Columbia Banking System, Inc.

Most of its income comes from the difference between the interest it pays on deposits and borrowings and the interest and fees it collects on loans, leases and securities. A smaller share comes from account fees, card and merchant charges, and wealth and trust services fees.

Growth in its lending is tied to growth in its deposit base: it scales mainly by attracting more deposits and then extending more credit against that funding, within the limits set by its regulatory capital. It has also grown through acquisitions that expanded its footprint into new geographic markets and added new business lines, rather than relying only on opening new branches organically. A separate multi-year pattern in its financial history shows consistent annual profitability and a steadily growing capital base, the kind of internal capital accretion that supports continued balance-sheet growth for a leveraged lender.

Its lending is funded mainly by customer deposits, including public, administrative and brokered deposits, backed up by borrowing capacity from the Federal Home Loan Bank system and the Federal Reserve's discount window when deposits alone fall short. It also relies on outside technology providers and financial intermediaries such as exchanges and clearing houses to run parts of its operations.

Its customers are businesses of varying sizes and their owners and employees, along with individual residents of the communities it serves, on both the deposit and lending side. Separately, this company's position in the wider economy places it upstream of other industries that draw on its banking and financial services.

This company runs the same kind of deposit-funded lending system as a large number of other regional banks, so CompanyGraph does not identify a structural feature here that competitors could not, in principle, replicate. The company describes its own competitive strengths as its customer relationships, service model, branch locations, community presence and the stability of its deposit base, though that is its own characterization rather than something CompanyGraph has independently confirmed.

The company discloses that substantially all of its customer contracts run a year or less, with payment due as services are delivered, rather than long multi-year agreements, and it does not disclose any standard, certification or integration that binds customers to it. It also states that rules against tying prevent it from requiring customers to buy additional services or avoid a competitor in exchange for credit. On the evidence available, CompanyGraph does not see a disclosed contractual mechanism that would make switching away from this company difficult.

The company itself points to the pace at which it can attract deposits as the main limit on how fast it can grow its lending, since deposits are what fund new loans. It also names regulatory approval for acquisitions, its access to capital, the pace of technology investment, and its ability to recruit and keep key employees as further limits on growth. A wider pattern among leveraged deposit-funded lenders is that the gap between funding cost and asset yield, managed across a leveraged balance sheet, is what ultimately bounds the system. CompanyGraph treats that wider pattern as a hypothesis to test against this company, not as something it has measured directly here.

In its own risk disclosures, the company lists failures or breaches of its own or outside providers' operational and security systems, including cyberattacks, ahead of other risks, alongside the risk of integrating acquisitions, keeping pace with technological change, and attracting and retaining key employees. It also states that substantially all of its loan and deposit customers sit within its western United States footprint, so conditions specific to that region reach its whole customer base rather than being spread across other regions. It has already faced at least one realized instance of the vendor-security risk it names first, now the subject of consolidated litigation.

It operates under oversight from federal and state banking regulators and a federal consumer-protection authority, which set boundaries on how it can lend, price its products, and grow, including through acquisitions that need regulatory approval. It carries litigation exposure connected to an outside investment trust and to a security failure at an outside technology vendor, the latter pointing to how much its operations depend on systems it does not control. It also names broader tariff and trade policy as a pressure that can raise costs and weaken its borrowers' ability to repay.