Certain statements appearing herein, which are not historical in nature, are forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. In addition, we may make other written and oral communications, from time to time, that contain such statements. Forward-looking statements reflect the current views of the Company's management with respect to, among other things, future events and the Company's financial performance. These statements are often, but not always, made through the use of words or phrases such as “may,” “should,” “could,” “predict,” “potential,” “believe,” “will likely result,” “expect,” “continue,” “will,” “anticipate,” “seek,” “estimate,” “intend,” “plan,” “project,” “forecast,” “goal,” “target,” “would” and “outlook,” or the negative variations of those words or other comparable words of a future or forward-looking nature. These forward-looking statements are not historical facts, and are based on current expectations, estimates and projections about the Company's industry, management’s beliefs and certain assumptions made by management, many of which, by their nature, are inherently uncertain and beyond the Company's control. Accordingly, the Company cautions you that any such forward-looking statements are not guarantees of future performance and are subject to risks, assumptions and uncertainties that are difficult to predict. Although the Company believes that the expectations reflected in these forward-looking statements are reasonable as of the date made, actual results may prove to be materially different from the results expressed or implied by the forward-looking statements and there can be no assurances that the Company will be able to continue to successfully execute on ourits strategic growth plan into Dauphin, Lancaster, York and Berks counties, Pennsylvania, and the greater Baltimore market in Maryland, with newer markets continuing to be receptive to our community banking model; to take advantage of market disruption; to experience sustained growth in loans and deposits or maintain the momentum experienced to date from these actions; and to realize cost savings from our branch consolidation efforts. FactorsIn addition to risks and uncertainties related to the COVID-19 pandemic and resulting governmental and societal responses, factors which could cause the actual results of the Company's operations to differ materially from expectations include, but are not limited to: ineffectiveness of the Company's strategic growth plan due to changes in current or future market conditions; the effects of competition and how it may impact our community banking model, including industry consolidation and development of competing financial products and services; the integration of the Company's strategic acquisitions; the inability to fully achieve expected savings, efficiencies or synergies from mergers and acquisitions, or taking longer than estimated for such savings, efficiencies and synergies to be realized; changes in laws and regulations; interest rate movements; changes in credit quality; inability to raise capital, if necessary, under favorable conditions; volatilitiesvolatility in the securities markets; deteriorating economic conditions; expenses associated with pending litigation and legal proceedings; the failure of the SBA to honor its guarantee of loans issued under the SBA PPP; the timing of the repayment of SBA PPP loans and the impact it has on fee recognition; our ability to convert new relationships gained through the SBA PPP efforts to full banking relationships; and other risks and uncertainties. The foregoing list of factors is not exhaustive.

For a description of factors that we believe could cause actual results to differ materially from such forward-looking statements, you should review our Risk Factors discussion in Item 1A, our Critical Accounting Policies section included in Item 7, and Note 22,23, Contingencies, in the Notes To Consolidated Financial Statements included in Item 8 of this Annual Report on Form 10-K. We encourage readers of this report to understand forward-looking statements to be strategic objectives rather than absolute targets of future performance. If one or more events related to these or other risks or uncertainties materialize, or if the Company's underlying assumptions prove to be incorrect, actual results may differ materially from what the Company anticipates. Accordingly, you should not place undue reliance on any such forward-looking statements. Any forward-looking statement speaks only as of the date on which it is made, and the Company does not undertake any obligation to publicly update or review any forward-looking statement, whether as a result of new information, future developments or otherwise. New risks and uncertainties arise from time to time, and it is not possible for the Company to predict those events or how they may affect it. In addition, the Company cannot assess the impact of each factor on its business or the extent to which any factor, or combination of factors, may cause actual results to differ materially from those contained in any forward-looking statements. All forward-looking statements, expressed or implied, included in this Annual report on Form 10-K are expressly qualified in their entirety by this cautionary statement. This cautionary statement should also be considered in connection with any subsequent written or oral forward-looking statements that the Company or persons acting on the Company's behalf may issue.

The Company files periodic reports with the SEC in the form of quarterly reports on Form 10-Q, annual reports on Form 10-K, annual proxy statements and current reports on Form 8-K for any significant events that may arise during the year. Copies of these reports, and any amendments to such reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), may be obtained free of charge through the SEC’s Internet site at www.sec.gov or by accessing the Company’s website at www.orrstown.com as soon as reasonably practicable after such reports are electronically filed with, or furnished to, the SEC. Information on our website shall not be considered a part of this Annual Report on Form 10-K.

On October 1, 2018, Orrstown expanded its presence in Franklin County, Pennsylvania, with the completion of its acquisition of Mercersburg Financial Corporation and the merger of its banking subsidiary, First Community Bank of Mercersburg, with and into Orrstown Bank.

On May 1, 2019, Orrstown expanded its presence into the greater Baltimore, Maryland, market with the completion of its acquisition of Hamilton Bancorp, Inc., and the merger of its banking subsidiary, Hamilton Bank, with and into Orrstown Bank.

The Bank was organized in 1919 as a state-chartered bank. On March 8, 1988, in a bank holding company reorganization transaction, the Parent Company acquired 100% ownership of the Bank.

The Parent Company’s primary activity consists of owning and supervising its subsidiaries,subsidiary, the Bank and Wheatland.Bank. Day-to-day management is conducted by its officers, who are also Bank officers. The Parent Company has historically derived most of its income through dividends from the Bank. At December 31, 2019,2020, the Company had total assets of $2.4$2.8 billion, total deposits of $1.9$2.4 billion and total shareholders’ equity of $223.2$246.2 million.

The Parent Company has no employees. Its 12 officers are employees of the Bank. On December 31, 2019,2020, the Bank and Wheatland combined had 439400 full-time and 2118 part-time employees.

The Bank is engaged in the commercial banking and trust business as authorized by the Pennsylvania Banking Code of 1965. This involves accepting demand, time and savings deposits, granting loans and granting loans.providing wealth management services. The Bank holds commercial, residential, consumer and agribusiness loans, primarily in its market areas of in south central Pennsylvania, in the greater Baltimore region, and in Washington County, Maryland, and in contiguous counties. The concentrations of credit by type of loan are included in Note 4, Loans and Allowance for Loan Losses, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data." The Bank maintains a diversified loan portfolio and evaluates each client’s creditworthiness on a case-by-case basis. The amount of collateral obtained, if deemed necessary by the Bank upon the extension of credit, is based on management’s credit evaluation of the client pursuant to collateral standards established in the Bank’s credit policies and procedures.

Federal bank regulatory agencies have adopted uniform regulations prescribing standards for extensions of credit that are secured by liens or interests in real estate or made for the purpose of financing permanent improvements to real estate. Under these regulations, all insured depository institutions, such as the Bank, must adopt and maintain written policies establishing appropriate limits and standards for extensions of credit that are secured by liens or interests in real estate or are made for the purpose of financing permanent improvements to real estate. These policies must establish loan portfolio diversification

All secured loans are supported with appraisals or evaluations of collateral. Business equipment and machinery, inventories, accounts receivable, and farm equipment are considered appropriate security, provided borrowers meet acceptable standards for liquidity and marketability. Loans secured by real estate generally do not exceed 90%85% of the appraised value of the property. Loan to collateral values are monitored as part of the loan review process, and appraisals are updated as deemed appropriate under the circumstances.

The Bank’s credit policy dictates the underwriting requirements for the various types of commercial loans the Bank makes available to borrowers. The policy covers such requirements as debt coverage ratios, advance rates against different forms of collateral, loan-to-value ratios and maximum term.

The Bank provides home equity loans, home equity lines of credit and other consumer loans, primarily through its branch network and client call center. A large majority of the consumer loans are secured by either a first or second lien position on the borrower’s primary residential real estate. The Bank requires a loan-to-value ratio of no greater than 90% of the value of the real estate being taken as collateral. The Bank also, at times, purchases consumer loans to help diversify credit risk in our loan portfolio.

The Bank provides residential mortgages throughout its various markets referred from retail branches and through a network of mortgage loan officers. A majority of the residential mortgages originated are sold to secondary market investors, primarily Wells Fargo and Fannie Mae. All mortgages, regardless of being sold or held in the Bank’s portfolio, are generally underwritten to secondary market industry standards for prime mortgages. The Bank generally requires a loan-to-value ratio of no greater than 80% of the value of the real estate being taken as collateral, without the borrower obtaining private mortgage insurance.

The Company has a loan review policy and program which is designed to identify and monitor risk in the lending function. The Management ERM Committee, comprised of executive officers and loan department personnel, is charged with the oversight of overall credit quality and risk exposure of the Company's loan portfolio. This includes the monitoring of the lending activities of all Company personnel with respect to underwriting and processing new loans and the timely follow-up and corrective action for loans showing signs of deterioration in quality. A loan review program provides the Company with an independent review of the commercial loan portfolio on an ongoing basis. Generally, consumer and residential mortgage loans are included in the Pass categories unless a specific action, such as extended delinquencies, bankruptcy, repossession or death of the borrower occurs, which heightens awareness as to a possible credit event.

The Bank outsources its independent loan review to a third-party provider, which monitors and evaluates loan clients on a quarterly basis utilizing risk-rating criteria established in the credit policy in order to identify deteriorating trends and detect conditions which might indicate potential problem loans. The results of the third-party loan review are reported quarterly to the Management and Board ERM Committees for review. The loan ratings provide the basis for evaluating the adequacy of the ALL.

The Bank offers deposit products to retail, commercial, non-profit and government clients through its retail branch network. Product offerings for retail clients include checking accounts, money market, savings and certificates of deposit. The Company offers numerous products and treasury management solutions for commercial clients, including account analysis for demand deposit accounts, certificates of deposit, sweep accounts, money market accounts and other treasury services such as merchant banking, foreign exchange, remote deposit capture, lockbox and others. The Bank further provides various deposit solutions for government agencies and non-profits, such as demand deposit accounts, sweeps and certificates of deposit.

Through its trust department, the Bank renders services as trustee, executor, administrator, guardian, managing agent, custodian, investment advisor, and other fiduciary activities authorized by law under the trade name Orrstown Financial Advisors. OFA offers retail brokerage services through a third-party broker/dealer arrangement with Cetera Advisor Networks LLC. Wheatland also offers investment advisor services as a registered investment advisor. At December 31, 2019,2020, assets under management by OFA and Wheatland totaled $1.6$1.7 billion.

The Bank’s principal market area consists of south central Pennsylvania, the greater Baltimore region, and Washington County, Maryland. The Bank serves a substantial number of depositors in this market area and its contiguous counties.

We competeThe Bank competes with other banks and less heavily regulated financial services companies such as credit unions and finance and trust companies, as well as mortgage banking companies, mutual funds, investment advisors, and brokerage firms, both within and outside of ourits primary market areas. Financial technology companies, or FinTechs, are also providing nontraditional, but increasingly strong, competition for ourthe Bank's borrowers, depositors, and other clients.

We implementThe Company implements strategic initiatives focused on expanding our core businesses and explore,exploring, on an ongoing basis, acquisition, divestiture, and joint venture opportunities to the extent permitted by our regulators. We analyzeThe Company analyzes each of ourthe Bank's products and businesses in the context of shareholder return, client demands, competitive advantages, industry dynamics, and growth potential. We believe ourThe Company's management believes its market area will support growth in assets and deposits in the future, which we expectit expects to contribute to ourthe Company's ability to maintain or grow profitability.

The Parent Company is a bank holding company registered with the FRB and has elected status as a financial holding company. The Bank is a Pennsylvania-chartered commercial bank and a member of the FRB. Wheatland is a registered investment advisor.

The banking industry is highly regulated. Orrstown is subject to supervision, regulation, and examination by various federal and state regulators, including the FRB, SEC, CFPB, FDIC, and various state regulatory agencies. The statutory and regulatory framework that governs us is generally intended to protect depositors and clients, the FDIC's Deposit Insurance Fund, the U.S. banking and financial system, and financial markets as a whole by ensuring the safety and soundness of Bank Holding Companiesbank holding companies ("BHCs") and banks. Bank regulators regularly examine the operations of BHCs and banks. Regulators have broad supervisory and enforcement authority over BHCs and banks, including the power to impose nonpublic supervisory agreements, issue cease and desist orders, impose fines and other civil and criminal penalties, terminate deposit insurance, and appoint a conservator or receiver.

Engaging in unsafe or unsound practices or failing to comply with applicable laws, regulations, and supervisory agreements could subject Orrstown, its subsidiaries, and their respective officers, directors, and institution-affiliated parties to the remedies described above, and other sanctions. In addition, the FDIC may terminate a bank’s deposit insurance upon a finding that the bank’s financial condition is unsafe or unsound or that the bank has engaged in unsafe or unsound practices or has violated an applicable rule, regulation, order, or condition enacted or imposed by the bank’s regulatory agency.

In May 2018, the Economic Growth Act was signed into law. Among other regulatory changes, the Economic Growth Act amended various sections of the Dodd-Frank Act, including section 165 of the Dodd-Frank Act, which was revised to raise the asset thresholds for determining the application of enhanced prudential standards for BHCs. Under the Economic Growth Act, BHCs with consolidated assets below $100.0 billion were immediately exempted from all of the enhanced prudential standards, except risk committee requirements, which now apply to publicly-traded BHCs with $50.0 billion or more of consolidated assets.

Several of the more significant regulatory provisions applicable to bank holding companiesBHCs and banks to which Orrstown and the Bank are subject are discussed below, along with certain regulatory matters concerning Orrstown and the Bank. To the extent that the following information describes statutory or regulatory provisions, such information is qualified in its entirety by reference to the particular statutes or regulations. Any change in applicable law or regulation may have a material effect on the business and prospects of the Company and the Bank.

As ana FHC, we are permitted to engage, directly or through subsidiaries, in a wide variety of activities that are financial in nature or are incidental or complementary to a financial activity, in addition to all of the activities otherwise allowed to us.

As ana FHC, Orrstown is generally subject to the same regulation as other bank holding companies,BHCs, including the reporting, examination, supervision and consolidated capital requirements of the FRB. To preserve ourits FHC status, weOrrstown must remain well-capitalized and well-managed and ensure that the Bank remains well-capitalized and well-managed for regulatory purposes and earns “satisfactory” or better ratings on ourits periodic Community Reinvestment Act examinations. An FHC ceasing to meet these standards is subject to a variety of restrictions, depending on the circumstances.

If the Parent Company or the Bank are either not well-capitalized or not well-managed, the Parent Company or the Bank must promptly notify the FRB. Until compliance is restored, the FRB has broad discretion to impose appropriate limitations on ana FHC’s activities. If compliance is not restored within 180 days, the FRB may ultimately require the FHC to divest its depository institutions or in the alternative, to discontinue or divest any activities that are permitted only to non-FHC bank holding companies.

If the FRB determines that ana FHC or its subsidiaries do not satisfy the CRA requirements, the potential restrictions are different. In that case, until all of the subsidiary institutions are restored to at least “satisfactory” CRA rating status, the FHC may not engage, directly or through a subsidiary, in any of the additional activities permissible under the BHC Act nor make additional acquisitions of companies engaged in thesuch additional activities. However, completed acquisitions and additional activities and affiliations previously begun are left undisturbed, as the BHC Act does not require divestiture for this type of situation.

The FDIC's Deposit Insurance Fund provides insurance coverage for certain deposits, up to a standard maximum deposit insurance amount of $250,000$250 thousand per depositor and is funded through assessments on insured depository institutions, based on the risk each institution poses to the Deposit Insurance Fund. The Bank accepts client deposits that are insured by the Deposit Insurance Fund and, therefore, must pay insurance premiums. The FDIC may increase the Bank’s insurance premiums based on various factors, including the FDIC’s assessment of its risk profile.

If the FDIC is appointed conservator or receiver of a bank upon the bank’s insolvency or the occurrence of other events, the FDIC may sell some, part, or all of a bank’s assets and liabilities to another bank or repudiate or disaffirm most types of contracts to which the bank was a party if the FDIC believes such contracts are burdensome. In resolving the estate of a failed bank, the FDIC as receiver will first satisfy its own administrative expenses, and the claims of holders of U.S. deposit liabilities also have priority over those of other general unsecured creditors.

Orrstown is required to serve as a source of financial and managerial strength to the Bank and, under appropriate conditions, to commit resources to support the Bank. This support may be required by the Federal ReserveFRB at times when wethe Bank might

Under these requirements, Orrstown may in the future be required to provide financial assistance to the Bank should it experience financial distress. Capital loans by Orrstown to the Bank would be subordinate in right of payment to deposits and certain other debts of the Bank. In the event of Orrstown's bankruptcy, any commitment by Orrstown to a federal bank regulatory agency to maintain the capital of the Bank would be assumed by the bankruptcy trustee and entitled to a priority of payment.

The Pennsylvania Banking Code contains detailed provisions governing the organization, location of offices, rights and responsibilities of directors, officers, and employees, as well as corporate powers, savings and investment operations and other aspects of the Bank and its affairs. The Pennsylvania Banking Code delegates extensive rule-making power and administrative discretion to the Pennsylvania Department of Banking and Securities so that the supervision and regulation of state chartered banks may be flexible and readily responsive to changes in economic conditions and in savings and lending practices.

The FDIA, however, prohibits state chartered banks from making new investments, loans, or becoming involved in activities as principal and equity investments which are not permitted for national banks unless the FDIC determines the activity or investment does not pose a significant risk of loss to the Deposit Insurance Fund, and the bank meets all applicable capital requirements. Accordingly, the additional operating authority provided to the Bank by the Pennsylvania Banking Code is significantly restricted by the FDIA.

The Parent Company is a legal entity separate and distinct from its banking and non-banking subsidiaries. Since our consolidated net income consists largely of net income of Orrstown's subsidiaries, our ability to make capital distributions, including paying dividends and repurchasing shares, depends upon our receipt of dividends from these subsidiaries. Under federal law, there are various limitations on the extent to which the Bank can declare and pay dividends to the Parent Company, including those related to regulatory capital requirements, general regulatory oversight to prevent unsafe or unsound practices, and federal banking law requirements concerning the payment of dividends out of net profits, surplus, and available earnings. Certain contractual restrictions also may limit the ability of the Bank to pay dividends to the Parent Company. No assurances can be given that the Bank will, in any circumstances, pay dividends to the Parent Company.

Federal banking laws and regulations impose qualitative standards and quantitative limitations upon certain transactions between a bank and its affiliates, including between a bank and its holding company and companies that the BHC may be deemed to control for these purposes. Transactions covered by these provisions must be on arm’s-length terms and cannot exceed certain amounts which are determined with reference to the bank’s regulatory capital. Moreover, if the transaction is a loan or other extension of credit, it must be secured by collateral in an amount and quality expressly prescribed by statute, and if the affiliate is unable to pledge sufficient collateral, the BHC may be required to provide it. The Dodd-Frank Act expanded the coverage and scope of these regulations, including by applying them to the credit exposure arising under derivative transactions, repurchase and reverse repurchase agreements, and securities borrowing and lending transactions. Federal banking

Compliance with respect to capital requirements is incorporated by reference from Note 16,17, Shareholders' Equity and Regulatory Capital, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data," and from the Capital Adequacy and Regulatory Matters section of Item 7, “Management’s Discussion and Analysis of Consolidated Financial Condition and Results of Operations.”

Under the U.S. Basel III capital rules, Orrstown's and the Bank’s assets, exposures, and certain off-balance sheet items are subject to risk weights used to determine the institutions’ risk-weighted assets. These risk-weighted assets are used to calculate the following minimum capital ratios for Orrstown and the Bank:

Failure to be well-capitalized or to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators that, if undertaken, could have an adverse material effect on our operations or

In addition to meeting the minimum capital requirements, under the U.S. Basel III capital rules, the Bank must also maintain the required Capital Conservation Buffer to avoid becoming subject to restrictions on capital distributions and certain discretionary bonus payments to management. The Capital Conservation Buffer is calculated as a ratio of CET1 capital to risk-weighted assets, and it effectively increases the required minimum risk-based capital ratios. The Capital Conservation Buffer requirement was phased in over a three-year period that began on January 1, 2016. The phase-in period ended on January 1, 2019, and the Capital Conservation Buffer was at its fully phased-in level of 2.5% throughout 2019. The Tier 1 Leverage Ratio is not impacted by the Capital Conservation Buffer, and a banking institution may be considered well-capitalized while remaining out of compliance with the Capital Conservation Buffer.

BHCs must obtain prior approval of the Federal Reserve in connection with any acquisition that results in the BHC owning or controlling 5% or more of any class of voting securities of a bank or another BHC.

Acquisitions of Orrstown's voting stock above certain thresholds are subject to prior regulatory notice or approval under federal banking laws, including the BHC Act and the Change in Bank Control Act of 1978. Under the Change in Bank Control

Federal and state law contains extensive consumer privacy protection provisions. The GLB Act requires financial institutions to periodically disclose their privacy policies and practices relating to sharing such information and enables retail clients to opt out of our ability to share information with unaffiliated third parties under certain circumstances. Other federal and state laws and regulations impact our ability to share certain information with affiliates and non-affiliates for marketing and/or non-marketing purposes, or to contact clients with marketing offers. These security and privacy policies and procedures for the protection of personal and confidential information are in effect across all businesses and geographic locations as applicable. Federal law also makes it a criminal offense, except in limited circumstances, to obtain or attempt to obtain client information of a financial nature by fraudulent or deceptive means. Data privacy and data protection are areas of increasing federal and state legislative focus.

The GLB Act requires financial institutions to implement a comprehensive information security program that includes administrative, technical, and physical safeguards to ensure the security and confidentiality of client records and information.

The Cybersecurity Information Sharing Act is intended to improve cybersecurity in the U.S. by enhanced sharing of information about security threats among the U.S. government and private sector entities, including financial institutions. The Cybersecurity Information Sharing Act also authorizes companies to monitor their own systems notwithstanding any other provision of law and allows companies to carry out defensive measures on their own systems from cyber attacks. The law includes liability protections for companies that share cyber threat information with third parties so long as such sharing activity is conducted in accordance with Cybersecurity Information Sharing Act.

The CRA is intended to encourage banks to help meet the credit needs of their service areas, including low- and moderate-income neighborhoods, consistent with safe and soundnesssound business practices. The relevant federal bank regulatory agency, the FRB in the Bank’s case, examines each bank and assigns it a public CRA rating. A bank’s record of fair lending compliance is part of the resulting CRA examination report.

Leaders of the federal banking agencies recently have indicated their support for modernizing the CRA regulatory framework to address changing delivery systems and consumer preferences, and, in December 2019, the Office of the Comptroller of the Currency and FDIC issued a joint proposed rule that would amend the CRA regulatory framework. It is too early to tell whether and to what extent any changes will be made to applicable CRA requirements.

The Bank Secrecy Act and the PATRIOT Act contain anti-money laundering and financial transparency provisions intended to detect and prevent the use of the U.S. financial system for money laundering and terrorist financing activities. The Bank Secrecy Act, as amended by the PATRIOT Act, requires depository institutions and their holding companies to undertake

The Office of Foreign Assets Control is responsible for administering economic sanctions that affect transactions with designated foreign countries, nationals, and others, as defined by various Executive Orders and in various legislation. Office of Foreign Assets Control-administered sanctions take many different forms. For example, sanctions may include: (1) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on U.S. persons engaging in financial transactions relating to, making investments in, or providing investment-related advice or assistance to, a sanctioned country; and (2) a blocking of assets in which the government or “specially designated nationals” of the sanctioned country have an interest, by prohibiting transfers of property subject to U.S. jurisdiction, including property in the possession or control of U.S. persons. The Office of Foreign Assets Control also publishes lists of persons, organizations, and countries suspected of aiding, harboring, or engaging in terrorist acts, known as Specially Designated Nationals and Blocked Persons. Blocked assets, for example property and bank deposits, cannot be paid out, withdrawn, set off, or transferred in any manner without a license from the Office of Foreign Assets Control. Failure to comply with these sanctions could have serious legal and reputational consequences.

The CFPB has promulgated many mortgage-related final rules since it was established under the Dodd-Frank Act, including rules related to the ability to repay and qualified mortgage standards, mortgage servicing standards, loan originator compensation standards, high-cost mortgage requirements, Home Mortgage Disclosure Act requirements, and appraisal and escrow standards for higher priced mortgages. The mortgage-related final rules issued by the CFPB have materially restructured the origination, servicing, and securitization of residential mortgages in the U.S. These rules have impacted, and will continue to impact, the business practices of residential mortgage lenders, including the Bank.

Changes in federal laws and regulations, as well as laws and regulations in states where the Parent Company the Bank, and Wheatland dodoes business, can affect the operating environment of Orrstown in substantial ways. We cannot predict whether those changes in laws and regulations will occur, and, if they occur, the ultimate effect they would have upon the financial condition or results of operations of the Company.

The Company’s common stock is listed on the Nasdaq Capital Market under the trading symbol “ORRF” and is subject to Nasdaq’s rules for listed companies.

We are subject to the informational requirements of the Exchange Act and, in accordance with the Exchange Act, we file annual, quarterly, and current reports, proxy statements, and other information with the SEC. The SEC maintains an Internet web site that contains reports, proxy statements, and other information about issuers, like us, who file electronically with the SEC. The address of the site is www.sec.gov. The reports and other information, including any related amendments, filed by us with, or furnished by us to, the SEC are also available free of charge at our Internet web site as soon as reasonably practicable after such material is electronically filed with, or furnished to, the SEC. The address of the site is www.orrstown.com. Except as specifically incorporated by reference into this Annual Report on Form 10-K, information on those web sites is not part of this report.

An investment in our common stock is subject to risks inherent in our business. The material risks and uncertainties that management believes affect us are described below. Before making an investment decision, you should carefully consider the risks and uncertainties described below together with all of the other information included or incorporated by reference in this report. The risks and uncertainties described below are not the only ones facing us. Additional risks and uncertainties that management is not aware of or focused on or that management currently deems immaterial may also impair our business operations. This report is qualified in its entirety by these risk factors.

There is no precise method of predicting loan losses. The required level of reserves, and the related provision for loan losses, can fluctuate from year to year, based on charge-offs and/or recoveries, loan volume, credit administration practices, and local and national economic conditions, among other factors. The ALL, which is a reserve established through a provision for loan losses charged to expense, represents management’s best estimate of probable incurred losses within the existing portfolio of loans. The level of the allowance reflects management’s evaluation of, among other factors, the status of specific impaired loans, historical loss experience, delinquency, credit concentrations and economic conditions within our market area. The determination of the appropriate level of the ALL inherently involves a high degree of subjectivity and judgment and requires us to make significant estimates of current credit risks and future trends, all of which may undergo material changes. Changes in economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside of our control, may require us to increase our ALL.

In addition, bank regulatory agencies periodically review our ALL and may require us to increase the provision for loan losses or to recognize further loan charge-offs, based on judgments that differ from those of, or information not available to, management. If loan charge-offs in future periods exceed the ALL, there would be a need to record additional provisions to increase our ALL. Furthermore, growth in the loan portfolio would generally lead to an increase in the provision for loan losses. Generally, increases in our ALL will result in a decrease in net income and stockholders’ equity, and may have a material adverse effect on our financial condition and results of operations.

Our business strategy includes making loans secured by commercial real estate. These types of loans generally have higher risk-adjusted returns and shorter maturities than other loans. Loans secured by commercial real estate properties are generally for larger amounts and may involve a greater degree of risk than other loans. Payments on loans secured by these properties are often dependent on the income produced by the underlying properties which, in turn, depends on the successful operation and management of the properties. Accordingly, repayment of these loans is subject to conditions in the real estate market or the local economy. In challenging economic conditions, these loans represent higher risk and could result in an increase in our total net charge-offs, requiring us to increase our ALL, which could have a material adverse effect on our financial condition or results of operations. While we seek to minimize these risks in a variety of ways, there can be no assurance that these measures will protect against credit-related losses.

 Commercial and industrial loans generally carry larger loan balances and involve a greater degree of risk of nonpayment or late payment than home equity loans or residential mortgage loans.

Commercial and industrial loans include advances to local and regional businesses for general commercial purposes and include permanent and short-term working capital, machinery and equipment financing, and may be either in the form of lines of credit or term loans. Although commercial and industrial loans may be unsecured to our highest rated borrowers, the majority of these loans are secured by the borrower’s accounts receivable, inventory and machinery and equipment. In a significant number of these loans, the collateral also includes the business real estate or the business owner’s personal real estate or assets. Commercial and industrial loans are more susceptible to risk of loss during a downturn in the economy, as borrowers may have greater difficulty in meeting their debt service requirements and the value of the collateral may decline. We attempt to mitigate this risk through our underwriting standards, including evaluating the creditworthiness of the borrower

Our operations are subject to risks and uncertainties surrounding our exposure to changes in the interest rate environment. Operating income, net income and liquidity depend to a great extent on our net interest margin, i.e., the difference between the interest yields we receive on interest-earning assets, such as loans and securities, and the interest rates we pay on interest-bearing liabilities, such as deposits and borrowings. These rates are highly sensitive to many factors beyond our control, including competition, general economic conditions, and monetary and fiscal policies of various governmental and regulatory authorities, including the FRB. If the rate of interest we pay on our interest-bearing liabilities increases more than the rate of interest we receive on our interest-earning assets, our net interest income, and therefore our earnings and liquidity, could be materially adversely affected. Our earnings and liquidity could also be materially adversely affected if the rates on interest-earning assets fall more quickly than those on our interest-bearing liabilities.

Changes in interest rates also can affect our ability to originate loans; the ability of borrowers to repay adjustable or variable rate loans; our ability to obtain and retain deposits in competition with other available investment alternatives; and the value of interest-earning assets, which would negatively impact stockholders’ equity, and the ability to realize gains from the sale of such assets. Based on our interest rate sensitivity analyses, an increase in the general level of interest rates will negatively affect the market value of the investment portfolio because of the relatively higher duration of certain securities included in the investment portfolio.

Our subordinated notes, issued in December 2018, have a 6.0% fixed interest rate through December 2023, after which the interest rate will convert to a variable rate of the London Interbank Offered Rate (“LIBOR”) plus 3.16% through maturity in December 2028. Depending on our financial condition at the time of the rate changing from fixed to variable, an increase in the interest rate on our subordinated debt could have a material adverse effect on our liquidity and results of operations.

If another rateSOFR does not achieve wide acceptance as the alternative to LIBOR, there likely will be disruption to all of the markets relying on the availability of a broadly accepted reference rate. Even if another reference rateShould SOFR ultimately replacesreplace LIBOR, risks will remain for us with respect to outstanding loans or other instruments using LIBOR. Those risks arise in connection with transitioning those instruments to a new reference rate and the corresponding value transfer that may occur in connection with that transition. Risks related to transitioning instruments to a new reference rateSOFR or to how LIBOR is calculated and its availability include impacts on the yield on loans or securities held by us and amounts paid on securities we have issued. The value of loans, securities, or borrowings tied to LIBOR and the trading market for LIBOR-based securities could also be negatively impacted upon its discontinuance or if it is limited.phase out.

Our operations are sensitive to general business and economic conditions in the U.S. If the growth of the U.S. economy slows, or if the economy worsens or enters into a recession, our growth and profitability could be constrained. In addition,

Our operations and the properties securing our loans are primarily located in south central Pennsylvania, in the greater Baltimore region, and Washington County, Maryland. Our operating results depend largely on economic conditions and real estate valuations in these and surrounding areas. A deterioration in the economic conditions in these market areas could materially adversely affect our operations and increase loan delinquencies, increase problem assets and foreclosures, increase claims and lawsuits, decrease the demand for our products and services and decrease the value of collateral securing loans, especially real estate, in turn reducing clients’ borrowing power, the value of assets associated with nonperforming loans and collateral coverage.

We experience substantial competition in originating both commercial and consumer loans in our market area. This competition comes principally from other banks, savings institutions, credit unions, mortgage banking companies and other lenders. Some of our competitors enjoy advantages, including greater financial resources and higher lending limits, a wider geographic presence, more accessible branch office locations, the ability to offer a wider array of services or more favorable pricing alternatives, as well as lower origination and operating costs. This competition could reduce our net income and liquidity by decreasing the number and size of loans that we originate and the interest rates we are able to charge on these loans.

As we expand our on-lineonline lending capabilities, we will face competition, particularly in residential mortgage lending, from non-bank lenders (financial institutions that only make loans and do not offer deposit accounts such as a savings account or checking account) and financial technology companies that use new technology and innovation with available resources in order to compete in the marketplace of traditional financial institutions and intermediaries in the delivery of financial services. This competition could similarly reduce our net income and liquidity.

In attracting business and consumer deposits, we face substantial competition from other insured depository institutions such as banks, savings institutions and credit unions, as well as institutions offering uninsured investment alternatives, including money market funds. Some of our competitors enjoy advantages, including more expansive marketing campaigns, better brand recognition and more branch locations. These competitors may offer higher interest rates than we do, which could decrease the deposits that we attract or require us to increase our rates to retain existing deposits or attract new deposits. Increased deposit competition could materially adversely affect our ability to generate the funds necessary for lending operations. As a result, we may need to seek other sources of funds that may be more expensive to obtain and could increase our cost of funds.

Over the long term, we expect to continue to experience organic growth in loans and total assets, the level of our deposits and the scale of our operations. Achieving our growth targets requires us to successfully execute our business strategies, which includes continuing to grow our loan portfolio. Our ability to successfully grow will also depend on the continued availability of loan opportunities that meet underwriting standards. In addition, we may consider the acquisition of other financial

Technological advances impact our business. The banking industry undergoes constant technological change with frequent introductions of new technology-driven products and services. In addition to improving client services, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success may depend, in part, on our ability to address the needs of our current and prospective clients by using technology to provide products and services that will satisfy demands for convenience, as well as to create additional efficiencies in operations.

Our computer systems and network infrastructure and those of third parties, on which we are highly dependent, are subject to security risks and could be susceptible to cyber attacks, such as denial of service attacks, hacking, terrorist activities, or identity theft. Our business relies on the secure processing, transmission, storage, and retrieval of confidential, proprietary, and other information in our computer and data management systems and networks, and in the computer and data management systems and networks of third parties. In addition, in order to access our network, products, and services, our clients and other third parties may use personal mobile devices or computing devices that are outside of our network environment and are subject to their own cybersecurity risks.

We, our clients, regulators, and other third parties, including other financial services institutions and companies engaged in data processing, have been subject to, and are likely to continue to be the target of, cyber attacks. These cyber attacks include computer viruses, malicious or destructive code, phishing attacks, denial of service or information, ransomware, improper access by employees or vendors, attacks on personal email of employees, ransom demands to not expose security vulnerabilities in our systems or the systems of third parties or other security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss, or destruction of confidential, proprietary, and other information of ours, our employees, our clients,

Cyber attacks or other information or security breaches, whether directed at us or third parties, may result in a material loss or have material consequences. Furthermore, the public perception that a cyber attack on our systems has been successful, whether or not this perception is correct, may damage our reputation with clients and third parties with whom we do business. Hacking of personal information and identity theft risks, in particular, could cause serious reputational harm. A successful penetration or circumvention of system security could cause us serious negative consequences, including our loss of clients and business opportunities, costs associated with maintaining business relationships after an attack or breach; significant business disruption to our operations and business, misappropriation, exposure, or destruction of our confidential information, intellectual property, funds, and/or those of our clients; or damage to our or our clients’ and/or third parties’ computers or systems, and could result in a violation of applicable privacy laws and other laws, litigation exposure, regulatory fines, penalties or intervention, loss of confidence in our security measures, reputational damage, reimbursement or other compensatory costs, additional compliance costs, and could adversely impact our results of operations, liquidity and financial condition. In addition, we may not have adequate insurance coverage to compensate for losses from a cybersecurity event.

As cybersecurity and data privacy risks for banking organizations and the broader financial system have significantly increased in recent years, cybersecurity and data privacy issues have become the subject of increasing legislative and regulatory focus. The federal bank regulatory agencies have proposed regulations that would enhance cyber risk management standards, which would apply to a wide range of large financial institutions and their third-party service providers and would focus on cyber risk governance and management, management of internal and external dependencies, and incident response, cyber resilience, and situational awareness. Several states have also proposed or adopted cybersecurity legislation and regulations, which require, among other things, notification to affected individuals when there has been a security breach of their personal data.

We may become subject to new legislation or regulation concerning cybersecurity or the privacy of personally identifiable information and personal financial information or of any other information we may store or maintain. We could be adversely affected if new legislation or regulations are adopted or if existing legislation or regulations are modified such that we are required to alter our systems or require changes to our business practices or privacy policies. If cybersecurity, data privacy, data protection, data transfer, or data retention laws are implemented, interpreted, or applied in a manner inconsistent with our current practices, we may be subject to fines, litigation, or regulatory enforcement actions or ordered to change our business practices, policies, or systems in a manner that adversely impacts our operating results.

We intend to pursue a growth plan consistent with our business strategy, including growth by acquisition, as well as leveraging our existing branch network and adding new branch locations in current and future markets we choose to serve.

Our ability to manage growth successfully will depend on our ability to attract qualified personnel and maintain cost controls and asset quality while attracting additional loans and deposits on favorable terms, as well as on factors beyond our control, such as economic conditions and competition. If we grow too quickly and are not able to attract qualified personnel, control costs and maintain asset quality, this continued rapid growth could materially adversely affect our financial performance.

To the extent that merger consideration, consisting of cash and shares of our common stock, exceeds the fair value of the net assets acquired, including identifiable intangibles, that amount will be reported as goodwill by us. In accordance with current accounting guidance, goodwill will not be amortized but will be evaluated for impairment annually or more frequently if events or circumstances warrant. A failure to realize expected benefits of the mergers could adversely impact the carrying value of the goodwill recognized in the mergers and, in turn, negatively affect our financial results.

Acquisitions involve the integration with Orrstown of companies that previously operated independently. The difficulties of combining the operations of the acquired companies with Orrstown include: 

The process of integrating operations could cause an interruption of, or loss of momentum in, the activities of the combined company and the loss of key personnel. The diversion of management’s attention and any delays or difficulties encountered in connection with the merger and the integration process could have a material adverse effect on the business and results of operations of the combined company. 

The success of acquisitions depends, in part, on our ability to realize the anticipated benefits and cost savings from combining the businesses acquired with Orrstown. If we are unable to successfully execute on integration, the anticipated earnings and cost savings to be derived from acquisitions may not be realized fully or may take longer to realize than expected. In addition, as with regard to any acquisition, a significant change in interest rates or economic conditions or decline in asset valuations may also cause us not to realize expected benefits and result in the acquisitions not meeting expectations.

The businesses of the Company and acquired entities may differ and, accordingly, the results of operations of the combined company and the market price of the shares of common stock of the combined company may be affected by factors different from those currently affecting the independent results of operations and market prices of common stock of each separate entity. The market value of our common stock fluctuates based upon various factors, including changes in our business, operations or prospects, market assessments of the merger, regulatory considerations, market and economic

Additionally, future business acquisitions may result in the issuance and payment of additional shares of stock, which would dilute current shareholders’ ownership interests, and may involve the payment of a premium over book and market values. Therefore, dilution of our tangible book value and net income per common share could occur in connection with any future transaction.

The Company is subject to regulation and supervision under federal and state laws and regulations. The requirements and limitations imposed by such laws and regulations limit the manner in which we conduct our business, undertake new investments and activities and obtain financing. These regulations are designed primarily for the promotion of the safety and soundness of financial institutions and the protection of the deposit insurance funds and consumers, and not to benefit our shareholders.

We are subject to supervision and examination by numerous governmental bodies. The results of these supervisory or examination activities could result in limitations on our ability to engage in new activities or expand geographically. These activities also could result in significant fines, penalties, or required corrective actions, some of which could be expensive and difficult to implement. As we expand our product and service offerings into additional states, there could be an increase in state regulation affecting our operations. Different approaches to regulation by different jurisdictions could increase our compliance costs or risks of non-compliance.

Compliance with such current and potential regulation and scrutiny may significantly increase our costs, impede the efficiency of our internal business processes, require us to increase our regulatory capital and limit our ability to pursue business opportunities in an efficient manner. Bank regulations can hinder our ability to compete with financial services companies that are not regulated in the same manner or are subject to less regulation. A failure to comply, or to have adequate policies and procedures designed to comply, with regulatory requirements and expectations could expose us to damages, fines and regulatory penalties and other regulatory or enforcement actions or consequences, such as limitations on activities otherwise permissible for us or additional requirements for engaging in new activities, and could also injure our reputation with clients and others with whom we do business.

We are generally unable to control the amount of premiums that are required to be paid for FDIC insurance. If there are bank or financial institution failures, the Company may be required to pay significantly higher premiums than the levels currently imposed or additional special assessments or taxes that could adversely affect earnings. Any future increases or required prepayments in FDIC insurance premiums may materially adversely affect theour results of operations.

The Company is subject to U.S. federal and U.S. state income, payroll, property, sales and use, and other types of taxes, including the Pennsylvania Bank Shares Tax. Significant judgment is required in determining the Company's provisions for income taxes. Changes in tax rates, enactments of new tax laws, revisions of tax regulations, and claims or litigation with taxing authorities could result in substantially higher taxes, and therefore, could have a significant adverse effect on the Company's results of operations, financial condition and liquidity. Increases in the assessment rate for the Pennsylvania Bank Shares Tax, which is calculated on the outstanding equity of the Bank, may also materially adversely affect results of operations.

Material estimates that are particularly susceptible to significant change relate to the determination of the ALL, the fair value of certain financial instruments, particularly securities, and goodwill and purchase accounting associated with acquisitions. While we have identified those accounting policies that we consider critical and have procedures in place to facilitate the associated judgments, different assumptions in the application of these policies could have a material adverse effect on our financial condition and results of operations.

From time to time, the FASB, SEC and other regulatory bodies change the financial accounting and reporting standards that govern the preparation of our consolidated financial statements. These changes can be operationally complex to implement and can materially impact how we record and report our financial condition and results of operations.

The Basel III Capital Rules have targeted higher levels of base capital, certain capital buffers, and a migration toward common equity as the key source of regulatory capital, as domestic and international bank regulatory agencies have sought to require financial institutions, including depository institutions, to maintain generally higher levels of capital. The application of more stringent capital requirements to the Company and the Bank could, among other things, result in lower returns on invested capital, result in the need for additional capital, and result in regulatory actions if we were to be unable to comply with such requirements, including limitations on our ability to make distributions, including paying out dividends or buying back shares. Furthermore, the imposition of liquidity requirements in connection with the implementation of Basel III could result in our having to lengthen the term of our funding, restructure our business models, and/or increase our holdings of liquid assets.

The Bank Secrecy Act and the PATRIOT Act contain anti-money laundering and financial transparency provisions intended to detect and prevent the use of the U.S. financial system for money laundering and terrorist financing activities. The Bank Secrecy Act, as amended by the PATRIOT Act, requires depository institutions and their holding companies to undertake activities including maintaining an anti-money laundering program, verifying the identity of clients, monitoring for and reporting suspicious transactions, reporting on cash transactions exceeding specified thresholds, and responding to requests for information by regulatory authorities and law enforcement agencies. FinCEN, a unit of the Treasury Department that administers the Bank Secrecy Act, is authorized to impose significant civil money penalties for violations of those requirements and has recently engaged in coordinated enforcement efforts with the federal bank regulatory agencies, as well as the U.S. Department of Justice, Drug Enforcement Administration, and IRS.

There is also increased scrutiny of compliance with the rules enforced by the Office of Foreign Assets Control. If our policies, procedures, and systems are deemed deficient or the policies, procedures, and systems of the financial institutions that we have already acquired or may acquire in the future are deficient, we would be subject to liability, including fines and regulatory actions such as restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain planned business activities, including acquisition plans, which would negatively impact our business, financial condition, and results of operations. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us.

We are generally required, to the extent permitted by Pennsylvania law, to indemnify our current and former directors and officers who are named as defendants in lawsuits. We also have certain contractual indemnification obligations to third parties regarding litigation. Generally, insurance coverage is not available for such indemnification costs we could incur to third parties. Current or future litigation could result in indemnification expenses that could have a materially adverse impact on our financial condition and results of operations.

The Parent Company is a holding company and depends on dividends, distributions and other payments from the Bank to fund dividend payments and stock repurchases, if permitted, and to fund all payments on obligations. The Bank is subject to laws that restrict dividend payments or authorize regulatory bodies to prohibit or reduce the flow of funds from it to us. In addition, our right to participate in a distribution of assets upon the Bank’s liquidation or reorganization is subject to the prior claims of the Bank’s creditors, including its depositors.

Our ability to engage in routine funding and other transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. As a result, defaults by, or even rumors or questions about, one or more financial services institutions, or the financial services industry generally, have historically led to market-wide liquidity problems, losses of depositor, creditor and counterparty confidence and could lead to losses or defaults by us or by other institutions. We could experience increases in deposits and assets as a result of other banks’ difficulties or failure, which would increase the capital we are required to maintain to support such growth.

Federal banking regulators require us and our banking subsidiary to maintain adequate levels of capital to support our operations. These capital levels are determined and dictated by law, regulation and banking regulatory agencies. In addition, capital levels are also determined by our management and board of directors based on capital levels that they believe are necessary to support our business operations. At December 31, 2019,2020, all four capital ratios for us and our banking subsidiary were above regulatory minimum levels to be deemed “well capitalized” under current bank regulatory guidelines. To be “well capitalized,” banks generally must maintain a tier 1 leverage ratio of at least 5.0%, CET1 capital ratio of 6.5%, Tier 1 risk-based capital ratio of at least 8.0%, and a total risk-based capital ratio of at least 10.0%.

The Company’s ability to raise additional capital will depend on conditions in the capital markets at that time, which are outside of our control, and on our financial performance. Accordingly, we cannot provide assurance of our ability to raise

The market price of the Company’s common stock has been subject to fluctuations in response to numerous factors, many of which are beyond our control. These factors include actual or anticipated variations in our operational results and cash flows, changes in financial estimates by securities analysts, trading volume, large purchases or sales of our common stock, market conditions within the banking industry, the general state of the securities markets and the market for stocks of financial institutions, as well as general economic conditions.

A credit rating agency regularly evaluates Orrstown and the Bank, and credit ratings are based on a number of factors, including our financial strength and ability to generate earnings, as well as factors not entirely within our control, including conditions affecting the financial services industry, the economy, and changes in rating methodologies. There can be no assurance that we will maintain our current credit ratings. A downgrade of the credit ratings of Orrstown or the Bank could adversely affect our access to liquidity and capital, and could significantly increase our cost of funds, trigger additional collateral or funding requirements, and decrease the number of investors and counterparties willing to lend to us or purchase our securities. This could affect our growth, profitability, and financial condition, including liquidity.

The Parent Company is a separate legal entity from the Bank and must provide for its own liquidity. In addition to its operating expenses, the Company is responsible for paying any dividends declared to its shareholders. The Company also has repurchased shares of its common stock. The Company’s primary source of income is dividends received from the Bank. Banking regulations limit the amount of dividends that may be paid from the Bank to the Company without prior approval of regulatory agencies. Restrictions on the Bank’s ability to dividend funds to the Company are included in Note 16,17, Shareholders' Equity and Regulatory Capital, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data."

None.

Information regarding legal proceedings is included in Note 22,23, Contingencies, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statement and Supplementary Data."

Not applicable.

Our common stock is traded on the NASDAQ Capital Market under the symbol “ORRF.” At the close of business on February 28, 2020,March 11, 2021, there were 2,9840 shareholders of record.

The Board declared cash dividends of $0.60$0.68 and $0.51$0.60 per common share in 20192020 and 2018,2019, respectively. Our managementBoard is currently committed to continuing to pay regular cash dividends; however, there can be no assurance as to future dividends because they are dependent on our future earnings, capital requirements and financial condition. Restrictions on the payment of dividends are discussed in Note 16,17, Shareholders' Equity and Regulatory Capital, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data." On January 21, 2020,20, 2021, the Board declared a cash dividend of $0.17$0.18 per common share, which was paid on February 10, 2020,8, 2021, to shareholders of record as of February 3, 2020.

Information regarding the Company's equity compensation plans is included in Part III, Item 12, Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters.

In September 2015, the Board of Directors of the Company authorized a share repurchase program under which the Company may repurchase up to 5% of the Company's outstanding shares of common stock, or approximately 416,000 shares, in accordance with all applicable securities laws and regulations, including Rule 10b-18 of the Securities Exchange Act of 1934, as amended. When and if appropriate, repurchases may be made in open market or privately negotiated transactions, depending on market conditions, regulatory requirements and other corporate considerations, as determined by management. Share repurchases may not occur and the share repurchase program may be discontinued at any time.

No shares were repurchased from October 1, 20192020 to December 31, 2019.2020. As of December 31, 2019, 82,7252020, 154,680 shares had been repurchased under the program at a total cost of $1.4$2.6 million, or $17.38$16.88 per share and the maximum number of shares that may yet be purchased under the plan is 333,275261,320 shares.

The performance graph below compares the cumulative total shareholder return on our common stock with other indexes: the SNL index of banks with assets between $1.0 billion and $5.0 billion, the S&P 500 Index, and the NASDAQ Composite index. The graph assumes an investment of $100 on December 31, 20142015 and reinvestment of dividends on the date of payment without commissions. Shareholder returns on our common stock are based on trades on the NASDAQ Stock Market. The performance graph represents past performance and should not be considered to be an indication of future performance.

In accordance with the rules of the SEC, this section captioned “Performance Graph” shall not be incorporated by reference into any of our future filings made under the Exchange Act or the Securities Act. The Performance Graph and its accompanying table are not deemed to be soliciting material or to be considered filed under the Exchange Act or the Securities Act.

The Company has not sold any equity securities within the past three years which were not registered under the Securities Act.

The following discussion and analysis is intended to assist readers in understanding the consolidated financial condition and results of operations of Orrstown and should be read in conjunction with our Consolidated Financial Statements and notes thereto included in this Annual Report on Form 10-K. Certain prior period amounts presented in this discussion and analysis have been reclassified to conform to current period classifications.

The results of our operations are highly dependent on economic conditions and market interest rates. Our profitability for the years ended December 31, 2020, 2019 2018 and 20172018 was influenced by our continued organic growth and ongoing expansion into targeted markets, the acquisitions of Mercersburg and Hamilton, and a continued focus on maintaining strong asset quality. These and other matters are discussed more fully below.

The Company's consolidated financial statements are prepared in accordance with GAAP, and follow general practices within the financial services industry. The most significant accounting policies followed by the Company are presented in Note 1, Summary of Significant Accounting Policies, to the Consolidated Financial Statements under Part II, Item 8, "Financial Statements and Supplementary Data." In applying those accounting policies, the Company's management is required to exercise judgment in determining many of the methodologies, assumptions and estimates to be utilized. Certain of the critical accounting estimates are more dependent on such judgment and, in some cases, may contribute to volatility in our reported financial performance should the assumptions and estimates used change over time due to changes in circumstances. Some of the more significant areas in which the Company's management applies critical assumptions and estimates include the following.

Valuation methodologies — Management applies various valuation methodologies to assets and liabilities which often involve a significant degree of judgment, particularly when liquid markets do not exist for the particular items being valued. Quoted market prices are referred to when estimating fair values for certain assets, such as most investment securities. However, for those items for which an observable liquid market does not exist, management utilizes significant estimates and assumptions to value such items. Examples of these items include loans, deposits, borrowings, goodwill, core depositderivatives and other intangible assets, other assets and liabilities obtained or assumed in business combinations, and capitalizedmortgage servicing assets. These valuations require the use of various assumptions, including, among others, discount rates, rates of return on assets, repayment rates, cash flows, default rates, costs of servicing and liquidation values. The use of different assumptions could produce significantly different results, which could have material positive or negative effects on our results of operations, financial condition or disclosures of fair value information. In addition to valuation, wethe Company must assess whether there are any declines in value

Preliminary annual real GDP growth for 2019 was 2.3%the fourth quarter of 2020 resulted in an annualized increase of 4.0%. This is a substantial decrease from an increase of 38.3% for the third quarter of 2020, which reflected the impact of government stimulus and the gradual re-opening of the economy from COVID-19 related shutdowns as multiple vaccines have been approved. Overall, real GDP decreased by 3.5 % for 2020 as compared to an increase of 2.2% in 2019.The increase in fourth quarter of 2020 reflected both the continued economic recovery from the sharp declines earlier in the year and the ongoing impact of the COVID-19 pandemic, including new restrictions and closures that took effect in some parts of the country. The full economic effects of the COVID-19 pandemic cannot be quantified in the GDP estimate for the fourth quarter of 2020 because the impacts are generally embedded in source data and cannot be separately identified. As restrictions continue to be lifted and the world population gets vaccinated, there is hope that the leisure, travel and entertainment industries will recover. Weekly jobless claims remain high but the Labor Department announced a decline to 730,000 on February 25, 2021, a decline of 110,000 claims from the previous report. Also, the prospects for a new government stimulus packages have recently been renewed, but remain uncertain.

The pace of U.S. economic growth weakened somewhatsubstantially late in 2019 versus 2018the first quarter of 2020 and inflation pressures declined. In response,into the Federal Reserve reducedsecond quarter of 2020 as over 30 million people in the Fed Funds rate three times in 2019 to the rate of 1.75%.U.S filed for unemployment since mid-March 2020. Early in 2020, a novel coronavirus (“COVID-19”) emerged and spread, first in China and more recently,then around the globe. The fast spread of the virus and the fear that has occurred has createdresulted combined to create a high level of uncertainty about the near and intermediate future economic outlook. Because of this uncertainty, markets arewere pricing in a wide range of potential outcomes by buying sovereign government bonds, especially U.S. Treasuries, and selling stocks. Instocks and bonds not issued by sovereign governments. The COVID-19 pandemic has adversely affected, and is likely to continue to adversely affect, economic activity globally, nationally and locally. Actions taken around the world to help mitigate the spread of COVID-19 include restrictions on travel, quarantines in certain areas, and forced closures for certain types of public places and businesses, as well as shelter-in-place orders by many states. These restrictions have slowly been lifted as multiple vaccines have been rolled out late in the fourth quarter of 2020.

Due to the COVID-19 pandemic, market interest rates have declined significantly, with the 10-year Treasury bond falling for the first time below 1.00% on March 3, 2020; it was at 0.69% on September 30, 2020. On March 3, 2020, in reaction to the increase in uncertainty, the Federal Reserve took the step of cuttingcut the Fed Funds rates by 50 basis points between regularly scheduled meetings. Despite this actionmeetings to a target range of 1.00% to 1.25%. On March 11, 2020, the World Health Organization declared COVID-19 a global pandemic. On March 13, 2020, a national emergency was declared by President Trump under the National Emergencies Act. On March 15, 2020, the Federal Reserve responded by again reducing the outlook remains uncertainFed Funds rate, this time by 100 basis points, to 0% to 0.25%. The Fed Funds rate was left unchanged in future meetings with rates expected to remain at this level for an extended period of time.

The majority of the assets and liabilities of a financial institution are monetary in nature, and therefore, differ greatly from most commercial and industrial companies that have significant investments in fixed assets or inventories. However, inflation does have an impact on the growth of total assets and on noninterest expenses, which tend to rise during periods of general inflation. Inflationary pressures remain modest and there is great uncertainty about when, or if, inflation will increase and pressure interest rates to move higher.

Earnings in 20192020 reflected continuing increased interest income from expanding loan and investment portfolios, partially offset by the impact of decreasing interest rates and an overall increase in interest expense. In addition, the comparability of operating results for 20192020 with 20182019 has been impacted by the Mercersburg and Hamilton acquisitions,acquisition, which werewas completed on October 1, 2018 and May 1, 2019, respectively. Mercersburg added loans and deposits totaling $141.1 million and $160.4 million, respectively, and2019. Hamilton added loans and deposits totaling $347.4$347.1 million and $388.2 million, respectively.

The Company recorded net income of $26.5 million, $16.9 million and $12.8 million for 2020, 2019 and $8.1 million for 2019, 2018, and 2017, respectively. Diluted earnings per share totaled $2.40, $1.61 and $1.50 for 2020, 2019 and $0.98 for 2019, 2018, and 2017.respectively.

Net interest income totaled $83.6 million, $69.3 million and $52.2 million for 2020, 2019 and $43.8 million for 2019, 2018, and 2017, respectively, principally reflecting our expanded geographic footprint, as well as organic growth in commercial loans from an expanded sales force as we continued to take advantage of market opportunities.opportunities, and SBA PPP processing fee income. As previously noted, interest rates increased throughout 20172018 and 20182019 and decreased throughout 2019,2020, contributing to fluctuations in yields on loans and investments, and, to a lesser extent, costs of interest-bearing liabilities.

Asset quality trends continue to exhibit low levels of charge-offs and non-performing loans. The provision for loan losses totaled $5.3 million, $900 thousand and $800 thousand in 2020, 2019 and $1.0 million2018, respectively. The increase in 2019, 2018 and 2017, respectively.provision for loan losses in 2020 was primarily a result of increased uncertainty related to the COVID-19 pandemic.

Net interest income is the primary component of Orrstown's revenue. Interest-earning assets include loans, securities and federal funds sold. Interest-bearing liabilities include deposits and borrowed funds.

Net interest income is affected by changes in interest rates, volumes of interest-earning assets and interest-bearing liabilities, and the composition of those assets and liabilities. “Net interest spread” and “net interest margin” are two common statistics related to changes in net interest income. Net interest spread represents the difference between the yields earned on interest-earning assets and the rates paid for interest-bearing liabilities. Net interest margin is the ratio of net interest income to average earning asset balances. Through the use of noninterest-bearing demand deposits and shareholders' equity, the net interest margin exceeds the net interest spread, as these funding sources are noninterest-bearing.

Core deposits are deposits that are stable, lower cost and generally reprice more slowly than other deposits when interest rates change. Core deposits, which exclude certificates of deposit, are typically funds of local clients who also have a borrowing or other relationship with the Bank. We are primarily funded by core deposits, with noninterest-bearing demand deposits

Net interest income totaled $83.6 million, $69.3 million and $52.2 million in 2020, 2019 and $43.8 million in 2019, 2018, and 2017, respectively. The following table presents net interest income, net interest spread and net interest margin on a taxable-equivalent basis for 2020, 2019 2018 and 2017.2018. Taxable-equivalent adjustments are the result of increasing income from tax-free loans and investments by an amount equal to the taxes that would be paid if the income were fully taxable based on a 21% federal corporate tax rate for 2020, 2019 and 2018, and 34% for 2017, reflecting our statutory tax rates for those years.