Note 11 — Commitments and Contingent Liabilities

​

In the normal course of business, we make various commitments and incur certain contingent liabilities, which are not reflected in the accompanying financial statements. The commitments and contingent liabilities include guarantees, commitments to extend credit, and standby letters of credit. At June 30, 2026, commitments to extend credit and standby letters of credit totaled $14.7 billion. As of June 30, 2026, the liability recorded for expected credit losses on unfunded commitments, excluding unconditionally cancellable exposures and letters of credit, was $76.5 million and recorded on the Balance Sheet. See Note 1 — Summary of Significant Accounting Policies to the Consolidated Financial Statements in the 2025 Form 10-K for discussion of liability recorded for expected credit losses on unfunded commitments.

​

​

For a description of the Company’s commitments and contingencies, including litigation risks arising from our normal business activities and whole bank acquisitions, as well as background related to the previously disclosed cyber incident, refer to Note 20 to the Consolidated Financial Statements in the 2025 Form 10-K. Although the amount of any ultimate liability with respect to such matters cannot be determined, in the opinion of management, as of June 30, 2026, any such liability is not expected to have a material effect on our consolidated financial statements.

​

Cyber Incident Litigation.  On April 3, 2024, a putative class action lawsuit was filed against the Bank in the U.S. District Court for the Middle District of Florida, Tampa Division (the “Original Suit”). The plaintiff, who purported to represent the class of individuals harmed by alleged actions and/or omissions by the Bank in connection with the cybersecurity incident that was detected on February 6, 2024 (the “Cyber Incident”, as previously reported in the Form 8-K filed with the SEC on February 9, 2024), asserted a variety of common law and statutory claims seeking monetary damages, injunctive relief and other related relief related to the potential unauthorized access by third parties to personal identifiable information. While the Original Suit was voluntarily dismissed, the same plaintiffs as well as additional plaintiffs initiated litigation that named the Bank as a defendant. These cases were consolidated into one putative class action against the Bank in the Circuit Court for Polk County, Florida (the “Cyber Incident Suit”).

​

During the first quarter of 2026, the parties agreed to settle the Cyber Incident Suit, subject to court approval, pursuant to which the Company agreed to fund documented losses and pay attorneys’ fees, administration costs, and credit monitoring fees. On June 24, 2026, the court entered an order granting final approval to the settlement (the “Final Order”). The settlement will be paid from the Company’s cyber insurance coverage in the third quarter of 2026 in accordance with the Final Order.

​

Other commitments and contingencies were not materially different from those disclosed in the 2025 Form 10-K.