Workflow
Huntington(HBAN) - 2024 Q4 - Annual Report

Branch Operations and Market Presence - As of December 31, 2024, the company operates 978 full-service branches across multiple states, including Ohio, Colorado, and Florida[18]. - The company holds a 43% market share in Columbus, OH, with deposits totaling 44.814 billion[35]. Banking Segments and Services - The Consumer & Regional Banking segment offers a wide array of financial products, including deposits, lending, and investment management, aimed at both consumer and business customers[20]. - The Commercial Banking segment serves mid-market to large corporates, providing a comprehensive set of product offerings, including treasury management and capital markets[26]. Customer Experience and Innovation - The company emphasizes a "Fair Play" banking philosophy, which includes features like 24-Hour Grace® and Asterisk-Free Checking® to enhance customer experience[33]. - The company is actively investing in technology and innovation to remain competitive against FinTechs and other financial service providers[37]. - The company has developed unique payment solutions, such as Huntington ChoicePay, to cater to diverse client segments[26]. Regulatory Environment and Capital Requirements - Regulatory scrutiny has increased following the banking turmoil in early 2023, impacting merger and acquisition activities[40]. - The company is subject to extensive regulation by various federal and state agencies, including the Federal Reserve and OCC[38]. - Huntington's CET1 risk-based capital ratio was 10.5% as of December 31, 2024, exceeding the minimum requirement of 4.5%[70]. - The Tier 1 risk-based capital ratio for Huntington was 11.9% as of December 31, 2024, surpassing the minimum requirement of 6.0%[70]. - The total risk-based capital ratio for Huntington was 14.3% as of December 31, 2024, well above the minimum requirement of 8.0%[70]. - Huntington is subject to a stress capital buffer (SCB) of 2.5% effective October 1, 2024[68]. - The Bank's Tier 1 leverage ratio was 8.9% as of December 31, 2024, exceeding the well-capitalized standard of 5.0%[70]. - Huntington's regulatory capital ratios were above the well-capitalized standards and met applicable capital buffer requirements as of December 31, 2024[72]. - The U.S. banking agencies proposed a rule to implement the Basel III endgame agreement, which aims to significantly increase capital requirements for large banks[73]. - Huntington is required to submit an annual capital plan to the Federal Reserve, which includes an assessment of expected uses and sources of capital[75]. - The Federal Reserve has not yet revised the well-capitalized standard for BHCs to reflect the higher capital requirements imposed under the U.S. Basel III capital rules[66]. - Huntington has the ability to provide additional capital to the Bank to maintain the Bank's risk-based capital ratios at well-capitalized levels[71]. - Huntington's indicative SCB requirement for its 2024 Capital Plan is set at a minimum of 2.5%, down from the previous 3.2%[78]. - Huntington is authorized to make capital distributions without prior Federal Reserve approval, provided it complies with capital rules[79]. - The Bank submitted its most recent resolution plan to the FDIC on November 30, 2022, with the next submission due by July 1, 2025[85]. - Huntington's ability to declare dividends is limited by federal banking law and Federal Reserve regulations, requiring sufficient net income[81]. - The Federal Reserve may require Huntington to provide financial assistance to the Bank in times of financial distress[86]. - Huntington's capital distributions depend on receiving dividends from its subsidiaries, which are subject to various federal limitations[80]. - The Federal Reserve evaluates Huntington's capital planning process through regular supervisory reviews[77]. - Huntington must maintain applicable capital buffer requirements to avoid restrictions on capital distributions[82]. Cybersecurity and Compliance - The Bank is subject to extensive cybersecurity and data privacy regulations, including the GLBA and its amendments[96]. - Huntington's compliance programs are in place to adhere to the Volcker Rule, which restricts certain trading activities[84]. - The CISA law allows companies to monitor their own systems and carry out defensive measures against cyber-attacks[98]. - The CCPA imposes civil penalties of up to 2,500 for each violation and up to 7,500forintentionalviolations[101].HuntingtonscybersecuritypracticesareintegratedintoitsoverallEnterpriseRiskManagement(ERM)approach,withcybersecurityrisksidentifiedascoreenterpriserisks[214].Thecompanyconductsongoingassessmentsandtestingofitscybersecurityprocesses,includingthirdpartyevaluationsandindependentreviews[215].Huntingtonmaintainsaglobalcybersecuritythreatoperationaimedatpromptlydetectingandrespondingtocybersecurityincidents[215].Thecompanyhasestablishedincidentresponseplansthataretestedatleastannuallytoaddresspotentialcybersecurityincidents[215].TheTechnologyCommitteeoftheBoardoverseesthemanagementofcybersecurityrisksandreceivesregularupdatesonthethreatenvironmentandvulnerabilityassessments[216].TheChiefInformationSecurityOfficerprovidesquarterlyupdatestotheTechnologyCommitteeoncybersecuritymatters,ensuringtheBoardisinformedofanymaterialincidents[216].Huntingtonemploystechnicalsafeguardssuchasfirewallsandintrusiondetectionsystemstoprotectitsinformationsystemsfromcybersecuritythreats[215].Thecompanyemphasizescollaborationwithpublicandprivateentitiestoidentifyandassesscybersecurityrisks[215].Ongoingtrainingisprovidedtopersonnelregardingcybersecuritythreats,tailoredtotheirrolesandresponsibilities[215].CommunityCommitmentandSocialResponsibilityHuntingtonBancshareshascommitted7,500 for intentional violations[101]. - Huntington's cybersecurity practices are integrated into its overall Enterprise Risk Management (ERM) approach, with cybersecurity risks identified as core enterprise risks[214]. - The company conducts ongoing assessments and testing of its cybersecurity processes, including third-party evaluations and independent reviews[215]. - Huntington maintains a global cybersecurity threat operation aimed at promptly detecting and responding to cybersecurity incidents[215]. - The company has established incident response plans that are tested at least annually to address potential cybersecurity incidents[215]. - The Technology Committee of the Board oversees the management of cybersecurity risks and receives regular updates on the threat environment and vulnerability assessments[216]. - The Chief Information Security Officer provides quarterly updates to the Technology Committee on cybersecurity matters, ensuring the Board is informed of any material incidents[216]. - Huntington employs technical safeguards such as firewalls and intrusion detection systems to protect its information systems from cybersecurity threats[215]. - The company emphasizes collaboration with public and private entities to identify and assess cybersecurity risks[215]. - Ongoing training is provided to personnel regarding cybersecurity threats, tailored to their roles and responsibilities[215]. Community Commitment and Social Responsibility - Huntington Bancshares has committed 40 billion over five years to strengthen small businesses and foster opportunities within its footprint[124]. - The Lift Local Business® program has exceeded its commitment by funding 153millioninloansthroughSeptember30,2024[124].Huntingtoncommittedtoproviding153 million in loans through September 30, 2024[124]. - Huntington committed to providing 24 billion in affordable housing financing and consumer lending, having reached 18.2billionofthiscommitmentbyOctober31,2024[125].HuntingtonexpandeditsSmallBusinesslendingprogramswithacommitmentof18.2 billion of this commitment by October 31, 2024[125]. - Huntington expanded its Small Business lending programs with a commitment of 10 billion, achieving 8.2billionbyOctober31,2024[125].Thecompanycommitted8.2 billion by October 31, 2024[125]. - The company committed 6.5 billion in community development loans and investments, exceeding this with 7.8billionfundedbyOctober31,2024[125].A7.8 billion funded by October 31, 2024[125]. - A 16 billion commitment to diverse borrowers and communities has reached $14.7 billion by October 31, 2024, aimed at advancing systemic change[125]. - The Bank received the highest possible CRA rating of "Outstanding" in its most recent examination[110]. - The CRA final rule, effective April 1, 2024, is expected to significantly increase the thresholds for large banks to receive "Outstanding" ratings in future evaluations[111]. Economic and Operational Risks - Economic uncertainties, including inflation and rising interest rates, could adversely affect Huntington's business and financial condition[145]. - Changes in interest rates could reduce net interest income and negatively impact the value of loans and securities, affecting cash flows and financial results[148]. - Inflation could negatively impact profitability and stock price, potentially leading to increased default rates and credit losses[155]. - The company operates in a highly competitive environment, facing pressure from larger competitors and non-bank entities that may have greater flexibility[156]. - Liquidity is primarily sourced from a large supply of deposits, which is dependent on customer confidence and regulatory conditions[158]. - Access to capital markets is crucial for meeting cash flow requirements and funding corporate activities; disruptions could adversely affect operations[161]. - A reduction in credit ratings could increase the cost of funds and limit access to liquidity and capital[164]. - Global economic instability and geopolitical matters may adversely impact financial condition and operational results[165]. - Operational risks include potential failures or breaches of internal and third-party systems, which could disrupt business operations[166]. - Cybersecurity risks are significant, with potential for data breaches that could harm business reputation and lead to legal exposure[170]. - The company may need to invest significantly in updating systems to mitigate operational risks and ensure compliance with regulations[169]. - Regulatory changes could impact the availability of dividends from subsidiaries, affecting the company's liquidity and ability to pay dividends[160]. - The reliance on third-party service providers introduces risks that could adversely affect the ability to deliver products and services[182]. - Climate change poses physical and transition risks that could disrupt operations and increase expenses, necessitating a formal climate risk program[187]. - The introduction of AI into business operations may expose the company to new legal, regulatory, and reputational risks, potentially impacting operational efficiency[188]. - The company may not have adequate insurance coverage to compensate for losses from a major cyber-attack or information breach[174]. - Negative public opinion resulting from cybersecurity incidents could damage the company's reputation and customer relationships[176]. - The integration of acquired businesses may face challenges, including retaining customer relationships and achieving anticipated efficiencies[177]. - Changes in accounting policies and standards could affect the financial reporting and condition of the company[184]. - The banking industry is highly regulated, with supervision from various federal and state regulators, including the Federal Reserve and OCC, which imposes minimum capital requirements and limits on business activities[191]. - Compliance with laws and regulations can be costly, and failure to comply may result in fines, penalties, and restrictions on business activities, adversely affecting financial results[190]. - The Federal Reserve conducts the CCAR assessment process to evaluate capital adequacy, which may require higher capital levels and impact the ability to pay dividends or repurchase stock[209]. - Regulatory scrutiny has increased regarding consumer practices, leading to potential investigations and enforcement actions that could significantly impact revenue and increase compliance costs[192]. - The company faces legal risks, with high volumes of claims and potential substantial legal liabilities that could adversely affect financial results and reputation[197]. - Changes in regulatory frameworks, particularly concerning AI and data privacy, may require significant adjustments to business practices and incur additional costs[201]. - The company must maintain a capital conservation buffer (CCB) of 2.5% and may face higher capital requirements based on size and risk profile, impacting operational flexibility[210]. - The evolving regulatory environment may lead to increased compliance costs and operational complexities, potentially affecting profitability and business opportunities[193]. - The company is subject to heightened scrutiny regarding anti-money laundering compliance, with significant penalties for violations that could lead to financial losses[199]. - The competitive landscape is intensifying due to the rise of FinTech companies, necessitating continuous adaptation of products and services to meet changing consumer preferences[205].