ORRSTOWN FINANCIAL SERVICES INC

Item 8.01 Other Events (a) Orrstown Financial Services, Inc. (the “Company”) announced today that it will redeem the Company's $31,000,000 outstanding 4.5% Fixed-to-Floating Rate Subordinated Notes (the “Notes”) due 2030, on June 30, 2026 (the "Redemption Date") at a redemption price in cash equal to 100% of the principal amount of the Notes, plus accrued and unpaid interest, if any, on the principal amount of the Notes to, but excluding, the Redemption Date. The Notes were assumed by the Company upon the completion of its merger with Codorus Valley Bancorp, Inc. on July 1, 2024. At March 31, 2026, the interest rate on the Notes was 7.72%. Notice of the redemption has been mailed to the Noteholders in accordance with the terms of the Notes. The information contained in this Current Report on Form 8-K does not constitute a notice of redemption of the Notes. Holders of the Notes should refer to the notice of redemption delivered by U.S. Bank. (b) On May 21, 2026, the Company received notice from a third-party vendor that such vendor had experienced a cybersecurity incident whereby a third-party gained unauthorized access to sensitive personal information of certain of the Company’s customers. The Company is one of a number of organizations that have been affected by this vendor’s cybersecurity incident. Based on the Company’s investigation to date, the Company’s information systems and networks have not been accessed, compromised or affected by the incident. The vendor has informed the Company that there is currently no indication that the Company’s customer information has been misused. Impacted customers will be notified of the incident and offered credit monitoring services. The incident has not had and is not expected to have a material impact on the Company’s operati