2025 Annual Report Financial information

Washington, D.C. 20549

⮽ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the Fiscal Year Ended December 31, 2025

TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from to

Commission File Number: 002-86947

(Exact name of registrant as specified in its charter)

West Virginia

(State or other jurisdiction of incorporation or organization)

(Address of principal executive offices)

Registrant's telephone number, including area code: (304) 424-8716

Securities registered pursuant to section 12(b) of the Act:

55-0641179

(I.R.S. Employer Identification No.)

25301

(Zip Code)

Title of each class Trading Symbol(s) Name of each exchange on which registered Common Stock, par value $2.50 per share UBSI NASDAQ Global Select Market

Securities registered pursuant to 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ⮽ No

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes No ⮽

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ⮽ No

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files).

Yes ⮽ No

(Continued)

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company or an emerging growth company. See definitions of "large accelerated filer," "accelerated filer," "smaller reporting company," and "emerging growth company" in Rule 12b-2 of the Exchange Act:

Large accelerated filer⮽ Accelerated filer

Non-accelerated filer Smaller reporting company

Emerging growth company

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act.

Indicate by check mark whether the registrant has filed a report on and attestation to its management's assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report.⮽

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements.

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant's executive officers during the relevant recovery period pursuant to §240.10D-1(b).

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act).

Yes No ⮽

The aggregate market value of United Bankshares, Inc. common stock, representing all of its voting stock that was held by non-affiliates on June 30, 2025, was approximately $4,995,534,716.

As of January 31, 2026, United Bankshares, Inc. had 139,419,485 shares of common stock outstanding with a par value of $2.50.

Auditor Firm PCAOB ID: 42 Auditor Name: Ernst & Young LLP Auditor Location: Charleston, WV, USA

Documents Incorporated By Reference

Certain specifically designated portions of the Definitive Proxy Statement for the United Bankshares, Inc. 2026 Annual Shareholders' Meeting to be held on May 13, 2026 are incorporated by reference in Part III of this Form 10-K.

(Continued)

As of the date of filing this Annual report, neither the annual shareholders' report for the year ended December 31, 2025, nor the proxy statement for the annual United shareholders' meeting has been mailed to shareholders.

CROSS-REFERENCE INDEX

Page

Part I

Item 1. BUSINESS

Organizational History and Subsidiaries

United Bankshares, Inc. ("United," "we," "us," "our," or the "Company") is a West Virginia corporation registered as a financial holding company pursuant to the Bank Holding Company Act of 1956, as amended. United was incorporated on March 26, 1982, organized on September 9, 1982, and began conducting business on May 1, 1984 with the acquisition of three wholly-owned subsidiaries. Since its formation in 1982, United has acquired thirty-three banking institutions. United has one banking subsidiary "doing business" under the name of United Bank, operating under the laws of Virginia. United Bank offers a full range of commercial and retail banking services and products. United also owns nonbank subsidiaries which engage in other community banking services such as asset management, real property title insurance, financial planning, mortgage banking, and brokerage services.

Web Site Address

United's web site address is "https://www.ubsi-inc.com". United makes available free of charge on its web site the annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and amendments thereto, as soon as reasonably practicable after United files such reports with the Securities and Exchange Commission ("SEC"). The reference to United's web site does not constitute incorporation by reference of the information contained in the web site and should not be considered part of this document. The SEC also maintains a website at https://www.sec.gov that contains reports, proxy and information statements and other information regarding issuers that file electronically with the SEC.

Business of United

As a financial holding company, United's present business is community banking. As of December 31, 2025, United's consolidated assets approximated $33.7 billion and total shareholders' equity approximated $5.5 billion.

United is permitted to acquire other banks and bank holding companies, as well as thrift institutions. United is also permitted to engage in certain non-banking activities which are closely related to banking under the provisions of the Bank Holding Company Act and the Federal Reserve Board's Regulation Y. Management continues to consider such opportunities as they arise, and in this regard, management from time to time makes inquiries, proposals, or expressions of interest as to potential opportunities, and engages in acquisition discussions, due diligence and negotiations.

On January 10, 2025, United consummated its acquisition of Piedmont Bancorp, Inc. ("Piedmont"), the parent company of The Piedmont Bank, a Georgia state-chartered bank, with sixteen locations in the State of Georgia. Piedmont was a single bank holding company headquartered in Atlanta, Georgia with total assets of approximately $2.4 billion, total loans of approximately $2.1 billion, total liabilities of approximately $2.2 billion, total deposits of approximately

$2.1 billion, and total shareholders' equity of approximately $202 million as of the merger date. The acquisition of Piedmont allowed United entrance into the greater-Atlanta area marked with robust growth opportunities. On December 3, 2021, United completed its acquisition of Community Bankers Trust Corporation ("Community Bankers Trust"), the parent company of Essex Bank ("Essex") with $1.8 billion in assets, headquartered in Richmond, Virginia. The acquisition of Community Bankers Trust enhanced United's existing presence in the DC Metro Metropolitan Statistical Area ("MSA") and took United into new markets including Baltimore, Annapolis, Lynchburg, Richmond, and the Northern Neck of Virginia. It also strategically connected our Mid-Atlantic and Southeast footprints. On May 1, 2020, United completed its acquisition of Carolina Financial Corporation ("Carolina Financial"), the parent company of CresCom Bank ("CresCom") with $5.0 billion in assets, headquartered in Charleston, South Carolina. The acquisition of Carolina Financial broadened United's footprint in the Southeast region with some of the most desirable banking markets in the nation. Prior to Carolina Financial, United more than doubled its size through three acquisitions in less than three and a half years. In January 2014, United closed its acquisition of Virginia Commerce Bancorp, Inc., followed by the November 2015 announcement of the Bank of Georgetown transaction which closed June 2016. In August 2016, United announced the Cardinal Financial Corporation acquisition which closed April 2017.

Business of Subsidiaries

United, through its subsidiaries, engages primarily in community banking offering many types of products and services permitted by law and regulation. Included among the banking services offered are the acceptance of deposits in checking, savings, time and money market accounts; the making and servicing of personal, commercial, and floor plan loans; and the making of construction and real estate loans. Also offered are individual retirement accounts, safe deposit boxes, wire transfers and other standard banking products and services. As part of its lending function, United Bank offers credit card services.

United Bank maintains a trust department which acts as trustee under wills, trusts and pension and profit-sharing plans, as executor and administrator of estates, and as guardian for estates of minors and incompetents, and in addition performs a variety of investment and security services. United Bank provides services to its correspondent banks such as the buying and selling of federal funds.

As of December 31, 2025 and 2024, United's business activities are confined to one operating segment, United Bank, and one reportable segment, community banking. At December 31, 2023, United had three operating segments: United Bank, George Mason Mortgage, LLC ("George Mason") and Crescent Mortgage Company ("Crescent"), and two reporting segments: community banking and mortgage banking. However, during the first quarter of 2024, United consolidated the mortgage origination and sales business of George Mason and Crescent with that of United Bank. United previously exited the third-party origination ("TPO") business during the fourth quarter of 2023.

United Brokerage Services, Inc., a wholly-owned subsidiary of United Bank, is a fully-disclosed broker/dealer and a Registered Investment Advisor regulated by the Financial Industry Regulatory Authority ("FINRA") and the SEC. It is a member of the Securities Investor Protection Corporation. United Brokerage Services, Inc. offers a wide range of investment products as well as comprehensive financial planning and asset management services to the general public.

United Bank is a member of a network of automated teller machines known as the New York Currency Exchange ("NYCE") ATM network. The NYCE is an interbank network connecting the ATMs of various financial institutions in the United States and Canada.

United Bank offers secure Digital Banking for consumer and commercial customers. Digital Banking is available on a multitude of devices to include a browser-based experience, mobile (Apple, Android) and tablet applications. Digital Banking allows customers to manage their financial lives from any place they can access the internet (cellular or Wi-Fi). Customers can quickly check balances, pay bills, complete internal and Zelle® transfers, all from the convenience of their devices. They can also set up text and email alerts to notify them of large transactions and help them avoid overdraft fees. Commercial customers have many of the same services, including balance inquiry, cash management, sweeps and wire transfers. Consumers can also research United Bank products and open deposit accounts online and apply for mortgages from United Bank's website.

United Bank also offers an automated telephone banking system, Telebanc, which allows customers to access their personal account(s) or business account(s) information from a touch-tone telephone.

Lending Activities

United's loan and lease portfolio, net of unearned income, increased $3.0 billion or 14.01% in 2025 mainly as a result of the Piedmont acquisition which added $2.02 billion, including purchase accounting amounts, in portfolio loans. The loan and lease portfolio is mainly comprised of commercial, real estate and consumer loans including credit card and home equity loans. Since year-end 2024, commercial, financial and agricultural loans increased $2.4 billion or 20.14% as a result of a $2.0 billion or 22.98% increase in commercial real estate loans and a $433.5 million or 12.90% increase in commercial loans (not secured by real estate). Residential real estate loans increased $590.9 million or 10.73% and construction and land development loans increased $61.9 million or 1.76%, while consumer loans remained flat, decreasing $5.9 million or less than 1%.

Commercial Loans and Leases

The commercial loan and lease portfolio consists of loans and leases to business borrowers primarily in small to

mid-size industrial and commercial companies, as well as automobile dealers, service, retail and wholesale merchants. Collateral securing these loans includes equipment, machinery, inventory, receivables, vehicles and commercial real estate. Commercial loans and leases are considered to contain a higher level of risk than other loan types although care is taken to minimize these risks. Numerous risk factors impact this portfolio including industry specific risks such as economy, new technology, labor rates and cyclicality, as well as customer specific factors, such as cash flow, financial structure, operating controls and asset quality. United diversifies risk within this portfolio by closely monitoring industry concentrations and portfolios to ensure that they do not exceed established lending guidelines. Diversification is intended to limit the risk of loss from any single unexpected economic event or trend. Underwriting standards require a comprehensive credit analysis and independent evaluation of virtually all larger balance commercial loans by the loan committee prior to approval.

Real Estate Loans

Commercial real estate loans consist of commercial mortgages, which generally are secured by nonresidential and multi-family residential properties. Also included in this portfolio are loans that are secured by owner-occupied real estate, but made for purposes other than the construction or purchase of real estate. Commercial real estate loans are to many of the same customers and carry similar industry risks as the commercial loan portfolio. Real estate mortgage loans to consumers are secured primarily by a first lien deed of trust. These loans are traditional one-to-four family residential mortgages. The loans generally do not exceed an 80% loan-to-value ratio at the loan origination date and are at either a variable rate or fixed rate of interest. These loans are considered to be of normal risk. Also included in the category of real estate mortgage loans are home equity loans.

As of December 31, 2025, approximately $599.2 million or 2.43% of United's loan portfolio were real estate loans that met the regulatory definition of a high loan-to-value loan. A high loan-to-value real estate loan is defined as any loan, line of credit, or combination of credits secured by liens on or interests in real estate that equals or exceeds a certain percentage established by United's primary regulator of the real estate's appraised value, unless the loan has other appropriate credit support. The certain percentage varies depending on the loan type and collateral. Appropriate credit support may include mortgage insurance, readily marketable collateral, or other acceptable collateral that reduces the loan-to-value ratio below the certain percentage.

Consumer Loans

Consumer loans are secured by automobiles, boats, recreational vehicles, and other personal property. Personal loans and unsecured credit card receivables are also included as consumer loans. United monitors the risk associated with these types of loans by monitoring such factors as portfolio growth, lending policies and economic conditions. Underwriting standards are continually evaluated and modified based upon these factors.

Underwriting Standards

United's loan underwriting guidelines and standards are updated periodically and are presented for approval by the Board of Directors of United Bank. The purpose of the standards and guidelines is to grant loans on a sound and collectible basis; to invest available funds in a safe, profitable manner; to serve the legitimate credit needs of the communities of United's primary market areas; and to ensure that all loan applicants receive fair and equal treatment in the lending process. It is the intent of the underwriting guidelines and standards to minimize loan losses by carefully investigating the credit history of each applicant, verify the source of repayment and the ability of the applicant to repay, collateralize those loans in which collateral is deemed to be required, exercise care in the documentation of the application, review, approval, and origination process, and administer a comprehensive loan collection program.

United's underwriting standards and practices are designed to originate both fixed and variable rate loan products in a manner which is consistent with the prudent banking practices applicable to these exposures. Typically, both fixed and variable rate loan underwriting practices incorporate conservative methodology, including the use of stress testing for commercial loans, and other product-appropriate measures designed to provide an adequate margin of safety for the full collection of both principal and interest within contractual terms. Consumer real estate secured loans are underwritten to the initial rate, and to a higher assumed rate commensurate with normal market conditions. Therefore, it is the intent of United's underwriting standards to ensure that adequate primary repayment capacity exists to address both future increases in interest rates, and fluctuations in the underlying cash flows available for repayment. Historically, and at

December 31, 2025, United has not offered "teaser rate" loans, and had no loan portfolio products which were specifically designed for "sub-prime" borrowers. Management defines "sub-prime" borrowers as consumer borrowers with a credit score of less than 660.

The above guidelines are adhered to and subject to the experience, background and personal judgment of the loan officer assigned to the loan application. A loan officer may grant, with justification, a loan with variances from the underwriting guidelines and standards. However, the loan officer may not exceed his or her respective lending authority without obtaining the prior, proper approval as outlined in United's loan policy from a superior, a regional supervisor or market president (dual approval per policy) or the Loan Committee, whichever is deemed appropriate for the nature of the variance.

Loan Concentrations

United has commercial loans, including real estate and owner-occupied, income-producing real estate and land development loans, of approximately $17.8 billion as of December 31, 2025. These loans are primarily secured by real estate located in West Virginia, southeastern Ohio, southwestern Pennsylvania, Virginia, Maryland, North Carolina, South Carolina, Georgia and the District of Columbia. United categorizes these commercial loans by industry according to the North American Industry Classification System ("NAICS") to monitor the portfolio for possible concentrations in one or more industries. As of the most recent fiscal year-end, United has one such industry classification that exceeded 10% of total loans. As of December 31, 2025, approximately $11.9 billion or 48.16% of United's total loan portfolio were for real estate and construction. The loans were originated by United's subsidiary bank using underwriting standards as set forth by management. United's loan administration policies are focused on the risk characteristics of the loan portfolio, including commercial real estate loans, in terms of loan approval and credit quality. It is the opinion of management that these loans do not pose any unusual risks and that adequate consideration has been given to the above loans in establishing the allowance for loan losses.

United does not have a loan classification concentration in the restaurants, hotel and accommodations industry. As of December 31, 2025, approximately $1.6 billion or 6.40% of United's total loan portfolio were to hotels and other traveler accommodations. In addition, United does not have a loan classification concentration in the mining, quarrying and oil and gas extraction industry. As of December 31, 2025, approximately $322.5 million or 1.30% of United's total loan portfolio were for the purpose of extracting, manufacturing and distributing oil, coal and natural gas.

Secondary Markets

United generally originates loans within the primary market areas of United Bank. United may from time to time make loans to borrowers and/or on properties outside of its primary market areas as an accommodation to its existing customers.

United Bank originates residential real estate loans for resale in the secondary market. Mortgage loan originations are generally intended to be sold in the secondary market on a best efforts or mandatory basis. Servicing rights are not retained.

During 2025, United originated $370.9 million of real estate loans for sale in the secondary market and sold

$383.9 million of loans designated as held for sale in the secondary market. Net gains on the sales of these loans during 2025 were $9.6 million.

The principal sources of revenue from United's mortgage banking business are: (i) loan origination fees; (ii) gains or losses from the sale of loans; and (iii) interest earned on mortgage loans during the period that they are held by United pending sale, if any.

Investment Activities

United's investment policy stresses the management of the investment securities portfolio, which includes both securities held to maturity and securities available for sale, to maximize return over the long-term in a manner that is consistent with good banking practices and relative safety of principal. United currently does not engage in trading account activity. The Asset/Liability Management Committee of United is responsible for the coordination and evaluation

of the investment portfolio.

Sources of funds for investment activities include "core deposits". Core deposits include certain demand deposits, savings and NOW accounts. These deposits are relatively stable and they are the lowest cost source of funds available to United. Short-term borrowings have also been a source of funds. These include federal funds purchased, securities sold under agreements to repurchase and FHLB borrowings.

United's investment portfolio is comprised of a significant amount of mortgage-backed securities, asset-backed securities, obligations of states and political subdivisions, U.S. Treasury securities and obligations of U.S. Government corporations and agencies and corporate securities. Obligations of states and political subdivisions are comprised of primarily "investment grade" rated municipal securities. Interest and dividends on securities for the years of 2025, 2024, and 2023 were $112.0 million, $133.3 million, and $151.1 million, respectively. For the year of 2025, United did not recognize any realized net gains or losses on sales of securities. For the years of 2024 and 2023, United realized net losses on sales of securities of $11.7 million and $7.7 million, respectively.

Human Capital

At United, one of our key competitive advantages is our people. Investment in our human capital is a top priority for the Company. As of December 31, 2025, United and its subsidiaries had 2,694 actual employees and officers. Of the 2,694 actual employees and officers, 2,612 were employed in the community banking segment and 82 were employed in a general support and administrative function for the Company. None of these employees are represented by a collective bargaining unit and management considers employee relations to be excellent. We emphasize positive attitudes, communication, teamwork, goal attainment, personal growth, and the pursuit of excellence when it comes to delivering high-quality service to our customers and fellow employees.

Our human capital management strategy focuses on recruiting, developing, and engaging a talented workforce. Our strategy embodies our core values of integrity, teamwork, hard work, and caring, and foster positive attitudes, communication, goal attainment, personal growth, and the pursuit of United's mission of excellence in service to our shareholders, our customers, our communities, and our employees.

Focusing on talent selection and developing top talent remains a strong pillar of our organization. We are committed to providing equal opportunity to and avoiding unlawful discrimination against all applicants and employees and attracting, retaining and promoting top quality talent regardless of personal aspects such as sex, sexual orientation, gender identity, race, color, national origin and age. We host college recruiting and internship programs that attract candidates from a variety of colleges and universities within our footprint. These two programs build a talent pipeline and prioritize these individuals for internal openings.

We are dedicated to providing a workplace for our employees that is supportive, and free of any form of unlawful discrimination or harassment; rewarding and recognizing our employees based on their individual results and performance as well as that of their department and the Company overall; and recognizing and respecting all of the characteristics and differences that make each of our employees unique. United offers employees a way to report confidential and anonymous issues of concern through our website. Whether it is a compliance or regulatory violation, wrongdoing, improper conduct, or harassment, the confidential report will be instantly and discreetly forwarded for review.

Our Leadership Development Program provides an opportunity for the Company's rising talent from across our footprint and various business lines to strengthen their leadership and communication skills, increase their visibility within the organization, and establish internal networks. This program helps to cultivate a future pipeline of leaders across the institution. Over a period of four years, these individuals are empowered to work on pertinent projects designed to enhance revenue, reduce expenses, and improve risk management functions, while developing the members' leadership, interactive, and managerial skills. Past members now hold key positions across the Company ranging from Department Managers to Line of Business Leaders to Executive Officers.

One of our strategic priorities to ensure leadership continuity is effective succession planning. The Company has a formal plan to identify potential successors and actively develop those employees. The plan includes all critical

management positions throughout the organization and is updated annually. This process is dynamic, and we have added additional management positions to the plan as the Company continues to evolve and grow. The Company's executives constantly review and evaluate personnel to identify pools of candidates with high levels of leadership potential and promote their progress by engineering their range of work experiences. We also have an internal and external training platform to ensure our employees have the necessary tools to fill these key positions effectively.

United also has an effective and efficient onboarding program, introducing new team members to the culture and enabling an environment that helps them be engaged in their roles. We have rigorous interdepartmental training and development programs that provide employees with capabilities to perform their job functions, deliver results, and advance their careers.

We partnered with West Virginia University to develop an executive training program aimed at developing the technical, theoretical, and applied skills needed for a successful launch into a career in Business Banking. High-performing employees are given opportunities to attend state and national banking schools, conferences, industry peer groups, and training webinars. All United employees have access to career development and skills-based training through our internal online Human Resources ("HR") management system.

United makes every effort to ensure that our compensation and benefits packages are inclusive and competitive to attract and retain talent. Our comprehensive benefit plans are designed to fully support our full-time and eligible part-time employees and their families through every stage of their life cycle, recognizing our employees' individual needs and offering flexible benefit options. As an enhanced benefit, we recently increased our parental leave and family medical leave and added coverage for enhanced infertility coverage. We provide comprehensive health and wellness plans for all eligible employees as well as retirees of United. We also provide other paid-time off benefits such as vacation, sick time, personal days, and birthdays. The Company also provides financial wellness benefits to all employees through our 401K Plan in which the Company provides a competitive match of employee contributions. All employees are eligible to take advantage of United's Employee Stock Purchase Plan through payroll deductions.

United Bank's annual performance evaluation process provides the opportunity for discussing, planning, and reviewing the performance of each employee. The goal is to help employees clearly define and understand the responsibilities and expectations of their position while also identifying employees with high potential for advancement within the Company. Performance evaluations also provide an opportunity for employees to be awarded additional compensation based on merit. Managers are expected to maintain open communication throughout the year as it pertains to the performance and mentorship of their employees. Training is provided to managers annually to prepare them for difficult conversations, analyzing team compensation, and maintaining fairness, among other topics.

We are committed to providing a safe and healthy work environment for our employees and offer services to foster the best physical, mental, and social well-being of our workforce. United's Employee Assistance Program provides all employees a comprehensive and personalized process with a tailored approach to meet employees where they are and support them through whatever journey they may be facing. The Employee Assistance Program provides unlimited phone access for information, resources, and referrals and provides sessions with a counselor for the employee and their family members. The employee, and their family, can also take advantage of a host of web-based resources the program provides.

The commitment to our employees and their family's well-being is at the forefront for United and allows us to be competitive in attracting and retaining top talent and ensuring our employee benefits remain competitive when compared with other institutions.

Competition

United faces a high degree of competition in all of the markets it serves. We face strong competition in gathering deposits, making loans and obtaining client assets for management by our investment or trust operations. United considers all of West Virginia to be included in its market area. This area includes the five largest West Virginia MSAs: the Parkersburg MSA, the Charleston MSA, the Huntington MSA, the Morgantown MSA and the Wheeling MSA. United serves the Ohio counties of Lawrence, Belmont, Jefferson and Washington and Fayette county in Pennsylvania primarily because of their close proximity to the Ohio and Pennsylvania borders and United banking offices located in those counties or in nearby West Virginia. United's Virginia markets include the Maryland, northern Virginia and Washington,

D.C. MSA, the Winchester MSA, the Harrisonburg MSA, and the Charlottesville MSA. Through its acquisition of Carolina Financial, United's market also includes the Coastal, Midlands, and Upstate regions of South Carolina, including the Charleston (Charleston, Dorchester and Berkeley Counties), Myrtle Beach (Horry and Georgetown Counties), Columbia (Richland and Lexington Counties), and the Upstate (Greenville and Spartanburg Counties) areas as well as areas in North Carolina including Wilmington (New Hanover County), Raleigh-Durham (Durham and Wake Counties), Charlotte-Concord-Gastonia (NC and SC) and the southeastern coastal region of North Carolina (Bladen, Brunswick, Columbus, Cumberland, Duplin and Robeson Counties). Through its acquisition of Community Bankers Trust, United added new markets in Baltimore and Annapolis, Maryland and Lynchburg and Richmond, Virginia as well as the Northern Neck of Virginia. Through its acquisition of Piedmont, United added the Atlanta, Georgia MSA to its market area. United considers all of the above locations to be the primary market areas for its business.

With prior regulatory approval, Virginia banks are permitted unlimited branch banking throughout each state. In addition, interstate acquisitions of and by Virginia banks and bank holding companies are permissible on a reciprocal basis, as well as reciprocal interstate acquisitions by thrift institutions. These conditions serve to intensify competition within United's market.

As of December 31, 2025, there were 61 bank holding companies operating in the State of West Virginia registered with the Federal Reserve System and the West Virginia Board of Banking and Financial Institutions, 93 bank holding companies operating in the Commonwealth of Virginia registered with the Federal Reserve System and the Virginia State Corporation Commission, 64 bank holding companies operating in the State of North Carolina registered with the Federal Reserve System and the N.C. Office of the Commissioner of Banks, 66 bank holding companies operating in the State of South Carolina registered with the Federal Reserve System and the South Carolina State Board of Financial Institutions and 158 bank holding companies operating in the State of Georgia registered with the Federal Reserve System and the Georgia Department of Banking and Finance. These holding companies are headquartered in various states and control banks throughout West Virginia, Virginia, North Carolina, South Carolina and Georgia, which compete for business as well as for the acquisition of additional banks. For further discussion, see the section captioned "United operates in a highly competitive market" in Item 1A. Risk Factors.

Regulation and Supervision

United, as a financial holding company, is subject to the restrictions of the Bank Holding Company Act of 1956, as amended, and is registered pursuant to its provisions. As such, United is subject to the reporting requirements of and examination by the Board of Governors of the Federal Reserve System ("Federal Reserve Board").

The Bank Holding Company Act prohibits the acquisition by a bank holding company of direct or indirect ownership of more than five percent of the voting shares of any bank within the United States without prior approval of the Federal Reserve Board. With certain exceptions, a bank holding company also is prohibited from acquiring direct or indirect ownership or control of more than five percent of the voting shares of any company which is not a bank, and from engaging directly or indirectly in business unrelated to the business of banking, or managing or controlling banks.

The Federal Reserve Board, in its Regulation Y, permits financial holding companies to engage in preapproved non-banking activities closely related to banking or managing or controlling banks. Approval of the Federal Reserve Board is necessary to engage in certain other non-banking activities which are not preapproved or to make acquisitions of corporations engaging in these activities. In addition, on a case-by-case basis, the Federal Reserve Board may approve other non-banking activities. A financial holding company may also engage in financial activities, including securities underwriting and dealing, insurance agency and underwriting activities, and merchant banking activities, among others.

As a financial holding company doing business in West Virginia, United is also subject to regulation and examination by the West Virginia Board of Banking and Financial Institutions (the "West Virginia Banking Board") and must submit annual reports to the West Virginia Banking Board. Further, any acquisition application that United must submit to the Federal Reserve Board must also be submitted to the West Virginia Banking Board for approval.

The Federal Reserve Board has broad authority to prohibit activities of financial holding companies and their non-banking subsidiaries that represent unsafe and unsound banking practices or which constitute violations of laws or

regulations. The Federal Reserve Board also can assess civil money penalties for certain activities conducted on a knowing and reckless basis, if those activities caused a substantial loss to a depository institution. The penalties can be as high as $1 million for each day the activity continues.

United Bank, as a Virginia state member bank, is subject to supervision, examination, and regulation by the Federal Reserve Board, and as such, is subject to applicable provisions of the Federal Reserve Act and regulations issued thereunder. United Bank is subject to the Virginia banking statutes and regulations, and is primarily regulated by the Virginia Bureau of Financial Institutions. As a member of the Federal Deposit Insurance Corporation ("FDIC"), United Bank's deposits are insured as provided by federal law. Bank regulatory authorities regularly examine revenues, loans, investments, management practices, and other aspects of United Bank. These examinations are conducted primarily to protect depositors and not shareholders. In addition to these regular examinations, United Bank must furnish to regulatory authorities quarterly reports containing full and accurate statements of its affairs.

United is also under the jurisdiction of the SEC and certain state securities commissions in regard to the offering and sale of its securities. Generally, United must file under the Securities Exchange Act of 1933, as amended, to issue additional shares of its common stock. United is also registered under and is subject to the regulatory and disclosure requirements of the Securities Exchange Act of 1934, as amended, as administered by the SEC. United is listed on the NASDAQ Global Select Market under the quotation symbol "UBSI," and is subject to the rules of the NASDAQ for listed companies.

SEC regulations require us to disclose certain types of business and financial data on a periodic basis to the SEC and to our shareholders. We are required to file annual, quarterly and current reports with the SEC. We prepare and file an annual report on Form 10-K with the SEC that contains detailed financial and operating information, as well as a management response to specific questions about United's operations. SEC regulations require that our annual reports to shareholders contain certified financial statements and other specific items such as management's discussion and analysis of our financial condition and results of operations. We must also file quarterly reports with the SEC on Form 10-Q that contain detailed financial and operating information for the prior quarter and we must file current reports on Form 8-K to provide the public with information on recent material events.

In addition to periodic reporting to the SEC, we are subject to proxy rules and tender offer rules issued by the SEC. Our officers, directors and principal shareholders (holding 10% or more of our stock) must also submit reports to the SEC regarding their holdings of our stock and any changes to such holdings, and they are subject to short-swing profit liability.

Dividends and Stock Repurchases

The principal source of United's liquidity is dividends from United Bank. The prior approval of the Federal Reserve Board is required if the total of all dividends declared by a state-chartered member bank in any calendar year would exceed the sum of the bank's net profits for that year and its retained net profits for the preceding two calendar years, less any required transfers to surplus or to fund the retirement of preferred stock. Federal law also prohibits a state-chartered, member bank from paying dividends that would be greater than the bank's undivided profits. United Bank is also subject to limitations under Virginia state law regarding the level of dividends that may be paid. Limitations on United's ability to receive dividends from United Bank could have a material adverse effect on its liquidity and ability to pay dividends on its common stock or interest and principal on its debt, and ability to fund purchases of its common stock.

In addition, United and United Bank are subject to other regulatory policies and requirements relating to the payment of dividends, including requirements to maintain adequate capital above regulatory minimums. The appropriate federal regulatory authority is authorized to determine under certain circumstances relating to the financial condition of a bank holding company or a bank that the payment of dividends would be an unsafe or unsound practice and to prohibit payment thereof. The appropriate federal regulatory authorities have stated that paying dividends that deplete a bank's capital base to an inadequate level would be an unsafe and unsound banking practice and that banking organizations should generally pay dividends only out of current operating earnings. In addition, in the current financial and economic environment, the Federal Reserve Board has indicated that bank holding companies should carefully review their

dividend policy and has discouraged payment ratios that are at maximum allowable levels unless both asset quality and capital are very strong.

In certain circumstances, United's repurchases of its common stock may be subject to a prior approval or notice requirement under other regulations, policies or supervisory expectations of the Federal Reserve Board. Any redemption or repurchase of preferred stock or subordinated debt is subject to the prior approval of the Federal Reserve Board.

The Inflation Reduction Act of 2022 (the "IRA") imposes a 1% excise tax on the fair market value of stock repurchased after December 31, 2022 by publicly traded U.S. corporations. With certain exceptions, the value of stock repurchased is determined net of stock issued in the year, including shares issued pursuant to compensatory arrangements.

Deposit Insurance

The deposits of United Bank are insured by the FDIC to the extent provided by law. Accordingly, United Bank is also subject to regulation by the FDIC. United Bank is subject to deposit insurance assessments to maintain the Deposit Insurance Fund ("DIF") of the FDIC. The FDIC utilizes a risk-based assessment system that imposes insurance premiums based upon a risk matrix that takes into account a bank's capital level and supervisory rating (CAMELS rating) and certain financial measures to assess an institution's ability to withstand asset-related stress and funding-related stress. The risk matrix utilizes four risk categories that are distinguished by capital levels and supervisory ratings.

On October 18, 2022, the FDIC adopted a final rule that increased the initial base deposit insurance assessment rates for insured depository institutions by 2 basis points, beginning with the first quarterly assessment period of 2023. The increased assessment rate schedules remain in effect unless and until the reserve ratio of the DIF meets or exceeds 2 percent. As a result of the rule, the FDIC insurance costs of insured depository institutions, including United Bank, have generally increased.

On November 16, 2023, the FDIC issued a final rule to implement a special assessment to recover the loss to the DIF associated with protecting uninsured depositors following the closures of Silicon Valley Bank and Signature Bank. The Federal Deposit Insurance Act ("FDI Act") required the FDIC to take this action in connection with the systemic risk determination announced on March 12, 2023. The special assessment did not apply to any banking organization (defined to include FDIC-insured financial institutions that are not subsidiaries of a holding company and FDIC-insured financial institutions that are subsidiaries of a holding company with one or more FDIC-insured financial institution subsidiaries) with less than $5 billion in total consolidated assets. The assessment base for the special assessment is equal to an insured depository institution's ("IDI's") estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion, applicable either to the IDI, if an IDI is not a subsidiary of a holding company, or at the banking organization level, to the extent that an IDI is part of a holding company with one or more subsidiary IDIs. The special assessment was to be collected at an annual rate of approximately 13.4 basis points for an anticipated total of eight quarterly assessment periods. In December 2025, the FDIC adopted an interim rule to adjust the special assessment, as initial estimates showed the original eight-quarter plan might slightly over-collect compared to actual losses. The rate for the final quarter (the first quarter of 2026) was reduced from 3.36 basis points to 2.97 basis points to align with the revised loss estimates. Because the cumulative amount collected through the initial eight-quarter special assessment period is projected to equal the FDIC's loss estimate, the additional two quarters of extended assessment period was removed. The interim final rule also requires the FDIC to provide an offset to regular quarterly deposit insurance assessments for institutions subject to the special assessment if the aggregate amount collected exceeds estimated losses following the resolution of pending litigation, and again following the termination of the receiverships. As provided for in the special assessment rule, if losses at the termination of the receiverships exceed the amount collected, the FDIC will implement a one-time final shortfall special assessment to ensure the full amount of actual losses is recovered as required by law.

Capital Requirements

United and United Bank are each required to comply with applicable capital adequacy standards established by the Federal Reserve Board (the "Basel III Capital Rules"). The Basel III Capital Rules define qualifying capital instruments and specify minimum amounts of capital as a percentage of assets that banking organizations are required to maintain. Under the Basel III Capital Rules, risk-based capital ratios are calculated by dividing Common Equity Tier 1

("CET1") capital, Tier 1 capital and total capital, respectively, by risk-weighted assets. Assets and off-balance sheet credit equivalents are assigned a risk weight based primarily on supervisory assessments of relative credit risk. Since fully phased in on January 1, 2019, the Basel III Capital Rules require United and United Bank to maintain the following:

• A minimum ratio of Common Equity Tier 1 ("CET1") to risk-weighted assets of at least 4.5%, plus a 2.5% "capital conservation buffer" (resulting in a minimum ratio of CET1 to risk-weighted assets of 7.0%);

• A minimum ratio of Tier 1 capital to risk-weighted assets of at least 6.0%, plus the capital conservation buffer (resulting in a minimum Tier 1 capital ratio of 8.5%);

• A minimum ratio of total capital (Tier 1 capital plus Tier 2 capital) to risk-weighted assets of at least 8.0%, plus the capital conservation buffer (resulting in a minimum total capital ratio of 10.5%); and

• A minimum leverage ratio of 4.0%, calculated as the ratio of Tier 1 capital to average consolidated assets as reported on consolidated financial statements (known as the "leverage ratio").

The capital conservation buffer is designed to absorb losses during periods of economic stress. Banking institutions that fail to meet the effective minimum ratios once the capital conservation buffer is taken into account, as detailed above, will be subject to constraints on capital distributions, including dividends and share repurchases, and certain discretionary executive compensation. The severity of the constraints depends on the amount of the shortfall and the institution's "eligible retained income" (that is, the greater of (i) net income for the preceding four quarters, net of distributions and associated tax effects not reflected in net income and (ii) the average net income over the preceding four quarters).

The Basel III Capital Rules also provide for a number of deductions from and adjustments to CET1. As non-advanced approaches organizations under the Basel III Capital Rules, United and United Bank are subject to rules that provide for simplified capital requirements relating to the threshold deductions. These include, for example, the requirement that certain deferred tax assets and significant investments in non-consolidated financial entities be deducted from CET1 to the extent that any one such category exceeds 25% of CET1.

In addition, under the general risk-based capital rules, the effects of accumulated other comprehensive income items included in capital were excluded for the purposes of determining regulatory capital ratios. Under the Basel III Capital Rules, the effects of certain accumulated other comprehensive income items are not excluded; however, non-advanced approaches banking organizations, including United and United Bank, were able to make a one-time permanent election to continue to exclude these items. Both United and United Bank made this election in order to avoid significant variations in the level of capital depending upon the impact of interest rate fluctuations on the fair value of their available-for-sale securities portfolio. Under the Basel III Capital Rules, trust preferred securities no longer included in our Tier 1 capital may nonetheless be included as a component of Tier 2 capital on a permanent basis without phase-out.

In March 2020, the federal bank regulatory agencies issued an interim final rule that provided banking organizations that were required under U.S. GAAP (as of January 2020) to implement CECL before the end of 2020 the option to delay for two years an estimate of the effect of CECL on regulatory capital, relative to the incurred loss methodology's effect on regulatory capital, followed by a three-year transition period (five-year transition option). We elected to adopt the five-year transition option; therefore, our 2024 regulatory capital ratios reflect this election, but 2025 regulatory capital ratios include the full impact from CECL now that the phase-in period has ended.

The Basel III Capital Rules prescribe a standardized approach for risk weightings that expanded the risk-weighting categories from the general risk-based capital rules to a much larger and more risk-sensitive number of categories, depending on the nature of the assets, generally ranging from 0% for U.S. government and agency securities, to 600% for certain equity exposures (and higher percentages for certain other types of interests), and resulting in higher risk weights for a variety of asset categories. In November 2019, the federal banking agencies adopted a rule revising the scope of commercial real estate mortgages subject to a 150% risk weight.

In December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms. Among other things, these standards revised the Basel Committee's standardized approach

for credit risk (including by recalibrating risk weights and introduction of new capital requirements for certain "unconditionally cancellable commitments," such as unused credit card lines of credit) and provides a new standardized approach for operational risk capital. Under the current U.S. capital rules, operational risk capital requirements and a capital floor apply only to advanced approaches institutions, and not to United or United Bank.

In July 2023, the federal banking regulators proposed revisions to the Basel III Capital Rules to implement the Basel Committee's 2017 standards and make other changes to the Basel III Capital Rules. The proposal introduced revised credit risk, equity risk, operational risk, credit valuation adjustment risk and market risk requirements, among other changes. However, the revised capital requirements of the proposed rule would not apply to United or United Bank because they each have less than $100 billion in total consolidated assets and trading assets and liabilities below the threshold for market risk requirements. Federal banking regulators indicated they intend to issue a revised proposal in 2026.

Failure to meet statutorily mandated capital guidelines or more restrictive ratios separately established for a financial institution could subject United to a variety of enforcement remedies, including issuance of a capital directive, the termination of deposit insurance by the FDIC, a prohibition on accepting or renewing brokered deposits, limitations on the rates of interest that the institution may pay on its deposits and other restrictions on its business. As described below, significant additional restrictions can be imposed on United if it would fail to meet applicable capital requirements.

Prompt Corrective Action

The Federal Deposit Insurance Corporation Improvement Act of 1991 ("FDICIA") establishes a regulatory scheme, which ties the level of supervisory intervention by bank regulatory authorities primarily to a depository institution's capital category. Among other things, FDICIA authorizes regulatory authorities to take "prompt corrective action" with respect to depository institutions that do not meet minimum capital requirements. FDICIA establishes five capital tiers: well capitalized, adequately capitalized, undercapitalized, significantly undercapitalized and critically undercapitalized.

Under the Basel III Capital Rules, the current prompt corrective action requirements for an institution to be "well-capitalized" is a total risk-based capital ratio of 10% or greater, a Tier 1 risk-based capital ratio of 8% or greater, a CET1 ratio of 6.5% or greater and a Tier 1 leverage ratio of 5% or greater.

United Bank was considered a "well capitalized" institution as of December 31, 2025. Well-capitalized institutions are permitted to engage in a wider range of banking activities, including among other things, the accepting of "brokered deposits," and the offering of interest rates on deposits higher than the prevailing rate in their respective markets.

If an institution is categorized as undercapitalized, significantly undercapitalized or critically undercapitalized, it is required to submit a capital restoration plan to its appropriate federal bank regulator. For such capital restoration plan to be accepted by the appropriate federal bank regulator, a bank holding company must guarantee that a subsidiary depository institution will comply with its capital restoration plan, subject to certain limitations and must provide assurances of performance. The obligation of a controlling bank holding company under the FDI Act to fund a capital restoration plan is limited to the lesser of 5% of an undercapitalized subsidiary's assets or the amount required to meet regulatory capital requirements. If a depository institution fails to submit an acceptable capital restoration plan or fails to implement an approved plan, it is treated as if it is significantly undercapitalized. The FDICIA imposes restrictions and prohibitions on institutions that are undercapitalized, significantly undercapitalized or critically undercapitalized with respect to, among other things, asset size, acquisitions, establishing branches, engaging in new activities, capital distributions and transactions with affiliates.

Community Reinvestment Act

The Community Reinvestment Act of 1977 ("CRA") requires depository institutions to assist in meeting the credit needs of their market areas consistent with safe and sound banking practice. Under the CRA, each depository institution is required to help meet the credit needs of its market areas by, among other things, providing credit to low-and moderate-income individuals and communities. Depository institutions are periodically examined for compliance

with the CRA and are assigned ratings. Banking regulators take into account CRA ratings when considering approval of a proposed transaction.

In 2023, the year of our most recent CRA exam, United Bank received a CRA Performance Evaluation from the Federal Reserve Bank of Richmond (the "FRB") with a rating of "Satisfactory."

Deposit Acquisition Limitation

Under West Virginia banking law, an acquisition or merger is not permitted if the resulting depository institution or its holding company, including its affiliated depository institutions, would assume additional deposits to cause it to control deposits in the State of West Virginia in excess of twenty five percent (25%) of such total amount of all deposits held by insured depository institutions in West Virginia. This limitation may be waived by the Commissioner of Banking by showing good cause.

Consumer Laws and Regulations

In addition to the banking laws and regulations discussed above, bank subsidiaries are also subject to certain consumer laws and regulations that are designed to protect consumers in transactions with banks. Among the more prominent of such laws and regulations are the Truth in Lending Act, the Home Mortgage Disclosure Act, the Truth in Savings Act, the Electronic Funds Transfer Act, the Expedited Funds Availability Act, the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Fair Debt Collection Practices Act, the Right to Financial Privacy Act and the Fair Housing Act. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions must deal with customers when taking deposits or making loans to such customers. United Bank must comply with the applicable provisions of these consumer protection laws and regulations as part of its ongoing customer relations.

The Dodd-Frank Act centralized responsibility for consumer financial protection by creating the CFPB, and giving it responsibility for implementing, examining and enforcing compliance with federal consumer protection laws. The CFPB has broad rulemaking, supervisory and enforcement authority over consumer financial products and services, including deposit products, residential mortgages, home-equity loans, and credit cards. The CFPB's functions include investigating consumer complaints, rulemaking, supervising and examining banks' consumer transactions, and enforcing rules related to consumer financial products and services. Banks with more than $10 billion in assets, such as United Bank, are subject to supervision by the CFPB with respect to these federal consumer financial laws.

In October 2024, the CFPB issued a final rule requiring providers of payment accounts or products, such as a bank, to make data available to consumers upon request regarding the products or services they obtain from the provider, and to third parties, with the consumer's express authorization, for the purpose of such third parties providing the consumer with financial products or services requested by the consumer. Data required to be made available under the rule includes transaction information, account balance, account and routing numbers, terms and conditions, upcoming bill information, and certain account verification data. The rule is the subject of litigation, which is currently stayed while the CFPB considers revisions to the rule.

During 2025, the CFPB reduced its staff by over 80%. The reduction in force is the subject of litigation, and the staffing cuts are currently stayed pending the federal circuit court's en banc rehearing of the case. The impact of these developments on banking organizations subject to CFPB regulation and supervision, including United Bank, is uncertain. States and state attorneys general may increase regulatory, investigative and enforcement activity with respect to consumer protection, in response to changes in regulation, supervision and enforcement of consumer protection laws by federal regulators.

Anti-Money Laundering and the USA Patriot Act

A major focus of governmental policy on financial institutions in recent years has been aimed at combating money laundering and terrorist financing. The U.S. Bank Secrecy Act (the "BSA") and the USA PATRIOT Act of 2001 (the "USA Patriot Act") require financial institutions to develop programs to prevent them from being used for, and to detect and deter, money laundering, terrorist financing, and other illegal activities. The USA Patriot Act substantially broadened the scope of United States anti-money laundering laws and regulations by imposing significant new

compliance and due diligence obligations, creating new crimes and penalties and expanding the extra-territorial jurisdiction of the United States. Financial institutions are also prohibited from entering into specified financial transactions and account relationships and must use enhanced due diligence procedures in their dealings with certain types of high-risk customers and implement a written customer identification program. Financial institutions must take certain steps to assist government agencies in detecting and preventing money laundering and report certain types of suspicious transactions. Regulatory authorities routinely examine financial institutions for compliance with these obligations, and failure of a financial institution to maintain and implement adequate programs to combat money laundering and terrorist financing, or to comply with all of the relevant laws or regulations, could have serious financial, legal and reputational consequences for the institution, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required. Regulatory authorities have imposed cease and desist orders and civil money penalties against institutions found to be violating these obligations.

The Anti-Money Laundering Act of 2020 (the "AMLA"), which amends the BSA, was enacted in January 2021. The AMLA is intended to be a comprehensive reform and modernization to U.S. bank secrecy and anti-money laundering laws. Among other things, it codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the U.S. Department of the Treasury to promulgate priorities for anti-money laundering and countering the financing of terrorism policy; requires the development of standards for testing technology and internal processes for BSA compliance; expands enforcement- and investigation-related authority, including increasing available sanctions for certain BSA violations; and expands BSA whistleblower incentives and protections. Many of the statutory provisions in the AMLA require additional rulemakings, reports and other measures, and the impact of the AMLA depends on, among other things, rulemaking and implementation guidance. In June 2021, the Financial Crimes Enforcement Network, a bureau of the U.S. Department of the Treasury, issued the priorities for anti-money laundering and countering the financing of terrorism policy required under the AMLA. The priorities include: corruption, cybercrime, terrorist financing, fraud, transnational crime, drug trafficking, human trafficking and proliferation financing.

In August 2024, Financial Crimes Enforcement Network ("FinCEN"), which drafts and enforces regulations implementing the BSA and other anti-money laundering legislation, adopted a rule extending anti-money laundering obligations, including maintenance of an anti-money laundering program and filing certain reports with FinCEN, to registered investment advisers. In December 2025, FinCEN delayed the effective date of the rule to January 1, 2028 in part to allow FinCEN to review the rule

Incentive Compensation

The Federal Reserve Board reviews, as part of its regular, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as United, that are not "large, complex banking organizations." These reviews are tailored to each organization based on the scope and complexity of the organization's activities and the prevalence of incentive compensation arrangements. The findings of this supervisory initiative will be included in reports of examination. Deficiencies will be incorporated into the organization's supervisory ratings, which can affect the organization's ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the organization's safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

In June 2010, the Federal Reserve Board, OCC and FDIC issued comprehensive final guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon the key principles that a banking organization's incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the organization's ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the organization's board of directors.

In April and May of 2016, the Federal Reserve Board, other federal banking agencies and the SEC (the "Agencies") jointly published proposed rulemaking designed to implement provisions of the Dodd-Frank Act prohibiting incentive compensation arrangements that would encourage inappropriate risk taking at a covered institution, which

includes a bank or bank holding company with $1 billion or more of assets, such as United. The proposed rule has not been finalized.

In August 2022, the SEC adopted final rules requiring public companies to disclose the relationship between the executive compensation actually paid to the company's named executive officers ("NEOs") and the company's financial performance. The final rules implement the "pay versus performance" disclosure requirements mandated by Section 953(a) of the Dodd-Frank Act. Disclosure related to these final rules was effective for United's proxy statement filed in 2023.

In October 2022, the SEC adopted the final "clawback" rule mandated by Section 954 of the Dodd-Frank Act directing national securities exchanges and associations, including the NASDAQ, to implement listing standards that require listed companies to adopt policies mandating the recovery or "clawback" of excess incentive-based compensation earned by a current or former executive officer during the three fiscal years preceding the date the listed company is required to prepare an accounting restatement, including to correct an error that would result in a material misstatement if the error were corrected in the current period or left uncorrected in the current period. The final rule required United to adopt a "clawback" policy within 60 days after such listing standard became effective.

In June 2023, the New York Stock Exchange and Nasdaq Stock Market adopted these required listing standards mandated by Section 954 of the Dodd-Frank Act, which were effective on October 2, 2023. Each listed issuer was required to adopt a policy relating to the recovery of erroneously awarded compensation no later than December 1, 2023, which is 60 days following the effective date. The incentive compensation received by executives on or after October 2, 2023 is subject to the issuer's recovery policies. Issuers that do not adopt and comply with the compensation recovery policies or those that do not disclose the policy will be subject to delisting. United adopted a "clawback" policy on November 17, 2023.

Cybersecurity

The federal banking regulators regularly issue new guidance and standards, and update existing guidance and standards regarding cybersecurity intended to enhance cyber risk management among financial institutions. Financial institutions are expected to comply with such guidance and standards and to accordingly develop appropriate security controls and risk management processes. If we fail to observe such regulatory guidance or standards, we could be subject to various regulatory sanctions, including financial penalties.

Banking organizations are required to notify their primary banking regulator within 36 hours of determining that a "computer-security incident" has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, the banking organization's ability to carry out banking operations or deliver banking products and services to a material portion of its customer base, its businesses and operations that would result in material loss, or its operations that would impact the stability of the United States.

In July 2023, the SEC issued a final rule, "Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure," which requires registrants to provide investors, through enhanced and standardized disclosures, greater insight into material cybersecurity incidents and the registrants' cybersecurity risk management, strategy and governance. See Item 1C. Cybersecurity for information on United's risk management, strategy and governance processes related to cybersecurity.

Fair Access to Financial Services

In recent years, certain states have enacted, or have proposed to enact, statutes, regulations or policies that prohibit financial institutions from denying or canceling products or services to a person or business, or otherwise discriminating against a person or business in making available products or services, on the basis of certain social or political factors or other activities. In August 2025, President Trump signed Executive Order 14331, "Guaranteeing Fair Banking Access for All Americans," which states that it is the policy of the United States that no American should be denied access to financial services because of their constitutionally or statutorily protected beliefs, affiliations, or political

views. The Executive Order directs the Treasury Secretary and federal banking regulators to address politicized or unlawful debanking activities.

Item 1A. RISK FACTORS

United is subject to risks inherent to the Company's business. The material risks and uncertainties that management believes affect the Company are described below. Before making an investment decision, you should carefully consider the risks and uncertainties described below together with all of the other information included or incorporated by reference in this report. The risks and uncertainties described below are not the only ones facing the Company. Additional risks and uncertainties that management is not aware of or focused on or that management currently deems immaterial may also impair United's business operations. This report is qualified in its entirety by these risk factors.

REGULATORY AND LITIGATION RISKS

United is subject to extensive government regulation and supervision.

United is subject to extensive federal and state regulation, supervision and examination which vests significant discretion in the various regulatory authorities. Banking regulations are primarily intended to protect depositors' funds, federal deposit insurance funds and the banking system as a whole, not shareholders. These regulations affect United's lending practices, capital structure, investment practices, dividend policy, operations, growth, and the fees we can charge for certain products or transactions, among other things. These regulations also impose obligations to maintain appropriate policies, procedures and controls, among other things, to detect, prevent and report money laundering and terrorist financing and to verify the identities of United's customers. Congress and federal regulatory agencies continually review banking laws, regulations and policies for possible changes. The Dodd-Frank Act, enacted in July 2010, instituted major changes to the banking and financial institutions regulatory regimes. Other changes to statutes, regulations or regulatory policies, including changes in interpretation or implementation of statutes, regulations or policies, could affect United in substantial and unpredictable ways. Such changes could subject the Company to additional costs, limit the types of financial services and products United may offer and/or increase the ability of nonbanks to offer competing financial services and products, among other things. United expends substantial effort and incurs costs to improve its systems, audit capabilities, staffing and training in order to seek to satisfy regulatory requirements and meet supervisory expectations, but the regulatory authorities may determine that such efforts are insufficient. Failure to comply with relevant laws, regulations or policies or meet supervisory expectations could result in enforcement and other legal actions, sanctions by regulatory agencies, civil money and criminal penalties, the loss of FDIC insurance, the revocation of a banking charter, significant fines and/or reputation damage, which could have a material adverse effect on United's business, financial condition and results of operations. In this regard, government authorities, including the bank regulatory agencies, are pursuing aggressive enforcement actions with respect to compliance and other legal matters involving financial activities, which heightens the risks associated with actual and perceived compliance failures. Directives issued to enforce such actions may be confidential and thus, in some instances, we are not permitted to publicly disclose these actions. Litigation challenging actions or regulations by Federal or state authorities could, depending on the outcome, significantly affect the regulatory and supervisory framework affecting our operations. For example, there is litigation pending to challenge the Federal Reserve Board's regulation on permissible interchange fees on the ground that the regulation allows higher interchange fees than permitted by statute, which, if successful, could significantly and adversely affect the fees banks can charge on debit card transactions. In August 2025, a district court ruled against the Federal Reserve and vacated the regulation, but its order is stayed pending appeal to the circuit court. Any of the foregoing could have a material adverse effect on our business, financial condition and results of operations. See the section captioned "Regulation and Supervision" included in Item 1. While the Company has policies and procedures designed to prevent any violations of applicable laws or regulations, there can be no assurance that such violations will not occur.

In the normal course of business, United and its subsidiaries are routinely subject to examinations and challenges from federal and state tax authorities regarding the amount of taxes due in connection with investments that the Company has made and the businesses in which United has engaged. Federal and state taxing authorities routinely challenge tax positions taken by financial institutions. These tax positions may relate to tax compliance, sales and use, franchise, gross receipts, payroll, property and income tax issues, including tax base, apportionment and tax credit planning. The

challenges made by tax authorities may result in adjustments to the timing or amount of taxable income or deductions or the allocation of income among tax jurisdictions. If any such challenges are made and are not resolved in the Company's favor, they could have a material adverse effect on United's financial condition and results of operations.

United is subject to regulatory capital requirements and failure to comply with these standards may impact dividend payments, equity repurchases and executive compensation.

United and United Bank are each required to comply with applicable capital adequacy standards established by the Federal Reserve Board. From time to time, the Federal Reserve Board changes these capital adequacy standards. In particular, the capital requirements applicable to United under the Basel III rules became fully effective on January 1, 2019. Under the Basel III rules, United is required to maintain a common equity Tier 1 capital ratio of 4.5%, a Tier 1 capital ratio of 6%, a total capital ratio of 8%, and a leverage ratio of 4%. In addition, United must maintain an additional capital conservation buffer of 2.5% of total risk weighted assets.

Banking institutions that fail to meet the effective minimum ratios including the capital conservation buffer will be subject to constraints on capital distributions, including dividends and share repurchases, and certain discretionary executive compensation. The severity of the constraints depends on the amount of the shortfall and the institution's "eligible retained income" (that is, the greater of (i) net income for the preceding four quarters, net of distributions and associated tax effects not reflected in net income and (ii) the average net income over the preceding four quarters).

The Basel III changes have resulted in generally higher minimum capital ratios than in the past, including due to the need for United and its subsidiaries to maintain capital buffers above minimum requirements to avoid restrictions on capital distributions and executive bonus payments. In addition, the application of more stringent capital requirements for United could, among other things, result in lower returns on invested capital, require the raising of additional capital and result in additional regulatory actions if United were to be unable to comply with such requirements. Implementation of changes to asset risk weightings for risk based capital calculations, items included or deducted in calculating regulatory capital and/or additional capital conservation buffers could result in management modifying its business strategy and could limit United's ability to make distributions, including paying dividends.

United's earnings are significantly affected by the fiscal and monetary policies of the federal government and its agencies.

The policies of the Federal Reserve Board impact United significantly. The Federal Reserve Board regulates the supply of money and credit in the United States. Its policies directly and indirectly influence the rate of interest earned on loans and paid on borrowings and interest-bearing deposits and can also affect the value of financial instruments we hold. Those policies determine to a significant extent our cost of funds for lending and investing. Changes in those policies are beyond our control and are difficult to predict. Federal Reserve Board policies can also affect our borrowers, potentially increasing the risk that they may fail to repay their loans. For example, a tightening of the money supply by the Federal Reserve Board could reduce the demand for a borrower's products and services. This could adversely affect the borrower's earnings and ability to repay its loan, which could have a material adverse effect on our financial condition and results of operations.

United may be required to repurchase mortgage loans or indemnify buyers against losses in some circumstances, which could harm liquidity, results of operations and financial condition.

When mortgage loans are sold, whether as whole loans or pursuant to a securitization, United is required to make customary representations and warranties to purchasers, guarantors and insurers, including the government sponsored enterprises, about the mortgage loans and the manner in which they were originated. Whole loan sale agreements require repurchase or substitute mortgage loans, or indemnification of buyers against losses, in the event United breaches these representations or warranties. In addition, United may be required to repurchase mortgage loans as a result of early payment default of the borrower on a mortgage loan. If repurchase and indemnity demands increase and such demands are valid claims and are in excess of United's provision for potential losses, its liquidity, results of operations and financial condition may be adversely affected.

CREDIT RISKS

There are no assurances as to adequacy of the allowance for credit losses.

The accounting for credit losses on loans, leases and other financial assets held by banks, financial institutions and other organizations requires the recognition of credit losses on loans, leases and other financial assets based on an entity's current estimate of expected losses over the lifetime of each loan, lease or other financial asset, referred to as the Current Expected Credit Loss ("CECL") model. Under the CECL model, United is required to present certain financial assets, carried at amortized cost, at the net amount expected to be collected over the life of the financial asset. The measurement of expected credit losses is based on information about past events, including credit quality, our historical experience, current conditions, and reasonable and supportable macroeconomic forecasts that may affect the collectability of the reported amount. This measurement will take place at the time a financial asset is first added to the balance sheet and at least quarterly thereafter.

CECL requires management judgment that is supported by models and data elements, including macroeconomic forecasts. The complexity and associated risk of CECL, particularly in times of economic uncertainty or other unforeseen circumstances, could impact United's results of operations and capital levels as well as place stress on our internal controls over financial reporting.

The determination of the appropriate level of allowance for credit losses inherently involves a high degree of subjectivity and requires us to make significant estimates related to current and expected future credit risks and trends, all of which may undergo material changes. Deterioration in economic conditions affecting borrowers and securities issuers; new information regarding existing loans, credit commitments and securities holdings; global pandemics; natural disasters and risks related to climate change; and identification of additional problem loans, ratings down-grades and other factors, both within and outside of our control, may require an increase in the allowances for credit losses on loans, securities and off-balance sheet credit exposures. In addition, federal and state regulators, as an integral part of their respective supervisory functions, periodically review United's allowance for credit losses on loans, and may require an increase in the provision for credit losses or the recognition of further loan charge-offs, based on judgments different than those of management. Any increases in the allowance for credit losses on loans will result in a decrease in net income and, possibly, capital, and may have a material adverse effect on United's business, financial condition and results of operations.

See the section captioned "Provision for Credit Losses" in the Management's Discussion and Analysis of Financial Condition and Results of Operations included in Part II, Item 7 of this Form 10-K for further discussion related to our process for determining the appropriate level of the allowance for credit losses.

United is subject to credit risk in its loan portfolio.

There are risks inherent in making any loan, including risks with respect to the period of time over which the loan may be repaid, risks resulting from changes in economic and industry conditions, risks inherent in dealing with individual borrowers and risks resulting from uncertainties as to the future value of collateral. United seeks to mitigate the risk inherent in its loan portfolio by adhering to prudent loan approval practices. Although United believes that its loan approval criteria are appropriate for the various kinds of loans the Company makes, United may incur losses on loans that meet our loan approval criteria. A significant decline in general economic conditions caused by inflation or deflation, recession, unemployment, changes in government fiscal and monetary policies, acts of terrorism, or other factors beyond our control could cause our borrowers to default on their loan payments, and the collateral values securing such loans to decline and be insufficient to repay any outstanding indebtedness. In such events, we could experience significant loan losses, which could have a material adverse effect on our financial condition and results of operations.

Certain of our credit exposures are concentrated in industries that may be more susceptible to the long-term risks of climate change, natural disasters or global pandemics. To the extent that these risks may have a negative impact on the financial condition of borrowers, it could also have a material adverse effect on our business, financial condition and results of operations. See the section captioned "Loans" in Item 7, Management's Discussion and Analysis of Financial

Condition and Results of Operations elsewhere in this report for further discussion related to commercial and industrial, energy, construction and commercial real estate loans.

OPERATIONAL RISKS

United's information systems may experience failure, interruption, or breach of security.

United relies heavily on communications and information systems to conduct its business. In addition, as part of its business, United collects, processes and retains sensitive and confidential client and customer information. United's facilities and systems, and those of our third-party service providers, may be vulnerable to interruptions, failures or security breaches, arising from cyber-attacks, criminal activity, acts of war or terrorism, severe weather or other natural disasters, acts of vandalism, computer viruses, misplaced or lost data, programming and/or human errors, or other similar events. Any failure, interruption or breach in security of these systems could result in failures or disruptions in the Company's customer relationship management, general ledger, deposit, loan and other systems. While United has policies and procedures designed to prevent or limit the effect of the failure, interruption or security breach of its information systems, there can be no assurance that any such failures, interruptions or security breaches will not occur or, if they do occur, that they will be adequately addressed. It is also possible that employees, merchants or United's third-party vendors may not follow United's policies and procedures, which may expose United to a security breach. The occurrence of any failures, interruptions or security breaches of the Company's information systems could damage United's reputation, result in a loss of customer business, subject United to additional regulatory scrutiny, or expose the Company to civil litigation and possible financial liability, any of which could have a material adverse effect on United's financial condition and results of operations.

Unauthorized disclosure of sensitive or confidential client or customer information, whether through a cyber-attack, other breach of our computer systems or otherwise, could severely harm our business.

In the normal course of our business, we collect, process and retain sensitive and confidential client and customer information on our behalf and on behalf of other third parties. Despite the security measures we have in place, our facilities and systems may be vulnerable to cyber-attacks, security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming and/or human errors, or other similar events.

Information security risks for financial institutions like us have increased recently in part because of new technologies, such as artificial intelligence and quantum computing, the use of the internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions, employees working from home, the increased connectivity of third parties (including contractors) and electronic devices to United's systems, and the increased sophistication and activities of organized crime, perpetrators of fraud, hackers, terrorists and others. Even well protected information, networks, systems and facilities remain potentially vulnerable to attempted security breaches or disruptions because the techniques used in such attempts are constantly evolving, including as a result of artificial intelligence, and generally are not recognized until launched against a target, and in some cases are designed not to be detected and, in fact, may not be detected. In addition to cyber-attacks or other security breaches involving the theft of sensitive and confidential information, hackers have engaged in attacks against large financial institutions, particularly denial of service attacks, designed to disrupt key business services such as customer-facing web sites. We are not able to anticipate or implement effective preventive measures against all security breaches of these types. Although we employ detection and response mechanisms designed to contain and mitigate security incidents, early detection may be thwarted by persistent sophisticated attacks and malware designed to avoid detection.

We also face risks related to cyber-attacks and other security breaches in connection with card transactions that typically involve the transmission of sensitive information regarding our customers through various third parties. Some of these parties have in the past been the target of security breaches and cyber-attacks, and because the transactions involve third parties and environments that we do not control or secure, future security breaches or cyber-attacks affecting any of these third parties could impact us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them. We also rely on numerous other third-party service providers to conduct other aspects of our business operations and face similar risks relating to them. While we conduct security assessments on our higher risk third parties, we cannot be sure that their information security protocols are sufficient to

withstand a cyber-attack or other security breach.

Any cyber-attack or other security breach involving the misappropriation, loss or other unauthorized disclosure of confidential customer information could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business.

Increasing fraud risk could adversely affect our business, financial condition, and reputation.

We are exposed to an increasing risk of fraud, including cyber fraud, identity theft, account takeover, and other fraudulent activities targeting financial institutions and their customers. The sophistication and frequency of these schemes continue to grow, driven by advances in technology and the proliferation of digital banking channels. Fraudulent activity can result in financial losses for us or our customers, increased operational costs, and potential legal exposure.

Although we employ robust security measures, including authentication protocols, transaction monitoring, and fraud detection systems, these controls may not be sufficient to prevent all fraudulent activity. Criminals continuously adapt their methods to circumvent existing safeguards, and emerging technologies such as artificial intelligence may further enhance their ability to perpetrate fraud.

Significant fraud-related losses could negatively impact our earnings, capital, and liquidity. In addition, fraud incidents may harm our reputation, erode customer trust, and lead to regulatory scrutiny or enforcement actions. Failure to effectively manage and mitigate fraud risk could have a material adverse effect on our business, financial condition, and results of operations.

Technological advancements may subject us to additional risks.

The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology-driven products and services, including the increased usage of intelligent automation within the industry. Our future success depends, in part, upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements. We may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to our customers. In addition, our implementation of certain new technologies, such as those related to artificial intelligence, automation and algorithms, in our business processes may have unintended consequences due to their limitations or our failure to use them effectively. In addition, cloud technologies are critical to the operation of our systems, and our reliance on cloud technologies is growing. Failure to successfully keep pace with technological change affecting the financial services industry could have a material adverse effect on our business, financial condition and results of operations.

Furthermore, any new line of business, new product or service and/or new technology could have a significant impact on the effectiveness of our system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business, new products or services and/or new technologies could have a material adverse effect on our business, financial condition and results of operations.

Our growth-oriented business strategy could be adversely affected if we are not able to attract and retain skilled employees or if we lose the services of our senior management team.

Our ability to manage growth will depend upon our ability to continue to attract, hire and retain skilled employees. The unanticipated loss of members of our senior management team, could have a material adverse effect on our results of operations and ability to execute our strategic goals. Our success will also depend on the ability of our officers and key employees to continue to implement and improve our operational and other systems, to manage multiple, concurrent customer relationships and to hire, train and manage our employees.

United's vendors could fail to fulfill their contractual obligations, resulting in a material interruption in, or disruption to, its business and a negative impact on results of operations.

United is dependent upon third parties for certain information system, data management and processing services and to provide key components of its business infrastructure. United has entered into subcontracts for the supply of current and future services, such as data processing, mortgage loan processing and servicing, and certain property management functions. These services must be available on a continuous and timely basis and be in compliance with any regulatory requirements. Failure to do so could substantially harm United's business.

United often obtains services from vendors under contractual agreements that may be subject to renewal, termination, service limitations, minimum usage or spending commitments, or other restrictions. There can be no assurance that vendors continue to provide services on acceptable terms, perform in accordance with contractual or regulatory requirements, or remain financially viable. If a vendor relationship is terminated, expires, or a service is discontinued or degraded, United may experience service disruptions, delays in delivering products to customers, increased costs, or difficulties in transitioning to alternative providers.

In addition, United's reliance on third party service providers also exposes it to operational, cybersecurity and informational risks. Vendors may experience system failures, operational errors, coding errors, information system interruptions or breaches, and unauthorized disclosures of sensitive or confidential client or customer information and United may have limited ability to control, monitor or promptly remediate such events. In addition, deficiencies in vendor performance, service quality or compliance could result in regulatory scrutiny, customer dissatisfaction, reputational harm, litigation exposure or financial losses.

Any significant failure, interruption, termination or security incident involving a third party vendor could have a significant adverse effect on United's business, lead to higher costs and damage its reputation with its customers and, in turn, have a material adverse effect on its financial condition and results of operations.

MARKET, LIQUIDITY AND INTEREST RATE RISKS

Changes in economic and political conditions could adversely affect our earnings, as our borrowers' ability to repay loans and the value of the collateral securing our loans decline.

United's success depends, to a certain extent, upon local and national economic and political conditions, as well as governmental monetary policies. Conditions such as an economic recession, rising unemployment, changes in interest rates, money supply reductions in government spending or the size of the government workforce, concerns relating to the U.S. debt ceiling, the imposition of tariffs and retaliatory responses, changes in trade or immigration policy and other factors beyond its control may adversely affect United's and United Bank's asset quality, deposit levels and loan demand and, therefore, its earnings. Because United has a significant amount of real estate loans, decreases in real estate values could adversely affect the value of property used as collateral. Adverse changes in the economy may also have a negative effect on the ability of our borrowers to make timely repayments of their loans, which could have an adverse impact on our earnings. Consequently, declines in the economy in our market area could have a material adverse effect on our financial condition and results of operations.

In addition, economic and inflationary pressure on consumers and uncertainty regarding the economy could result in changes in consumer and business spending, borrowing and savings habits. Such conditions could also have a material adverse effect on the credit quality of our loans and our business, financial condition and results of operations.

Concern regarding the ability of Congress to reach agreement on federal budgetary matters (including the debt ceiling), or total or partial governmental shutdowns, also can adversely affect the economy and increase the risk of economic instability or market volatility, which could have adverse consequences on United's business, financial condition, liquidity and results of operations.

The value of certain investment securities is volatile and future declines in value could have a materially adverse effect on future earnings and regulatory capital.

Continued volatility in the fair value for certain investment securities, whether caused by changes in market conditions, interest rates, credit risk of the issuer, the expected yield of the security, or actual defaults in the portfolio could result in significant fluctuations in the value of the securities as well as any regulatory rulemaking could exclude or limit the holdings of certain investment securities. This could have a material adverse impact on United's accumulated other comprehensive income and shareholders' equity depending on the direction of the fluctuations. Furthermore, future downgrades, defaults or prepayments, including the liquidation of the underlying collateral in certain securities, could result in the recording of an allowance for credit losses related to these securities. This could have a material impact on United's future earnings, although the impact on shareholders' equity will be offset by any amount already included in other comprehensive income.

United operates in a highly competitive market.

United faces a high degree of competition in all of the markets it serves. United faces strong competition in gathering deposits, making loans and obtaining client assets for management by its investment or trust operations. There is significant competition among commercial banks in our market areas as well as with other providers of financial services, such as savings and loan associations, credit unions, consumer finance companies, securities firms, private equity and debt funds, commercial finance and leasing companies, full service brokerage firms, discount brokerage firms, and financial/wealth technology firms. Some of our competitors have greater resources and, as such, may have higher lending limits and may offer other services that are not provided by us. United generally competes on the basis of customer service, responsiveness to customer needs, available loan and deposit products, the rates of interest charged on loans, the rates of interest paid for funds, and the availability and pricing of trust and brokerage services.

There is a risk that aggressive competition could result in United controlling a smaller share of these markets. A decline in market share could lead to a decline in net income which would have a negative impact on shareholder value.

In addition, technology and other changes have made it possible for non-banks to offer products and services traditionally provided by banks. In particular, the activity of fintechs/wealthtechs has grown significantly over recent years and is expected to continue to grow. Some fintechs/wealthtechs are not subject to the same regulation as we are, which may allow them to be more competitive. Fintechs/wealthtechs have and may continue to offer bank or bank-like products and a number of such organizations have applied for bank or industrial loan charters while others have partnered with existing banks to allow them to offer deposit products to their customers. Increased competition from fintechs/wealthtechs and the growth of digital banking may also lead to pricing pressures as competitors offer more low-fee and no-fee products.

United is subject to liquidity risk.

We require liquidity to meet our deposit and debt obligations as they come due. Our access to funding sources in amounts adequate to finance our activities or on terms that are acceptable to us could be impaired by factors that affect us specifically or the financial services industry or economy generally. A substantial majority of our liabilities are demand, savings, interest checking and money market deposits, which are payable on demand or upon several days' notice, while by comparison, a substantial portion of our assets are loans, which cannot be called or sold in the same time frame. We may not be able to replace maturing deposits and advances as necessary in the future, especially if a large number of our depositors sought to withdraw their accounts, regardless of the reason. Our access to deposits may be negatively impacted by, among other factors, periods of low interest rates or higher interest rates, which could promote increased competition for deposits or provide customers with alternative investment options. Additionally, negative news about us or the banking industry in general could negatively impact market and/or customer perceptions of our company, which could lead to a loss of depositor confidence and an increase in deposit withdrawals, particularly among those with uninsured deposits. Furthermore, as we and other regional banking organizations experienced in 2023, the failure of other financial institutions may cause deposit outflows as customers spread deposits among several different banks so as to maximize their amount of FDIC insurance, move deposits to banks deemed "too big to fail" or remove deposits from the banking system entirely. A failure to maintain adequate liquidity could have a material adverse effect on our business,

financial condition and results of operations.

United may be adversely affected by the soundness of other financial institutions.

Financial services institutions are interrelated as a result of trading, clearing, counterparty, or other relationships. United has exposure to many different industries and counterparties, and routinely executes transactions with counterparties in the financial services industry, including brokers and dealers, commercial banks, investment banks, mutual and hedge funds, or other institutional clients. Defaults by financial services institutions, and even rumors or questions about a financial institution or the financial services industry in general, may lead to market wide liquidity problems and could lead to losses or defaults by United or other institutions. Any such losses could adversely affect United's financial condition or results of operations.

Changes in interest rates may adversely affect United's business.

United's earnings, like most financial institutions, are significantly dependent on its net interest income. Net interest income is the difference between the interest income United earns on loans and other assets which earn interest and the interest expense incurred to fund those assets, such as on savings deposits and borrowed money. Therefore, changes in general market interest rates, such as a change in the monetary policy of the Federal Reserve Board or otherwise beyond those which are contemplated by United's interest rate risk model and policy, could have an effect on net interest income. For more information concerning United's interest rate risk model and policy, see the discussion in Quantitative and Qualitative Disclosures About Market Risk included in Part II, under Item 7A of this Form 10-K.

RISKS RELATED TO ACQUISITION ACTIVITY

Potential acquisitions may disrupt our business and dilute shareholder value.

We generally seek merger or acquisition partners that are culturally similar and have experienced management and possess either significant market presence or have potential for improved profitability through financial management, economies of scale or expanded services. Acquiring other banks, businesses, or branches involves various risks commonly associated with acquisitions, including, among other things, (i) potential exposure to unknown or contingent liabilities of the target company; (ii) exposure to potential asset quality issues of the target company; (iii) potential disruption to our business; (iv) potential diversion of our management's time and attention; (v) the possible loss of key employees and customers of the target company; (vi) difficulty in estimating the value of the target company; and (vii) potential changes in banking or tax laws or regulations that may affect the target company.

Acquisitions typically involve the payment of a premium over book and market values, and, therefore, some dilution of our tangible book value and net income per common share may occur in connection with any future transaction. Acquisitions may also result in potential dilution to existing shareholders of our earnings per share if we issue common stock in connection with the acquisition. Furthermore, we may incur substantial costs in pursuing acquisition opportunities, and we cannot guarantee that such acquisition opportunities will be successful or result in the expected revenue increases, cost savings, increases in geographic or product presence, and/or other projected benefits from an acquisition. Failure to realize these benefits could have a material adverse effect on our business, financial condition and results of operations. Moreover, there can be no guarantee that post-acquisition integration efforts will be successful, or that after giving effect to an acquisition, we will achieve financial results comparable to, or better than, our historical performance. In addition, from time to time, bank regulators may restrict the Company from making acquisitions. See "Regulation and Supervision" in Item 1, "Business," of this Form 10-K for additional detail and further discussion of these matters.

Acquisitions may be delayed, impeded, or prohibited due to regulatory issues.

Acquisitions by financial institutions, including us, are subject to approval by a variety of federal and state regulatory agencies (collectively, "regulatory approvals"). The process for obtaining these required regulatory approvals involves a comprehensive application review process, and our ability to engage in certain merger or acquisition transactions depends on the bank regulators' views at the time as to our capital levels, quality of management, and overall

condition, in addition to their assessment of a variety of other factors, including our compliance with law. Regulatory approvals could be delayed, impeded, restrictively conditioned or denied due to existing or new regulatory issues we have, or may have, with regulatory agencies, including, without limitation, issues related to BSA compliance, CRA issues, fair lending laws, fair housing laws, consumer protection laws, unfair, deceptive, or abusive acts or practices regulations and other laws and regulations. We may fail to pursue, evaluate or complete strategic and competitively significant acquisition opportunities as a result of our inability, or perceived or anticipated inability, to obtain regulatory approvals in a timely manner, under reasonable conditions or at all. Difficulties associated with potential acquisitions that may result from these factors could have a material adverse effect on our business, financial condition and results of operations.

SECURITY OWNERSHIP RISKS

United's stock price can be volatile.

Stock price volatility may make it more difficult for United shareholders to resell their common stock when they want and at prices they find attractive. United's stock price can fluctuate significantly in response to a variety of factors, including, among other things:

• Actual or anticipated negative variations in quarterly results of operations;

• Negative recommendations by securities analysts;

• Poor operating and stock price performance of other companies that investors deem comparable to United;

• News reports relating to negative trends, concerns and other issues in the financial services industry or the economy in general;

• Negative perceptions in the marketplace regarding United and/or its competitors;

• New technology used, or services offered, by competitors;

• Adverse changes in interest rates or a lending environment with prolonged low interest rates;

• Adverse changes in the real estate market;

• Negative economic news;

• Failure to integrate acquisitions or realize anticipated benefits from acquisitions;

• Adverse changes in government regulations;

• Political uncertainty in the United States; and

• Geopolitical conditions such as acts or threats of terrorism or military conflicts.

General market fluctuations, industry factors and general economic and political conditions and events, such as economic slowdowns or recessions, interest rate changes or credit loss trends, could also cause United's stock price to decrease regardless of operating results.

Dividend payments by United's subsidiaries to United and by United to its shareholders can be restricted.

The declaration and payment of future cash dividends will depend on, among other things, United's earnings, the general economic and regulatory climate, United's liquidity and capital requirements, and other factors deemed relevant by United's board of directors. Federal Reserve Board policy limits the payment of cash dividends by bank holding companies, without regulatory approval, and requires that a holding company serve as a source of strength to its banking subsidiaries.

United's principal source of funds to pay dividends on its common stock is cash dividends from its subsidiaries. The payment of these dividends by its subsidiaries is also restricted by federal and state banking laws and regulations. As of December 31, 2025, approximately $510.1 million was available for dividend payments from United Bank to United without regulatory approval.

An investment in United common stock is not an insured deposit.

United common stock is not a bank deposit and, therefore, is not insured against loss by the FDIC, any other deposit insurance fund or by any other public or private entity. Investment in United common stock is inherently risky

for the reasons described in this section and elsewhere in this report and is subject to the same market forces that affect the price of common stock in any company. As a result, someone who acquires United common stock, could lose some or all of their investment.

Failure to maintain effective internal controls over financial reporting in the future could impair United's ability to accurately and timely report its financial results or prevent fraud, resulting in loss of investor confidence and adversely affecting United's business and stock price.

Effective internal controls over financial reporting are necessary to provide reliable financial reports and prevent fraud. Management believes that United's internal controls over financial reporting are currently effective. Management will continually review and analyze the Company's internal controls over financial reporting for Sarbanes-Oxley Section 404 compliance. Any failure to maintain, in the future, an effective internal control environment could impact United's ability to report its financial results on an accurate and timely basis, which could result in regulatory actions, loss of investor confidence, and adversely impact United's business and stock price.

Certain banking laws may have an anti-takeover effect.

Provisions of federal banking laws, including regulatory approval requirements, could make it more difficult to be acquired by a third party, even if perceived to be beneficial to United's shareholders. These provisions effectively inhibit a non-negotiated merger or other business combination, which could adversely affect the market price of United's common stock.

GENERAL RISKS

United may elect or be compelled to seek additional capital in the future, but capital may not be available when it is needed.

United is required by federal and state regulatory authorities to maintain adequate levels of capital to support the Company's operations. In addition, United may elect to raise additional capital to support the Company's business or to finance acquisitions, if any, or United may otherwise elect to raise additional capital.

United's ability to raise additional capital, if needed, will depend on conditions in the capital markets, economic conditions and a number of other factors, many of which are outside the Company's control, and on United's financial performance. Accordingly, United cannot be assured of its ability to raise additional capital if needed or on terms acceptable to the Company. If United cannot raise additional capital when needed, it may have a material adverse effect on the Company's financial condition, results of operations and prospects.

New accounting or tax pronouncements or interpretations may be issued by the accounting profession, regulators or other government bodies which could change existing accounting methods. Changes in accounting methods could negatively impact United's results of operations and financial condition.

Current accounting and tax rules, standards, policies and interpretations influence the methods by which financial institutions conduct business, implement strategic initiatives and tax compliance, and govern financial reporting and disclosures. These laws, regulations, rules, standards, policies, and interpretations are constantly evolving and may change significantly over time and are difficult to predict. Events that may not have a direct impact on United, such as the bankruptcy of major U.S. companies, have resulted in legislators, regulators and authoritative bodies, such as the Financial Accounting Standards Board, the SEC, the Public Company Accounting Oversight Board, and various taxing authorities, responding by adopting and/or proposing substantive revision to laws, regulations, rules, standards, policies, and interpretations. New accounting pronouncements and varying interpretations of accounting pronouncements have occurred and may occur in the future. A change in accounting standards may adversely affect reported financial condition and results of operations.

United could face unanticipated environmental liabilities or costs related to real property owned or acquired through foreclosure. Compliance with federal, state and local environmental laws and regulations, including those related to

investigation and clean-up of contaminated sites, could have a negative effect on expenses and results of operations.

A significant portion of United's loan portfolio is secured by real property. During the ordinary course of business, United may foreclose on and take title to properties securing certain loans. In doing so, there is a risk that hazardous or toxic substances could be found on these properties. If hazardous or toxic substances are found, United may be liable for remediation costs, as well as for personal injury and property damage. Environmental laws may require United to incur substantial expenses and may materially reduce the affected property's value or limit United's ability to use or sell the affected property. In addition, future laws or more stringent interpretations or enforcement policies with respect to existing laws may increase exposure to environmental liability. Although United has policies and procedures to perform an environmental review before initiating any foreclosure action on real property, these reviews may not be sufficient to detect all potential environmental hazards. The remediation costs and any other financial liabilities associated with an environmental hazard could have a material adverse effect on results of operations.

Severe weather, natural disasters, public health issues, acts of war or terrorism, and other external events could significantly impact United's ability to conduct business.

Severe weather, natural disasters, public health issues, acts of war or terrorism, and other external events could affect the stability of United's deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, adversely impact United's employee base, cause significant property damage, result in loss of revenue, and/or cause the Company to incur additional expenses. Although management has established disaster recovery policies and procedures, the occurrence of any such event could have a material adverse effect on United's business, which, in turn, could have a material adverse effect on the Company's financial condition and results of operations.

The negative economic effects caused by terrorist attacks, including cyber-attacks, potential attacks and other destabilizing events would likely contribute to the deterioration of the quality of United's loan portfolio and could reduce its customer base, level of deposits, and demand for its financial products such as loans.

High inflation, natural disasters, acts of terrorism, including cyber-attacks, an escalation of hostilities or other international or domestic occurrences, and other factors could have a negative impact on the economy of the Mid-Atlantic and Southeast regions in which United operates. An additional economic downturn in its markets would likely contribute to the deterioration of the quality of United's loan portfolio by impacting the ability of its customers to repay loans, the value of the collateral securing loans, and may reduce the level of deposits in its bank and the stability of its deposit funding sources. An additional economic downturn could also have a significant impact on the demand for United's products and services. The cumulative effect of these matters on United's results of operations and financial condition would likely be adverse and material.

Climate-related physical and transition risks may materially affect United's business and results of operations, and divergent and evolving laws and regulations and stakeholder expectations regarding climate-related matters may subject United to additional, different and potentially conflicting requirements and expectations and result in higher regulatory and compliance and other risks and costs.

We may be subject to climate-related physical and transition risks from climate change. Both physical and transition risks from climate change may have negative impacts on the financial condition or creditworthiness of our customers and may negatively affect our business and result of operations.

Physical risks refer to the harm arising from acute, climate-related events, such as hurricanes, wildfires, floods, and heatwaves, and chronic shifts in climate, including higher average temperatures, changes in precipitation patterns, sea level rise, and ocean acidification. Specifically, unpredictable and more frequent weather disasters may adversely impact the value of our properties and the value of real property securing the loans in our portfolios. Additionally, if insurance obtained by our borrowers is insufficient to cover any losses sustained to the collateral, or if insurance coverage is otherwise unavailable to our borrowers, the collateral securing our loans may be negatively impacted by climate change, which could impact our financial condition and results of operations. Further, the effects of physical risks may negatively impact regional and local economic activity, which could lead to an adverse effect on our customers and

impact the communities in which we operate.

We and our customers are also exposed to transition risks associated with the transition to a less carbon-dependent economy. Transition risks may result from changes in policies; laws and regulations; technologies; and/or market preferences to address climate change. Such changes could materially, negatively impact our business, results of operations, financial condition and/or our brand, in addition to having a similar impact on our customers. We have customers who operate in carbon-intensive industries like oil and gas that are exposed to climate risks, such as those risks related to the transition to a less carbon-dependent economy, as well as customers who operate in low-carbon industries that may be subject to risks associated with new technologies. In addition, ongoing legislative or regulatory uncertainties and changes regarding climate risk management and practices, including the shifting sentiment against climate and sustainability initiatives, may subject us to different and potentially conflicting requirements and result in higher regulatory, compliance, credit and reputational risks and costs.

In addition, ongoing legislative or regulatory uncertainties and changes, as well as divergent stakeholder expectations, regarding climate-related matters, may subject us to additional, different and potentially conflicting requirements and expectations and result in higher regulatory, compliance and other risks and costs. For example, certain states have enacted or proposed laws addressing climate change and other sustainability issues, including greenhouse gas emissions data and climate-related financial risk disclosure requirements. On the other hand, certain states have enacted or proposed laws or regulations or taken other actions to prohibit the consideration of environmental and social factors in state investments and contracting. In addition, in August 2025, President Trump signed Executive Order 14331, "Guaranteeing Fair Banking Access for All Americans," which states that it is the policy of the United States that no American should be denied access to financial services because of their constitutionally or statutorily protected beliefs, affiliations, or political views.

We may also be subject to negative public opinion, and our business, brand and ability to attract and retain employees may be harmed, due to shareholder perceptions of our, actual or perceived, action or inaction in response to climate-related matters, including our carbon footprint and our business relationships with customers who operate in carbon-intensive industries.

Item 1B. UNRESOLVED STAFF COMMENTS

None

Item 1C. CYBERSECURITY

Risk Management and Strategy

In the ordinary course of business, United relies on electronic communications and information systems to conduct its operations and to store sensitive data. United employs an in-depth, layered, defensive approach that leverages people, processes and technology to manage and maintain cybersecurity controls. United employs a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Notwithstanding the strength of its defensive measures, the threat from cyber-attacks is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures. While to date, United and United Bank have not experienced a material compromise, material data loss or any material financial losses related to cybersecurity attacks, United's systems and those of its customers and third-party service providers are under constant threat and it is possible that United could experience a significant event in the future.

United recognizes the critical importance of cybersecurity in our business operations. Our cybersecurity processes are fully integrated into our overall risk management system. We believe that effective management of cybersecurity risks is integral to the protection of our assets, reputation, and the trust of our stakeholders. Our proactive approach to cybersecurity involves numerous processes including, regular risk assessments, employee training and continuing education, incident response planning and testing, and continuous improvement in our cybersecurity practices. To ensure the robustness of our cybersecurity processes, we engage qualified assessors, consultants, and auditors on a

periodic basis. These experts evaluate the effectiveness of our cybersecurity controls, identify vulnerabilities, and recommend improvements. We maintain ongoing relationships with reputable third-party firms specializing in cybersecurity to assess our systems, conduct penetration testing, and audit our processes for compliance with industry standards and regulations.

United recognizes the inherent cybersecurity risks associated with third-party service providers. To manage these risks, we have implemented processes to oversee and identify material risks from cybersecurity threats linked to our use of third-party service providers. These processes include due diligence assessments, contractual provisions, and ongoing monitoring of our service providers' cybersecurity practices. We continually assess the cybersecurity measures of our service providers to ensure they align with our own security standards and requirements.

We do not currently believe that any current cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected, or are reasonably likely to materially affect, United, including its business strategy, results of operations or financial condition. However, risks and exposures related to cybersecurity attacks, including litigation and enforcement risks, are expected to be elevated for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of internet banking, mobile banking and other technology-based products and services by United and its customers. See Item 1A. Risk Factors for a further discussion of risk related to cybersecurity.

Governance

The Board of Directors' risk management oversight is provided primarily by the Board Risk Committee. The Risk Committee oversees the Company's Enterprise Risk Management Program and the processes established identify, measure, manage and monitor United's significant financial and other risk exposures. In particular, the Risk Committee is responsible for oversight of information security, including cybersecurity, vendor management, and business continuity planning. The Risk Committee periodically reviews management's strategies and policies for assessing and managing risk, including, but not limited to, the approval of the overall risk appetite and review of the risk management structure.

At the management level, the responsibility for oversight of the risk management function lies with the Chief Risk & Information Officer. The Chief Risk & Information Officer ("CIRO") is an executive officer of the Company who reports directly to the Chief Executive Officer. The CIRO provides regular risk management reports to the Risk Committee and the full Board of Directors, as well as at meetings of the independent directors.

The management of the Company's cybersecurity team has over 100 years of industry experience combined, holds numerous certifications, and is regularly trained through continuing professional education. Information security, and specifically cyber security, is formally discussed quarterly at the Governance Steering Committee ("GSC"). The GSC is comprised of executive management, IT internal audit, digital banking leadership, and United's Chief Information Security Officer ("CISO"). The activities of the GSC are reported quarterly to the Board Risk Committee.

The CISO is responsible for leading and coordinating our daily cybersecurity efforts, including leading our Information Security department which consists of a team of qualified individuals with significant relevant experience and certifications. In addition, United's CISO has served in various roles in Operations, Physical Security, Fraud Investigations, and Information Security for over 24 years with United. The CISO holds a Bachelor of Science in Criminal Justice and has led the Information Security department since 2014. The Information Security and IT Security teams stay up to date on industry best practices, participate in industry threat intelligence feeds, and maintain multiple professional certifications in the areas of privacy and security.

The Information Security department is integrated with vendor management, business continuity planning, disaster recovery, and incident response. Additionally, we have a formal cybersecurity program based on the NIST CSF ("National Institute of Standards and Technology Cybersecurity Framework") and the CIS ("Center for Internet Security") Benchmarks that identifies and assesses cybersecurity risks. We deploy a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity. All employees have a responsibility to report suspected or verified incidents to the Information Security department and/or the CISO, and all employees are trained annually regarding the identification and reporting of incidents. The CISO maintains a centralized record of all incidents and reports on these quarterly to the GSC and the Board Risk Committee. The CIRO is also immediately notified of any