factors ”.
In this MD&A we refer to FTE net interest income and FTE total revenue. These financial measures are not required by, or calculated in accordance with GAAP and may not be calculated the same as similarly titled measures used by other companies. These financial measures should thus be considered as supplemental in nature and not considered in isolation or as a substitute for the related financial information prepared in accordance with GAAP. For a further description of these non-GAAP financial measures, see the “ Non-GAAP Financial Measures ” within the “ Additional Disclosures ” section below.

EXECUTIVE OVERVIEW
Acquisitions and Divestitures
Veritex Acquisition
Effective October 20, 2025, Huntington completed the acquisition of Veritex Holdings, Inc. (“Veritex”), a bank holding company headquartered in Dallas, Texas, whereby Veritex merged with and into Huntington, with Huntington as the surviving entity. Upon completion of the merger, Huntington issued 107 million shares of its common stock to Veritex shareholders of record as of the merger date, in addition to 1 million shares issued upon the conversion of certain Veritex equity awards, resulting in total consideration from the transaction of $1.7 billion. Historical periods prior to October 20, 2025 reflect results of legacy Huntington operations. Subsequent to closing, results reflect all combined post-acquisition activity. For further information, refer to Note 3 - “ Business Combinations ” of the Notes to Consolidated Financial Statements.
Cadence Acquisition
Effective February 1, 2026, Huntington completed its previously announced acquisition of Cadence Bank (“Cadence”), a regional bank headquartered in Houston, Texas and Tupelo, Mississippi, whereby Cadence merged with and into Huntington National Bank, with Huntington National Bank as the surviving bank. Under the terms of the agreement, Huntington issued 2.475 shares for each outstanding share of Cadence in a 100% stock transaction. Based on Huntington’s closing price of $17.48 as of January 30, 2026, the consideration is valued at approximately $8.1 billion. Each outstanding share of 5.50% Series A Non-Cumulative Perpetual Preferred Stock of Cadence was converted into the right to receive 1/1000 of a share of a newly created 5.50% Series L Non-Cumulative Perpetual Preferred Stock of Huntington. As of December 31, 2025, Cadence had $54 billion in assets, including $37 billion in loans, and $44 billion in deposits.
2025 Form 10-K 51

Table of Contents

2025 Financial Performance Review
Selected Financial Data

Table 1 - Selected Year-to-Date Income Statement Data
  Year Ended December 31,
    Change from 2024   Change from 2023  
(amounts in millions, except per share data) 2025 Amount Percent 2024 Amount Percent 2023
Interest income $ 10,310 $ 389  4  % $ 9,921 $ 1,005  11  % $ 8,916
Interest expense 4,319 (257) (6) 4,576 1,099  32  3,477
Net interest income 5,991 646  12  5,345 (94) (2) 5,439
Provision for credit losses 463 43  10  420 18  4  402
Net interest income after provision for credit losses 5,528 603  12  4,925 (112) (2) 5,037

Noninterest income 2,175 135  7  2,040 119  6  1,921

Noninterest expense 5,015 453  10  4,562 (12) —  4,574
Income before income taxes 2,688 285  12  2,403 19  1  2,384
Provision for income taxes 459 16  4  443 30  7  413
Income after income taxes 2,229 269  14  1,960 (11) (1) 1,971
Income attributable to non-controlling interest 18 (2) (10) 20 —  —  20
Net income attributable to Huntington
2,211 271  14  1,940 (11) (1) 1,951
Dividends on preferred shares 124 (10) (7) 134 (8) (6) 142
Impact of preferred stock redemptions and repurchases
— (5) NM 5 13  NM (8)
Net income applicable to common shares $ 2,087 $ 286  16  % $ 1,801 $ (16) (1) % $ 1,817
Average common shares—basic 1,479 28  2  % 1,451 5  —  % 1,446
Average common shares—diluted 1,505 29  2  1,476 8  1  1,468
Net income per common share—basic $ 1.41 $ 0.17  14  $ 1.24 $ (0.02) (2) $ 1.26
Net income per common share—diluted 1.39 0.17  14  1.22 (0.02) (2) 1.24
Cash dividends declared per common share
0.62 —  —  0.62 —  —  0.62
Return on average assets
1.05  % 0.99  % 1.04  %
Return on average common shareholders’ equity
10.8 10.4 11.2
Return on average tangible common shareholders’ equity (1)
15.7 15.7 17.6
Net interest margin (2)
3.13 3.00 3.19
Efficiency ratio (3)
59.9 60.5 61.0

Revenue and Net Interest Income—FTE (Non-GAAP)
Net interest income $ 5,991 $ 646  12  % $ 5,345 $ (94) (2) % $ 5,439
FTE adjustment (2)
65 12  23  53 11  26  42
Net interest income, FTE (non-GAAP) (2)
6,056 658  12  5,398 (83) (2) 5,481
Noninterest income 2,175 135  7  2,040 119  6  1,921
Total revenue, FTE (non-GAAP) (2)
$ 8,231 $ 793  11  % $ 7,438 $ 36  —  % $ 7,402

(1)    Net income applicable to common shares excluding expense for amortization of intangibles for the period divided by average tangible common shareholders’ equity. Average tangible common shareholders’ equity equals average total common shareholders’ equity less average intangible assets and goodwill. Expense for amortization of intangibles and average intangible assets are net of deferred taxes and calculated assuming a 21% tax rate.
(2)    Calculated on an FTE basis, which represents a non-GAAP measure, assuming a 21% tax rate.
(3)    Noninterest expense less amortization of intangibles divided by the sum of FTE net interest income and noninterest income excluding securities gains (losses).
52 Huntington Bancshares Incorporated

Table of Contents

Summary of Results
In 2025, we reported net income of $2.2 billion, or $1.39 per diluted common share, compared with net income in 2024 of $1.9 billion, or $1.22 per diluted common share. The current year reported net income was impacted by acquisition-related expenses totaling $168 million, or $129 million after tax, which reduced diluted earnings by $0.09 per common share.
Net interest income was $6.0 billion in 2025, an increase of $646 million, or 12%, from 2024. FTE net interest income, a non-GAAP financial measure, increased $658 million, or 12%, from 2024. The increase in FTE net interest income reflected a 13 basis point increase in the FTE NIM to 3.13% and a $13.9 billion, or 8%, increase in average earning assets, partially offset by a $12.9 billion, or 9%, increase in average interest-bearing liabilities. The NIM increase was primarily due to a decrease in the cost of funding, partially offset by a decrease in yields on earning assets and net hedging activity.
The provision for credit losses increased $43 million, or 10%, to $463 million for 2025. The ACL was $2.7 billion, or 1.83% of total loans and leases, at December 31, 2025, compared to $2.4 billion, or 1.88% of total loans and leases, at December 31, 2024. The increase in the ACL was driven by current year loan and lease growth, in addition to an ACL recorded for loans acquired in the Veritex transaction, partially offset by a decrease in the overall ACL coverage ratio.
Noninterest income was $2.2 billion, an increase of $135 million, or 7%, from the prior year, driven by a $24 million gain on the sale of a portion of our trust and custody business and increases in customer deposit and loan fees, wealth and asset management revenue, payments and cash management revenue, and capital markets and advisory fees, partially offset by an increase in net losses on sales of securities. Noninterest expense was $5.0 billion, an increase of $453 million, or 10%, from the prior year primarily due to higher personnel costs and outside data processing and other services, in addition to $168 million of acquisition-related expenses, partially offset by lower deposit insurance expense driven by a reduction in the amount of expense associated with the FDIC DIF special assessment due to ongoing adjustments to uninsured deposit losses by the FDIC.
Consolidated Balance Sheet and Capital Ratios
Total assets at December 31, 2025 were $225.1 billion, an increase of $20.9 billion, or 10%, compared to December 31, 2024. The increase in total assets was driven by $10.3 billion of organic loan growth and $9.3 billion of loans acquired as a result of the completion of the Veritex acquisition. Total liabilities at December 31, 2025 were $200.7 billion, an increase of $16.3 billion, or 9%, compared to December 31, 2024. The increase in total liabilities was largely driven by $10.8 billion of liabilities assumed as a result of the completion of the Veritex acquisition and organic deposit growth, partially offset by the run-off of certain higher-cost Veritex deposits.
The tangible common equity to tangible assets ratio increased to 7.1% at December 31, 2025, compared to 6.1% at December 31, 2024, primarily due to an increase in tangible common equity from earnings, net of dividends, an improvement in AOCI, and the net impact of the Veritex acquisition, partially offset by an increase in tangible assets. The CET1 risk-based capital ratio was 10.4% at December 31, 2025, down from 10.5% at December 31, 2024, with the decrease primarily due to an increase in risk-weighted assets and the CECL transition adjustment, partially offset by current period earnings, net of dividends.
2025 Form 10-K 53

Table of Contents