Columbia Financial, Inc./MD/

Qualitative Analysis. Interest rate risk is defined as the exposure of a Company's current and future earnings and capital arising from movements in market interest rates. The guidelines of the Company’s interest rate risk policy seek to limit the exposure to changes in interest rates that affect the underlying economic value of assets, liabilities, earnings and capital.

The Asset/Liability Committee meets regularly to review the impact of interest rate changes on net interest income, net interest margin, net income, and the economic value of equity. The Asset/Liability Committee reviews a variety of strategies that project changes in asset or liability mix and the impact of those changes on projected net interest income and net income.

The Company’s strategy for liabilities has been to maintain a stable funding base by focusing on core deposit accounts. The Company’s ability to retain maturing time deposit accounts is the result of its strategy to remain competitively priced within its marketplace. The Company’s pricing strategy may vary depending upon current funding needs and the ability of the Company to fund operations through alternative sources.

Quantitative Analysis. Current and future sensitivity to changes in interest rates are measured through the use of balance sheet and income simulation models. The analysis captures changes in net interest income using flat rates as a base and rising and declining interest rate forecasts. Changes in net interest income and net income for the forecast period, generally twelve to twenty-four months, are measured and compared to policy limits for acceptable changes. The Company periodically reviews historical deposit re-pricing activity and makes modifications to certain assumptions used in its balance sheet and income simulation models regarding the interest rate sensitivity of deposits. These modifications are made to more closely reflect the most likely results under the various interest rate change scenarios. Since it is inherently difficult to predict the sensitivity of interest-bearing deposits to changes in interest rates, the changes in net interest income due to changes in interest rates cannot be precisely predicted. There are a variety of reasons that may cause actual results to vary considerably from the predictions presented below which include, but are not limited to, the timing, magnitude, and frequency of changes in interest rates, interest rate spreads, prepayments, and actions taken in response to such changes.

Assumptions used in the simulation model may include but are not limited to:

•Securities pricing from third parties;

•Loan pricing indications from third parties;

•Loan and depository spread assumptions based upon the Company's product offerings;

•Securities and borrowing spreads based upon third party indications; and

•Prepayment assumptions derived from the Company's actual results and third party surveys.

Certain shortcomings are inherent in the methodologies used in the interest rate risk measurements. Modeling changes in net interest income requires the use of certain assumptions regarding prepayment and deposit repricing, which may or may not reflect the manner in which actual yields and costs respond to changes in market interest rates. While management believes such assumptions are reasonable, there can be no assurance that assumed prepayment rates and repricing rates will approximate actual future asset prepayment and liability repricing activity.

The table below sets forth an approximation of our interest rate exposure. Net interest income assumes that the composition of interest sensitive assets and liabilities existing at the beginning of a period remains constant over the period being measured and also assumes that a particular change in interest rates is reflected uniformly across the yield curve regardless of the duration to maturity or repricing of specific assets and liabilities. Accordingly, although the net interest income table provides an indication of our interest rate risk exposure at a particular point in time, such measurement is not intended to and does not provide a precise forecast of the effect of changes in market interest rates on our net interest income and will differ from actual.

The table below sets forth, as of June 30, 2026, the net portfolio value, the estimated changes in the net portfolio value, and the net interest income that would result from the designated instantaneous parallel changes in market interest rates. This data is for Columbia Bank and its subsidiaries only and does not include any assets of Columbia Financial, Inc.

As of June 30, 2026, based on the scenarios above, net interest income would decrease by approximately 0.63% if rates were to rise 200 basis points, and would increase by 0.32% if rates were to decrease 200 basis points over a one-year time horizon.

Another measure of interest rate sensitivity is to model changes in net portfolio value through the use of immediate and sustained interest rate shocks. As of June 30, 2026, based on the scenarios above, in the event of an immediate and sustained 200 basis point increase in interest rates, the NPV is projected to decrease 9.15%. If rates were to decrease 200 basis points, the model forecasts a 4.57% increase in the NPV.

Overall, our June 30, 2026 results indicate that we are adequately positioned with an acceptable net interest income and economic value at risk in all scenarios and that all interest rate risk results continue to be within our policy guidelines.

Liquidity Management and Capital Resources:

Liquidity Management. Liquidity refers to the Company's ability to generate adequate amounts of cash to meet financial obligations of a short-term and long-term nature. Sources of funds consist of deposit inflows, loan repayments and maturities, maturities and sales of securities, and the ability to execute new borrowings. While maturities and scheduled amortization of loans and securities are predictable sources of funds, deposit flows, calls of debt securities, and prepayments on loans and mortgage-backed securities are influenced by economic conditions, competition, and interest rate movements.

The Company's cash flows are identified as cash flows from operating activities, investing activities and financing activities. Refer to the Consolidated Statements of Cash Flows for further details of the cash inflows and outflows of the Company.

We mitigate liquidity risk by attempting to structure our balance sheet prudently and by maintaining diverse borrowing resources to fund potential cash needs. For example, we structure our balance sheet so that we fund less liquid assets, such as loans, with stable funding sources, such as retail deposits, long-term debt, wholesale borrowings, and capital. We assess liquidity needs arising from asset growth, maturing obligations, and deposit withdrawals, taking into account operations in both the normal course of business and times of unusual events. In addition, we consider our off-balance sheet arrangements and commitments that may impact liquidity in certain business environments.

Our Asset/Liability Committee measures liquidity risks, sets policies to manage these risks, and reviews adherence to those policies at its quarterly meetings. For example, we manage the use of short-term unsecured borrowings as well as total wholesale funding through policies established and reviewed by our Asset/Liability Committee. In addition, the Risk Committee of our board of directors reviews liquidity limits and reviews current and forecasted liquidity positions at each of its regularly scheduled meetings.

We have contingency funding plans that assess liquidity needs that may arise from certain stress events such as rapid asset growth or financial market disruptions. Our contingency plans also provide for continuous monitoring of net borrowed funds and dependence and available sources of contingent liquidity. These sources of contingent liquidity include cash and cash equivalents, capacity to borrow at the Federal Reserve discount window and through the FHLB system, fed funds purchased from other banks and the ability to sell, pledge or borrow against unencumbered securities in our securities portfolio. The potential liquidity from these sources is an amount we believe currently exceeds any contingent liquidity need. As of June 30, 2026 and December 31, 2025, the Company had immediate access to approximately $2.3 billion and $3.1 billion, respectively, of funding from these sources, with additional unpledged loan collateral of approximately $3.6 billion and $3.0 billion, respectively.

Capital Resources. The Company and the Bank are subject to various regulatory capital requirements administered by the federal banking regulators, including a risk-based capital measure. The Federal Reserve establishes capital requirements, including well capitalized standards, for the consolidated financial holding company, and the Office of the Comptroller of the Currency (the "OCC") has similar requirements for the Bank. Failure to meet minimum capital requirements can initiate certain mandatory and possibly additional discretionary actions by regulators that, if undertaken, could have a direct material effect on the Company's Consolidated Statements of Financial Condition.

Federal regulators require federally insured depository institutions to meet several minimum capital standards: (1) total capital to risk-weighted assets of 8.0%; (2) tier 1 capital to risk-weighted assets of 6.0%; (3) common equity tier 1 capital to risk-weighted assets of 4.5%; and (4) tier 1 capital to adjusted total assets of 4.0%. In addition to establishing the minimum regulatory capital requirements, the regulations limit capital distributions and certain discretionary bonus payments to management if the institution does not hold a “capital conservation buffer” consisting of 2.5% of common equity tier 1 capital to risk-weighted assets above the amount necessary to meet its minimum risk-based capital requirements. The regulators established a framework for the classification of savings institutions into five categories: well capitalized, adequately capitalized, undercapitalized, significantly undercapitalized, and critically undercapitalized. Generally, an institution is considered well capitalized if it has: a total capital to risk-weighted assets ratio of at least 10.0%, a tier 1 capital to risk-weighted assets ratio of at least 8.0%, a common tier 1 capital to risk-weighted assets ratio of at least 6.5%, and a tier 1 capital to adjusted total assets ratio of at least 5.0%. As of June 30, 2026 and December 31, 2025, each of the Company and Columbia Bank exceeded all capital adequacy requirements to which it is subject.

The following tables present the Company's and Columbia Bank's actual capital amounts and ratios at June 30, 2026 and December 31, 2025 compared to the Federal Reserve Bank minimum capital adequacy requirements and the Federal Reserve Bank requirements for classification as a well-capitalized institution: