Workflow
munity Bank System(CBU) - 2024 Q4 - Annual Report

Branch Operations and Acquisitions - As of December 31, 2024, the Company operates 185 full-service branches and 11 drive-thru only locations across 42 counties in Upstate New York, six counties in Northeastern Pennsylvania, 12 counties in Vermont, and one county in Western Massachusetts[17]. - In 2024, the Company completed acquisitions of three insurance agencies in New York and two in Florida for a total consideration of 10.3million,including10.3 million, including 9.6 million in cash[19]. - The Company acquired certain assets of Creative Plan Designs Limited for 5.9millionincashpluscontingentconsiderationvaluedat5.9 million in cash plus contingent consideration valued at 3.0 million, with net assets acquired totaling 4.5million[20].ThemergerwithElmiraSavingsBankin2022wascompletedfor4.5 million[20]. - The merger with Elmira Savings Bank in 2022 was completed for 82.2 million in cash, enhancing the Company's presence in five counties and adding eight full-service offices[23]. - The Company recorded goodwill of 42.1millionasaresultoftheElmiramerger,withidentifiableassetsacquiredamountingtoapproximately42.1 million as a result of the Elmira merger, with identifiable assets acquired amounting to approximately 583.6 million[23]. - The Company recorded goodwill of 3.9millionfromthe2024insuranceagencyacquisitions,withnetassetsacquiredtotaling3.9 million from the 2024 insurance agency acquisitions, with net assets acquired totaling 6.4 million[19]. - The Company is expanding its branch presence in densely populated markets including Albany, Buffalo, Rochester, and Syracuse in New York, as well as the Lehigh Valley in Pennsylvania and Springfield, Massachusetts[25]. Employee and Recruitment - The Company employs a total of 2,918 employees, with 2,079 in the Banking and Corporate segment, 459 in Employee Benefit Services, 267 in Insurance Services, and 113 in Wealth Management Services[34]. - The Company continues to engage in partnerships to enhance recruitment efforts, particularly focusing on military and veteran families[40]. Regulatory Compliance and Risks - The Company is classified as a financial holding company and must maintain a "well capitalized" and "well managed" status to engage in certain financial activities[47]. - The Bank's most recent Community Reinvestment Act rating was "Satisfactory," which allows the Company to engage in new activities and acquisitions[49]. - The Company is subject to extensive regulation by the Federal Reserve, OCC, and other federal and state regulators, impacting its operational practices[44]. - The Company expects regulatory reforms under the Trump administration to differ significantly from those under the Biden administration, affecting federal banking agency priorities[44]. - The Bank is required to comply with capital requirements set by the OCC, which may include higher individual minimum capital ratios[53]. - The Company and the Bank are subject to enforcement actions for violations of laws, which can result in civil money penalties exceeding 2millionperday[59].TheCompanyissubjecttotheCFPBssupervisionduetototalconsolidatedassetsexceeding2 million per day[59]. - The Company is subject to the CFPB's supervision due to total consolidated assets exceeding 10 billion, which may lead to increased compliance costs[64]. - The Capital Rules require the Company to maintain a Common Equity Tier 1 (CET1) ratio of at least 7% and a capital conservation buffer of 2.5%[72]. - The minimum capital ratios under the Capital Rules include 4.5% CET1 to total risk-weighted assets and 8.0% total capital to total risk-weighted assets[74]. - The Company may face increased operating and compliance costs due to ongoing regulatory changes stemming from the Dodd-Frank Act[69]. - The Company is required to comply with the new anti-money laundering obligations starting January 1, 2026, as mandated by FinCEN[86]. - The Company has approved policies to comply with the USA Patriot Act, which imposes obligations on financial institutions to detect and report money laundering and terrorism financing[87]. - The Company has established policies to comply with OFAC regulations, which impose economic sanctions affecting transactions with designated foreign entities[88]. - The Sarbanes-Oxley Act requires the Company to maintain strict corporate governance and reporting reforms, including increased disclosure obligations[89]. - New CRA regulations effective January 1, 2026, aim to expand access to credit and adapt to changes in the banking industry[91]. - The Company must notify regulators of significant cybersecurity incidents within 36 hours, as per new federal rules[92]. Financial Performance - The Company reported net income of 182.5millionfortheyearendedDecember31,2024,anincreaseof182.5 million for the year ended December 31, 2024, an increase of 50.6 million, or 38.3%, compared to the prior year, with earnings per share of 3.44,up3.44, up 0.99, or 40.4%[204]. - Net interest income increased to 449.1millionin2024,markingan449.1 million in 2024, marking an 11.8 million, or 2.7%, increase from the prior year, representing the eighteenth consecutive year of growth[206]. - Noninterest revenues reached record results across all four operating segments: banking, employee benefit services, insurance services, and wealth management services[206]. - The provision for credit losses increased from 2023 due to some degradation in asset quality metrics and an increase in loans outstanding, reflecting continued macroeconomic uncertainty[205]. - The Company's net interest margin for the full year 2024 was 3.04%, a decrease of seven basis points from the prior year, while the fully tax-equivalent net interest margin was 3.07[207]. - The yield on average interest-earning assets increased by 51 basis points compared to the prior year, driven by improved yields on loans, investments, and interest-earning cash equivalents[207]. - Average and ending interest-earning assets increased year-over-year due to strong organic loan growth, while average and ending deposits also rose, primarily from higher governmental deposit balances[208]. - The Company updated its allowance for credit losses (ACL) model in 2024 to incorporate 2023 results and specific forecasts for office property prices and vacancy rates[195]. - A hypothetical downside economic forecast indicated a peak unemployment rate of 8.3% and a cumulative decline in real GDP of 2.6%, which could increase the ACL by approximately 4.7million[195].TheCompanyperformedqualitativegoodwillanalysesforalloperatingsegments,determiningthatfairvaluesexceededcarryingvalues,thusnoimpairmentwasrecognized[199].Operatingnetincomefor2024was4.7 million[195]. - The Company performed qualitative goodwill analyses for all operating segments, determining that fair values exceeded carrying values, thus no impairment was recognized[199]. - Operating net income for 2024 was 193.9 million, an increase of 1.2million,or0.61.2 million, or 0.6%, compared to the prior year[210]. - Operating pre-tax, pre-provision net revenue (PPNR) for 2024 was 273.6 million, an increase of 17.2million,or6.717.2 million, or 6.7%, compared to 2023[210]. - Nonperforming and delinquency ratios increased from 2023 levels but remained below the Company's 10-year historical averages[209]. - Other noninterest revenues for 2024 were 296.4 million, an increase from 267.0millionin2023[213].CybersecurityandOperationalRisksTheCompanyhasdevelopedacomprehensivecybersecurityframeworktomitigaterisksassociatedwithdatabreachesandcyberattacks,whichcouldleadtofinanciallossesandreputationaldamage[155].TheChiefInformationSecurityOfficer(CISO)leadsthecybersecurityefforts,supportedbyateamwithrelevantcertificationsandexperience[158].TheCompanyscybersecuritystrategyincludescollaborationwithexternaltechnologypartnerstoenhancedefensesagainstevolvingthreats[160].TheCompanysinternalauditdepartmentconductsregularassessmentsofthecybersecurityprogramtoensureeffectivenessandcompliancewithregulatorystandards[161].TheCompanyhasconductedannualmandatorycybersecuritytrainingforallemployeestoenhanceawarenessofrisks[166].TheCompanyhasathirdpartyserviceprovidermanagementprogramtoassessrisksassociatedwiththirdpartyservices[164].TheCompanyfacessignificantoperationalrisksduetorapidtechnologicalchangesinthefinancialservicesindustry,whichcouldadverselyimpactitsfinancialconditionandresultsofoperations[121].TheCompanyisexposedtofraudrisksasthesophisticationoffraudulentactivitiesincreases,potentiallyleadingtooperationallosses[122].TheCompanyreliesheavilyonautomatedsystemsfortransactionprocessing,whichincreasestheriskoferrorsandoperationaldisruptions[125].Cybersecuritythreatsareontherise,andanybreachescouldresultinsignificantregulatoryconsequencesandreputationaldamage[126].TheCompanymustcomplywithevolvingdatasecurityandprivacyregulations,whichmayincreaseoperationalcostsandlegalrisks[129].TheCompanydependsonthirdpartyserviceprovidersforkeybusinessfunctions,exposingittoadditionalcybersecurityrisksandpotentialserviceinterruptions[130].EconomicandMarketConditionsTheCompanysperformanceissignificantlyinfluencedbyregionaleconomicconditions,particularlyinNewYork,Pennsylvania,Vermont,Massachusetts,andNewHampshire[133].Thefinancialservicesindustryishighlycompetitive,withpressuresthatcouldnegativelyaffecttheCompanysrevenueandprofitability[134].Changesinequitymarketscanmateriallyimpactthelevelofassetsundermanagement,affectingthedemandforfeebasedservicesandoverallearnings[137].TheCompanymayneedtorecordimpairmentchargesrelatedtogoodwillandotherintangibleassetsduetovariousadversefactors[139].TheCompanysloanportfolioincludes9267.0 million in 2023[213]. Cybersecurity and Operational Risks - The Company has developed a comprehensive cybersecurity framework to mitigate risks associated with data breaches and cyberattacks, which could lead to financial losses and reputational damage[155]. - The Chief Information Security Officer (CISO) leads the cybersecurity efforts, supported by a team with relevant certifications and experience[158]. - The Company’s cybersecurity strategy includes collaboration with external technology partners to enhance defenses against evolving threats[160]. - The Company’s internal audit department conducts regular assessments of the cybersecurity program to ensure effectiveness and compliance with regulatory standards[161]. - The Company has conducted annual mandatory cybersecurity training for all employees to enhance awareness of risks[166]. - The Company has a third-party service provider management program to assess risks associated with third-party services[164]. - The Company faces significant operational risks due to rapid technological changes in the financial services industry, which could adversely impact its financial condition and results of operations[121]. - The Company is exposed to fraud risks as the sophistication of fraudulent activities increases, potentially leading to operational losses[122]. - The Company relies heavily on automated systems for transaction processing, which increases the risk of errors and operational disruptions[125]. - Cybersecurity threats are on the rise, and any breaches could result in significant regulatory consequences and reputational damage[126]. - The Company must comply with evolving data security and privacy regulations, which may increase operational costs and legal risks[129]. - The Company depends on third-party service providers for key business functions, exposing it to additional cybersecurity risks and potential service interruptions[130]. Economic and Market Conditions - The Company's performance is significantly influenced by regional economic conditions, particularly in New York, Pennsylvania, Vermont, Massachusetts, and New Hampshire[133]. - The financial services industry is highly competitive, with pressures that could negatively affect the Company's revenue and profitability[134]. - Changes in equity markets can materially impact the level of assets under management, affecting the demand for fee-based services and overall earnings[137]. - The Company may need to record impairment charges related to goodwill and other intangible assets due to various adverse factors[139]. - The Company’s loan portfolio includes 9% of loans acquired through whole-bank acquisitions that were not underwritten at origination, posing a risk of larger-than-anticipated credit losses[153]. - Recent developments in the banking industry have eroded customer confidence, potentially impacting the Company’s liquidity and loan funding capacity[149]. - The Company anticipates increased regulatory scrutiny and potential new regulations following recent bank failures, which may raise operational costs and reduce profitability[150]. - Economic conditions such as high inflation, supply chain disruptions, and changes in consumer spending could adversely affect the Company’s financial performance[141]. - The Company’s consumer businesses are particularly sensitive to changes in personal incomes, unemployment rates, and inflation, which could negatively impact credit performance[146]. Real Estate and Property Management - The Company has 257 properties, with 152 owned and 105 leased, and operates 185 full-service bank branches[174]. - The net book value of real property and related banking facilities owned by the Company was 106.1 million as of December 31, 2024[175]. - The Company paid 11.2millioninrentalfeesforleasedfacilitiesduringtheyearendedDecember31,2024[175].TheCompanyhas1,898,557securitiesavailableforissuanceunderitsequitycompensationplansasofDecember31,2024[184].ShareholderReturnsTheCompanydeclaredacashdividendof11.2 million in rental fees for leased facilities during the year ended December 31, 2024[175]. - The Company has 1,898,557 securities available for issuance under its equity compensation plans as of December 31, 2024[184]. Shareholder Returns - The Company declared a cash dividend of 0.46 per share for the first quarter of 2025, continuing its history of regular quarterly cash dividends[180]. - The Board approved a new stock repurchase program for up to 2,628,000 shares, representing 5.0% of the Company's common stock outstanding[187].