Carter Bankshares, Inc. 10-K

ITEM 1. BUSINESS - (continued) Banking Acquisitions; Changes in Control The BHCA and related regulations require, among other things, the prior approval of the FRB in any case where a bank holding company proposes to (i) acquire direct or indirect ownership or control of more than 5% of the outstanding voting stock of any bank or bank holding company (unless it already owns a majority of such voting shares), (ii) acquire all or substantially all of the assets of another bank or bank holding company, or (iii) merge or consolidate with any other bank holding company. In determining whether to approve a proposed bank acquisition, the FRB will consider, among other factors, the effect of the acquisition on competition, the public benefits expected to be received from the acquisition, any outstanding regulatory compliance issues of any institution that is a party to the transaction, the projected capital ratios and levels on a post-acquisition basis, the financial condition of each institution that is a party to the transaction and of the combined institution after the transaction, the parties’ managerial resources and risk management and governance processes and systems, the parties’ compliance with the Bank Secrecy Act and anti-money laundering requirements, and the acquiring institution’s performance under the Community Reinvestment Act and its compliance with fair housing and other consumer protection laws. On July 9, 2021, President Biden issued an Executive Order on Promoting Competition in the American Economy, which, among other initiatives, encouraged the review of current practices and adoption of a plan for the revitalization of merger oversight under the BHCA and the Bank Merger Act. On March 25, 2022, the FDIC published a Request for Information seeking information and comments regarding the regulatory framework that applies to merger transactions involving one or more insured depository institution. Making any formal changes to the framework for evaluating bank mergers would require an extended process, and any such changes are uncertain and cannot be predicted at this time. However, the adoption of more expansive or stringent standards may have an impact on the Company’s acquisition activity. Additionally, this Executive Order could influence the federal bank regulatory agencies’ expectations and supervisory oversight for banking acquisitions. Subject to certain exceptions, the BHCA and the Change in Bank Control Act, together with the applicable regulations, require FRB approval (or, depending on the circumstances, no notice of disapproval) prior to any person or company’s acquiring “control” of a bank or bank holding company. A conclusive presumption of control exists if an individual or company acquires the power, directly or indirectly, to direct the management or policies of an insured depository institution or to vote 25% or more of any class of voting securities of any insured depository institution. A rebuttable presumption of control exists if a person or company acquires 10% or more but less than 25% of any class of voting securities of an insured depository institution and either the institution has registered its securities with the SEC under Section 12 of the Exchange Act or no other person will own a greater percentage of that class of voting securities immediately after the acquisition. The Company’s common stock is registered under Section 12 of the Exchange Act. On April 1, 2020, the FRB issued a rule for determining whether a company has control over a bank or other company for purposes of the BHCA, and the control presumptions promulgated under Regulation Y, became effective. The rule provides specific guidance for the FRB’s approach to certain control evaluations, including a tiered framework incorporating a series of presumptions based on ownership of a class of voting securities. A company may be presumed to be in control of a target second company based on five levels of ownership of voting securities: (i) less than five percent; (ii) five percent; (iii) ten percent; (iv) 15 percent; (v) 25 percent; and (vi) with a presumption triggered at levels below 25 percent, depending on whether any of nine types of relationships exist (i.e., directors and director service positions, business relationships and business terms, officer/employee interlocks, contractual powers, proxy contests involving directors, and total equity ownership) and, at the same time, ownership of a class of voting securities exceeds certain thresholds. A presumption of control (once triggered) does not automatically result in a control determination under the BHCA as such presumptions may be rebutted. The rule applies only to questions of control under the BHCA, but does not extend to the Change in Bank Control Act. In addition, Virginia law requires the prior approval of the SCC for (i) the acquisition by a Virginia bank holding company of more than 5% of the voting shares of a Virginia bank or a Virginia bank holding company, or (ii) the acquisition by any other person of control of a Virginia bank holding company or a Virginia bank. Certain Transactions by Insured Banks with their Affiliates There are statutory restrictions related to the extent bank holding companies and their non-bank subsidiaries may borrow, obtain credit from or otherwise engage in “covered transactions” with their insured depository institution (i.e., banking) subsidiaries. In general, an “affiliate” of a bank includes the bank’s parent holding company and any subsidiary thereof. However, an “affiliate” does not generally include the bank’s operating subsidiaries. A bank (and its subsidiaries) may not lend money to, or 11 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) engage in other covered transactions with, its non-bank affiliates if the aggregate amount of covered transactions outstanding involving the bank, plus the proposed transaction, exceeds the following limits: (a) in the case of any one such affiliate, the aggregate amount of covered transactions of the bank and its subsidiaries cannot exceed 10 percent of the bank’s capital stock and surplus; and (b) in the case of all affiliates, the aggregate amount of covered transactions of the bank and its subsidiaries cannot exceed 20 percent of the bank’s capital stock and surplus. “Covered transactions” are defined to include a loan or extension of credit to an affiliate, a purchase of or investment in securities issued by an affiliate, a purchase of assets from an affiliate, the acceptance of securities issued by an affiliate as collateral for a loan or extension of credit to any person or company, the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate, securities borrowing or lending transactions with an affiliate that creates a credit exposure to such affiliate, or a derivatives transaction with an affiliate that creates a credit exposure to such affiliate. Certain covered transactions are also subject to collateral security requirements. Covered transactions as well as other types of transactions between a bank and a bank holding company must be on market terms, which means that the transaction must be conducted on terms and under circumstances that are substantially the same, or at least as favorable to the bank, as those prevailing at the time for comparable transactions with or involving nonaffiliates or, in the absence of comparable transactions, that in good faith would be offered to or would apply to nonaffiliates. Moreover, certain amendments to the BHCA provide that, to further competition, a bank holding company and its subsidiaries are prohibited from engaging in certain tying arrangements in connection with any extension of credit, lease or sale of property of any kind, or furnishing of any service. Regulatory Capital Requirements All financial institutions are required to maintain minimum levels of regulatory capital. The FDIC establishes risk-based and leveraged capital standards for the financial institutions they regulate. The FDIC also may impose capital requirements in excess of these standards on a case-by-case basis for various reasons, including financial condition or actual or anticipated growth. As of December 31, 2023 and 2022, the Bank qualified as a “well capitalized” institution. Refer to Note 21, Capital Adequacy, of the Notes to Consolidated Financial Statements in Part II, Item 8, of this Annual Report on Form 10-K. Basel III Capital Framework The FRB and the FDIC have adopted rules to implement the Basel III capital framework as outlined by the Basel Committee on Banking Supervision and standards for calculating risk-weighted assets and risk-based capital measurements (collectively, the “Basel III Final Rules”) that apply to banking institutions they supervise and to bank holding companies. For the purposes of the Basel III Final Rules, (i) common equity tier 1 capital (CET1) consists principally of common stock (including surplus) and retained earnings; (ii) Tier 1 capital consists principally of CET1 plus non-cumulative preferred stock and related surplus, and certain grandfathered cumulative preferred stocks and trust preferred securities; and (iii) Tier 2 capital consists of other capital instruments, principally qualifying subordinated debt and preferred stock, and limited amounts of an institution’s allowance for credit losses. Each regulatory capital classification is subject to certain adjustments and limitations, as implemented by the Basel III Final Rules. The Basel III Final Rules also establish risk weightings that are applied to many classes of assets held by community banks, importantly including applying higher risk weightings to certain commercial real estate loans. The Basel III Final Rules also include a requirement that banks and bank holding companies maintain additional capital (the “capital conservation buffer”). The Basel III Final Rules and capital conservation buffer require: • a minimum ratio of CET1 to risk-weighted assets of at least 4.5%, plus a 2.5% capital conservation buffer (which is added to the minimum CET1 ratio, effectively resulting in a required ratio of CET1 to risk-weighted assets of at least 7%); • a minimum ratio of Tier 1 capital to risk-weighted assets of at least 6.0%, plus the capital conservation buffer (effectively resulting in a required Tier 1 capital ratio of 8.5%); • a minimum ratio of total capital (that is, Tier 1 plus Tier 2) capital to risk-weighted assets of at least 8.0%, plus the capital conservation buffer (effectively resulting in a required total capital ratio of 10.5%); and 12 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) • a minimum leverage ratio of 4.0%, calculated as the ratio of Tier 1 capital to average total assets, subject to certain adjustments and limitations. The Basel III Final Rules provide deductions from and adjustments to regulatory capital measures, primarily to CET1, including deductions and adjustments that were not applied to reduce CET1 under historical regulatory capital rules. For example, mortgage servicing rights, deferred tax assets dependent upon future taxable income, and significant investments in non-consolidated financial entities must be deducted from CET1 to the extent that any one such category exceeds 10% of CET1 or all such categories in the aggregate exceed 15% of CET1. As of December 31, 2023, the Company and the Bank met all capital adequacy requirements under the Basel III Final Rules. In July 2023, the Federal Reserve Board and the FDIC issued proposed rules to implement the final components of the Basel III agreement, often known as the “Basel III endgame.” These proposed rules contain provisions that apply to banks with $100 billion or more in total assets and that will significantly alter how those banks calculate risk-based assets. These proposed rules do not apply to holding companies or banks with less than $100 billion in assets, such as the Company and the Bank, but the final impacts of these rules cannot yet be predicted. The comment window for these proposed rules closed on November 30, 2023. Community Bank Leverage Ratio As a result of the EGRRCPA, Qualifying banks with less than $10 billion in consolidated assets to elect to be subject to a 9% leverage ratio applied using less complex leverage calculations (the “Community Bank Leverage Ratio Framework” or “CBLRF”). Banks that opt into the CBLRF and maintain a leverage ratio of greater than 9% are not subject to other risk-based and leverage capital requirements and are deemed to meet Basel III Final Rules’ well capitalized ratio requirements. To qualify for the CBLRF, a bank must have less than $10 billion in total consolidated assets, limited amounts of off-balance sheet exposures and trading assets and liabilities, and a leverage ratio greater than 9%. A bank that elects the CBLRF and has a leverage ratio greater than 9% will be considered to be in compliance with Basel III capital requirements and exempt from the complex Basel III calculations. A bank that falls out of compliance with the CBLRF will have a two-quarter grace period to come back into full compliance, provided that its leverage ratio remains above 8% (a bank will be deemed well-capitalized during the grace period). The CBLRF became available for banking organizations to use as of March 31, 2020 (with the flexibility for banking organizations to subsequently opt into or out of the CBLRF, as applicable). As of December 31, 2023, the Bank has not elected to apply the CBLRF, but the Bank continues to assess the potential impact of opting in to CBLRF as part of its ongoing capital management and planning processes. Dividend Limitations The Company is a legal entity that is separate and distinct from the Bank. A significant portion of the revenues of the Company result from dividends paid to it by the Bank. Both the Company and the Bank are subject to laws and regulations that limit the payment of dividends, including limits on the sources of dividends and requirements to maintain capital at or above regulatory minimums. Banking regulators have indicated that Virginia banking organizations should generally pay dividends only (1) from net undivided profits of the bank, after providing for all expenses, losses, interest and taxes accrued or due by the bank and (2) if the prospective rate of earnings retention appears consistent with the organization’s capital needs, asset quality and overall financial condition. In addition, FRB supervisory guidance indicates that the FRB may have safety and soundness concerns if a bank holding company pays dividends that exceed earnings for the period in which the dividend is being paid. Further, the Federal Deposit Insurance Act (“FDIA”) prohibits insured depository institutions such as the Bank from making capital distributions, including paying dividends, if, after making such distribution, the institution would become undercapitalized as defined in the statute. We do not expect that any of these laws, regulations or policies will materially affect the ability of the Company or the Bank to pay dividends. Insurance of Accounts, Assessments and Regulation by the FDIC Deposits with the Bank are insured through the Deposit Insurance Fund (“DIF”) of the FDIC. As a DIF-insured institution, the Bank is subject to FDIC rules and regulations as administrator of the DIF. The Dodd-Frank Act made permanent the current standard maximum deposit insurance amount of $250,000. The FDIC coverage applies per depositor, per insured depository 13 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) institution, for each account ownership category. The FDIC is authorized to conduct examinations of and to require reporting by DIF-insured institutions. The FDIC is authorized to prohibit any DIF-insured institution from engaging in any activity that the FDIC determines by regulation or order to pose a serious threat to the insurance fund. Also, the FDIC may initiate enforcement actions against banks after first giving the institution’s primary regulatory authority an opportunity to take such action. The FDIC may terminate the deposit insurance of any depository institution, including the Bank, if it determines, after a hearing, that the institution has engaged or is engaging in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, order or any condition imposed in writing by the FDIC. It also may suspend deposit insurance temporarily during the hearing process for the permanent termination of insurance, if the institution has no tangible capital. If deposit insurance is terminated, the deposits at the institution at the time of termination, less subsequent withdrawals, shall continue to be insured for a period from six months to two years, as determined by the FDIC. Management is aware of no existing circumstances that could result in termination of the Bank’s deposit insurance. The DIF is funded by assessments on banks and other depository institutions calculated based on average consolidated total assets minus average tangible equity (defined as Tier 1 capital). The actual assessment to be paid by each DIF member is based on the institution’s assessment risk classification and whether the institution is considered by its supervisory agency to be financially sound or to have supervisory concerns. As required by the Dodd-Frank Act, the FDIC has adopted a large-bank pricing assessment scheme, set a target “designated reserve ratio” (described in more detail below) of 2% for the DIF and, in lieu of dividends, provides for a lower assessment rate schedule when the reserve ratio reaches 2% and 2.5%. An institution's assessment rate is based on a statistical analysis of financial ratios that estimates the likelihood of failure over a three-year period, which considers the institution’s weighted average CAMELS composite rating, and is subject to further adjustments including those related to levels of unsecured debt and brokered deposits. At December 31, 2022, total base assessment rates for institutions that have been insured for at least five years range from 1.5 to 40 basis points applying to banks with less than $10 billion in assets. Banks with less than $10 billion in total consolidated assets (such as the Bank) receive credits to offset the portion of their assessments that help to raise the reserve ratio to 1.35%. The FDIC will automatically apply such a bank’s credits to reduce its regular DIF assessment up to the entire amount of the assessment. The FDIC will remit any such remaining credits in a lump sum to the appropriate bank following application to the bank’s regular DIF assessment for four quarterly assessment periods. The Dodd-Frank Act transferred to the FDIC increased discretion with regard to managing the required amount of reserves for the DIF, or the “designated reserve ratio.” The FDIA requires the FDIC to consider the appropriate level for the DIF on at least an annual basis. On October 18, 2022, the FDIC adopted a final rule to increase initial base deposit insurance assessment rate schedules uniformly by 2 bps, beginning in the first quarterly assessment period of 2023. This increase in assessment rate schedules is intended to increase the likelihood that the reserve ratio reaches 1.35% by the statutory deadline of September 30, 2028. The new assessment rate schedules will remain in effect unless and until the reserve ratio meets or exceeds 2%. Progressively lower assessment rate schedules will take effect when the reserve ratio reaches 2%, and again when it reaches 2.5%. In November 2023, the FDIC issued a final rule to implement a special DIF assessment following the FDIC’s use of the “systemic risk” exception to the least-cost resolution test in connection with the failures and resolutions of Silicon Valley Bank and Signature Bank. Banks with less than $5 billion of uninsured deposits, such as the Bank, are exempt from this special assessment. Community Reinvestment The Community Reinvestment Act (the “CRA”) imposes on financial institutions, including the Bank, an affirmative obligation to help meet the credit needs of their local communities, including low and moderate-income neighborhoods, consistent with the safe and sound operation of those institutions. Each financial institution’s efforts in helping meet community credit needs currently are evaluated as part of the examination process pursuant to regulations adopted by the federal banking agencies. Under the regulation, a financial institution’s efforts in helping meet its community’s credit needs are evaluated, based on the particular institution’s total assets, according to three-pronged test of lending, investment and service in the community. The grade received by a bank is considered in evaluating mergers, acquisitions and applications to open a branch or facility. To the 14 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) best knowledge of the Bank, it is meeting its obligations under the CRA. The Bank received a rating of “satisfactory” on its most recent CRA examination dated October 23, 2023. On October 24, 2023, the federal bank regulatory agencies jointly issued a final rule to modernize CRA regulations consistent with the following key goals: (1) to encourage banks to expand access to credit, investment, and banking services in low to moderate incoming communities; (2) to adapt to changes in the banking industry, including internet and mobile banking and the growth of non-branch delivery systems; (3) to provide greater clarity and consistency in the application of the CRA regulations, including adoption of a new metrics-based approach to evaluating bank retail lending and community development financing; and (4) to tailor CRA evaluations and data collection to bank size and type, recognizing that differences in bank size and business models may impact CRA evaluations and qualifying activities. Most of the final CRA rule’s requirements will be applicable beginning January 1, 2026, with certain requirements, including the data reporting requirements, applicable as of January 1, 2027. The Bank is evaluating the expected impact of the modified CRA regulations, but currently does not anticipate any material impact to its business, operations or financial condition due to the modified CRA regulations. Federal Home Loan Bank of Atlanta The Bank is a member of the Federal Home Loan Bank (“FHLB”) of Atlanta, which is one of 12 regional FHLBs that provide funding to their members for making housing loans as well as for affordable housing and community development loans. Each regional FHLB serves as a reserve, or central bank, for the members within its assigned region. Each FHLB makes loans to members in accordance with policies and procedures established by the Board of Directors of the FHLB. As a member, the Bank must purchase and maintain stock in the FHLB. At December 31, 2023, the Bank owned $21.6 million of FHLB stock. Consumer Protection The Consumer Financial Protection Bureau (the “CFPB”) is the federal regulatory agency responsible for implementing, examining and enforcing compliance with federal consumer financial laws for institutions with more than $10 billion of assets and, to a lesser extent, smaller institutions. The CFPB supervises and regulates providers of consumer financial products and services, and has rule making authority in connection with numerous federal consumer financial protection laws (for example, but not limited to, the Truth-in-Lending Act (“TILA”) and the Real Estate Settlement Procedures Act (“RESPA”)). Because the Company and the Bank are smaller institutions (i.e., with assets of $10 billion or less), most consumer protection aspects of the Dodd-Frank Act will continue to be applied to the Company by the FRB and the Bank by the FDIC. However, the CFPB may include its own examiners in regulatory examinations by a smaller institution’s principal regulators and may require smaller institutions to comply with certain CFPB reporting requirements. In addition, regulatory positions taken by the CFPB and administrative and legal precedents established by CFPB enforcement activities, including in connection with supervision of larger banks, could influence how the FRB and the FDIC apply consumer protection laws and regulations to financial institutions that are not directly supervised by the CFPB. The precise effect of the CFPB’s consumer protection activities on the Company and the Bank cannot be determined with certainty. Mortgage Banking Regulation In connection with making mortgage loans, the Bank is subject to rules and regulations that, among other things, establish standards for loan origination, prohibit discrimination, provide for inspections and appraisals of property, require credit reports on prospective borrowers, restrict in some cases certain loan features and fix maximum interest rates and fees, require the disclosure of certain basic information to mortgagors concerning credit and settlement costs, limit payment for settlement services to the reasonable value of the services rendered and require the maintenance and disclosure of information regarding the disposition of mortgage applications based on race, gender, geographical distribution and income level. The Bank’s mortgage origination activities are subject to the Equal Credit Opportunity Act, TILA, the Home Mortgage Disclosure Act, RESPA, the Home Ownership Equity Protection Act, and the regulations promulgated under these acts, among other additional state and federal laws, regulations and rules. The Bank’s mortgage origination activities are also subject to Regulation Z, which implements TILA. Certain provisions of Regulation Z require mortgage lenders to make a reasonable and good faith determination, based on verified and documented information, that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms. Alternatively, a mortgage lender can originate “qualified mortgages,” which are generally defined as mortgage loans without 15 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) negative amortization, interest-only payments, balloon payments, terms exceeding 30 years, and points and fees paid by a consumer equal to or less than 3% of the total loan amount. Under the EGRRCPA, most residential mortgage loans originated and held in portfolio by a bank with less than $10 billion in assets will be designated as “qualified mortgages.” Higher-priced qualified mortgages (e.g., sub-prime loans) receive a rebuttable presumption of compliance with ability-to-repay rules, and other qualified mortgages (e.g., prime loans) are deemed to comply with the ability-to-repay rules. The Bank predominantly originates mortgage loans that comply with Regulation Z’s “qualified mortgage” rules. Brokered Deposits Section 29 of the FDIA and FDIC regulations generally limit the ability of any bank to accept, renew or roll over any brokered deposit unless it is “well capitalized” or, with the FDIC’s approval, “adequately capitalized.” On December 15, 2020, the FDIC issued rules to revise brokered deposit regulations in light of modern deposit-taking methods. The rules established a new framework for certain provisions of the “deposit broker” definition and amended the FDIC’s interest rate methodology calculating rates and rate caps. The rules became effective on April 1, 2021 and, to date, there has been no material impact to either the Company or the Bank from the rules. Prompt Corrective Action Federal banking agencies have broad powers under current federal law to take prompt corrective action to resolve problems of insured depository institutions. The extent of these powers depends upon whether the institution in question is “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” or “critically undercapitalized.” These terms are defined under uniform regulations issued by each of the federal banking agencies regulating these institutions. An insured depository institution which is less than adequately capitalized must adopt an acceptable capital restoration plan, is subject to increased regulatory oversight and is increasingly restricted in the scope of its permissible activities. As of December 31, 2023, the Bank was considered “well capitalized.” Incentive Compensation The Dodd-Frank Act requires the federal banking agencies and the SEC to establish joint regulations or guidelines prohibiting incentive-based payment arrangements at specified regulated entities with at least $1 billion in total consolidated assets, that encourage inappropriate risks by providing an executive officer, employee, director, or principal shareholder with excessive compensation, fees, or benefits that could lead to material financial loss to the entity. In 2016, the SEC and the federal banking agencies proposed rules that prohibit covered financial institutions (including bank holding companies and banks) from establishing or maintaining incentive-based compensation arrangements that encourage inappropriate risk taking by providing covered persons (consisting of senior executive officers and significant risk takers, as defined in the rules) with excessive compensation, fees or benefits that could lead to material financial loss to the financial institution. The proposed rules outline factors to be considered when analyzing whether compensation is excessive and whether an incentive-based compensation arrangement encourages inappropriate risks that could lead to material loss to the covered financial institution, and establish minimum requirements that incentive-based compensation arrangements must meet to be considered to not encourage inappropriate risks and to appropriately balance risk and reward. The proposed rules also impose additional corporate governance requirements on the boards of directors of covered financial institutions and impose additional record-keeping requirements. The comment period for these proposed rules has closed and a final rule has not yet been published. If the rules are adopted as proposed, they will restrict the manner in which executive compensation is structured. Confidentiality and Required Disclosures of Customer Information The Company is subject to various laws and regulations that address the privacy of nonpublic personal financial information of consumers. The Gramm-Leach-Bliley Act and certain regulations issued thereunder protect against the transfer and use by financial institutions of consumer nonpublic personal information. A financial institution must provide to its customers, at the beginning of the customer relationship and annually thereafter, the institution’s policies and procedures regarding the handling of customers’ nonpublic personal financial information. These privacy provisions generally prohibit a financial institution from providing a customer’s personal financial information to unaffiliated third parties unless the institution discloses to the customer that the information may be so provided and the customer is given the opportunity to opt-out of such disclosure. Certain exceptions may apply to the requirement to deliver an annual privacy notice based on how a financial institution limits sharing 16 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) of nonpublic personal information, and whether the institution’s disclosure practices or policies have changed in certain ways since the last privacy notice that was delivered. Data privacy and data protection are areas of increasing state legislative focus. In March 2021, the Governor of Virginia signed into law the Virginia Consumer Data Protection Act (the “VCDPA”), which went into effect on January 1, 2023. The VCDPA grants Virginia residents the right to access, correct, delete, know, and opt-out of the sale and processing for targeted advertising purposes of their personal information, similar to the protections provided by similar consumer data privacy laws in California and in Europe. The VCDPA also imposes data protection assessment requirements and authorizes the Attorney General of Virginia to enforce the VCDPA, but does not provide a private right of action for consumers. The Bank is exempt from the VCDPA, but certain third party vendors of the Bank are or will be subject to the VCDPA. The Company and the Bank are monitoring for the potential negative effects on the products and services provided by these vendors. The Company is also subject to various laws and regulations that attempt to combat money laundering and terrorist financing. The Bank Secrecy Act (the “BSA”) requires all financial institutions to, among other things, create a system of controls designed to prevent money laundering and the financing of terrorism, and imposes recordkeeping and reporting requirements. The USA PATRIOT Act added regulations to facilitate information sharing among governmental entities and financial institutions for the purpose of combating terrorism and money laundering and requires financial institutions to establish anti-money laundering programs. Regulations adopted under the BSA impose on financial institutions customer due diligence requirements, and the federal banking regulators expect that customer due diligence programs will be integrated within a financial institution’s broader BSA and anti-money laundering compliance program. The Office of Foreign Assets Control (“OFAC”), which is a division of the U.S. Department of Treasury, is responsible for helping to ensure that United States entities do not engage in transactions with “enemies” of the United States, as defined by various Executive Orders and Acts of Congress. If the Company finds the name of an “enemy” of the United States on any transaction, account or wire transfer that is on an OFAC list, it must freeze such account or place transferred funds into a blocked account, and report it to OFAC. Although these laws and programs impose compliance costs and create privacy obligations and, in some cases, reporting obligations, and compliance with all of the laws, programs, and privacy and reporting obligations may require significant resources of the Company and the Bank, these laws and programs do not materially affect the Bank’s products, services or other business activities. Corporate Transparency Act On January 1, 2021, as part of the 2021 National Defense Authorization Act, Congress enacted the Corporate Transparency Act (“CTA”), which requires the Financial Crimes Enforcement Network (“FinCEN”) to issue regulations implementing reporting requirements for “reporting companies” (as defined in the CTA) to disclose beneficial ownership interests of certain U.S. and foreign entities by January 1, 2022. The CTA imposes additional reporting requirements on entities not previously subject to such beneficial ownership disclosure regulations and also contains exemptions for several different types of entities, including among others: (i) certain banks, bank holding companies, and credit unions; (ii) money transmitting businesses registered with FinCEN; and (iii) certain insurance companies. Reporting companies subject to the CTA are required to provide specific information with respect to beneficial owner(s) (as defined in the CTA) as well as satisfy initial filing obligations (for newly-formed reporting companies) and submit on-going periodic reports. Non-compliance with FinCEN regulations promulgated under the CTA may result in civil fines and criminal penalties. On September 29, 2022, FinCEN issued a final rule to implement the beneficial ownership reporting requirements of the CTA, which became effective January 1, 2024. The Company and the Bank continue to monitor regulatory developments related to the CTA and will continue to assess the ultimate impact of the CTA on the Company and the Bank. Cybersecurity The federal banking agencies have also adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a financial institution’s board of directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal banking agencies expect financial institutions to establish lines of defense and ensure that their risk management processes also address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack. If the 17 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) Company or the Bank fails to meet the expectations set forth in this regulatory guidance, the Company or the Bank could be subject to various regulatory actions and any remediation efforts may require significant resources of the Company or the Bank. In addition, all federal and state banking agencies continue to increase focus on cybersecurity programs and risks as part of regular supervisory exams. On November 18, 2021, the federal bank regulatory agencies issued final rules to improve the sharing of information about cyber incidents that may affect the U.S. banking system. These rules require a banking organization to notify its primary federal regulator of any significant computer-security incident as soon as possible and no later than 36 hours after the banking organization determines that a cyber-incident has occurred. Notification is required for incidents that have materially affected or are reasonably likely to materially affect the viability of a banking organization’s operations, its ability to deliver banking products and services, or the stability of the financial sector. In addition, the rules require a bank service provider to notify affected banking organization customers as soon as possible when the provider determines that it has experienced a computer-security incident that has materially affected or is reasonably likely to materially affect banking organization customers for four or more hours. The rule became effective on May 1, 2022. The final rules did not have a material impact on the Company or the Bank’s operations. Stress Testing The federal banking agencies have implemented stress-testing requirements for certain large or risky financial institutions, including bank holding companies and state-chartered banks. Although these requirements do not apply to the Company and the Bank, the federal banking agencies emphasize that all banking organizations, regardless of size, should have the capacity to analyze the potential effect of adverse market conditions or outcomes on the organization’s financial condition. Based on existing regulatory guidance, the Company and the Bank will be expected to consider its interest rate risk management, commercial real estate loan concentrations and other credit-related information, and funding and liquidity management during this analysis of adverse market conditions or outcomes. Volcker Rule The Dodd-Frank Act prohibits bank holding companies and their subsidiary banks from engaging in proprietary trading except in limited circumstances, and places limits on ownership of equity investments in private equity and hedge funds (the “Volcker Rule”). The EGRRCPA and final rules adopted to implement the EGRRCPA exempt all banks with less than $10 billion in assets (including their holding companies and affiliates) from the Volcker Rule, provided that the institution has total trading assets and liabilities of 5% or less of total assets, subject to certain limited exceptions. The Company believes that its financial condition and its operations are not significantly affected by the Volcker Rule, amendments thereto, or its implementing regulations. Call Reports and Examination Cycle All institutions, regardless of size, submit a quarterly call report that includes data used by federal banking agencies to monitor the condition, performance, and risk profile of individual institutions and the industry as a whole. The EGRRCPA contained provisions expanding the number of regulated institutions eligible to use streamlined call report forms. In June 2019, the federal banking agencies issued a final rule to permit insured depository institutions with total assets of less than $5 billion that do not engage in certain complex or international activities to file the most streamlined version of the quarterly call report, and to reduce data reportable on certain streamlined call report submissions. Effect of Governmental Monetary Policies As with other financial institutions, the earnings of the Company and the Bank are affected by general economic conditions as well as by the monetary policies of the FRB. Such policies, which include regulating the national supply of bank reserves and bank credit, can have a major effect upon the source and cost of funds and the rates of return earned on loans and investments, and on levels of inflation in the United States. The FRB exerts a substantial influence on interest rates and credit conditions, primarily through establishing target rates for federal funds, open market operations in U.S. Government securities, varying the discount rate on member bank borrowings and setting cash reserve requirements against deposits. Changes in monetary policy, including changes in interest rates, will influence the origination of loans, the purchase of investments, the generation of deposits, and rates received on loans and investment securities and paid on deposits. Federal Reserve monetary policies have 18 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1. BUSINESS - (continued) had a significant effect on the operating results of community banks, including us, in the past and are expected to do so in the future. Application of Supervisory Guidance to the Company and the Bank On March 31, 2021, the Federal Reserve issued a final rule outlining and confirming the use of supervisory guidance for regulated institutions, including bank holding companies like the Company. The rule generally codifies a statement issued by the federal banking agencies in September 2018 clarifying the differences between regulations and guidance, and provides that, unlike a law or regulation, supervisory guidance does not have the force and effect of law, and the agencies do not take enforcement actions based on supervisory guidance. Rather, guidance outlines expectations and priorities, or articulates views regarding appropriate practices for a specific subject. The rule became effective on April 30, 2021. The Company has not been materially impacted by the effectiveness of this rule. Future Regulation From time to time, various legislative and regulatory initiatives are introduced in Congress and state legislatures, as well as by regulatory agencies. Such initiatives may include proposals to expand or contract the powers of bank holding companies and depository institutions or to substantially change the financial institution regulatory system. Such legislation could change banking statutes and the operating environment of the Company and the Bank in substantial and unpredictable ways. If enacted, such legislation could increase or decrease the cost of doing business, limit or expand permissible activities or affect the competitive balance among banks, savings associations, credit unions, and other financial institutions with which we compete. The Company cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it, or any implementing regulations, would have on its financial condition or results of operations. A change in statutes, regulations or regulatory policies applicable to the Company and the Bank could have a material effect on our business. Where You Can Find More Information The Company files quarterly, annual and periodic reports, proxy statements and insider filings with the SEC. The Company’s SEC filings are available to the public over the Internet at the SEC’s web site at http://www.sec.gov. The Company’s SEC filings also are available through our website, www.CBTCares.com. Copies of documents may also be obtained free of charge by directing a request by telephone to (276) 656-1776 or mail to Investor Relations, Carter Bankshares, Inc., 1300 Kings Mountain Road, Martinsville, Virginia 24112. 19 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS Investments in the Company’s common stock involves risks. In addition to the other information set forth in this Annual Report on Form 10-K, including the information addressed above under “Important Note Regarding Forward-Looking Statements,” investors in the Company’s common stock should carefully consider the risk factors discussed below. The following discussion highlights the risks that we believe are material to the Company, but the following discussion does not necessarily include all risks that we may face, and an investor in the Company’s common stock should not interpret the disclosure of a risk in the following discussion to state or imply that the risk has not already materialized. These factors could materially and adversely affect the Company’s business, financial condition, liquidity, results of operations, and capital position, and could cause the Company’s actual results to differ materially from its historical results or the results contemplated by the forward-looking statements contained in this Annual Report on Form 10-K, in which case, the trading price of the Company’s common stock could decline. Risks Related to Credit Nonperforming assets can take significant time to resolve and may adversely affect the Company’s results of operations and financial condition, and could result in further losses in the future. As of December 31, 2023, our nonperforming loans totaled $309.5 million, or 8.83%, of the Company’s loan portfolio. The Company’s policy is to place loans in nonaccrual status when collection of interest or principal is doubtful, or generally when interest or principal payments are 90 days or more past due based on contractual terms. While the Company generally seeks to reduce or resolve problem assets through, among other methods, loan workouts, restructurings, or sales of the loans or underlying collateral, decreases in the value of the underlying collateral, decreases in the respective borrowers’ financial condition, profitability, or operating performance, or efforts by the respective borrowers’ to delay or avoid legal processes may inhibit such reduction or resolution efforts which, in turn, could adversely impact the Company’s business, financial condition and results of operations. The Company’s nonperforming assets adversely affect its business, financial condition and results of operations in various ways. The Company does not record interest income on nonaccrual loans or OREO; thus nonperforming assets adversely affect the Company’s net income and returns on assets and equity, increase the Company’s loan administration costs and adversely affects the Company’s results of operations and efficiency ratio. The resolution of nonperforming assets requires significant time commitments from management which can adversely impact the Company’s and Bank’s other strategic and operational priorities. If the Bank takes collateral in foreclosure and via a similar proceeding, the Bank is required to mark the collateral to its then-fair market value, which may result in a loss, and the Bank will incur legal and other expenses, which may be significant, in connection with the foreclosure and sale process. Nonperforming loans and OREO can also increase the Company’s and the Bank’s risk profile and the level of regulatory capital that their respective banking regulators believe is appropriate. Nonperforming loans and OREO also can adversely impact the Company’s liquidity available with secondary liquidity sources, as the Bank is not able to pledge nonperforming loans and OREO as collateral for borrowings from these sources. FDIC expense has increased significantly due to the deterioration in asset quality as a direct result of one large nonperforming loan relationship, which is a component used to determine the assessment. During the second quarter of 2023, the Company placed in nonaccrual status certain commercial loans in the Other segment of the Company’s loan portfolio, all relating to the Bank’s largest lending relationship, that have an aggregate principal amount of $301.9 million. Because the Company placed these loans on nonaccrual status, the Company was unable to accrue approximately $30.0 million of interest income related to these loans as of December 31, 2023. The Company’s level of credit risk is elevated due to relationship exposure to the Company’s largest lending relationship. As of December 31, 2023, the Company’s largest lending relationship operates in the hospitality, agriculture and energy sectors and had loans outstanding with an aggregate principal amount of $301.9 million. All such loans are classified in the Other segment of the Company’s loan portfolio. During the second quarter of 2023, the Company placed these loans on nonaccrual status due to loan maturities and failure to pay in full. This lending relationship comprises 96.8% of the Company’s nonperforming assets and 97.5% of the Company’s nonperforming loans and 8.6% of total portfolio loans at December 31, 2023. 20 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) The Company has initiated collection processes with respect to such loans and intends to explore all alternatives for repayment or recovery. Although the Company believes it is well secured based on the net carrying value of the credit relationship and appropriately reserved for potential losses with respect to all such loans based on information currently available, we cannot give any assurance as to the timing or amount of future payments or collections on such loans or that the Company will ultimately collect all amounts contractually due under the terms of such loans. Further deterioration of this lending relationship, including adverse changes in the financial condition of the respective borrowers or guarantors, potential claims by other creditors of the respective borrowers, further litigation with the respective borrowers or guarantors or adverse changes in the value of collateral that secures this lending relationship, could require the Company to increase its allowance for loan losses or result in significant losses to the Company, which could have a material adverse effect on the Company’s business, financial condition and results of operations. A large percentage of the Company’s commercial loans are secured by real estate, and an adverse change in the real estate market or in economic conditions more generally may result in losses and adversely affect our profitability. Approximately 92.4% of the Company’s commercial loan portfolio as of December 31, 2023, was comprised of loans secured by real estate. An adverse change in the economy affecting occupancy and/or rental rates in the investment real estate market areas we serve could increase the likelihood of defaults. Real estate collateral securing the Company's loans are a secondary source of repayment in the event of unremedied defaults. The value of the Company's collateral could be impaired by changes in demand, rental rates and capitalization rates and could be insufficient to recover outstanding principal and interest. As a result, the Company’s profitability and financial condition could be negatively impacted by an adverse change in the real estate market. The Company’s CRE loan portfolio is concentrated predominantly in North Carolina and Virginia, within the retail, multifamily, hospitality, warehouse and office metrics. As a result of this concentration of the company’s loan portfolio, it may be more sensitive, as compared to more diversified institutions, to future disruptions in and deterioration of this market. The Company relies on independent appraisals to determine the value of the real estate which secures a significant portion of our loans, and the values indicated by such appraisals may not be realizable if foreclosure on such loans is forced. A significant portion of the Company’s loan portfolio consists of loans secured by real estate. We rely on independent appraisers to provide professional opinions of the value of such real estate. Appraisals are only estimates of value and the independent appraisers may make mistakes of fact or judgment that adversely affect the reliability of their appraisals. In addition, events occurring after the initial appraisal may cause the value of the real estate to increase or decrease. As a result of any of these factors, the real estate securing some of the loans may be more or less valuable than anticipated at the time the loans were made. If a default occurs on a loan secured by real estate that is less valuable than originally estimated, the Company may not be able to recover the outstanding balance of the loan. Appraisal valuations can be impacted by changes in the equilibrium between supply and demand, changes in occupancy, lease rates and capitalization rates. Appraisals can also be impacted by the information available to the appraiser, including age of industry, market or borrower information, by access to property that is the subject of the appraisal, and by changing economic, industry or market conditions. The bank updates appraisals in connection with defined extensions of credit, which includes but is not limited to requests for additional loan funding, material changes to the loan’s amortization or material extensions of the maturity date. Additionally, the bank will generally update appraisals when the loan is considered collateral dependent and is either subject to Individually Evaluated Loan status or prior to the completion of a foreclosure initiating a collection process. The Company’s level of credit risk is elevated due to the concentration of commercial real estate loans and commercial real estate construction loans in its portfolio. As of December 31, 2023, the Company’s exposure to loans secured by commercial purpose real estate, including investment real estate loans related to hospitality, retail and multifamily apartments (but excluding construction) equated to $1.8 billion, or 51.2% of its total loan portfolio. The average balance of these loans are generally larger and these loans generally involve a more complex degree of financial and credit risk than loans secured by residential real estate. Repayment of these loans is dependent on the success of the borrower’s underlying business and/or the borrower’s ability to generate leases in order to receive sufficient cash flow to service its debts. The financial and credit risk associated with these loans is a result of several 21 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) factors, including, but not limited to, macroeconomic conditions affecting supply, demand and property valuations, as well as larger balances in a smaller population of loans. The Company’s exposure to hospitality at December 31, 2023 equated to approximately $341.1 million, or 9.7% of its total loan portfolio. These were mostly loans secured by upscale or top tier flagged hotels, which have historically exhibited low leverage and strong operating cash flows. The Company’s exposure to commercial real estate construction loans at December 31, 2023 equated to approximately $500.0 million, or 14.3% of total portfolio loans. Construction loans are inherently risky. These risks include, but are not limited to, potential adverse changes in material costs resulting in cost overruns, and the potential that the general contractors develop financial stress and are unable to complete projects and the speculative nature of lease up risk. A severe downturn in real estate could affect demand for leases, capitalization rates and property valuations, which could adversely affect our financial condition and results of operations. Our allowance for credit losses may be insufficient. The measure of our allowance for credit losses is dependent on the interpretation and application of the Current Expected Credit Losses (“CECL”) methodology, which the Company adopted effective January 1, 2021, and which replaced the incurred loss methodology that was used by the Company and the Bank under GAAP prior to that date. The CECL methodology reflects expected credit losses and requires consideration of a broader range of reasonable and supportable information to inform credit loss estimates. Accordingly, the implementation of the CECL model changed the Company’s current method of providing allowance for credit losses (“ACL”) and resulted in material changes in the Company’s accounting for credit losses on financial instruments. The CECL model may create more volatility in the Company’s level of ACL, which, if materially increased, could adversely affect our business, financial condition, and results of operations. We have and will continue to implement further enhancements or changes to our methodology, models and the underlying assumptions, estimates and assessments, as needed. If the assumptions or estimates we use in adopting the new standard are incorrect or we need to change our underlying assumptions and estimates, there may be a material adverse impact on our results of operation and financial condition. We maintain an ACL at a level we believe is adequate to absorb expected losses in our loan portfolio as of the corresponding balance sheet date. The process to determine the ACL uses models and assumptions that require us to make difficult and complex judgments that are often interrelated, including how borrowers will perform in changing economic and market conditions. Also, we may fail to accurately identify the appropriate economic indicators, to accurately estimate the timing of future changes in economic or market conditions, or to estimate accurately the impacts of future changes in economic or market conditions on our borrowers. Any of these failures could significantly impact the accuracy of our loss forecasts and allowance estimates and the sufficiency of our ACL. If the models, estimates, and assumptions we use to establish reserves or the judgments we make in extending credit to our borrowers prove inaccurate in predicting future events, we may suffer unexpected losses. There is no guarantee that our ACL will be sufficient to address credit losses, particularly if the economic outlook deteriorates significantly and quickly, or if a specific segment of the Company’s loan or borrower portfolio is adversely impacted by changing market or other conditions. In such an event, we may need to increase our ACL, which would result in provisions for credit losses that would reduce our earnings. Management evaluates the appropriateness of the ACL for the “Other” segment through the projected discounted cash flow analysis with various assumptions and multiple scenarios. It is difficult to predict the specific resolution of this relationship. As a result, the reserve analysis employs a number of potential outcomes, which are weighted based on probabilities as determined by management based on current information available to us. Additionally, to the extent that credit losses are worse than expected, which could be caused by persistent inflation or an economic recession that negatively impacts borrowers, we may need to increase our provision for loan losses. Our real estate lending business can result in increased costs associated with Other Real Estate Owned (“OREO”). Because we originate loans secured by real estate, we may have to foreclose on the collateral property to protect our investment and may thereafter own and operate such property, in which case we are exposed to the risks inherent in the ownership of real estate. We use methods for valuing collateral for individually evaluated loans and OREO that are in compliance with Accounting Standards Codification (“ASC”) Topic 310 Receivables. The methods require the use of assumptions that are subject to change based on events impacting real estate values. The amount that we may realize after a default is dependent upon factors outside of our control, including, but not limited to, general or local economic conditions, environmental cleanup 22 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) liability, neighborhood values, interest rates, real estate tax rates, operating expenses of the mortgaged properties, and supply of and demand for properties. Certain expenditures associated with the ownership of income producing real estate, principally real estate taxes and maintenance costs, may adversely affect the net cash flows generated by the real estate. Therefore, the cost of operating income-producing real property may exceed the rental income earned from such property, and we may have to advance funds to protect our investment or we may be required to dispose of the real property at a loss. Risks Related to Our Operations, Cybersecurity and Technology A failure in or breach of our operational or security systems or infrastructure, or those of third parties, could disrupt the Company’s businesses, and adversely impact our results of operations, liquidity and financial condition, as well as cause reputational harm. The Company’s operational and security systems, infrastructure, including our computer systems, data management, and internal processes, as well as those of third parties, are integral to our business. We rely on our associates and third parties in our day-to-day and ongoing operations, who may, as a result of human error, misconduct or malfeasance, or failure or breach of third-party systems or infrastructure, expose us to risk. We have taken measures to implement backup systems and other safeguards to support our operations, but our ability to conduct business may be adversely affected by any significant disruptions to us or to third parties with whom we interact. In addition, our ability to implement backup systems and other safeguards with respect to third-party systems is more limited than with our own systems. The Company handles a substantial volume of customer and other financial transactions every day. Our financial, accounting, data processing, check processing, electronic funds transfer, loan processing, online and mobile banking, backup or other operating or security systems and infrastructure may fail to operate properly or become disabled or damaged as a result of a number of factors including events that are wholly or partially beyond our control. This could adversely affect our ability to process these transactions or provide these services. There could be sudden increases in customer transaction volume, electrical, telecommunications or other major physical infrastructure outages, natural disasters, events arising from local or larger scale political or social matters, including terrorist acts, and cyber-attacks. We continuously update these systems to support our operations and growth. This updating entails significant costs and creates risk associated with implementing new systems and integrating them with existing ones. Operational risk exposures could adversely impact our results of operations, liquidity and financial condition, and cause reputational harm. A cyber-attack, information or security breach, or a technology failure of ours or of a third-party could adversely affect the Company’s ability to conduct business or manage exposure to risk, resulting in the disclosure or misuse of confidential or proprietary information, increase costs to maintain and update our operational systems, security systems, and infrastructure, and adversely impact results of operations, liquidity and financial condition, as well as cause reputation harm. The Company’s business is highly dependent on the security and efficacy of our infrastructure, computer and data management systems, as well as those of third parties with whom we interact and rely upon. Cyber security risks for financial institutions have significantly increased in recent years in part because of the proliferation of new technologies, the use of the internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists and other external parties, including foreign state actors. Our operations rely on the secure processing, transmission, storage and retrieval of confidential, proprietary and other information in our computer and data management systems and networks, and in the computer and data management systems and networks of third parties. We rely on digital technologies, computer, database and email systems, software, and networks to conduct our operations. In addition, to access our network, products and services, our customers and third parties may use personal mobile devices or computing devices that are outside of our network environment. Financial services institutions have been subject to, and are likely to continue to be the target of, cyber-attacks, including computer viruses, malicious or destructive code, phishing attacks, denial of service or other security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of confidential, proprietary and other information of the institution, its associates or customers or of third parties, or otherwise materially disrupt network access or business operations. For example, denial of service attacks have been launched against a number of large financial institutions and several large retailers have disclosed substantial cyber security breaches affecting debit and credit card accounts of their customers. We have not experienced material cyber security incidents in the past, but there is no assurance that we will not experience an attack in the future. Technology failures, cyber-attacks or other information or security breaches can cause 23 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) material losses or other material consequences, and e ven with all reasonable security efforts, not every system or network breach can be prevented or even detected. Furthermore, because some of our employees are working remotely from their homes, there is an increased risk of disruption to our operations because our employees’ residential networks and infrastructure may not be as secure as our office environment. In addition to external threats, insider threats also represent a risk to us. Insiders, having legitimate access to our systems and the information contained in them, have the opportunity to make inappropriate use of the systems and information. We have policies, procedures and controls in place designed to prevent or limit this risk, but we cannot guarantee that such policies, procedures and controls fully mitigate this risk. As cyber threats continue to evolve, we may be required to expend significant additional resources to continue to modify and enhance our protective measures or to investigate and remediate any information security vulnerabilities or incidents. Any of these matters could result in loss of customers and business opportunities, significant disruption to our operations and business, misappropriation or destruction of our confidential information and/or that of our customers, damage to computers or systems of our customers and/or third parties, violation of applicable privacy laws and other laws, litigation, costs associated with customer notification and credit monitoring services, increased insurance premiums, regulatory fines, penalties or intervention, loss of confidence in our security measures, reputational damage, reimbursement or other compensatory costs, and additional compliance costs. In addition, any of the matters described above could adversely impact our results of operations and financial condition. The Company relies on third-party providers and other suppliers for a number of services that are important to our business. An interruption or cessation of an important service by any third-party could have a material adverse effect on our business . The Company is dependent for the majority of our technology, including our core operating system, on third-party providers. If these companies were to discontinue providing services to us, we may experience significant disruptions to our business. In addition, each of these third parties faces the risk of a cyber-attack, information breach or loss, or technology failure and there is no assurance that they have not or will not experience a system or network breach . If any of our third-party service providers experience such difficulties, or if there is any other disruption in our relationships with them, we may be required to find alternative sources of such services, which may not be on comparable or commercially reasonable terms. We are dependent on these third-party providers securing their information systems, over which we have no control, and any failure to maintain performance, reliability and security of these systems could have a significant adverse effect on our financial condition or results of operations. A breach of our third-party providers’ information systems could adversely affect our ability to process transactions, service our clients or manage our exposure to risk and could result in the disclosure of sensitive, personal customer information, which could have a material adverse impact on our business through damage to our reputation, loss of customer business, remedial costs, additional regulatory scrutiny or exposure to civil litigation and possible financial liability. Assurance cannot be provided that we could negotiate terms with alternative service sources that are as favorable or could obtain services with similar functionality as found in our existing systems without the need to expend substantial resources, if at all, thereby resulting in a material adverse impact on our business and results of operations. The Company is dependent on its management team, and the loss of any senior executive officers or other key personnel could impair its relationship with its customers and adversely affect its business and financial results. We believe that our growth and future success will depend in large part on the skills of our executive officers. We also depend upon the experience of the senior executive officers and other key personnel and their relationship with the communities they serve. The loss of the services of one or more of these officers or key personnel could have an adverse impact on the business of the Company because of their skills, knowledge of the market, years of industry experience and the difficulty promptly finding qualified replacement personnel. The success of our business strategies depends on our ability to identify and recruit individuals with experience and relationships in our primary markets. The successful implementation of our business strategy will require us to continue to attract, hire, motivate and retain skilled personnel to develop new customer relationships as well as new financial products and services. The market for qualified management personnel is competitive, which has contributed to salary and employee benefit costs that have risen and are expected to continue to rise, which may have an adverse effect on the Company’s net income (loss). In addition, the process of 24 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) identifying and recruiting individuals with the combination of skills and attributes required to carry out our strategy is often lengthy, and we may not be able to effectively integrate these individuals into our operations. Our inability to identify, recruit and retain talented personnel to manage our operations effectively and in a timely manner could limit our growth or impair our ability to implement our business strategy effectively and efficiently, which could materially adversely affect our business. Risks Related to Market Conditions, Interest Rates and Investments The Company’s business is subject to interest rate risk and fluctuations in interest rates may adversely affect its earnings and capital levels. The majority of our assets are monetary in nature and, as a result, we are subject to significant risk from changes in interest rates. Changes in interest rates can impact our net interest income as well as the valuation of our assets and liabilities. Also, our earnings are significantly dependent on net interest income, which is the difference between interest income on interest-earning assets, such as loans and securities, and interest expense on interest-bearing liabilities, such as deposits and borrowings. We expect we will experience “gaps” in the interest rate sensitivities of our assets and liabilities, meaning that either our interest-bearing liabilities will be more sensitive to changes in market interest rates than our interest-earning assets, or vice versa. In either event, if market interest rates should move contrary to our position, this “gap” will work against us and our earnings may be negatively affected. To combat rising inflation, between March of 2022 and July of 2023, the Federal Reserve raised the federal funds benchmark rate by a total of 525 basis points. Although the Federal Reserve has held rates steady since July 2023 and signaled the potential for rate cuts in 2024, if interest rates do not rise, or if the Federal Reserve lowers the target federal funds rate to below 0%, such low rates could limit our interest rate spread and may adversely affect our business forecasts. Moreover, if the interest rates on our interest-bearing liabilities increase at a faster pace than the interest rates on our interest-earning assets, the result would be a reduction in net interest income and with it, a reduction in net earnings. Further increases in the general level of interest rates, to combat inflation or otherwise, may also, among other things, result in a change in the mix of noninterest and interest-bearing accounts, reduce the demand for loans or increase the rate of default on existing loans. Conversely, a decrease in the general level of interest rates may, among other things, lead to an increase in prepayments on loans and increased competition for deposits. Accordingly, changes in the general level of market interest rates may affect net yield on interest-earning assets, loan origination volume, loan portfolios, and funding costs which impact our overall results. Although our asset-liability management strategy is designed to control our risk from changes in the general level of market interest rates, market interest rates will be affected by many factors outside of our control, including inflation, recession, changes in unemployment, other economic conditions, money supply and international disorder and instability in domestic and foreign financial markets. We are unable to predict changes in interest rates, which are affected by factors beyond our control, including inflation, deflation, recession, unemployment, money supply and other changes in financial markets. It is possible that significant or unexpected changes in interest rates may take place in the future, and we cannot always accurately predict the nature or magnitude of such changes or how such changes may affect our business or results of operations. The value of our investment securities could decline. Changes in interest rates could cause the value of our investment securities to decline. We hold available-for-sale investment securities, which are carried at fair value, the majority of which are high-quality, liquid fixed income securities. The determination of fair value for certain of these securities requires significant judgment of management. Therefore, the market price we receive for our investment securities could be less than the carrying value for such securities. Further, the value of our investment portfolio could decline for numerous reasons, many of which are outside our control, including general market conditions, volatility in the securities market, changes in market interest rates, and inflation rates or expectations of inflation. For example, increases in interest rates or changes in interest rate spreads may negatively impact the fair value of our investment securities and may adversely affect accumulated other comprehensive income and, thus, our equity levels. Changes in interest rates could adversely affect our income and cash flows and may result in higher defaults and lower collateral values in a rising rate environment. Changes in interest rates influence the origination of loans, the prepayment of loans, the fair value of existing assets and liabilities, the purchase of investments, the retention and generation of deposits, the rates received on loans and investment securities, and the rates paid on deposits or other sources of funding. In general, periods of rising interest rates and other 25 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) inflationary pressures can have a significant negative effect on our borrowers, and particularly on borrowers that operate businesses that generate revenue to pay principal and interest on commercial loans. Periods of rising interest rates and other inflationary pressures could cause the values of collateral securing our loans to decline. If either our borrowers are negatively impacted by rising interest rates or other inflationary pressures, or if the value of collateral securing our loans declines, our financial performance may be negatively impacted. Inflation could negatively impact our business, our profitability, and our stock price. Volatility and uncertainty related to inflation and the effects of inflation, may lead to increased costs for businesses and consumers and potentially contribute to poor business and economic conditions. For example, higher inflation, or volatility and uncertainty related to inflation, could reduce demand for the Company’s products, which could affect the creditworthiness of the Company’s borrowers, result in lower values for the Company’s investment securities and other interest-earning assets and increase expense related to talent acquisition and retention. If significant inflation continues the Company could result in missed earnings and budgetary projections causing our stock price to suffer. Risks Related to Liquidity Adverse developments affecting the financial services industry, such as actual events or concerns involving liquidity, defaults, or non-performance by financial institutions or transactional counterparties, may have a material adverse effect on our financial condition and results of operations. Actual events involving limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions, transactional counterparties or other companies in the financial services industry or the financial services industry generally, or concerns or rumors about any events of these kinds or other similar risks, which may be compounded by the reach and depth of media attention, including social media, have in the past and may in the future lead to market-wide liquidity problems. Liquidity is essential to the Company’s banking business, and the Company’s business strategies are largely based on access to funding from customer deposits and supplemental funding provided by secondary liquidity sources, including wholesale funding facilities. Deposit levels may be impacted by industry factors, market interest rates, rates paid for deposits by other financial institutions and market interest rates generally, inflationary conditions, general economic conditions than can impact savings rates, and banking industry conditions that can impact customers perceptions of the safety and soundness of the banking industry generally or of specific financial institutions. The failures of Silicon Valley Bank, Signature Bank and First Republic Bank in the first quarter of 2023, and the resulting industry turmoil, have underscored the importance of maintaining diversified funding sources to ensure the safety and soundness of a financial institution. In response to these failures, the Treasury Department, the Federal Reserve Board (“FRB”) and the FDIC approved actions enabling the FDIC to complete its resolution of Silicon Valley Bank, Signature Bank and First Republic Bank in a manner that fully protected depositors by utilizing the FDIC Deposit Insurance Fund, and the Federal Reserve took actions to make available additional term funding for eligible financial institutions to help ensure continued liquidity in the banking industry. It is uncertain whether these additional steps will be sufficient to address the turmoil in the banking industry, ensure continued funding and liquidity, reduce the risk of deposit outflows, and particularly sudden outflows, from banks. Should any of these conditions materialize, our liquidity, financial condition and results of operations could be materially and adversely impacted. The Company’s liquidity could be impaired by an inability to access short-term funding or the inability to monetize liquid assets. If significant volatility or disruptions occur in the wholesale funding or investment securities markets, the Company’s ability to access short-term liquidity could be materially impaired. In addition, other factors outside of the Company’s control could limit the Company’s ability to access short-term funding or to monetize liquid assets, including by selling investment securities at an attractive price or at all, operational issues that impact third parties in the funding or securities markets or unforeseen significant deposit outflows. The Company’s inability to access short-term funding or inability to monetize liquid assets could impair the 26 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) Company’s ability to make new loans or meet existing lending commitments, and could adversely impact the Company’s overall financial condition, liquidity and regulatory capital. We rely substantially on deposits obtained from customers in our target markets to provide liquidity and support growth, and impairment of our access to funding may negatively affect our financial performance. Our primary funding and liquidity source to support our business strategies is a stable customer deposit base. Deposit levels may be affected by a number of factors, including interest rates paid by competitors, general interest rate levels, returns available to customers on alternative investments and general economic conditions. If our deposit levels fall, we could lose a relatively low-cost source of funding and our interest expense would likely increase as we obtain alternative funding to replace lost deposits. If local customer deposits are not sufficient to fund our normal operations and growth, we will look to outside sources, such as fed funds lines with other financial institutions or borrowings with the FHLB and we have access to the institutional CD market and the brokered deposit market. We may also seek to raise funds through the issuance of shares of our common stock, or other equity or equity-related securities, or debt securities including subordinated notes as additional sources of liquidity. A number of factors, many of which are outside the Company’s control, could make accessing such financing more difficult or more expensive, or could make such financing unavailable altogether, including the financial condition of the Company, rate disruptions in the capital markets, the attractiveness of investing in or lending to financial services companies generally, and competition for funding from other banks, holding companies or similar financial service companies, some of which could be substantially larger or have stronger credit ratings or profiles. If we are unable to access funding sufficient to support our business operations and growth strategies or are only able to access such funding on unattractive terms, we may not be able to implement our business strategies which may negatively affect our financial performance. Our ability to meet contingency funding needs, in the event of a crisis that causes a disruption to our core deposit base, is dependent on access to wholesale markets, including funds provided by the FHLB of Atlanta . We own stock in the FHLB of Atlanta, in order to qualify for membership in the FHLB system, which enables us to borrow on our line of credit with the FHLB that is secured by a blanket lien on select commercial loans, multifamily loans, residential mortgages and investment securities available-for-sale and is estimated to be equal to 25% of our assets approximating $1.1 billion, with available borrowing capacity subject to the amount of eligible collateral pledged at any given time. Changes or disruptions to the FHLB or the FHLB system in general may materially impact our ability to meet short and long-term liquidity needs or meet growth plans. Additionally, we cannot be assured that the FHLB will be able to provide funding to us when needed, nor can we be certain that the FHLB will provide funds specifically to us, should our financial condition and/or our regulators prevent access to our line of credit. The inability to access this source of funds could have a materially adverse effect on our ability to meet our customer’s needs. Our financial flexibility could be severely constrained if we were unable to maintain our access to funding or if adequate financing is not available at acceptable interest rates. Other wholesale market sources of liquidity include the Fed discount window, the brokered CD market, and our four fed funds lines totaling $95.0 million with correspondent banks. Additionally, we have a large bond portfolio that can be used for liquidity purposes, including pledging or outright sales. It should also be noted that our customer base is very diversified and granular, which should minimize any unexpected deposit outflows. Average commercial deposit account balances are $42 thousand, and average consumer retail deposit account balances are $14 thousand. We rely on dividends from our subsidiaries for most of our revenue . The Company is a separate and distinct legal entity from the Bank. A substantial portion of the Company’s revenue comes from dividends from the Bank. Various federal and Virginia laws and regulations limit the amount of dividends that the Bank may pay to us. Also, in the event the Bank is unable to pay dividends to the Company, the Company may not be able to service any debt that is outstanding, pay obligations, or pay any future dividends on its common stock. The inability to receive dividends from the Bank could have a material adverse effect on our business, financial condition, and results of operations . Risks Related to Our Business Strategy Our profitability depends significantly on economic conditions. Our success depends primarily on the general economic conditions of the geographic markets in which we operate, primarily in Virginia and North Carolina. The local economic conditions in the areas where we operate have a significant impact on our 27 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES ITEM 1A. RISK FACTORS - (continued) commercial, real estate and construction loans, the ability of our borrowers to repay their loans and the value of the collateral securing these loans and on customer demand for loans, deposits and other bank products. A significant decline in general economic conditions, including pandemics or significant health hazards (such as the COVID-19 pandemic), inflation, recession, acts of terrorism, outbreak of hostilities (including the military conflict between Russia and Ukraine and between Israel and Palestine) or other international or domestic calamities, unemployment or other factors, all of which are beyond our control, could impact economic conditions and negatively affect our financial results. We face strong competition from financial services companies and other companies that offer banking services which could negatively affect our business. We conduct our banking operations primarily in Virginia and North Carolina, including Fredericksburg, Charlottesville, Lynchburg, Roanoke, Blacksburg, Martinsville, and Danville in Virginia, and Greensboro, Charlotte, Raleigh and Mooresville in North Carolina. Increased competition in these markets may result in reduced loans and deposits. Ultimately, we may not be able to compete successfully against current and future competitors. Many competitors offer the same banking services that we offer in our service area. These competitors include national banks, regional banks and other community banks. We also face competition from many other types of financial institutions, including without limitation, savings and loan institutions, finance companies, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. In particular, our competitors include several major financial companies whose greater resources may afford them a marketplace advantage by enabling them to maintain numerous banking locations and ATMs, conduct extensive promotional and advertising campaigns and offer a wider range of products, services and technologies. Additionally, banks and other financial institutions with larger capitalization and financial intermediaries not subject to bank regulatory restrictions have larger lending limits and are thereby able to serve the credit needs of larger customers. Areas of competition include interest rates for loans and deposits, efforts to obtain deposits, and range and quality of products and services provided, including new technology-driven products and services. Technological innovation continues to contribute to greater competition in domestic and international financial services markets as technological advances enable more companies to provide financial services, products and services traditionally provided by banks, such as automatic transfer and automatic payment systems. We also face competition from out-of-state financial intermediaries that have opened loan production offices or that solicit deposits in our market areas. If we are unable to attract and retain banking customers, we may be unable to continue to grow our loan and deposit portfolios or may be required to increase the rates we pay on deposits or lower the rates we offer on loans and results of operations and financial condition may otherwise be adversely affected. Our customers may increasingly decide not to use the Bank to complete their financial transactions, which would have a material adverse impact on our financial condition and operations. Technology and other changes are allowing parties to complete financial transactions through alternative methods that have historically involved banks. For example, customers can now maintain funds that would have historically been held as bank deposits in brokerage accounts, mutual funds, or general-purpose reloadable prepaid cards. Customers can also complete transactions such as paying bills and/or transferring funds directly without the assistance of banks. We face increasing competition from fintech companies, as trends toward digital financial transactions have accelerated since the COVID-19 pandemic. The process of eliminating banks as intermediaries, known as “disintermediation,” could result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the lower cost of deposits as a source of funds could have a material adverse effect on our financial condition and results of operations. Risks Related to Regulatory Compliance and Legal Matters We are subject to extensive government regulation and supervision. Banking regulations are primarily intended to protect depositors’ funds, federal deposit insurance funds and the banking system as a whole, not security holders. These regulations affect our lending practices, capital structure, investment practices, dividend policy and growth, among other things. Congress and federal regulatory agencies continually review banking laws, regulations and policies for possible changes. Changes to statutes, regulations or regulatory policies, including changes in interpretation or implementation of statutes, regulations or policies, could affect us in substantial and unpredictable ways. Such changes could subject us to additional costs, limit the types of financial services and products we may offer and/or increase the ability of non-banks to offer competing financial services and products, among other things. For example, we currently derive a portion of our 28 Table of Contents CARTER BANKSHARES, INC. AND SUBSIDIARIES