M&T BANK CORP

Previous wording

•Weakness in the economy has adversely affected the Company in the past and may adversely affect the Company in the future.

Current wording

•Weakness in the economy, or fluctuations in market factors, has adversely affected the Company in the past and may adversely affect the Company in the future.

Previous wording

•The Company may be subject to more stringent capital and liquidity requirements and new requirements relating to long-term debt.

Current wording

•The Company may be subject to more stringent capital and liquidity requirements.

Previous wording

•The Company’s information systems may experience interruptions or breaches in security, including due to events beyond the Company’s control.

Current wording

•The Company’s information systems may experience interruptions or breaches in security, such as cyber attacks, including due to events beyond the Company’s control.

Previous wording

•The Company is exposed to reputational risk which could negatively impact investor and customer confidence.

Current wording

•The Company's reputation may be harmed, which could negatively impact investor and customer confidence.

Previous wording

•The Company’s assets, communities, operations, reputation and customers could be adversely affected by the impacts of climate risk.

Current wording

•The Company’s assets, communities, operations, reputation and customers could be adversely affected by the impacts of climate-related risk.

Previous wording

Weakness in the economy has adversely affected the Company in the past and may adversely affect the Company in the future.

Current wording

Weakness in the economy, or fluctuations in market factors, has adversely affected the Company in the past and may adversely affect the Company in the future.

Previous wording

Additionally, economic conditions, financial markets and inflationary pressures may be adversely affected by the impact of current or anticipated geopolitical uncertainties; military conflicts, including current conflicts in eastern Europe and the Middle East; political uncertainty in the U.S.; potential changes to federal taxation rates; the impact of international trade policies, including tariffs; pandemics, including the COVID-19 pandemic; and global, national and local responses thereto by governmental authorities and other third parties. These unpredictable events could create, increase or prolong economic and financial disruptions and volatility that adversely affects the Company’s business, financial condition, capital and results of operations.

Current wording

Additionally, economic conditions, financial markets and inflationary pressures may be adversely affected by the impact of current or anticipated geopolitical uncertainties; military conflicts; political uncertainty in the U.S.; potential changes to federal taxation rates; the impact of international trade policies, including tariffs; pandemics; and global, national and local responses thereto by governmental authorities and other third parties. These unpredictable events could create, increase or prolong economic and financial disruptions and volatility that adversely affects the Company’s business, financial condition, capital and results of operations.

Previous wording

The Federal Reserve, through the FOMC, may raise or lower interest rates in response to economic conditions, particularly inflationary pressures and unemployment statistics. The FOMC increased the federal funds target interest rate through several hikes totaling 5.25% during 2022 and 2023 and held that interest rate at the elevated level until it began decreasing the federal funds target interest rate in September through December 2024. As a result of the high percentage of the Company’s assets and liabilities that are in the form of interest-bearing or interest-related instruments, changes in interest rates, including in the shape of the yield curve or in spreads between different market interest rates, as well as changes linked to inflation, can have a material effect on the Company’s business and profitability and the value of the Company’s assets and liabilities. For example, changes in interest rates or interest rate spreads may:

Current wording

The Federal Reserve, through the FOMC, may raise or lower interest rates in response to economic conditions, particularly inflationary pressures and unemployment statistics. The FOMC increased the federal funds target interest rate through several hikes during 2022 and 2023 and held that interest rate at the elevated level until it began decreasing the federal funds target interest rate in September through December 2024. The FOMC then maintained the target interest rate in 2025, before decreasing it in each of September, October and December 2025. As a result of the high percentage of the Company’s assets and liabilities that are in the form of interest-bearing or interest-related instruments, changes in interest rates, including in the shape of the yield curve or in spreads between different market interest rates, as well as changes linked to inflation, can have a material effect on the Company’s business and profitability and the value of the Company’s assets and liabilities. For example, changes in interest rates or interest rate spreads may:

Previous wording

•Affect mortgage prepayment speeds and result in the impairment of capitalized mortgage servicing assets, reduce the value of loans held for sale and increase the volatility of mortgage banking revenues, potentially adversely affecting the Company’s results of operations.

Current wording

•Affect mortgage prepayment speeds and result in the impairment of capitalized mortgage loan servicing assets, reduce the value of loans held for sale and increase the volatility of mortgage banking revenues, potentially adversely affecting the Company’s results of operations.

Previous wording

Any new regulatory requirements, changes to existing requirements, or changes to interpretations of requirements could require changes to the Company’s businesses, result in increased compliance costs and affect the profitability of such businesses. Additionally, such activity could affect the behaviors of third parties with which the Company deals in the ordinary course of business, such as rating agencies, insurance companies and investors. Litigation challenging actions or regulations by Federal or state authorities could, depending on the outcome, significantly affect the regulatory and supervisory framework affecting the Company’s operations. For example, there is litigation pending to challenge the Federal Reserve’s regulation on permissible interchange fees on the ground that the regulations allow higher interchange fees than permitted by statute, which, if successful, could significantly and adversely affect the fees banks can charge on debit card transactions. Heightened regulatory scrutiny, requirements or expectations could have significant effects on the Company, including through restrictions on growth or required remediation activities and associated resource requirements, and, in turn, could have a material adverse effect on the Company’s business, financial condition and results of operations.

Current wording

Any new regulatory requirements, changes to existing requirements, or changes to interpretations of requirements could require changes to the Company’s businesses, result in increased compliance costs and affect the profitability of such businesses. Additionally, such activity could affect the behaviors of third parties with which the Company deals in the ordinary course of business, such as rating agencies, insurance companies and investors. Litigation challenging actions or regulations by Federal or state authorities could, depending on the outcome, significantly affect the regulatory and supervisory framework affecting the Company’s operations. For example, there is litigation pending to challenge the Federal Reserve’s regulation on permissible interchange fees on the grounds that the regulations allow higher interchange fees than permitted by statute, which, if successful, could significantly and adversely affect the fees banks can charge on debit card transactions. In August 2025, a district court ruled against the Federal Reserve and vacated the regulation, but its order is stayed pending appeal to the circuit court. Heightened regulatory scrutiny, requirements or expectations could have significant effects on the Company, including through restrictions on growth or required remediation activities and associated resource requirements, and, in turn, could have a material adverse effect on the Company’s business, financial condition and results of operations.

Previous wording

The Company may be subject to more stringent capital and liquidity requirements and new requirements relating to long-term debt.

Current wording

The Company may be subject to more stringent capital and liquidity requirements.

Previous wording

See "Capital Requirements" and "Resolution Planning and Resolution-Related Requirements" under Part I, Item 1, "Business" for information regarding the federal banking regulators’ July 2023 proposal implementing the revisions to the Basel capital framework and August 2023 long-term debt proposal. The long-term debt proposal, if adopted, would require M&T to maintain more long-term debt than it does currently, which would likely adversely affect interest expense, net interest income and net interest margin.

Current wording

See "Capital Requirements" and "Resolution Planning and Resolution-Related Requirements" under Part I, Item 1, "Business" for information regarding the federal banking regulators’ July 2023 proposal implementing revisions to the Basel capital framework and August 2023 long-term debt proposal. The long-term debt proposal, if adopted, would require the Company to maintain more long-term debt than it does currently, which would likely adversely affect interest expense, net interest income and net interest margin.

Previous wording

Under the Tailoring Rules, for BHCs designated as Category IV institutions, including M&T, the Federal Reserve conducts biennial supervisory stress tests required under the Dodd-Frank Act whereby the BHC’s financial position is tested under assumed severely adverse economic conditions. The results of those stress tests are incorporated in the determination of M&T’s SCB. As a general matter, if M&T is unable to maintain capital in excess of regulatory minimum levels inclusive of its SCB, it would be subject to limitations on its ability to make capital distributions, including paying dividends and repurchasing stock. In June 2024, the Federal Reserve released the results of its most recent supervisory stress tests, and based on those results, on October 1, 2024, M&T’s SCB of 3.8% became effective. The results of future supervisory stress tests and the impact of proposed revisions to capital and long-term debt requirements upon the stress testing framework are uncertain, and a more severe outcome may result in a higher SCB and an increase in M&T’s effective capital requirements. An increased SCB may restrict M&T’s ability to return capital to shareholders, including through paying dividends, entering into acquisitions or repurchasing its common stock, which in turn could negatively impact market and investor perceptions of M&T.

Current wording

Under the Tailoring Rules, for BHCs designated as Category IV institutions, including M&T, the Federal Reserve conducts biennial supervisory stress tests required under the Dodd-Frank Act whereby the BHC’s financial position is tested under assumed severely adverse economic conditions. The results of those stress tests are incorporated in the determination of M&T’s SCB. As a general matter, if M&T is unable to maintain capital in excess of regulatory minimum levels inclusive of its SCB, it would be subject to limitations on its ability to make capital distributions, including paying dividends and repurchasing stock. At December 31, 2025 M&T's SCB was 2.7%. The results of future supervisory stress tests and the impact of proposed revisions to capital requirements upon the stress testing framework are uncertain, and a more severe outcome may result in a higher SCB and an increase in M&T’s effective capital requirements. An increased SCB may restrict M&T’s ability to return capital to shareholders, including through paying dividends, entering into acquisitions or repurchasing its common stock, which in turn could negatively impact market and investor perceptions of M&T.

Previous wording

Commercial real estate valuations can be highly subjective as they are based upon many assumptions. Such valuations can be significantly affected over relatively short periods of time by changes in business climate, economic conditions, interest rates and, in many cases, the results of operations of businesses and other occupants of the real property. Emerging and evolving factors such as the shift to work-from-home or hybrid-work arrangements, changing consumer preferences (including for online shopping), and resulting changes in occupancy rates as a result of these and other trends can also impact such valuations over relatively short periods. Similarly, residential real estate valuations can be impacted by housing trends, the availability of financing at reasonable interest rates, governmental policy regarding housing and housing finance, and general economic conditions affecting consumers, as described above.

Current wording

Commercial real estate valuations can be highly subjective as they are based upon many assumptions. Such valuations can be significantly affected over relatively short periods of time by changes in business climate, economic conditions, interest rates and, in many cases, the results of operations of businesses and other occupants of the real property. Evolving factors such as the shift to work-from-home or hybrid-work arrangements, changing consumer preferences (including for online shopping), and resulting changes in occupancy rates as a result of these and other trends can also impact such valuations over relatively short periods. Similarly, residential real estate valuations can be impacted by housing trends, the availability of financing at reasonable interest rates, governmental policy regarding housing and housing finance, and general economic conditions affecting consumers, as described above.

Previous wording

The Company maintains an allowance for credit losses which represents, in management’s judgment, the amount of losses expected in the loan and lease portfolio. The allowance is determined by management’s evaluation of the loan and lease portfolio based on such factors as the differing economic risks associated with each loan category, the current financial condition of specific borrowers, the economic environment in which borrowers operate, the level of delinquent loans, the value of any collateral and, where applicable, the existence of any guarantees or indemnifications. Management believes that the allowance for credit losses as of December 31, 2024 appropriately reflects expected credit losses in the loan and lease portfolio. However, there is no assurance that the allowance is sufficient to cover all credit losses that may occur.

Current wording

The Company maintains an allowance for loan losses that represents, in management’s judgment, the amount of losses expected in the loan portfolio. The allowance is determined by management’s evaluation of the loan portfolio based on such factors as the differing economic risks associated with each loan category, the current financial condition of specific borrowers, the current and forecasted economic environment in which borrowers operate, the level of delinquent loans, the value of any collateral and, where applicable, the existence of any guarantees or indemnifications. Management believes that the allowance for loan losses as of December 31, 2025 appropriately reflects expected credit losses in the loan portfolio. However, there is no assurance that the allowance is sufficient to cover all credit losses that may occur.

Previous wording

Financial services institutions are interrelated as a result of trading, clearing, counterparty, or other relationships. The Company has exposure to many different industries and counterparties, and routinely executes transactions with counterparties in the financial services industry, including commercial banks, brokers and dealers, investment banks, and other institutional clients. Many of these transactions expose the Company to credit risk in the event of a default by a counterparty or client. In addition, the Company’s credit risk may be exacerbated when the collateral held by the Company cannot be realized or is liquidated at prices not sufficient to recover the full amount of the credit due to or derivative exposure of the Company. Any resulting losses could have a material adverse effect on the Company’s financial condition and results of operations.

Current wording

Financial services institutions are interrelated as a result of trading, clearing, counterparty, and other relationships. The Company has exposure to many different industries and counterparties, and routinely executes transactions with counterparties in the financial services industry, including commercial banks, brokers and dealers, investment banks, and other institutional clients. Many of these transactions expose the Company to credit risk in the event of a default by a counterparty or client. In addition, the Company’s credit risk may be exacerbated when the collateral held by the Company cannot be realized or is liquidated at prices not sufficient to recover the full amount of the credit due to or derivative exposure of the Company. Any resulting losses could have a material adverse effect on the Company’s financial condition and results of operations.

Previous wording

The Company must maintain adequate funding sources in the normal course of business to support its operations and fund outstanding liabilities, as well as meet regulatory requirements and supervisory expectations. The Company relies on core customer deposits to be a reasonable cost and stable source of funding for the loans it makes and the operations of its business. Core customer deposits, which include noninterest-bearing deposits, interest-bearing transaction accounts, savings deposits and time deposits of $250,000 or less, have historically provided the Company with a sizeable source of relatively stable and low-cost funds. In addition to customer deposits, sources of liquidity include brokered deposits and borrowings from securities dealers, the FHLB of New York and the FRB of New York, as well as the debt and equity capital markets.

Current wording

The Company must maintain adequate funding sources in the normal course of business to support its operations and fund outstanding liabilities, as well as meet regulatory requirements and supervisory expectations. The Company primarily relies on core customer deposits to be a reasonable cost and stable source of funding for the loans it makes and the operations of its business. Core customer deposits, which include noninterest-bearing deposits, interest-bearing transaction accounts, savings deposits and time deposits of $250,000 or less, have historically provided the Company with a sizeable source of relatively stable and low-cost funds. In addition to customer deposits, other sources of liquidity, including brokered deposits and borrowings from securities dealers, the FHLB of New York and the FRB of New York, as well as the debt and equity capital markets, are available to the Company.

Previous wording

The Company’s liquidity and ability to fund and operate the business could be materially adversely affected by a variety of conditions and factors, including financial and credit market disruptions and volatility or a lack of market or customer confidence in financial markets in general, which may result in a loss of customer deposits or outflows of cash or collateral and/or ability to access capital markets on favorable terms. Negative news about the Company or the financial services industry generally may reduce market or customer confidence in the Company, which could in turn materially adversely affect the Company’s liquidity and funding. Such reputational damage may result in the loss of customer deposits, the inability to sell or securitize loans or other assets, and downgrades in one or more of the Company’s credit ratings, and may also negatively affect the Company’s ability to access the capital markets. A downgrade in the Company’s credit ratings, which could result from general industry-wide or regulatory factors not solely related to the Company, could adversely affect the Company’s ability to borrow funds, including by raising the cost of borrowings substantially, and could cause creditors and business counterparties to raise collateral requirements or take other actions that could adversely affect M&T’s ability to raise capital at a reasonable cost. Many of the above conditions and factors may be caused by events over which M&T has little or no control. There can be no assurance that significant disruption and volatility in the financial markets will not occur in the future.

Current wording

The Company’s liquidity position and ability to fund and operate the business could be materially adversely affected by a variety of conditions and factors, including financial and credit market disruptions and volatility or a lack of market or customer confidence in financial markets in general, which may result in a loss of customer deposits or outflows of cash or collateral and/or ability to access capital markets on favorable terms. Negative news about the Company or the financial services industry generally may reduce market or customer confidence in the Company, which could in turn materially adversely affect the Company’s liquidity position and ability to raise funding. Such reputational damage may result in the loss of customer deposits, the inability to sell or securitize loans or other assets, and downgrades in one or more of the Company’s credit ratings, and may also negatively affect the Company’s ability to access the capital markets. A downgrade in the Company’s credit ratings, which could result from general industry-wide or regulatory factors not solely related to the Company, could adversely affect the Company’s ability to borrow funds, including by raising the cost of borrowings substantially, and could cause creditors and business counterparties to raise collateral requirements or take other actions that could adversely affect M&T’s ability to raise capital at a reasonable cost. Many of the above conditions and factors may be caused by events over which M&T has little or no control. There can be no assurance that significant disruption and volatility in the financial markets will not occur in the future.

Previous wording

Regulatory changes relating to liquidity and risk management may also negatively impact the Company’s results of operations and competitive position. Various regulations have been adopted to impose more stringent liquidity requirements for large financial institutions, including the Company. These regulations address, among other matters, liquidity stress testing and minimum liquidity requirements. The application of certain of these regulations to banking organizations, such as the Company, have been modified, including in connection with the implementation of the Tailoring Rules in the EGRRCPA. Following the failures of certain large banks in 2023, the banking regulators have indicated they may revise the liquidity requirements applicable to large financial institutions.

Current wording

Regulatory changes relating to liquidity and risk management may also negatively impact the Company’s results of operations and competitive position. Various regulations have been adopted to impose more stringent liquidity requirements for large financial institutions, including the Company. These regulations address, among other matters, liquidity stress testing and minimum liquidity requirements. The application of certain of these regulations to banking organizations, such as the Company, have been modified, including in connection with the implementation of the Tailoring Rules in the EGRRCPA.

Previous wording

If the Company is unable to continue to fund assets through customer bank deposits or access funding sources on reasonable terms or if the Company suffers an increase in borrowing costs or otherwise fails to manage liquidity effectively, the Company’s liquidity, operating margins, financial condition and results of operations may be materially adversely affected. The Company may also need to raise additional capital and liquidity through the issuance of stock, which could dilute the ownership of existing stockholders, or reduce or even eliminate common stock dividends or share repurchases to preserve capital and liquidity.

Current wording

If the Company is unable to continue to fund assets through customer deposits or access to other funding sources at reasonable terms or if the Company suffers an increase in borrowing costs or otherwise fails to manage liquidity effectively, the Company’s liquidity, operating margins, financial condition and results of operations may be materially adversely affected. The Company may also need to raise additional capital and liquidity through the issuance of stock, which could dilute the ownership of existing stockholders, or reduce or even eliminate common stock dividends or share repurchases to preserve capital and liquidity.

Previous wording

The total amount that the Company pays for funding costs is dependent, in part, on the Company’s ability to maintain or grow its deposits. If the Company is unable to sufficiently maintain or grow its deposits to meet liquidity objectives, it may be subject to paying higher funding costs. The Company competes with banks and other financial services companies for deposits and competition for those deposits remains robust. If competitors are slow to reduce rates they pay on deposits, the Company’s funding costs could be adversely impacted, either because the Company could be forced to hold rates higher to avoid losing deposits or because the Company loses deposits and must rely on more expensive sources of funding. Customers may also move noninterest-bearing deposits to interest-bearing accounts, increasing the cost of those deposits. Checking and savings account balances and other forms of customer deposits may decrease when customers perceive alternative investments, such as the stock market, as providing a better risk/return tradeoff. The Company’s bank customers could withdraw their money and put it in alternative investments, causing the Company to lose a lower cost source of funding. Higher funding costs could reduce the Company’s net interest margin and net interest income.

Current wording

The total amount that the Company pays for funding is dependent, in part, on the Company’s ability to maintain or grow its customer deposits. If the Company is unable to sufficiently maintain or grow its deposits to meet liquidity objectives, it may be subject to paying higher funding costs. The Company competes with banks and other financial services companies for deposits and competition for those deposits remains robust. If competitors are slow to reduce rates they pay on deposits, the Company’s funding costs could be adversely impacted, either because the Company could be forced to hold rates higher to avoid losing deposits or the Company loses deposits and must rely on more expensive sources of funding. Customers may also move noninterest-bearing deposits to interest-bearing accounts, increasing the cost of those deposits. Checking and savings account balances and other forms of customer deposits may decrease when customers perceive alternative investments, such as the stock market, as providing a better risk/return tradeoff. The Company’s bank customers could withdraw their money and put it in alternative investments, causing the Company to lose a lower cost source of funding. Higher funding costs could reduce the Company’s net interest margin and net interest income.

Previous wording

M&T is a separate and distinct legal entity from its subsidiaries. M&T has typically received a substantial amount of its revenue from subsidiary dividends. These subsidiary dividends have been M&T’s principal source of funds to pay dividends on M&T common and preferred stock, pay interest and principal on its debt, and fund purchases of its common stock. Various federal and/or state laws and regulations, as well as regulatory expectations, limit the amount of dividends that M&T’s banking subsidiaries and certain non-bank subsidiaries may pay. Regulatory scrutiny of capital and liquidity levels at BHCs and IDI subsidiaries has increased in recent years and has resulted in increased regulatory focus on all aspects of capital planning, including dividends and other distributions to shareholders of banks, such as parent BHCs. See Part I, Item 1, "Business," "Supervision and Regulation of the Company" and "Distributions" for discussions of regulatory and other restrictions on dividend declarations. Also, M&T’s right to participate in a distribution of assets upon a subsidiary’s liquidation or reorganization is subject to the prior claims of that subsidiary’s creditors. Limitations on M&T’s ability to receive dividends from its subsidiaries could have a material adverse effect on its liquidity and ability to pay dividends on its stock or interest and principal on its debt, and ability to fund purchases of its common stock.

Current wording

M&T is a separate and distinct legal entity from its subsidiaries. M&T has typically received a substantial amount of its revenue from subsidiary dividends. These subsidiary dividends have been M&T’s principal source of funds to pay dividends on M&T common and preferred stock, pay interest and principal on its debt, and fund purchases of its common stock. Various federal and/or state laws and regulations, as well as regulatory expectations, limit the amount of dividends that M&T’s banking subsidiaries and certain non-bank subsidiaries may pay. Events in the banking industry have in the past resulted, and could in the future result, in increased regulatory focus on all aspects of capital planning, including dividends and other distributions to shareholders of banks, such as parent BHCs. See Part I, Item 1, "Business," "Supervision and Regulation of the Company" and "Distributions" for discussions of regulatory and other restrictions on dividend declarations. Also, M&T’s right to participate in a distribution of assets upon a subsidiary’s liquidation or reorganization is subject to the prior claims of that subsidiary’s creditors. Limitations on M&T’s ability to receive dividends from its subsidiaries could have a material adverse effect on its liquidity and ability to pay dividends on its stock or interest and principal on its debt, and ability to fund purchases of its common stock.

Previous wording

Technological change is influencing how individuals and firms conduct their financial affairs and is changing the delivery channels for financial services. Financial technology providers, who invest substantial resources in developing and designing new technology (in particular digital and mobile technology) are beginning to offer more traditional banking products (either directly or through bank partnerships) and may in the future be able to provide additional services by obtaining a bank-like charter, such as the OCC’s financial technology company charter. In addition, the emergence, adoption and evolution of new technologies that do not require intermediation, including distributed ledgers such as digital assets and blockchain, as well as advances in robotic process automation, could significantly affect the competition for financial services. As a result, the Company has had and will likely continue to have to contend with a broader range of competitors including many that are not located within the geographic footprint of its banking office network. Further, along with other participants in the financial services industry, the Company frequently attempts to introduce new technology-driven products and services that are aimed at allowing the Company to better serve customers and to reduce costs. The Company may not be able to effectively implement new technology-driven products and services that allow it to remain competitive or be successful in marketing these products and services to its customers.

Current wording

Technological change is influencing how individuals and firms conduct their financial affairs and is changing the delivery channels for financial services. Financial technology providers, who invest substantial resources in developing and designing new technology (in particular digital and mobile technology) are beginning to offer more traditional banking products (either directly or through bank partnerships), or products that may be viewed as substitutes for traditional banking products, and may in the future be able to provide additional services by obtaining a bank-like charter, such as the OCC’s financial technology company charter. In addition, the emergence, adoption and evolution of new technologies that do not require intermediation, including distributed ledgers such as digital assets and blockchain, as well as advances in robotic process automation and AI, could significantly affect the competition for financial services. As a result, the Company has had and will likely continue to have to contend with a broader range of competitors including many that are not located within the geographic footprint of its banking office network. Further, along with other participants in the financial services industry, the Company frequently attempts to introduce new technology-driven products and services that are aimed at allowing the Company to better serve customers and to reduce costs. The Company may not be able to effectively implement new technology-driven products and services that allow it to remain competitive or be successful in marketing these products and services to its customers.

Previous wording

M&T has expanded its business through acquisitions in the past and may do so in the future. The Company’s ability to complete acquisitions is in many instances subject to regulatory approval, and the Company cannot be certain when or if, or on what terms and conditions, any required regulatory approvals would be granted. In recent years, federal authorities, including the bank regulators and the DOJ, have increased their scrutiny of bank mergers and acquisitions, and there is continued uncertainty with regard to how the federal authorities will evaluate bank mergers and acquisitions, including from an antitrust perspective. Any requisite approval could be delayed or not obtained at all, including due to, among other factors, an adverse development in either party’s regulatory standing or in any other factors considered by regulators when granting such approval, including factors not known at the time of entering into the definitive agreement for the acquisition or submission of the related application for regulatory approval, and factors that may arise subsequently; governmental, political or community group inquiries, investigations or opposition; or changes in legislation or the political environment more generally. Anticipated challenges in obtaining any requisite regulatory approval, or uncertainty as to the prospects for obtaining approvals, could also prevent the Company from pursuing a potential acquisition it may otherwise view as attractive.

Current wording

M&T has expanded its business through acquisitions in the past and may do so in the future. The Company’s ability to complete acquisitions is in many instances subject to regulatory approval, and the Company cannot be certain when or if, or on what terms and conditions, any required regulatory approvals would be granted. Any requisite approval could be delayed or not obtained at all, including due to, among other factors, an adverse development in either party’s regulatory standing or in any other factors considered by regulators when granting such approval, including factors not known at the time of entering into the definitive agreement for the acquisition or submission of the related application for regulatory approval, and factors that may arise subsequently; governmental, political or community group inquiries, investigations or opposition, including those based on concerns regarding policies or practices related to fair access to financial services; or changes in legislation or the political environment more generally. Anticipated challenges in obtaining any requisite regulatory approval, or uncertainty as to the prospects for obtaining approvals, could also prevent the Company from pursuing a potential acquisition it may otherwise view as attractive.

Previous wording

The Company's success depends, in large part, on its ability to attract and retain key individuals and to have a diverse workforce. Competition for qualified and diverse candidates in the activities in which the Company engages and markets that the Company serves is significant, and the Company may not be able to hire candidates and retain them. Growth in the Company’s business, including through acquisitions, may increase its need for additional qualified personnel. The Company is increasingly competing for personnel with financial technology providers and other less regulated entities who may not have the same limitations on compensation as the Company does. Recruiting and compensation costs may increase as a result of changes in the marketplace, which may increase costs and adversely impact the Company. The increase in remote and hybrid-work arrangements and opportunities in regional, national and global labor markets has also increased competition for the Company to attract and retain skilled personnel. The Company’s current or future approach to in-office and remote-work arrangements may not meet the needs or expectations of current or prospective employees or may not be perceived as favorable as compared with the arrangements offered by other companies, which could adversely affect the Company’s ability to attract and retain employees. If the Company is not able to hire or retain highly skilled, qualified and diverse individuals, it may be unable to execute its business strategies and may suffer adverse consequences to its business, financial condition and results of operations.

Current wording

The Company's success depends, in large part, on its ability to attract and retain key individuals and to have a workforce of broad and varied skill sets. Competition for qualified and high-performing candidates in the activities in which the Company engages and markets that the Company serves is significant, and the Company may not be able to hire candidates and retain them. Growth in the Company’s business, including through acquisitions, may increase its need for additional qualified personnel. The Company is increasingly competing for personnel with financial technology providers and other less regulated entities who may not have the same limitations on compensation as the Company does. Recruiting and compensation costs may increase as a result of changes in the marketplace, which may increase costs and adversely impact the Company. The increase in remote and hybrid-work arrangements and opportunities in regional, national and global labor markets has also increased competition for the Company to attract and retain skilled personnel. The Company’s current or future approach to in-office and remote-work arrangements may not meet the needs or expectations of current or prospective employees or may not be perceived as favorable as compared with the arrangements offered by other companies, which could adversely affect the Company’s ability to attract and retain employees. If the Company is not able to hire or retain highly skilled and qualified individuals, it may be unable to execute its business strategies and may suffer adverse consequences to its business, financial condition and results of operations.

Previous wording

The Company’s compensation practices are subject to review and oversight by the Federal Reserve, the OCC, the FDIC and other regulators. The federal banking agencies have issued joint guidance on executive compensation designed to help ensure that a banking organization’s incentive compensation policies do not encourage imprudent risk taking and are consistent with the safety and soundness of the organization. In addition, the Dodd-Frank Act required those agencies, along with the SEC, to adopt rules to require reporting of incentive compensation and to prohibit certain compensation arrangements. If as a result of complying with such rules the Company is unable to attract and retain qualified employees, or do so at rates necessary to maintain its competitive position, or if the compensation costs required to attract and retain employees become more significant, the Company’s performance, including its competitive position, could be materially adversely affected.

Current wording

The Company’s compensation practices are subject to review and oversight by the Federal Reserve, the OCC, the FDIC and other regulators. The federal banking agencies have issued joint guidance on incentive compensation designed to help ensure that a banking organization’s incentive compensation policies do not encourage imprudent risk taking and are consistent with the safety and soundness of the organization. In addition, the Dodd-Frank Act required those agencies, along with the SEC, to adopt rules to require reporting of incentive compensation and to prohibit certain compensation arrangements. If as a result of complying with such rules the Company is unable to attract and retain qualified employees, or do so at rates necessary to maintain its competitive position, or if the compensation costs required to attract and retain employees become more significant, the Company’s performance, including its competitive position, could be materially adversely affected.

Previous wording

Like all businesses, the Company is subject to operational risk, which represents the risk of loss resulting from human error or misconduct, inadequate or failed internal processes and systems, and external events, including the risk of loss resulting from fraud by employees or persons outside the Company, and breaches in data security. Operational risk also encompasses reputational risk and compliance and legal risk, which is the risk of loss from violations of, or noncompliance with, laws, rules, regulations, prescribed practices or ethical standards, as well as the risk of noncompliance with contractual and other obligations. The Company is also exposed to the above referenced operational risks through outsourcing arrangements, as such outsourced vendors are exposed to operational risks themselves, as well as the effects that changes in circumstances or capabilities of its outsourced vendors can have on the Company’s ability to continue to perform operational functions necessary to its business. Although the Company seeks to mitigate operational risk through a system of internal controls that are reviewed and updated, no system of controls, however well designed and maintained, is infallible. Control weaknesses or failures or other operational risks could result in charges, increased operational costs, harm to the Company’s reputation, regulatory scrutiny or foregone business opportunities.

Current wording

Like all businesses, the Company is subject to operational risk, which represents the risk of loss resulting from human error or misconduct, inadequate or failed internal processes and systems, and external events, including the risk of loss resulting from fraud by employees or persons outside the Company, and breaches in data security. Operational risk also encompasses risks of harm to the Company's reputation, and compliance and legal risk, which is the risk of loss from violations of, or noncompliance with, laws, rules, regulations, prescribed practices or ethical standards, as well as the risk of noncompliance with contractual and other obligations. The Company is also exposed to the above referenced operational risks through outsourcing arrangements, as such outsourced vendors are exposed to operational risks themselves, as well as the effects that changes in circumstances or capabilities of its outsourced vendors can have on the Company’s ability to continue to perform operational functions necessary to its business. Although the Company seeks to mitigate operational risk through a system of internal controls that are reviewed and updated, no system of controls, however well designed and maintained, is infallible. Control weaknesses or failures or other operational risks could result in charges, increased operational costs, harm to the Company’s reputation, regulatory scrutiny or foregone business opportunities.

Previous wording

The Company’s information systems may experience interruptions or breaches in security, including due to events beyond the Company’s control.

Current wording

The Company’s information systems may experience interruptions or breaches in security, such as cyber attacks, including due to events beyond the Company’s control.

Previous wording

Information security risks for large financial institutions such as M&T have increased significantly in recent years in part because of the proliferation of new technologies, such as AI and digital and mobile banking to conduct financial transactions, the increased connectivity of third parties (including contractors) and electronic devices to our systems, and the increased sophistication and activities of organized crime, hackers, terrorists, nation-states, activists and other external parties.

Current wording

Information security risks for large financial institutions such as M&T have increased significantly in recent years in part because of the proliferation of new technologies, such as AI and digital and mobile banking to conduct financial transactions, the increased connectivity of third parties (including contractors) and electronic devices to the Company's systems, and the increased sophistication and activities of organized crime, hackers, terrorists, nation-states, activists and other external parties. There have been increasing efforts on the part of third parties, including through cyber attacks, to breach data security at financial institutions or with respect to financial transactions.

Previous wording

There have been increasing efforts on the part of third parties, including through cyber attacks, to breach data security at financial institutions or with respect to financial transactions. There have been numerous instances involving financial services and consumer-based companies reporting unauthorized access to and disclosure of client or customer information or the destruction or theft of corporate data, including by executive impersonation and third party vendors, or the freezing of operating systems and databases making them inaccessible or unusable. There have also been several highly publicized cases where hackers have requested "ransom" payments in exchange for not disclosing customer information or for restoring access to, or the usage of, operating systems and databases. Ransomware is a form of malicious software, known as "malware," designed to block access to, and often encrypt, computer systems or data. Once the victim’s computer system or data is locked down and encrypted, rendering it essentially useless, the malicious cyber actor then extorts the victim by demanding a ransom payment in exchange for providing a method to decrypt it. The attacker may also copy the victim’s data in the course of the attack and threaten to sell or publish the data if the ransom is not paid. Ransomware attacks can result in a loss of business functionality and of sensitive data.

Current wording

There have been numerous instances involving financial services and consumer-based companies reporting unauthorized access to and disclosure of client or customer information or the destruction or theft of corporate data, including by executive impersonation and third party vendors, or the freezing of operating systems and databases making them inaccessible or unusable. There have also been several highly publicized cases where hackers have requested "ransom" payments in exchange for not disclosing customer information or for restoring access to, or the usage of, operating systems and databases. Ransomware is a form of malicious software, known as "malware," designed to block access to, and often encrypt, computer systems or data. Once the victim’s computer system or data is locked down and encrypted, rendering it essentially useless, the malicious cyber actor then extorts the victim by demanding a ransom payment in exchange for providing a method to decrypt it. The attacker may also copy the victim’s data in the course of the attack and threaten to sell or publish the data if the ransom is not paid. Ransomware attacks can result in a loss of business functionality and of sensitive data.

Previous wording

A disruption or breach, including as a result of a cyber attack, or media reports of perceived security vulnerabilities at the Company or at third-party service providers could result in significant legal and financial exposure, regulatory intervention, remediation costs, damage to reputation or loss of confidence in the security of systems, products and services that could adversely affect the Company’s business. Like other U.S. financial services providers, the Company continues to be targeted with evolving and adaptive cyber threats from sophisticated third parties. Although the Company is not aware of any material losses relating to cybersecurity incidents, there can be no assurance that unauthorized access or cybersecurity incidents will not become known or occur or that the Company will not suffer such losses in the future.

Current wording

A disruption or breach, including as a result of a cyber attack, or media reports of perceived security vulnerabilities at the Company or at third-party service providers could result in significant legal and financial exposure, regulatory intervention, remediation costs, damage to the Company's reputation, or loss of confidence in the security of systems, products and services that could adversely affect the Company’s business. Like other U.S. financial services providers, the Company continues to be targeted with evolving and adaptive cyber threats from sophisticated third parties. Although the Company is not aware of any material losses relating to cybersecurity incidents, there can be no assurance that unauthorized access or cybersecurity incidents will not become known or occur or that the Company will not suffer such losses in the future.

Previous wording

The Company is also subject to laws and regulations relating to the privacy of the information of customers, clients, employees or others, and any failure to comply with these laws and regulations could expose the Company to liability and/or reputational damage. New privacy and data protection initiatives will impose additional operational burdens on the Company, may limit the Company’s ability to pursue desirable business initiatives and increase the risks associated with any future use of customer data. Significant examples include the General Data Protection Act, the UK General Data Protection Act, known as The Data Protection Act of 2018, and the California Consumer Privacy Act. Compliance with these and other laws and regulations may require changes to policies, procedures and technology for information security and segregation of data, which could, among other things, make the Company more vulnerable to operational failures, and to monetary penalties, litigation or regulatory enforcement actions for breach of such laws and regulations.

Current wording

The Company is also subject to laws and regulations relating to the privacy of the information of customers, clients, employees or others, and any failure to comply with these laws and regulations could expose the Company to liability and/or reputational damage. New privacy and data protection initiatives will impose additional operational burdens on the Company, may limit the Company’s ability to pursue desirable business initiatives and increase the risks associated with any future use of customer data. Significant examples include the General Data Protection Regulation, the United Kingdom General Data Protection Regulation, known as The Data Protection Act of 2018, and the California Consumer Privacy Act and corresponding regulations. Compliance with these and other laws and regulations may require changes to policies, procedures and technology for information security and segregation of data, which could, among other things, make the Company more vulnerable to operational failures, and to monetary penalties, litigation or regulatory enforcement actions for breach of such laws and regulations.

Previous wording

The Company or its third-party vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services or products. The development and use of AI presents a number of risks and challenges to M&T’s business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, and includes regulation targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment and other laws applicable to the use of AI. These evolving laws and regulations could require changes in the

Current wording

The Company or its third-party vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services or products. The development and use of AI presents a number of risks and challenges to M&T’s business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, and includes regulation targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment and other laws applicable to the use of AI. These evolving laws and regulations could require changes in the Company’s or third parties’ implementation of AI technology and increase the Company’s compliance costs and risk of non-compliance.

Previous wording

The Company uses quantitative models to assist in measuring risks and estimating or predicting certain financial values, among other uses. The Company uses models throughout many of its business lines, relying on them, along with its judgement, for many decision making processes. Examples of areas where the Company uses models include determining the pricing of various products, grading loans and extending credit, measuring interest rate and other market risks, predicting or estimating losses, assessing capital adequacy and evaluating liquidity risks. The Company also uses models to estimate the value of financial instruments and balance sheet items. Models generally evaluate the performance of various factors under anticipated future conditions, relying on historical data to help build the model and in part on assumptions as to the future, often with respect to macroeconomic conditions, in order to generate the output. The models used may not accurately account for all variables and may fail to predict outcomes accurately and/or may overstate or understate certain effects. Poorly designed, implemented, or managed models or misused models, including in the choice of relevant historical data or future-looking assumptions, present the risk that the Company’s business decisions that consider information based on such models will be adversely affected due to inadequate or inaccurate information, which may damage the Company’s reputation and adversely affect its reported financial condition and results of operations. Even if the underlying assumptions used in the Company’s models are adequate, the models may be deficient due to errors in computer code, use of bad data during development or input into the model during model use, or the use of a model for a purpose outside the scope of the model’s design. As a result, the Company’s models may not fully capture or express the risks the Company faces, may suggest that the Company has sufficient reserves, capital or liquidity when it may not, or may lead the Company to misjudge the business and economic environment in which it operates. If the models fail to produce reliable results on an ongoing basis, the Company may not make appropriate risk management, capital planning, or other business or financial decisions. Furthermore, strategies that the Company employs to manage and govern the risks associated with its use of models may not be effective or fully reliable, and as a result, the Company may realize losses or other lapses. Finally, information the Company provides to the public or to its regulators based on poorly designed, implemented, or managed models or misused models could be inaccurate or misleading. Some of the decisions that the Company’s regulators make, including those related to capital distributions to M&T’s stockholders, could be affected adversely due to their perception that the quality of the models used to generate the relevant information is insufficient.

Current wording

The Company uses quantitative models to assist in measuring risks and estimating or predicting certain financial values, among other uses. The Company uses models throughout many of its business lines, relying on them, along with its judgment, for many decision making processes. Examples of areas where the Company uses models include determining the pricing of various products, grading loans and extending credit, measuring interest rate and other market risks, predicting or estimating losses, assessing capital adequacy and evaluating liquidity risks. The Company also uses models to estimate the value of financial instruments and balance sheet items. Models generally evaluate the performance of various factors under anticipated future conditions, relying on historical data to help build the model and in part on assumptions as to the future, often with respect to macroeconomic conditions, in order to generate the output. The models used may not accurately account for all variables and may fail to predict outcomes accurately and/or may overstate or understate certain effects. Poorly designed, implemented, or managed models or misused models, including in the choice of relevant historical data or future-looking assumptions, present the risk that the Company’s business decisions that consider information based on such models will be adversely affected due to inadequate or inaccurate information, which may damage the Company’s reputation and adversely affect its reported financial condition and results of operations. Even if the underlying assumptions used in the Company’s models are adequate, the models may be deficient due to errors in computer code, use of bad data during development or input into the model during model use, or the use of a model for a purpose outside the scope of the model’s design. As a result, the Company’s models may not fully capture or express the risks the Company faces, may suggest that the Company has sufficient reserves, capital or liquidity when it may not, or may lead the Company to misjudge the business and economic environment in which it operates. If the models fail to produce reliable results on an ongoing basis, the Company may not make appropriate risk management, capital planning, or other business or financial decisions. Furthermore, strategies that the Company employs to manage and govern the risks associated with its use of models may not be effective or fully reliable, and as a result, the Company may realize losses or other lapses. Finally, information the Company provides to the public or to its regulators based on poorly designed, implemented, or managed models or misused models could be inaccurate or misleading. Some of the decisions that the Company’s regulators make, including those related to capital distributions to M&T’s stockholders, could be affected adversely due to their perception that the quality of the models used to generate the relevant information is insufficient.

Previous wording

The Company is exposed to reputational risk which could negatively impact investor and customer confidence.

Current wording

The Company's reputation may be harmed, which could negatively impact investor and customer confidence.

Previous wording

Moreover, there has been an increased focus by investors and other stakeholders on topics related to corporate policies and approaches regarding diversity, equity and inclusion matters and environmental, social and governance matters. Due to divergent stakeholder views on these matters, the Company is at increased risk that any action, or lack thereof, by the Company concerning these matters will be perceived negatively by at least some stakeholders, which could adversely affect the Company’s reputation.

Current wording

Moreover, there has been an increased focus by investors and other stakeholders on topics related to corporate policies and approaches relating to environmental, social and governance matters. Due to divergent stakeholder views on these matters, the Company is at increased risk that any action, or lack thereof, by the Company concerning these matters will be perceived negatively by at least some stakeholders, which could adversely affect the Company’s reputation.

Previous wording

The Company has established processes and procedures intended to identify, measure, monitor, report, and analyze the types of risk to which it is subject, including liquidity risk, credit risk, market risk, interest rate risk, compliance risk, strategic risk, reputational risk, and operational risk related to its employees, systems and vendors, among others. There are inherent limitations to the Company’s risk management strategies as there may exist, or may develop in the future, risks that it has not appropriately anticipated or identified. In addition, the Company relies on both qualitative and quantitative factors, including models, to monitor, measure and analyze certain risks and to estimate certain financial values, which are subject to error. The Company must also develop and maintain a culture of risk management among its employees, as well as manage risks associated with third parties, and could fail to do so effectively. If the Company’s Risk Framework proves ineffective, the Company could incur litigation and negative regulatory consequences, and suffer unexpected losses that could affect its financial condition or results of operations.

Current wording

The Company has established processes and procedures intended to identify, measure, monitor, report, and analyze the types of risk to which it is subject, including liquidity risk, credit risk, market risk, interest rate risk, compliance risk, strategic risk, risks related to harm to the Company's reputation, and operational risks related to its employees, systems and vendors, among others. There are inherent limitations to the Company’s risk management strategies as there may exist, or may develop in the future, risks that it has not appropriately anticipated or identified. In addition, the Company relies on both qualitative and quantitative factors, including models, to monitor, measure and analyze certain risks and to estimate certain financial values, which are subject to error. The Company must also develop and maintain a culture of risk management among its employees, as well as manage risks associated with third parties, and could fail to do so effectively. If the Company’s Risk Framework proves ineffective, the Company could incur litigation and negative regulatory consequences, and suffer unexpected losses that could affect its financial condition or results of operations.

Previous wording

Pandemics, such as the COVID-19 pandemic; acts of war; military conflicts, including current conflicts in eastern Europe and in the Middle East; or terrorism and other adverse external events, including severe weather and other natural disasters, could have a significant impact on the Company’s ability to conduct business. Such events could affect the stability of the Company’s deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue and/or cause the Company to incur additional expenses. Although the Company has established disaster recovery plans and procedures, and monitors for significant environmental effects on its properties or its investments, the occurrence of any such event could have a material adverse effect on the Company.

Current wording

Pandemics; acts of war; military conflicts, including current conflicts in eastern Europe and in the Middle East; or terrorism and other adverse external events, including severe weather and other natural disasters, could have a significant impact on the Company’s ability to conduct business. Such events could affect the stability of the Company’s deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue and/or cause the Company to incur additional expenses. Although the Company has established disaster recovery plans and procedures, and monitors for significant environmental effects on its properties or its investments, the occurrence of any such event could have a material adverse effect on the Company. For example, the Coronavirus disease 2019 pandemic created economic and financial disruptions that adversely affected the Company’s business, financial condition, capital and results of operations.

Previous wording

Depending on the impact of pandemics, military conflicts, terrorism and other detrimental or destabilizing global and national events on general economic and market conditions, consumer and corporate spending and investment and borrowing patterns, there is a risk that adverse conditions could occur, including supply chain disruptions; higher inflation; decreased demand for the

Current wording

Depending on the impact of pandemics, military conflicts, terrorism and other detrimental or destabilizing global and national events on general economic and market conditions, consumer and corporate spending and investment and borrowing patterns, there is a risk that adverse conditions could occur, including supply chain disruptions; higher inflation; decreased demand for the Company’s products and services or those of its borrowers, which could increase credit risk;

Previous wording

Company’s products and services or those of its borrowers, which could increase credit risk; challenges related to maintaining sufficient qualified personnel due to labor shortages, talent attrition, employee illness and willingness to return to work; and disruptions to business operations at the Company and at counterparties, vendors and other service providers. Even after such events fully subside, the U.S. economy may experience a prolonged economic slowdown or recession, and M&T anticipates the Company’s businesses would be materially and adversely affected by a prolonged economic slowdown or recession.

Current wording

challenges related to maintaining sufficient qualified personnel due to labor shortages, talent attrition, employee illness and willingness to return to work; and disruptions to business operations at the Company and at counterparties, vendors and other service providers. Even after such events fully subside, the U.S. economy may experience a prolonged economic slowdown or recession, and M&T anticipates the Company’s businesses would be materially and adversely affected by a prolonged economic slowdown or recession.