Northern Trust (NTRS) Financial History

Additionally, on July 22, 2025, we announced that our Board authorized a new share repurchase program to repurchase up to $2.5 billion of the Corporation’s outstanding common stock with a capacity of $1.9 billion of r…

We use various systems and models, including AI-powered solutions, in analyzing and monitoring several risk categories, as well as for other business purposes.

Methodologies and data used to conduct more robust climate-related risk analyses are being developed.

Our reputation and business prospects may also be damaged if we do not, or are perceived not to, effectively prepare for the potential business and operational opportunities and risks associated with climate change.

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 31

30 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

Our success in the competitive environment in which we operate requires consistent investment of capital and human resources in innovation, particularly in light of the current “FinTech” environment, in which the fina…

Our reputation may be significantly damaged by adverse publicity or negative information regarding the Corporation and the Bank, whether true or not, that may be published or broadcast by the media or posted on social…

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 29

28 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

The number of regulatory and governmental investigations and proceedings, as well as the amount of penalties and fines sought, has remained elevated for many firms in the financial services industry.

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 27

26 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

The evolving regulatory and supervisory environment and uncertainty about the timing and scope of future laws, regulations and policies may contribute to decisions we may make to suspend, reduce or withdraw from exist…

We operate in a highly regulated environment, and are subject to a comprehensive statutory and regulatory regime affecting all aspects of our business and operations, including oversight by governmental agencies both…

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 25

Downgrades in our credit ratings may affect our borrowing costs, our capital costs and our ability to raise capital and, in turn, our liquidity adversely.

24 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 23

Pandemics, natural disasters, global climate change, acts of terrorism, geopolitical tensions, global conflicts or other similar events, as well as government actions or other restrictions in connection with such even…

22 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 21

20 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

We could be the subject of legal claims or proceedings related to information security incidents, including regulatory investigations and other legal actions, carrying the potential for damages, fines, sanctions or ot…

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 19

Our systems involve the storage, transmission and other processing of clients’ and our personal, proprietary, confidential and sensitive information, and security breaches, including cyber-attacks or other information…

18 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

We regularly assess and monitor operational risk in our businesses.

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 17

Risks and concerns about the financial stability of various regions or countries across the globe could have a detrimental impact on economic and market conditions in these or other markets across the world.

16 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 15

14 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION 13

For example, generative AI has been known to produce false or “hallucinatory” inferences or output, and certain generative AI uses machine learning and predictive analytics, which can create inaccurate, incomplete, or…

countries in which we operate and invest, as well as states and localities where we serve public sector clients.

While regulatory standards remain largely aligned following the UK’s withdrawal from the EU, commonly referred to as “Brexit,” it is possible that future divergence may occur between the UK and EU; therefore, the fina…

and heightened supervisory expectations of these banks, which could require us to expend significant time and effort to implement enhanced compliance procedures or to incur other expenses.

the EU and the UK and regulatory expectations of governance and accountability with respect to the protection of personal, proprietary, confidential and sensitive information continue to expand and evolve.

At the international level, we are subject to the GDPR and UK GDPR and similar laws are in effect or being considered in other jurisdictions in which we operate across the globe.

In the U.S., there are numerous federal, state and local data privacy and security laws and regulations governing the collection, sharing, use, retention, disclosure, security, storage, transfer and other processing o…

or perceived, a decline in our stock price or a reduced credit rating, our counterparties may be less willing to enter into transactions, secured or unsecured, with us, our clients may reduce or place limits on the le…

events beyond our reasonable control that excuse performance under force majeure or other contractual provisions, the risk of loss on such cash on deposit may potentially be incurred by us.

we may incur will be covered under such policies, that the amount of insurance will be adequate to cover such losses, that insurance will continue to be available to us on economically reasonable terms, or at all, or…

operations and could subject us to liability claims, harm our reputation, interrupt our operations, or otherwise adversely affect our business, financial condition or results of operations.

Risks and concerns about the financial stability of various regions or countries across the globe could have a detrimental impact on economic and market conditions in these or other markets across the world.

32 2025 ANNUAL REPORT | NORTHERN TRUST CORPORATION

While regulatory standards remain largely aligned following the UK’s withdrawal from the EU, commonly referred to as “Brexit,” it is possible that future divergence may occur between the UK and EU; therefore, the fina…

Legal developments in the EEA and the UK also have created complexity and uncertainty regarding processing and transfers of personal data from the EEA and the UK to the U.S.

Moreover, political and policy goals of elected and appointed officials may change over time, which could impact the rulemaking, supervision, examination, and enforcement priorities of the federal banking agencies.