ACNB CORP (ACNB) Business

ITEM 1 — BUSINESS

ACNB CORPORATION

ACNB Corporation, headquartered in Gettysburg, Pennsylvania, is the financial holding company for the wholly-owned subsidiaries of ACNB Bank, Gettysburg, Pennsylvania, and ACNB Insurance Services, Westminster, Maryland. Originally founded in 1857, ACNB Bank serves its marketplace with banking, mortgage and wealth management services, including trust and retail brokerage, via a network of 33 community banking offices and two loan offices located in the Pennsylvania counties of Adams, Berks, Cumberland, Franklin, Lancaster and York and the Maryland counties of Baltimore, Carroll and Frederick. ACNB Insurance Services, the Corporation’s insurance subsidiary, is a full-service agency licensed to do business in 46 states. The agency offers a broad range of property, casualty, health, life and disability insurance serving personal and commercial clients through office locations in Westminster, Maryland, and Gettysburg, Pennsylvania.

ACNB Corporation was formed in 1982, and became the bank holding company for ACNB Bank (formerly Adams County National Bank) in 1983. On July 1, 2017, ACNB Corporation completed the acquisition of New Windsor Bancorp, Inc. and its wholly-owned subsidiary, New Windsor State Bank, a Maryland state-chartered, FDIC-insured community bank headquartered in Taneytown, Maryland. On January 11, 2020, ACNB completed its acquisition of Frederick County Bancorp, Inc. and its wholly-owned subsidiary, Frederick County Bank, a Maryland state-chartered, FDIC-insured community bank headquartered in Frederick, Maryland. Effective February 1, 2025, ACNB closed the acquisition of Traditions Bancorp, Inc., holding company for Traditions Bank, York, Pennsylvania. Traditions was merged with and into a wholly-owned subsidiary of ACNB Corporation immediately followed by the merger of Traditions Bank with and into ACNB Bank. ACNB Bank is operating the former Traditions Bank offices as “Traditions Bank, A Division of ACNB Bank”. Traditions Bank operated eight community banking offices in South Central Pennsylvania which were included in the Acquisition. In April 2025, ACNB consolidated two of the eight Traditions Bank offices into nearby ACNB Bank offices.

The Corporation purchased its insurance subsidiary, ACNB Insurance Services (formerly Russell Insurance Group, Inc.) in 2005. On February 28, 2022, ACNB Insurance Services, completed the acquisition of the business and assets of Hockley & O’Donnell, located in Gettysburg, Pennsylvania.

ACNB’s major source of unconsolidated operating funds is dividends that it receives from its subsidiaries. ACNB’s unconsolidated expenses consist principally of interest expense on long-term borrowings and general expenses related to corporate governance. Dividends that ACNB pays to stockholders consist primarily of dividends declared and paid to ACNB by its subsidiary bank, ACNB Bank.

ACNB and its subsidiaries are not dependent upon a single customer or a small number of customers, the loss of which would have a material adverse effect on the Corporation. ACNB does not depend on foreign sources of funds, nor does it make foreign loans.

The common stock of ACNB is listed on The NASDAQ Capital Market under the symbol ACNB.

BANKING SUBSIDIARY

ACNB Bank

ACNB Bank is a full-service commercial bank operating under charter from the Pennsylvania Department of Banking and Securities. The Bank’s principal Market Areas include Adams County, Pennsylvania, and its surrounding areas in South-central Pennsylvania, as well as Carroll and Frederick Counties in Northern Maryland. This geographic area depends on agriculture, industry, tourism, education and healthcare, as well as local governments, to provide employment for its residents. No single sector dominates the area’s economy. At December 31, 2025, ACNB Bank had total assets of $3.21 billion, total loans, net of unearned income, of $2.33 billion, total deposits of $2.48 billion, and total equity capital of $398.3 million. In October 2010, the Bank converted from a national banking association to a Pennsylvania state-chartered bank and trust company.

The main community banking office of the Bank is located at 16 Lincoln Square, Gettysburg, Pennsylvania. The Bank has a total of 33 community banking offices. The Bank serves its local marketplace in Pennsylvania through 24 community banking offices, including 10 offices in Adams County, nine offices in York County, one office in Cumberland County, one in Franklin County, and two offices and a limited-service office in Lancaster County. In Maryland the Bank serves its local marketplace via a network of nine community banking offices including five located in Carroll County and four located in Frederick County. There are loan production offices located in West Lawn, Pennsylvania and Hunt Valley, Maryland. The Bank’s service delivery channels for its customers also include the ATM network, Customer Contact Center, and Online, Telephone and Mobile Banking. The Bank is subject to regulation and periodic examination by the Pennsylvania Department of Banking and Securities and the Federal Deposit Insurance Corporation. The FDIC, as provided by law, insures the Bank’s deposits.

6

Table of Contents

Commercial lending includes commercial mortgages, real estate development and construction loans, accounts receivable and inventory financing, and agricultural and governmental loans. Consumer lending programs include home equity loans and lines of credit, automobile and recreational vehicle loans, manufactured housing loans, and personal lines of credit. Mortgage lending is done through Traditions Mortgage, a division of ACNB Bank, and includes programs such as personal residential mortgages, residential construction loans, and investment mortgage loans.

The Bank, through its trust and investment services group, under the umbrella of ACNB Wealth Management, is named as trustee of financial assets. A trust is a legal fiduciary agreement whereby as trustee, the Bank invests, protects, manages and distributes financial assets as defined in the agreement. Estate settlement governed by the last will and testament of an individual constitutes another line of business for ACNB Wealth Management. Other services include, but are not limited to, those related to testamentary trusts, life insurance trusts, charitable remainder trusts, guardianships, powers of attorney, custodial accounts, and investment management and advisory accounts. Total trust assets under management and administration were $444.8 million and $24.1 million, respectively at December 31, 2025.

The Bank, through the wealth advisory services group, also under the umbrella of ACNB Wealth Management, offers retail brokerage services through a third-party provider. This third-party provider is a broker/dealer, unaffiliated with the Bank or ACNB Wealth Management. At December 31, 2025, total assets under management and administration with the broker/dealer were $238.3 million and $31.6 million, respectively.

NONBANKING SUBSIDIARY

ACNB Insurance Services

ACNB Corporation’s wholly-owned subsidiary, ACNB Insurance Services, is a full-service insurance agency, licensed to do business in 46 states that offers a broad range of property, casualty, health, life and disability insurance to both commercial and individual clients. Based in Westminster, Maryland, ACNB Insurance Services, has served the needs of its clients since its founding as an independent insurance agency by Frank C. Russell, Jr. in 1978. The agency was purchased by the Corporation in 2005. ACNB Insurance Services operates an additional location in Gettysburg, Pennsylvania. Total assets of ACNB Insurance Services as of December 31, 2025, were $19.7 million.

ACNB Insurance Services is managed separately from the Bank and is reported as a separate operating segment. Financial information on this segment is included in Note 22 — “Segment and Related Information” in the Notes to Consolidated Financial Statements under Part II, Item 8 — “Financial Statements and Supplementary Data”.

HUMAN CAPITAL

Workforce Composition and Demographics

As of December 31, 2025, ACNB had 501 full-time and 36 part-time employees. None of these employees are represented by a collective bargaining agreement, and ACNB believes it enjoys good relations with its personnel. As of December 31, 2025, approximately 66% of ACNB’s workforce was female and 34% were male. The average tenure of ACNB employees is approximately nine years.

ACNB believes that it is critically important that its employee base reflects the communities that we serve. We work hard to recruit and retain the best talent to meet ACNB customers’ needs, using multiple sourcing methods to ensure we attract the most diverse and qualified candidate pool.

Talent Development and Training

The growth and development of ACNB employees is encouraged and supported. Continuous learning and career development is reinforced through ongoing performance and development conversations with employees, tuition reimbursement program, leadership development opportunities, internally-created training programs, including comprehensive compliance and community banking training. New community banking employees attend two weeks of training onsite, with an additional week of mentoring support on the job. Training opportunities are available both online and in-person, and all employees have online access to courses for professional development provided by a third party.

Employee evaluations are conducted on at least an annual basis. Those evaluations focus on job performance against job specific and organizational competencies, and employee and career development. In addition, we monitor employee engagement through periodic employee surveys followed by a thorough action planning process.

7

Table of Contents

Benefits and Wellness

Work-life balance and the safety, health and wellness of employees are top priorities. The Company balances hybrid/remote work while maintaining successful operations. Currently, many of ACNB employees effectively work a hybrid schedule from ACNB offices and remote locations. Employees are continually introduced to wellness initiatives, to reinforce the importance of overall health and well-being. An Employee Assistance Program offers free, confidential counseling services to all employees.

Talent Attraction and Retention

Competitive compensation is offered to support ACNB employee recruitment and retention efforts. Compensation packages include a market-competitive salary, healthcare and retirement benefits, paid time off, 12 paid holidays, and may also include bonuses or sales commissions and short-term and long-term equity incentives. We also offer an internship program to attract and develop future talent.

Culture and Engagement

The Company deploys numerous methods to foster employee engagement and connection, including regular company-wide video calls, bi-monthly service recognition breakfasts that provide connection and discussion with executive leaders, leadership visits and recognition on Employee Appreciation Day, community involvement events, and an annual picnic for all employees to attend.

Community Involvement

ACNB is dedicated to supporting charitable community organizations within the communities it serves. Employees are encouraged to participate in various community events such as parades, walks and 5k runs, farm shows, fund raising events and community donation drives. In 2025, employees supported over 160 community organizations by collectively contributing more than 4,000 volunteer hours in the Company’s Market Areas.

MARKET AREA ECONOMIC FEATURES AND CONDITIONS

ACNB Corporation’s headquarters is in Gettysburg, Pennsylvania. A material amount of land surrounding Gettysburg, Pennsylvania, is under the control of the National Park Service, limiting certain types of development. The Corporation’s major operations are in Adams County, Pennsylvania, and the surrounding areas in South-central Pennsylvania, as well as all of Carroll and Frederick Counties in Northern Maryland. This geographic area depends on agriculture, industry, tourism, education, and healthcare, as well as local governments, to provide employment for its residents. No single sector dominates the area’s economy. Unemployment figures in the subsidiary Bank’s market have been better than those for Pennsylvania and Maryland and the United States. Per capita and household incomes are generally under Pennsylvania averages. The unemployment rate during 2025 averaged 3.6% in the Bank’s nine-county market area, while it averaged 3.9% overall in Pennsylvania and Maryland, and 4.3% in the United States.

COMPETITION

The financial services industry in ACNB’s Market Area is highly competitive, including competition for similar products and services from commercial banks, thrifts, credit unions, finance and mortgage companies, and other nonbank providers of financial services. Several of ACNB’s competitors have legal lending limits that exceed those of ACNB’s subsidiary bank, as well as funding sources in the capital markets that exceed ACNB’s availability. The high level of competition has resulted from changes in the legal and regulatory environment, as well as from the economic climate, customer expectations, and service alternatives via the internet.

SUPERVISION AND REGULATION

Regulation of Bank Holding Company and Subsidiaries

BANK HOLDING COMPANY ACT OF 1956 — ACNB is a financial holding company and is subject to the regulations of the Board of Governors of the Federal Reserve System under the Bank Holding Company Act of 1956. Bank holding companies are required to file periodic reports with and are subject to examination by the Federal Reserve.

The Federal Reserve has issued regulations under the Bank Holding Company Act that require a financial holding company to serve as a source of financial and managerial strength to its subsidiary bank. As a result, the Federal Reserve may require ACNB to stand ready to use its resources to provide adequate capital funds to the Bank during periods of financial stress or adversity. In addition, the Federal Reserve may require a financial holding company to end a nonbanking business if the

8

Table of Contents

nonbanking business constitutes a serious risk to the financial soundness and stability of any banking subsidiary of the financial holding company.

The Bank Holding Company Act prohibits ACNB from acquiring direct or indirect control of more than 5% of the outstanding voting stock of any bank, or substantially all of the assets of any bank, or merging with another bank holding company, without the prior approval of the Federal Reserve. The Bank Holding Company Act allows interstate bank acquisitions and interstate branching by acquisition and consolidation in those states that had not elected to opt out by the required deadline. The Pennsylvania Department of Banking and Securities also must approve any similar consolidation. Pennsylvania law permits Pennsylvania financial holding companies to control an unlimited number of banks.

Further, the Bank Holding Company Act restricts ACNB’s nonbanking activities to those that are determined by the Federal Reserve Board to be financial in nature, incidental to such financial activity, or complementary to a financial activity. The Bank Holding Company Act does not place territorial restrictions on the activities of nonbanking subsidiaries of financial holding companies.

GRAMM-LEACH-BLILEY ACT OF 1999 — The Gramm-Leach-Bliley Act of 1999 eliminated many of the restrictions placed on the activities of bank holding companies that become financial holding companies. Among other things, the GLBA repealed certain Glass-Steagall Act restrictions on affiliations between banks and securities firms, and amended the Bank Holding Company Act to permit bank holding companies that are financial holding companies to engage in activities, and acquire companies engaged in activities, that are: financial in nature (including insurance underwriting, insurance company portfolio investment, financial advisory, securities underwriting, dealing and market-making, and merchant banking activities); incidental to financial activities; or, complementary to financial activities if the Federal Reserve determines that they pose no substantial risk to the safety or soundness of depository institutions or the financial system in general.

REGULATION W — Transactions between a bank and its “affiliates” are quantitatively and qualitatively restricted under the Federal Reserve Act. The Federal Deposit Insurance Act applies Sections 23A and 23B to insured nonmember banks in the same manner and to the same extent as if they were members of the Federal Reserve System. The Federal Reserve has also issued Regulation W, which codifies prior regulations under Sections 23A and 23B of the Federal Reserve Act, and interpretative guidance with respect to affiliate transactions. Regulation W incorporates the exemption from the affiliate transaction rules, but expands the exemption to cover the purchase of any type of loan or extension of credit from an affiliate. Affiliates of a bank include, among other entities, the bank’s holding company and companies that are under common control with the bank. ACNB Corporation and ACNB Insurance Services are considered to be affiliates of ACNB Bank.

USA PATRIOT ACT OF 2001 — In October 2001, the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 was enacted in response to the terrorist attacks in New York, Pennsylvania and Washington, D.C., which occurred on September 11, 2001. The USA Patriot Act is intended to strengthen U.S. law enforcement’s and the intelligence communities’ abilities to work cohesively to combat terrorism on a variety of fronts. The impact of the USA Patriot Act on financial institutions of all kinds is significant and wide ranging. The USA Patriot Act contains sweeping anti-money laundering and financial transparency laws and imposes various regulations, including standards for verifying customer identification at account opening, and rules to promote cooperation among financial institutions, regulators and law enforcement entities in identifying parties that may be involved in terrorism or money laundering.

SARBANES-OXLEY ACT OF 2002 — In 2002, the Sarbanes-Oxley Act of 2002 became law. The stated goals of the SOA are to increase corporate responsibility, to provide for enhanced penalties for accounting and auditing improprieties at publicly-traded companies, and to protect investors by improving the accuracy and reliability of corporate disclosures pursuant to the securities law.

The SOA generally applies to all companies, both U.S. and non-U.S., that file or are required to file periodic reports with the SEC under the Exchange Act.

The SOA includes very specific additional disclosure requirements and corporate governance rules, as well as requires the SEC and securities exchanges to adopt extensive additional disclosure, corporate governance, and other related rules. The SOA represents significant federal involvement in matters traditionally left to state regulatory systems, such as the regulation of the accounting profession, and to state corporate law, such as the relationship between a board of directors and management and between a board of directors and its committees.

The SOA addresses, among other matters:

•Audit committees for all reporting companies;

•Certification of financial statements by the chief executive officer and the chief financial officer;

9

Table of Contents

•The forfeiture of bonuses or other incentive-based compensation and profits from the sale of an issuer’s securities by directors and senior officers in the twelve-month period following initial publication of any financial statements that later require restatement;

•A prohibition on insider trading during pension plan blackout periods;

•Disclosure of OBS transactions;

•A prohibition on personal loans to directors and officers;

•Expedited filing requirements for SEC Forms 4;

•Disclosure of a code of ethics and filing an SEC Form 8-K for a change or waiver of such code;

•“Real time” filing of periodic reports;

•Formation of a public accounting oversight board;

•Auditor independence; and,

•Increased criminal penalties for violations of securities laws

The SEC has been delegated the task of enacting rules to implement various provisions of the SOA with respect to, among other matters, disclosure in periodic filings pursuant to the Exchange Act.

BANK SECRECY ACT — Under the Bank Secrecy Act, banks and other financial institutions are required to report to the Internal Revenue Service currency transactions of more than $10 thousand or multiple transactions of which a bank is aware in any one day that aggregate in excess of $10 thousand and to report suspicious transactions under specified criteria. Civil and criminal penalties are provided under the BSA for failure to file a required report, for failure to supply information required by the BSA, or for filing a false or fraudulent report.

The Bank Secrecy Act, as amended by the USA Patriot Act, imposes obligations on U.S. financial institutions, including banks and broker-dealer subsidiaries, to implement policies, procedures and controls which are reasonably designed to detect and report instances of money laundering and the financing of terrorism. Financial institutions also are required to respond to requests for information from federal banking agencies and law enforcement agencies. Information sharing among financial institutions for the above purposes is encouraged by an exemption granted to complying financial institutions from the privacy provisions of the GLBA and other privacy laws. Financial institutions that hold correspondent accounts for foreign banks or provide banking services to foreign individuals are required to take measures to avoid dealing with certain foreign individuals or entities, including foreign banks with profiles that raise money laundering concerns and are prohibited from dealing with foreign “shell banks” and persons from jurisdictions of particular concern. The primary federal banking agencies and the Secretary of the Treasury have adopted regulations to implement several of these provisions. Since 2018, the Bank has complied with the new Customer Due Diligence Rule, which clarified and strengthened the existing obligations for identifying new and existing customers and includes risk-based procedures for conducting ongoing customer due diligence. All financial institutions are also required to establish internal anti-money laundering programs. The effectiveness of a financial institution in combating money laundering activities is a factor to be considered in any application submitted by the financial institution under the Bank Merger Act. The Corporation’s banking subsidiary has a BSA and USA Patriot Act compliance program commensurate with its risk profile and appetite.

DODD-FRANK WALL STREET REFORM AND CONSUMER PROTECTION ACT — In 2010, Dodd-Frank was signed into law. Dodd-Frank was intended to affect a fundamental restructuring of federal banking regulation. Among other things, Dodd-Frank created the Financial Stability Oversight Council to identify systemic risks in the financial system and gives federal regulators new authority to take control of and liquidate financial firms. Dodd-Frank additionally created a new independent federal regulator to administer federal consumer protection laws. Dodd-Frank has had and will continue to have a significant impact on ACNB’s business operations as its provisions take effect. It is expected that, as various implementing rules and regulations are released, they will increase ACNB’s operating and compliance costs and could increase the Bank’s interest expense. Among the provisions that are likely to affect ACNB are the following:

Holding Company Capital Requirements

Dodd-Frank requires the Federal Reserve to apply consolidated capital requirements to bank holding companies that are no less stringent than those currently applied to depository institutions. Under these standards, trust preferred securities are excluded from Tier 1 capital unless such securities were issued prior to May 19, 2010, by a bank holding company with less than $15 billion in assets as of December 31, 2009. Dodd-Frank additionally requires that bank regulators issue countercyclical capital requirements so that the required amount of capital increases in times of economic expansion, consistent with safety and

10

Table of Contents

soundness. For further information, please refer to Regulatory Capital Requirements in Management’s Discussion and Analysis.

Deposit Insurance

Dodd-Frank permanently increased the maximum deposit insurance amount for banks, savings institutions, and credit unions to $250 thousand per depositor. Dodd-Frank also broadened the base for FDIC insurance assessments. Assessments are now based on the average consolidated total assets less tangible equity capital of a financial institution. Dodd-Frank required the FDIC to increase the reserve ratio of the Deposit Insurance Fund from 1.15% to 1.35% of insured deposits by 2020 and eliminated the requirement that the FDIC pay dividends to insured depository institutions when the reserve ratio exceeds certain thresholds. Dodd-Frank also eliminated the federal statutory prohibition against the payment of interest on business checking accounts.

Corporate Governance

Dodd-Frank requires publicly-traded companies to give stockholders a non-binding vote on executive compensation at least every three years, a non-binding vote regarding the frequency of the vote on executive compensation at least every six years, and a non-binding vote on “golden parachute” payments in connection with approvals of mergers and acquisitions unless previously voted on by stockholders. Additionally, Dodd-Frank directs the federal banking regulators to promulgate rules prohibiting excessive compensation paid to executives of depository institutions and their holding companies with assets in excess of $1 billion, regardless of whether the company is publicly traded. Dodd-Frank also gives the SEC authority to prohibit broker discretionary voting on elections of directors and executive compensation matters.

Prohibition Against Charter Conversions of Troubled Institutions

Dodd-Frank prohibits a depository institution from converting from a state to a federal charter, or vice versa, while it is the subject of a cease and desist order or other formal enforcement action or a memorandum of understanding with respect to a significant supervisory matter unless the appropriate federal banking agency gives notice of the conversion to the federal or state authority that issued the enforcement action and that agency does not object within 30 days. The notice must include a plan to address the significant supervisory matter. The converting institution must also file a copy of the conversion application with its current federal regulator, which must notify the resulting federal regulator of any ongoing supervisory or investigative proceedings that are likely to result in an enforcement action and provide access to all supervisory and investigative information relating thereto.

Interstate Branching

Dodd-Frank authorizes national and state banks to establish branches in other states to the same extent as a bank chartered by that state would be permitted. Previously, banks could only establish branches in other states if the host state expressly permitted out-of-state banks to establish branches in that state. Accordingly, banks are able to enter new markets more freely.

Limits on Interstate Acquisitions and Mergers

Dodd-Frank precludes a bank holding company from engaging in an interstate acquisition—the acquisition of a bank outside its home state—unless the bank holding company is both well capitalized and well managed. Furthermore, a bank may not engage in an interstate merger with another bank headquartered in another state unless the surviving institution will be well capitalized and well managed. The previous standard in both cases was adequately capitalized and adequately managed.

Limits on Interchange Fees

Dodd-Frank amended the Electronic Fund Transfer Act to, among other things, give the Federal Reserve the authority to establish rules regarding interchange fees charged for electronic debit transactions by payment card issuers having assets over $10 billion and to enforce a new statutory requirement that such fees be reasonable and proportional to the actual cost of a transaction to the issuer.

Consumer Financial Protection Bureau

Dodd-Frank created the independent federal agency called the CFPB, which is granted broad rulemaking, supervisory and enforcement powers under various federal consumer financial protection laws, including the Equal Credit Opportunity Act, Truth in Lending Act, Real Estate Settlement Procedures Act, Fair Credit Reporting Act, Fair Debt Collection Act, Consumer Financial Privacy provisions of the Gramm-Leach-Bliley Act, and certain other statutes. The CFPB has examination and primary enforcement authority with respect to depository institutions with $10 billion or more in assets. Smaller institutions are subject to rules promulgated by the CFPB, but continue to be examined and supervised by federal banking regulators for consumer compliance purposes. The CFPB has authority to prevent unfair, deceptive or abusive practices in connection with the offering of consumer financial products. Dodd-Frank authorizes the CFPB to establish certain minimum standards for the

11

Table of Contents

origination of residential mortgages including a determination of the borrower’s ability to repay. In addition, Dodd-Frank allows borrowers to raise certain defenses to foreclosure if they receive any loan other than a “qualified mortgage” as defined by the CFPB. Dodd-Frank permits states to adopt consumer protection laws and standards that are more stringent than those adopted at the federal level and, in certain circumstances, permits state attorneys general to enforce compliance with both the state and federal laws and regulations.

ABILITY-TO-REPAY AND QUALIFIED MORTGAGE RULE — Pursuant to Dodd-Frank as highlighted above, the CFPB issued a final rule on January 10, 2013 (effective on January 10, 2014), amending Regulation Z as implemented by the Truth in Lending Act, requiring mortgage lenders to make a reasonable and good faith determination based on verified and documented information that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms. Mortgage lenders are required to determine the consumer’s ability to repay in one of two ways. The first alternative requires the mortgage lender to consider the following eight underwriting factors when making the credit decision: (1) current or reasonably expected income or assets; (2) current employment status; (3) the monthly payment on the covered transaction; (4) the monthly payment on any simultaneous loan; (5) the monthly payment for mortgage-related obligations; (6) current debt obligations, alimony, and child support; (7) the monthly debt-to-income ratio or residual income; and, (8) credit history. Alternatively, the mortgage lender can originate “qualified mortgages”, which are entitled to a presumption that the creditor making the loan satisfied the ability-to-repay requirements. In general, a “qualified mortgage” is a mortgage loan without negative amortization, interest-only payments, balloon payments, or terms exceeding 30 years. In addition, to be a qualified mortgage, the points and fees paid by a consumer cannot exceed 3% of the total loan amount. Loans which meet these criteria will be considered qualified mortgages and, as a result, generally protect lenders from fines or litigation in the event of foreclosure. Qualified mortgages that are “higher-priced” (e.g., subprime loans) garner a rebuttable presumption of compliance with the ability-to-repay rules, while qualified mortgages that are not “higher-priced” (e.g., prime loans) are given a safe harbor of compliance. The impact of the final rule, and the subsequent amendments thereto, on the Corporation’s lending activities and the Corporation’s statements of income or condition has had little or no impact; however, management will continue to monitor the implementation of the rule for any potential effects on the Corporation’s business.

DEPARTMENT OF DEFENSE MILITARY LENDING RULE — In 2015, the U.S. Department of Defense issued a final rule which restricts pricing and terms of certain credit extended to active-duty military personnel and their families. This rule, which was implemented effective October 3, 2016, caps the interest rate on certain credit extensions to an annual percentage rate of 36% and restricts other fees. The rule requires financial institutions to verify whether customers are military personnel subject to the rule. The impact of this final rule, and any subsequent amendments thereto, on the Corporation’s lending activities and the Corporation’s statements of income or condition has had little or no impact; however, management will continue to monitor the implementation of the rule for any potential effects on the Corporation’s business.

FEDERAL DEPOSIT INSURANCE CORPORATION ACT OF 1991 — Under the Federal Deposit Insurance Corporation Act of 1991, any depository institution, including the subsidiary bank, is prohibited from paying any dividends, making other distributions or paying any management fees if, after such payment, it would fail to satisfy the minimum capital requirement.

FEDERAL RESERVE ACT — A subsidiary bank of a bank holding company is subject to certain restrictions and reporting requirements imposed by the Federal Reserve Act, including:

•Extensions of credit to the bank holding company, its subsidiaries, or principal stockholders;

•Investments in the stock or other securities of the bank holding company or its subsidiaries; and,

•Taking such stock or securities as collateral for loans.

COMMUNITY REINVESTMENT ACT OF 1977 — Under the CRA, the FDIC is required to assess the record of all financial institutions regulated by it to determine if these institutions are meeting the credit needs of the community, including low- and moderate-income neighborhoods, which they serve and to take this record into account in its evaluation of any application made by any of such institutions for, among other things, approval of a branch or other deposit facility, office relocation, merger, or acquisition of bank shares. The Financial Institutions Reform, Recovery and Enforcement Act of 1989 amended the CRA to require, among other things, that the FDIC make publicly available the evaluation of a bank’s record of meeting the credit needs of its entire community, including low- and moderate-income neighborhoods. This evaluation includes a descriptive rating like “outstanding”, “satisfactory”, “needs to improve” or “substantial noncompliance” and a statement describing the basis for the rating. These ratings are publicly disclosed.

12

Table of Contents

FEDERAL DEPOSIT INSURANCE CORPORATION IMPROVEMENT ACT OF 1991 — The FDICIA requires that institutions be classified, based on their risk-based capital ratios, into one of five defined categories as follows and as illustrated below: well capitalized, adequately capitalized, undercapitalized, significantly undercapitalized, or critically undercapitalized.

In the event an institution’s capital deteriorates to the undercapitalized category or below, FDICIA prescribes an increasing amount of regulatory intervention, including the institution of a capital restoration plan and a guarantee of the plan by a parent institution and the placement of a hold on increases in assets, number of branches, or lines of business. If capital reaches the significantly or critically undercapitalized levels, further material restrictions can be imposed, including restrictions on interest payable on accounts, dismissal of management, and, in critically undercapitalized situations, appointment of a receiver. For well capitalized institutions, FDICIA provides authority for regulatory intervention when the institution is deemed to be engaging in unsafe or unsound practices or receives a less than satisfactory examination report rating for asset quality, management, earnings or liquidity. All but well capitalized institutions are prohibited from accepting brokered deposits without prior regulatory approval. Under FDICIA, financial institutions are subject to increased regulatory scrutiny and must comply with certain operational, managerial and compensation standards established by Federal Reserve Board regulations.

In July 2013, the federal banking agencies issued final rules to implement the Basel III regulatory capital reforms and changes required by the Dodd-Frank. The phase-in period for community banking organizations began January 1, 2015, while larger institutions (generally those with assets of $50 billion or more) began compliance on January 1, 2014. The final rules call for the following capital requirements which remain in effect:

•A minimum ratio of common equity Tier 1 capital to total risk-weighted assets of 4.5%

•A minimum ratio of Tier 1 capital to risk-weighted assets of 6.0%

•A minimum ratio of total capital ratio of total capital to total risk-weighted assets of 8.0%

•A minimum leverage ratio of Tier 1 capital to average total consolidated assets of 4.0%

A discussion of how these capital rules affect ACNB Corporation appears under Item 7 — “Management’s Discussion and Analysis of Financial Condition and Results of Operations”.

Dividends

ACNB is a legal entity separate and distinct from its subsidiary bank and insurance agency subsidiary. ACNB’s revenues, on a parent company only basis, result primarily from dividends paid to the Corporation by its subsidiaries. Federal and state laws regulate the payment of dividends by ACNB’s subsidiary bank and state laws effect dividends paid by ACNB’s insurance subsidiary. ACNB’s dividends to stockholders is governed by the Pennsylvania Business Corporation Law. For further information, please refer to Regulation of Bank below and Note 16 — “Regulatory Matters”, to the Consolidated Financial Statements under Part II, Item 8 — “Financial Statements and Supplementary Data”.

Regulation of Bank

The operations of the subsidiary bank are subject to statutes applicable to banks and trust companies chartered under the banking laws of Pennsylvania, to state nonmember banks of the Federal Reserve, and to banks whose deposits are insured by the FDIC. The subsidiary bank’s operations are also subject to regulations of the Pennsylvania Department of Banking and Securities, Federal Reserve, and FDIC.

The Pennsylvania Department of Banking and Securities, which has primary supervisory authority over banks chartered in Pennsylvania, regularly examines banks in such areas as reserves, loans, investments, management practices, and other aspects of operations. The subsidiary bank is also subject to examination and supervision by the FDIC for safety and soundness, as well

13

Table of Contents

as consumer compliance. These examinations and supervision are designed for the protection of the subsidiary bank’s depositors rather than ACNB’s stockholders. The subsidiary bank must file quarterly and annual reports to the Federal Financial Institutions Examination Council, or FFIEC.

Monetary and Fiscal Policy

ACNB and its subsidiary bank are affected by the monetary and fiscal policies of government agencies, including the Federal Reserve and FDIC. Through open market securities transactions and changes in its discount rate and reserve requirements, the Board of Governors of the Federal Reserve exerts considerable influence over the cost and availability of funds for lending and investment. The nature and impact of monetary and fiscal policies on future business and earnings of ACNB cannot be predicted at this time. From time to time, various federal and state legislation is proposed that could result in additional regulation of, and restrictions on, the business of ACNB and the subsidiary bank, or otherwise change the business environment. Management cannot predict whether any of this legislation will have a material effect on the business of ACNB.

AVAILABLE INFORMATION

The Corporation maintains a website on the Internet at investor.acnb.com. The Corporation makes available free of charge, on or through its website, its proxy statements, annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and any amendments to those reports as soon as reasonably practicable after such material is electronically filed with the SEC. This reference to the Corporation’s Internet address shall not, under any circumstances, be deemed to incorporate the information available at such Internet address into this Form 10-K or other SEC filings. The information available at the Corporation’s Internet address is not part of this Form 10-K or any other report filed by the Corporation with the SEC. The Corporation’s SEC filings can also be obtained on the SEC’s website on the Internet at https://www.sec.gov.

ACQUISITIONS

ACNB Corporation and its subsidiaries pursue organic and inorganic growth strategies. In furtherance of the inorganic growth strategy, on July 1, 2017, ACNB acquired New Windsor Bancorp, Inc. and its wholly-owned subsidiary, New Windsor State Bank, headquartered in Taneytown, Maryland. Additionally, on January 11, 2020, ACNB acquired Frederick County Bancorp, Inc. and its wholly-owned subsidiary, Frederick County Bank, headquartered in Frederick, Maryland. Effective February 1, 2025, ACNB acquired Traditions Bancorp, Inc., holding company for Traditions Bank, York, Pennsylvania. Traditions was merged with and into a wholly-owned subsidiary of ACNB Corporation immediately followed by the merger of Traditions Bank with and into ACNB Bank. ACNB Bank is operating the former Traditions Bank offices as “Traditions Bank, A Division of ACNB Bank”.

On February 28, 2022, ACNB Insurance Services, the wholly-owned insurance subsidiary of ACNB Corporation, acquired the business and assets of Hockley & O’Donnell, located in Gettysburg, Pennsylvania.