OLD NATIONAL BANCORP /IN/ (ONB) Business

ITEM 1.    BUSINESS

COMPANY PROFILE

Old National Bancorp, the financial holding company of Old National Bank, our wholly owned banking subsidiary (“Old National Bank”), is incorporated in the state of Indiana, is the sixth largest Midwestern-headquartered bank by asset size with consolidated assets of $72.2 billion at December 31, 2025, and ranks among the top 25 banking companies headquartered in the United States. The Company’s corporate headquarters and principal executive office are located in Evansville, Indiana with commercial and consumer banking operations headquartered in Chicago, Illinois. Through Old National Bank and our non-bank affiliates, we provide a wide range of services primarily throughout the Midwest and Southeast regions of the United States. In addition to providing extensive services in consumer and commercial banking, Old National offers comprehensive wealth management and capital markets services.

THE BANK

Old National Bank traces its roots to 1834 and at December 31, 2025, operated 346 banking centers located primarily throughout the Midwestern and Southeastern United States, including Illinois, Indiana, Iowa, Kentucky, Michigan, Minnesota, North Carolina, North Dakota, Tennessee, and Wisconsin. Each of the banking centers of Old National Bank provides a group of similar community banking services, including such products and services as commercial, real estate, and consumer loans; deposits; and private banking, capital markets, brokerage, wealth management, trust, and investment advisory services.

We earn interest income on loans as well as fee income from the origination of loans and from providing other services to our clients. Lending activities include loans to individuals, which primarily consist of home equity lines of credit, residential real estate loans, and consumer loans, and loans to commercial clients, which include commercial loans, commercial real estate loans, agricultural loans, letters of credit, and lease financing. Residential real estate loans are either kept in our loan portfolio or sold to secondary investors.

We strive to serve individuals and commercial clients by providing depository services that fit their needs at competitive rates. We pay interest on interest-bearing deposits and receive service fee revenue on various accounts. Deposit accounts include products such as noninterest-bearing demand, interest-bearing checking and NOW, savings and money market, and time deposits. Debit and ATM cards provide clients with access to their accounts 24 hours a day at any ATM location. We also provide 24-hour telephone access and online banking as well as other electronic and mobile banking services.

In addition to providing lending and deposit services, we offer comprehensive wealth management, trust, investment advisory, brokerage, and foreign currency services. For businesses, we provide treasury management, merchant, and capital markets services as well as community development lending and equity investment solutions intended to produce jobs and revitalize our communities.

HUMAN CAPITAL RESOURCES

At December 31, 2025, we employed 4,971 full‑time equivalent team members. Attracting, developing, and retaining top talent is a strategic priority supported by integrated talent and succession planning, structured hiring practices, comprehensive total rewards, and meaningful growth opportunities. We provide professional development programs—including career skills training, peer mentoring, and opportunities to engage with senior leaders—along with structured leadership development programs, associate and community engagement teams, impact networks, and other learning and development programs to support team member development, engagement, and job satisfaction.

Old National provides a competitive total rewards package that includes base pay, incentive opportunities, and comprehensive benefits. Our benefits package includes health insurance and wellness coverages, a retirement plan with company matching contributions, other welfare plan coverages, paid time off, and paid leave benefits. To support team member health and well‑being, Old National offers medical programs designed to enhance access to quality care. Team members have access to mental well‑being resources, including mindfulness tools and traditional Employee Assistance Program services. Our medical benefits also include specialized support for complex health conditions, such as access to nationally recognized centers of excellence and condition‑specific care solutions.

5

Additionally, team members in certain areas have access to employer‑sponsored healthcare clinics that provide convenient primary and preventive care.

Old National team members consistently strive to make a positive difference in the communities we serve, sharing their talents through volunteer activities in education, economic development, human and health services, and community reinvestment. We offer a program that allows each team member to be paid up to 24 hours per year to volunteer for activities in their community during normal work hours. Under that program, team members logged approximately 67,700 volunteer hours during 2025 in support of nearly 2,700 organizations, and team members with 25 hours or more of service each year are recognized annually by executive management.

AREAS SERVED

Since our founding, Old National has focused on community and commercial banking by building long-term, highly valued partnerships with our clients. We have continued to expand our footprint in the Midwest and Southeast regions through strategic mergers and acquisitions, and we are now the sixth largest bank headquartered in the Midwest by assets.

The following table reflects information on the top areas we currently serve.

Source: S&P Global Market Intelligence. Deposit data as of June 30, 2025.

STRATEGIC TRANSACTIONS

Since forming our holding company in 1982, we have acquired over 50 financial institutions and other financial services businesses. Old National assesses possible mergers, acquisitions, and divestitures based on a disciplined financial evaluation process and expects that future mergers, acquisitions, and divestitures will be consistent with our existing basic banking strategy, which focuses on community banking, client relationships, and consistent quality earnings. Targeted geographic markets for mergers and acquisitions include markets with average to above average growth rates within our general footprint.

We anticipate that, as with previous mergers and acquisitions, the consideration paid by us in future mergers and acquisitions may be principally in the form of cash and/or Old National stock, or a combination thereof, and may reflect a premium to the target’s then-market value. The amount and structure of such consideration is based on reasonable growth and cost savings assumptions and a thorough analysis of the impact on both long- and short-term financial results.

Our ability to engage in certain transactions depends on the bank regulators’ views at the time as to the capital levels, quality of management, and overall condition of Old National, in addition to their assessment of a variety of other factors, including our compliance with law and regulations.

On April 1, 2024, Old National completed its acquisition of CapStar and its wholly owned subsidiary, CapStar Bank, in an all-stock transaction. This partnership strengthened Old National’s Nashville, Tennessee presence and added several new high-growth markets. At closing, CapStar contributed $3.1 billion in total assets, $2.1 billion in total loans, and $2.6 billion in total deposits.

On May 1, 2025, Old National completed its acquisition of Bremer and its wholly owned subsidiary, Bremer Bank, National Association. At closing, Bremer contributed approximately $16.3 billion of total assets, $11.1 billion of

6

total loans, and $12.9 billion of deposits. This partnership solidified our position in Minnesota while adding attractive funding in North Dakota.

COMPETITION

The banking industry and related financial service providers operate in a highly competitive market. Old National competes with financial service providers such as other commercial banks, savings and loan associations, credit unions, mortgage banking firms, financial technology, or “FinTech,” companies, consumer finance companies, securities brokerage firms, insurance companies, money market mutual funds, private equity and debt funds, and other financial services providers.

Many of our competitors are financial institutions that are larger than we are and have substantially greater resources than we do. Some of our nonfinancial institution competitors may have fewer regulatory constraints, broader geographic service areas, greater capital, and, in some cases, lower cost structures. In addition, competition for clients has intensified as a result of changes in regulation, mergers and acquisitions, advances in technology and product delivery systems, and consolidation among financial service providers.

SUPERVISION AND REGULATION

Old National is subject to extensive and comprehensive regulation under federal and state laws. The regulatory framework is intended primarily for the protection of depositors, federal deposit insurance funds, and the banking system as a whole and not for the protection of shareholders or non-depository creditors.

Significant elements of certain laws and regulations applicable to Old National and its subsidiaries are described below. Applicable statutes, regulations, and policies are continually under review by Congress and state legislatures and federal and state regulatory agencies and are subject to change. Old National is unable to predict changes in applicable laws or regulations, or in their interpretation and application by regulatory agencies and other governmental authorities, and any such change could have a material effect on our business.

Old National Bancorp is registered as a bank holding company and has elected to be a financial holding company under the Bank Holding Company Act of 1956, as amended (the “BHC Act”). As a bank holding company and financial holding company, Old National Bancorp is subject to supervision, examination, and regulation by the Board of Governors of the Federal Reserve System (the “Federal Reserve”) under the BHC Act, and is required to file reports with the Federal Reserve and to provide the Federal Reserve any additional information it may require. As a national bank, Old National Bank is subject to primary regulation, supervision, and examination by the OCC.

Bank Holding Company Regulation. Generally, the BHC Act governs the acquisition and control of banks and non-banking companies by bank holding companies. The BHC Act also regulates the business activities of bank holding companies and their non-bank subsidiaries.

The BHC Act, the Bank Merger Act, and other federal and state statutes regulate acquisitions of commercial banks and their holding companies. The BHC Act requires the prior approval of the Federal Reserve for the direct or indirect acquisition by a bank holding company of more than 5.0% of the voting shares of a commercial bank or its holding company. Under the BHC Act and the Bank Merger Act, the prior approval of the Federal Reserve or other appropriate bank regulatory authority is required for a bank holding company to acquire control of another bank or for a bank to merge with another bank or purchase the assets or assume the deposits of another bank. In reviewing applications seeking approval of merger and acquisition transactions, the bank regulatory authorities will consider, among other things, the competitive effect and public benefits of the transactions, the capital position of the combined organization, the risks to the stability of the U.S. banking or financial system, the applicant’s managerial and financial resources, the applicant’s performance record under the Community Reinvestment Act of 1977, as amended (the “CRA”) and its compliance with law, including fair housing laws and other consumer protection laws, and the effectiveness of the subject organizations in combating money laundering activities.

In general, the BHC Act limits the business of bank holding companies to banking, managing, or controlling banks and other activities that the Federal Reserve has determined to be so closely related to banking as to be a proper incident thereto. In addition, bank holding companies that qualify and elect to be financial holding companies may engage in any activity, or acquire and retain the shares of a company engaged in any activity, that is either (i) financial in nature or incidental to such financial activity (as determined by the Federal Reserve in consultation with the Secretary of the Treasury) or (ii) complementary to a financial activity and does not pose a substantial risk to the safety and soundness of depository institutions or the financial system generally (as solely determined by the Federal

7

Reserve), without prior approval of the Federal Reserve. Activities that are financial in nature include securities underwriting and dealing, insurance underwriting and making merchant banking investments, among others.

To maintain financial holding company status, a financial holding company and all of its depository institution subsidiaries must be “well capitalized” and “well managed.” A depository institution subsidiary is considered to be “well capitalized” if it satisfies the requirements for this status discussed in “Prompt Corrective Action” below. A depository institution subsidiary is considered “well managed” if it received a composite rating and management rating of at least “satisfactory” in its most recent examination. A financial holding company’s status will also depend upon it maintaining its status as “well capitalized” and “well managed” under applicable Federal Reserve regulations. If a financial holding company ceases to meet these capital and management requirements, the BHC Act and the Federal Reserve’s regulations provide that the financial holding company must enter into a confidential agreement with the Federal Reserve to comply with all applicable capital and management requirements. Until the financial holding company returns to compliance, the Federal Reserve may impose limitations or conditions on the conduct of its activities, and the company may not commence any of the broader financial activities permissible for financial holding companies or acquire a company engaged in such financial activities without prior approval of the Federal Reserve. If the company does not return to compliance within 180 days, the Federal Reserve may require divestiture of the holding company’s depository institutions. Bank holding companies and banks must also be both well capitalized and well managed in order to acquire banks located outside their home state.

In order for a financial holding company to commence any new activity permitted by the BHC Act or to acquire a company engaged in any new activity permitted by the BHC Act, each insured depository institution subsidiary of the financial holding company must have received a rating of at least “satisfactory” in its most recent CRA performance evaluation.

The Federal Reserve has the power to order any bank holding company or its subsidiaries to terminate any activity or to terminate its ownership or control of any subsidiary when the Federal Reserve has reasonable grounds to believe that continuation of such activity or such ownership or control constitutes a serious risk to the financial soundness, safety or stability of any bank subsidiary of the bank holding company.

Source of Strength. Federal Reserve policy and regulations and federal law require bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. Under this requirement, a bank holding company is expected to commit financial resources to support its bank subsidiary even at times when the holding company may not be in a financial position to provide such resources or when the holding company may not be inclined to provide it. Any loans by a bank holding company to its subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. In the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a bank subsidiary will be assumed by the bankruptcy trustee and entitled to priority of payment.

Financial Privacy. Under the Gramm-Leach-Bliley Act of 1999 (the “GLB Act”), a financial institution may not disclose non-public personal information about a consumer to unaffiliated third parties unless the institution satisfies various disclosure requirements, and the consumer has not elected to opt out of the information sharing. The financial institution must provide its clients with a notice of its privacy policies and practices. The Federal Reserve, the FDIC, and other financial regulatory agencies issued regulations implementing notice requirements and restrictions on a financial institution’s ability to disclose non-public personal information about consumers to unaffiliated third parties.

In addition, privacy and data protection are areas of increasing state legislative focus, and a number of states have enacted consumer privacy laws that impose significant compliance obligations with respect to personal information. Similar laws may in the future be adopted by states where the Company and Old National Bank do business. Furthermore, privacy and data protection areas are expected to receive additional attention at the Federal level. The potential effects of state or Federal privacy and data protection laws on the Company’s business cannot be determined at this time and will depend both on whether such laws are adopted by states in which the Company does business and/or at the Federal level and the requirements imposed by any such laws.

Bank Secrecy Act and the USA Patriot Act. The U.S. Bank Secrecy Act (the “BSA”) and USA PATRIOT Act require financial institutions to develop programs to prevent them from being used for, and to detect and deter, money laundering, terrorist financing, and other illegal activities. If such activities are detected or suspected, financial institutions are obligated to file suspicious activity reports with the U.S. Treasury’s Office of Financial Crimes Enforcement Network. These rules require financial institutions to establish procedures for identifying and

8

verifying the identity of clients seeking to open new accounts and monitoring these accounts on an ongoing basis to ensure that such accounts are not used for illegal purposes. Failure to comply with these requirements could have serious financial, legal, and reputational consequences, including the imposition of civil money penalties, cease and desist orders, or causing applicable bank regulatory authorities not to approve merger or acquisition transactions or to prohibit transactions even if approval is not required.

Office of Foreign Assets Control Regulation. The U.S. imposes economic sanctions that affect transactions with designated foreign countries, nationals, and others. These sanctions are administered by the U.S. Treasury’s Office of Foreign Assets Control (“OFAC”). These sanctions include: (i) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on “U.S. persons” engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country, and (ii) blocking assets in which the government or specially designated nationals of the sanctioned country have an interest by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (e.g., property and bank deposits) cannot be paid out, withdrawn, set off, or transferred in any manner without a license from OFAC. Failure to comply with these sanctions could have serious financial, legal, and reputational consequences for the institution, including the imposition of civil money penalties, or causing applicable bank regulatory authorities not to approve merger or acquisition transactions.

Consumer Financial Protection. Old National Bank is subject to laws designed to protect consumers and prohibit unfair or deceptive business practices, including the Equal Credit Opportunity Act, the Fair Housing Act, the Home Ownership Protection Act, the Fair Credit Reporting Act, as amended by the Fair and Accurate Credit Transactions Act of 2003 (“FACT Act”), the GLB Act, the Truth in Lending Act, the CRA, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the National Flood Insurance Act and applicable state law counterparts. These and other laws, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive, and abusive practices and subject us to substantial regulatory oversight. Violations of applicable consumer protection laws can result in reputational damage and potential liability from litigation brought by customers, including actual damages, restitution, and attorneys’ fees. Federal bank regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, action by the state and local attorneys general in each jurisdiction in which we operate and civil money penalties. Failure to comply with consumer protection requirements may also result in failure to obtain any required bank regulatory approval for merger or acquisition transactions or prohibit such transactions even if approval is not required.

In addition, the CFPB has a broad mandate to prohibit unfair, deceptive, or abusive acts and practices, is specifically empowered to require certain disclosures to consumers and draft model disclosure forms and is responsible for making rules and regulations under the federal consumer protection laws relating to financial products and services. The CFPB has examination and enforcement authority over all banks with more than $10 billion in assets, as well as their affiliates, and can issue cease-and-desist orders against banks and other entities that violate consumer financial laws. The CFPB may also institute a civil action against an entity in violation of federal consumer financial laws in order to impose a civil money penalty or injunction.

On October 22, 2024, the CFPB finalized a new rule that requires a provider of payment accounts or products, such as a bank, to make data available to consumers upon request regarding the products or services they obtain from the provider. Any such data provider also has to make such data available to third parties, with the consumer’s express authorization and through an interface that satisfies formatting, performance and security standards, for the purpose of such third parties providing the consumer with financial products or services requested by the consumer. Data required to be made available under the rule includes transaction information, account balance, account and routing numbers, terms and conditions, upcoming bill information, and certain account verification data. The rule is intended to give consumers control over their financial data, including with whom it is shared, and encourage competition in the provision of consumer financial products or services. For banks with at least $10 billion and less than $250 billion in total assets, which currently includes Old National Bank, compliance with the rule’s requirements is required beginning on April 1, 2027. The rule is the subject of litigation, which is currently stayed while the CFPB considers revisions to the rule.

During 2025, the CFPB initiated a reduction of its staff by over 80%. The reduction in force is the subject of litigation, and the staffing cuts are currently stayed pending federal court en banc rehearing of the case. The resulting

9

impact of these developments on our business is uncertain at this time. State regulators and state attorneys general may increase regulatory, investigative, and enforcement activity with respect to consumer protection, in response to changes in regulation, supervision, and enforcement of consumer protection laws by federal regulators.

Interchange Fees. Old National Bank is subject to interchange fee limitations that establish a maximum permissible interchange fee for many types of debit interchange transactions that is equal to no more than 21 cents per transaction plus five basis points multiplied by the value of the transaction. Interchange fees, or “swipe” fees, are charges that merchants pay to card-issuing banks, such as Old National Bank, for processing electronic payment transactions. Additional Federal Reserve rules allow a debit card issuer to recover one cent per transaction for fraud prevention purposes if the issuer complies with certain fraud-related requirements.

On October 25, 2023, the Federal Reserve proposed amendments to its rules on interchange fees. The proposed changes would establish a maximum permissible interchange fee of no more than 14.4 cents per transaction plus four basis points multiplied by the value of the transaction. The fraud prevention adjustment would be increased to 1.3 cents per transaction. The proposed rule would also establish an automatic update of the interchange fee cap every other year based on a survey of debit card issuers.

In June 2024, the State of Illinois adopted the Illinois Interchange Fee Prohibition Act, which restricts credit card and debit card interchange fees, as defined in the legislation, that may be charged on portions of electronic payment transactions attributable to taxes and gratuities. In December 2024, a U.S. District Court preliminarily enjoined this law from applying to national banks, including Old National Bank.

Capital Adequacy.

Capital Requirements. Old National Bancorp and Old National Bank are each required to comply with certain risk-based capital and leverage requirements under capital rules adopted by the Federal Reserve, the OCC, and the FDIC (the “Basel III Capital Rules”). These rules implement the Basel III framework set forth by the Basel Committee on Banking Supervision (the “Basel Committee”) as well as certain provisions of the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”).

The Basel III Capital Rules define qualifying capital instruments and specify minimum amounts of capital as a percentage of assets that banking organizations are required to maintain. Under the Basel III Capital Rules, risk-based capital ratios are calculated by dividing Common Equity Tier 1 (“CET1”) capital, Tier 1 capital and total risk-based capital, respectively, by risk-weighted assets. Assets and off-balance sheet credit equivalents are assigned a risk weight based primarily on supervisory assessments of relative credit risk.

Under the Basel III Capital Rules, the Company and Old National Bank are each required to maintain the following:

•A minimum ratio of CET1 to risk-weighted assets of 4.5%, plus a 2.5% “capital conservation buffer” that is composed entirely of CET1 capital (effectively resulting in a minimum ratio of CET1 to risk-weighted assets of 7.0%).

•A minimum ratio of Tier 1 capital to risk-weighted assets of 6.0%, plus the capital conservation buffer (effectively resulting in a minimum Tier 1 capital ratio of 8.5%).

•A minimum ratio of total capital (Tier 1 capital plus Tier 2 capital) to risk-weighted assets of 8.0%, plus the capital conservation buffer (effectively resulting in a minimum total capital ratio of 10.5%).

•A minimum leverage ratio of 4.0%, calculated as the ratio of Tier 1 capital to average assets.

The capital conservation buffer is designed to absorb losses during periods of economic stress. Banking institutions with a ratio of CET1 to risk-weighted assets above the minimum, but below the conservation buffer, will face constraints on dividends, equity repurchases, and compensation based on the amount of the shortfall and the institution’s “eligible retained income” (that is, the greater of (i) net income for the preceding four quarters, net of distributions and associated tax effects not reflected in net income and (ii) average net income over the preceding four quarters).

The Basel III Capital Rules also provide for a number of deductions from and adjustments to CET1 capital. As a “non-advanced approaches” firm under the Basel III Capital Rules, the Company is subject to rules that provide for simplified capital requirements relating to the threshold deductions for mortgage servicing assets, deferred tax assets arising from temporary differences that a banking organization could not realize through net operating loss carry backs, and investments in the capital of unconsolidated financial institutions, as well as the inclusion of minority interests in regulatory capital.

10

The Company and Old National Bank, as non-advanced approaches banking organizations under the Basel III Capital Rules, made a one-time permanent election to exclude the effects of certain AOCI items included in shareholders’ equity under GAAP in determining regulatory capital ratios.

In December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms. Among other things, these standards revise the Basel Committee’s standardized approach for credit risk (including the recalibration of risk weights and introducing new capital requirements for certain “unconditionally cancellable commitments,” such as unused credit card lines of credit) and provide a new standardized approach for operational risk capital. Under the current U.S. capital rules, operational risk capital requirements and a capital floor apply only to advanced approaches banking organizations, and therefore not to the Company or Old National Bank.

On July 27, 2023, the federal banking regulators proposed revisions to the Basel III Capital Rules to implement the Basel Committee’s 2017 standards and make other changes to the Basel III Capital Rules. The revised capital requirements of the proposed rule would not apply to the Company or Old National Bank because they have less than $100 billion in total consolidated assets and trading assets and liabilities below the threshold for market risk requirements. The federal banking regulators have indicated that they expect to issue a revised proposal.

Prompt Corrective Action. The Federal Deposit Insurance Act (the “FDIA”) requires the federal banking agencies to take “prompt corrective action” for depository institutions that do not meet the minimum capital requirements described above. The FDIA includes the following five capital categories: “well-capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” and “critically undercapitalized.” An insured depository institution is considered:

•“Well-capitalized” if the institution has a total risk-based capital ratio of 10.0% or greater, a Tier 1 risk-based capital ratio of 8.0% or greater, a CET1 capital ratio of 6.5% or greater, and a leverage ratio of 5.0% or greater, and is not subject to any order or written directive by any such regulatory authority to meet and maintain a specific capital level for any capital measure.

•“Adequately capitalized” if the institution has a total risk-based capital ratio of 8.0% or greater, a Tier 1 risk-based capital ratio of 6.0% or greater, a CET1 capital ratio of 4.5% or greater, and a leverage ratio of 4.0% or greater and is not “well-capitalized.”

•“Undercapitalized” if the institution has a total risk-based capital ratio of less than 8.0%, a Tier 1 risk-based capital ratio of less than 6.0%, a CET1 capital ratio of less than 4.5%, or a leverage ratio of less than 4.0%.

•“Significantly undercapitalized” if the institution has a total risk-based capital ratio of less than 6.0%, a Tier 1 risk-based capital ratio of less than 4.0%, a CET1 capital ratio of less than 3.0% or a leverage ratio of less than 3.0%.

•“Critically undercapitalized” if the institution’s tangible equity is equal to or less than 2.0% of average quarterly tangible assets.

An institution may be downgraded to, or deemed to be in, a capital category that is lower than indicated by its capital ratios if it is determined to be in an unsafe or unsound condition or if it receives an unsatisfactory examination rating for certain matters. A bank’s capital category is determined solely for the purpose of applying prompt corrective action regulations, and the capital category may not constitute an accurate representation of the bank’s overall financial condition or prospects for other purposes. As of December 31, 2025, Old National Bank’s capital ratios were all in excess of the minimum requirements for “well-capitalized” status under such rules.

The federal banking regulators must take certain mandatory supervisory actions, and are authorized to take other discretionary actions, with respect to institutions that are less than adequately capitalized, with supervisory actions progressively becoming more restrictive as the institution’s capital category declines. Supervisory actions include: (i) restrictions on payment of capital distributions and management fees, (ii) requirements that a federal bank regulator monitor the condition of the institution and its efforts to restore its capital, (iii) submission of a capital restoration plan, (iv) restrictions on the growth of the institution’s assets and (v) requirements for prior regulatory approval of certain expansion proposals. A bank that is “critically undercapitalized” will be subject to further restrictions and generally will be placed in conservatorship or receivership within 90 days.

The FDIA prohibits an insured depository institution from accepting brokered deposits or offering interest rates on any deposits significantly higher than the prevailing rate in the bank’s normal market area or nationally (depending upon where the deposits are solicited), unless it is well-capitalized or is adequately capitalized and receives a waiver from the FDIC. A depository institution that is adequately capitalized and accepts brokered deposits under a waiver

11

from the FDIC may not pay an interest rate on any deposits in excess of 75 basis points over certain prevailing market areas.

The FDIA’s prompt corrective action provisions apply only to depository institutions, and not to bank holding companies. Under the Federal Reserve’s regulations, a bank holding company is considered “well capitalized” if the bank holding company (i) has a total risk based capital ratio of at least 10%, (ii) has a Tier 1 risk-based capital ratio of at least 6%, and (iii) is not subject to any written agreement order, capital directive or prompt corrective action directive to meet and maintain a specific capital level for any capital measure. Although prompt corrective action regulations apply only to depository institutions and not to bank holding companies, a bank that is required to submit a capital restoration plan generally must concurrently submit a performance guarantee by its parent holding company. The liability of the parent holding company under any such guarantee is limited to the lesser of five percent of the bank’s assets at the time it became “undercapitalized”, or the amount needed to comply.

Dividends Limitations. A substantial portion of Old National Bancorp’s revenue is derived from dividends paid to it by Old National Bank. Limitations on Old National Bancorp’s ability to receive dividends from Old National Bank could have a material adverse effect on its liquidity and ability to pay dividends on its Common Stock and Preferred Stock or interest and principal on its debt, and ability to fund purchases of its Common Stock. Under OCC regulations, national banks generally may not declare a dividend in excess of the bank’s undivided profits or, absent OCC approval, if the total amount of dividends declared by the national bank in any calendar year exceeds the total of the national bank’s retained net income year-to-date combined with its retained net income for the preceding two years. National banks also are prohibited from declaring or paying any dividend if, after making the dividend, the national bank would be considered “undercapitalized” (as defined by reference to other OCC regulations). The OCC has the authority to use its enforcement powers to prohibit a national bank, such as Old National Bank, from paying dividends if, in its opinion, the payment of dividends would constitute an unsafe or unsound practice. Further, Old National Bank’s ability to pay dividends is restricted if it does not maintain the capital conservation buffer described under “—Capital Adequacy—Capital Requirements” above.

In addition, the FDIA generally prohibits a depository institution from making any capital distributions (including payment of a dividend) or paying any management fee to its parent holding company if the depository institution would thereafter be “undercapitalized” as described under “—Capital Adequacy—Prompt Corrective Action” above.

Transactions with Affiliates. Any transactions between Old National Bank and its subsidiaries, Old National Bancorp, or any other subsidiary of Old National Bancorp are regulated under federal banking law. The Federal Reserve Act imposes quantitative and qualitative requirements and collateral requirements on covered transactions by Old National Bank with, or for the benefit of, its affiliates, and generally requires those transactions to be on terms at least as favorable to Old National Bank as would be a transaction conducted between unaffiliated third-parties. Covered transactions are defined by statute to include:

•A loan or extension of credit.

•A purchase of securities issued by an affiliate.

•A purchase of assets from an affiliate, unless otherwise exempted by the Federal Reserve.

•Certain derivative transactions that create a credit exposure to an affiliate.

•The acceptance of securities issued by an affiliate as collateral for any loan.

•The issuance of a guarantee, acceptance, or letter of credit on behalf of or for the benefit of an affiliate.

In general, any such transaction by Old National Bank or its subsidiaries must be limited to certain thresholds on an individual and aggregate basis and, credit transactions with, or for the benefit of, an affiliate must be secured by designated amounts of specified collateral.

Federal law also limits Old National Bank’s authority to extend credit to its directors, executive officers, and stockholders who own more than 10% of Common Stock, as well as to entities controlled by such persons. Among other things, any such extension of credit is required to be made on terms that are substantially the same as, and follow credit underwriting procedures that are not less stringent than, those prevailing for comparable transactions with unaffiliated persons. In addition, the terms of such extensions of credit may not involve more than the normal risk of non-repayment or present other unfavorable features and may not exceed certain limitations on the amount of credit extended to such persons individually and in the aggregate.

Community Reinvestment Act. The CRA requires depository institutions to assist in meeting the credit needs of their market areas consistent with safe and sound banking practices. Under the CRA, each depository institution is required to help meet the credit needs of its market areas by, among other things, providing credit to low-income and

12

moderate-income individuals and small businesses in those communities. Federal and state regulators conduct CRA examinations on a regular basis to assess the performance of financial institutions and assign one of four ratings to the institution’s record of meeting the credit needs of its community. Bank regulators take into account CRA ratings when considering approval of a proposed merger or acquisition. Old National Bank received a rating of “satisfactory” in its latest CRA examination.

Deposit Insurance. A large majority of the deposits of Old National Bank are insured up to applicable limits by the Deposit Insurance Fund (“DIF”) which is administered by the FDIC. Insurance of deposits may be terminated by the FDIC upon a finding that the institution engaged or is engaging in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or violated any applicable law, regulation, rule, order, or condition imposed by the FDIC or written agreement entered into with the FDIC.

FDIC assessment rates for large institutions that have more than $10 billion of assets, such as Old National Bank, are calculated based on a “scorecard” methodology, based primarily on the difference between the institution’s average of total assets and average tangible equity. The FDIC has the ability to make discretionary adjustments to the total score, up or down, based upon significant risk factors that the FDIC believes are not adequately captured in the scorecard. For large institutions, including Old National Bank, after accounting for potential base-rate adjustments, the total assessment rate could range from 1.5 to 40 basis points on an annualized basis.

In October 2022, the FDIC finalized a rule that increased the initial base deposit insurance assessment rate schedules for all insured depository institutions by 2 basis points, beginning with the first quarterly assessment period of 2023. The increased assessment rate is intended to improve the likelihood that the DIF reserve ratio would reach the required minimum of 1.35 percent by the statutory deadline of September 30, 2028.

On November 16, 2023, the FDIC finalized a rule that imposes special assessments to recover the losses to the DIF resulting from the FDIC’s use, in March 2023, of the systemic risk exception to the least-cost resolution test under the Federal Deposit Insurance Act in connection with the receiverships of Silicon Valley Bank and Signature Bank. The FDIC estimated in approving the rule that those assessed losses total approximately $16.3 billion. The rule provides that this loss estimate will be periodically adjusted, which will affect the amount of the special assessment. As of September 30, 2025, the FDIC’s estimate of the total loss to be recovered through the special assessment was $16.7 billion. Under the rule, the assessment base is the estimated uninsured deposits that an insured depository institution (“IDI”) reported in its December 31, 2022, Call Report, excluding the first $5 billion in estimated uninsured deposits. The special assessments were to be collected at an annual rate of approximately 13.4 basis points per year (3.36 basis points per quarter) over eight quarters in 2024 and 2025, with the first assessment period beginning January 1, 2024. In December 2025, the FDIC reduced the rate at which the assessment is collected for the eighth quarter of the collection period, with an invoice payment date of March 30, 2026, from 3.36 basis points to 2.97 basis points. The special assessments are tax deductible. The total of the special assessments for Old National Bank was estimated at $19.1 million, and such amount was recorded as an expense in the quarter the rule was finalized (the quarter ending December 31, 2023). Old National recorded an additional $3.0 million within FDIC assessment expense for this special assessment in the year ended December 31, 2024. During the year ended December 31, 2025, Old National reduced the previously accrued FDIC special assessment by $3.0 million as the FDIC continues to adjust and refine its estimate of assessed losses.

Depositor Preference. The FDIA provides that, in the event of the “liquidation or other resolution” of an insured depository institution, the claims of depositors of the institution, including the claims of the FDIC as subrogee of insured depositors, and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including depositors whose deposits are payable only outside of the United States, and the parent bank holding company with respect to any extensions of credit it may have made to such insured depository institution.

Anti-Tying Restrictions. Generally, a bank is prohibited from extending credit, leasing or selling property, furnishing any service or fixing or varying the consideration for any of the foregoing on the condition that (i) the customer obtains additional credit, property or services from the bank’s parent holding company or any subsidiary of the holding company, or (ii) the customer will not obtain credit, property or services from a competitor of the bank or its affiliates (except to the extent the restriction is a reasonable condition imposed to assure the soundness of the credit extended).

Employee Incentive Compensation. Under regulatory guidance applicable to all banking organizations, incentive compensation policies must be consistent with safety and soundness principles. Under this guidance, financial

13

institutions must review their compensation programs to ensure that they: (i) provide employees with incentives that appropriately balance risk and reward and that do not encourage imprudent risk, (ii) are compatible with effective controls and risk management, and (iii) are supported by strong corporate governance, including active and effective oversight by the banking organization’s board of directors. Monitoring methods and processes used by a banking organization should be commensurate with the size and complexity of the organization and its use of incentive compensation.

During 2016, the federal bank regulatory agencies and the SEC proposed revised rules on incentive-based payment arrangements at specified regulated entities having at least $1 billion of total assets (including the Company and Old National Bank). These proposed rules have not been finalized.

In October 2022, the SEC adopted a final rule directing national securities exchanges and associations, including NASDAQ, to implement listing standards that require all listed companies to adopt policies mandating the recovery or “clawback” of excess incentive-based compensation earned by a current or former executive officer during the three fiscal years preceding a required accounting restatement of financial statements, including to correct an error that would result in a material misstatement if the error were corrected in the current period. The excess compensation would be based on the amount the executive officer would have received had the incentive-based compensation been determined using the restated financial statements. NASDAQ’s listing standards pursuant to the SEC’s rule became effective October 2, 2023. The Company’s clawback policy adopted in accordance with these listing standards is included as Exhibit 97.

Cybersecurity. The federal banking regulators regularly issue new guidance and standards, and update existing guidance and standards, regarding cybersecurity intended to enhance cyber risk management among financial institutions. Financial institutions are expected to comply with such guidance and standards and to accordingly develop appropriate security controls and risk management processes.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. We expect this trend of state-level activity in those areas to continue and are continually monitoring developments in the states in which the Company operates.

In November 2021, the United States federal bank regulatory agencies adopted a rule regarding notification requirements for banking organizations related to significant computer security incidents. Under this rule, a bank holding company, such as Old National Bancorp, and a national bank, such as Old National Bank, are required to notify the Federal Reserve or OCC, respectively, within 36 hours of incidents that have materially disrupted or degraded, or are reasonably likely to materially disrupt or degrade, the banking organization’s ability to deliver services to a material portion of its customer base, jeopardize the viability of key operations of the banking organization, or pose a threat to the financial stability of the United States.

In July 2023, the SEC issued a final rule that requires registrants, including the Company, to (i) report material cybersecurity incidents on Form 8-K within four business days of their being deemed material; (ii) include updated disclosures in Forms 10-K about a registrant’s cybersecurity risk management and strategy, management’s role in assessing and managing material cybersecurity risks, and the board of directors’ oversight of cybersecurity risks; and (iii) present the disclosures in inline XBRL.

Safety and Soundness Standards. In accordance with the FDIA, the federal banking agencies adopted safety and soundness guidelines establishing general standards relating to internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, cybersecurity, liquidity, data protection, asset growth, asset quality, earnings, compensation, fees, and benefits. In general, the guidelines require, among other things, appropriate systems and practices to identify, monitor, and manage the risks and exposures specified in the guidelines. The guidelines prohibit excessive compensation as an unsafe and unsound practice and describe compensation as excessive when the amounts paid are unreasonable or disproportionate to the services performed by an executive officer, employee, director, or principal shareholder. In addition, regulations adopted by the federal banking agencies authorize, but do not require, an agency to order that an institution that has been given notice by an agency that it is not satisfying any of such safety and soundness standards to submit a compliance plan. If, after being so notified, the institution fails to submit an acceptable compliance plan or fails in any material respect to implement an accepted compliance plan, the agency must issue an order directing corrective actions and may issue an order directing other actions of the types to which an undercapitalized institution is subject under the

14

“prompt corrective action” provisions of FDIA. If the institution fails to comply with such an order, the agency may seek to enforce such order in judicial proceedings and to impose civil money penalties and cease and desist orders.

In December 2025, the OCC proposed to raise the threshold above which certain of its safety and soundness standards, known as “Heightened Standards,” apply—from $50 billion to $700 billion in total consolidated assets. If adopted as proposed, Old National Bank would no longer be subject to the Heightened Standards, which include prescriptive requirements regarding covered banks’ risk governance frameworks and activities.

In October 2025, the FDIC and OCC issued a proposed rule that would define the term “unsafe or unsound practice” for purposes of their enforcement powers under the FDIA. The proposed definition would focus on whether the practice is likely to materially harm, or already has materially harmed, the financial condition of an institution. The Federal Reserve has not issued a similar proposal.

Federal Home Loan Bank System. Old National Bank is a member of the Federal Home Loan Bank System, which consists of 12 regional Federal Home Loan Banks. The Federal Home Loan Bank System provides a central credit facility primarily for member institutions. As a member of the FHLBI, Old National Bank is required to acquire and hold a minimum amount of shares of capital stock of the FHLBI based on, among other things, the amounts of residential mortgage loans and mortgage-backed securities held by Old National Bank, outstanding borrowings from the FHLBI and the outstanding principal balance of “Acquired Member Assets”, as defined by the FHLBI. As of December 31, 2025, Old National Bank was in compliance with the minimum stock ownership requirement.

Enhanced Prudential Standards. The Dodd-Frank Act, as amended by the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 (“EGRRCPA”), directs the Federal Reserve to monitor emerging risks to financial stability and enact enhanced supervision and prudential standards. As a bank holding company with less than $100 billion of total consolidated assets, the Dodd Frank Act’s enhanced prudential standards generally are not applicable to the Company. However, a bank holding company is required to maintain a risk committee that approves and periodically reviews its risk management policies and oversees its risk management framework beginning on the first day of the ninth quarter following the date on which its average total consolidated assets equal or exceed $50 billion. The Company’s total consolidated assets surpassed $50 billion in 2024 but it already maintains a risk committee that performs these functions.

Resolution Planning. The FDIC has required IDIs with more than $50 billion in total consolidated assets to submit to the FDIC periodic plans for resolution in the event of the institution’s failure. On June 20, 2024, the FDIC finalized amendments to the resolution planning requirements for IDIs with $50 billion or more in total assets. The amendments require IDIs with between $50 billion and $100 billion in assets to submit informational filings on a three-year cycle, with an interim supplement updating key information submitted in the off years. The final rule became effective October 1, 2024. On December 31, 2025, the FDIC indicated it will propose further amendments in 2026 and adjusted certain 2026 due dates until after a new final rule is issued. Old National Bank’s first submission under the present rule is currently due April 1, 2026.

Volcker Rule. The so-called “Volcker Rule” generally restricts the ability of the Company and its subsidiaries, including Old National Bank, to sponsor or invest in hedge funds and private equity funds or to engage in proprietary trading. The Company generally does not engage in the businesses prohibited by the Volcker Rule; therefore, the Volcker Rule does not have a material effect on the operations of the Company and its subsidiaries.

Climate-Related and Other ESG Developments. In recent years, certain lawmakers and regulators in and outside the United States have increased their focus on financial institutions’ and other companies’ risk oversight, disclosures, and practices in connection with climate change and other environmental, social, and governance (“ESG”) matters. Several states in which the Company operates have enacted or proposed statutes or regulations addressing climate change and other ESG issues. For example, California enacted climate-related disclosure laws requiring certain companies doing business in California to make certain climate-related disclosures beginning in 2026, including but not limited to greenhouse gas emissions data and climate-related risks. On the other hand, certain states in which the Company operates have enacted “anti-ESG” statutes or regulations, or have proposed to enact, statutes that prohibit financial institutions from denying or canceling products or services to a person, or otherwise discriminating against a person in making available products or services, on the basis of social credit scores and certain other factors. Additionally, in August 2025, President Trump signed Executive Order 14331, “Guaranteeing Fair Banking Access for All Americans,” which states that it is the policy of the United States that no American should be denied access to financial services because of their constitutionally or statutorily protected beliefs, affiliations, or political views. The Executive Order directs the Treasury Secretary and federal banking regulators to address politicized or unlawful debanking activities.

15

Future Legislation and Regulation. In addition to the specific legislation and regulations described above, various laws and regulations are being considered by federal and state governments and regulatory agencies. Changes in law or regulation, or in the manner in which existing laws or regulations are applied, may change the Company’s and Old National Bank’s operating environment in substantial and unpredictable ways and may increase reporting requirements and compliance costs. These changes could increase the cost of doing business, increase the Company’s expenses, decrease the Company’s revenue, limit or expand permissible activities or change the activities in which the Company chooses to engage, or affect the competitive balance among banks, savings associations, credit unions, and other financial institutions in ways that could adversely affect the Company and Old National Bank.

AVAILABLE INFORMATION

All reports filed electronically by Old National with the SEC, including annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, proxy and information statements, other information and amendments to those reports filed or furnished (as applicable), are accessible at no cost on Old National’s website at www.oldnational.com as soon as reasonably practicable after the electronic submission of such materials to the SEC. In addition, the SEC maintains an internet site at www.sec.gov that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC.