Financial Services
Columbia Banking System, Inc. (COLB)
Data as of July 16, 2026
Environment story
Columbia Banking System discloses minimal direct operational environmental metrics in its 10-K filing. No Scope 1, Scope 2, or Scope 3 emissions data are provided. The company acknowledges climate change risks in its Risk Factors section, noting that governmental regulations and client behavior shifts toward low-carbon transitions may affect business and client creditworthiness. The company mentions exposure to environmental liabilities through real-estate foreclosures and has policies requiring environmental reviews during loan underwriting and foreclosure initiation. No net-zero target year, renewable energy percentage, or decarbonization initiatives are disclosed. No climate controversies, fines, or environmental lawsuits are mentioned in the provided documents. As a regional bank with no disclosed carbon footprint, emissions targets, or climate commitments, the Environmental score reflects baseline compliance with disclosure norms but absent verification of substantive environmental stewardship.
Criticisms on file
No material criticisms on file for this pillar.
Disclosed initiatives
-
Environmental Due Diligence in LendingCompany conducts environmental reviews at loan underwriting and before initiating foreclosure on real-property-secured loans to identify hazardous or toxic substances; policies and procedures in place to assess environmental risks.Risk mitigation in loan portfolio; no quantified emissions-reduction impact disclosed.
Social story
Columbia Banking System does not disclose CEO-to-median-worker pay ratio, workforce turnover rates, diversity metrics for executive or board leadership, or union-related activity in the provided 10-K excerpt. The company mentions competition for skilled personnel, the challenge of remote/hybrid work arrangements in talent retention, and acknowledges the importance of key employee retention post-acquisition of Pacific Premier. No documented union-suppression activities, strikes, NLRB complaints, or major labor controversies are disclosed in the provided sources. No supply-chain audits or human-rights hazard mitigation are mentioned. The Risk Factors section discusses the need to attract and retain talent and competitive compensation pressures, but specific wage equity, diversity programs, or social-impact metrics are absent from the provided documents. The Social score reflects incomplete disclosure and lack of verifiable commitment to formalized DEI or labor-relations standards.
Criticisms on file
No material criticisms on file for this pillar.
Disclosed initiatives
-
Key Employee Retention & Talent ManagementCompany acknowledges dependence on skills of management team and ability to retain, recruit, and motivate key officers and employees; notes competitive pressure for senior executives and skilled personnel; recognizes challenge of remote/hybrid work arrangements in talent competition.No quantified impact; framed as a business continuity and competitive advantage concern rather than a formalized DEI or labor-relations initiative.
Governance story
Columbia Banking System's governance structure includes anti-takeover provisions requiring 66⅔% shareholder approval for business combinations (supermajority vote requirement), which imposes a governance friction but does not constitute a dual-class voting structure. Board independence percentage, specific lobbying expenditures, and PAC contributions are not disclosed in the provided 10-K excerpt. The company is subject to extensive federal and state banking regulation, with compliance overseen by the Federal Reserve, FDIC, OCC, SEC, and state banking authorities. No active antitrust proceedings, consumer-safety litigation, financial-fraud regulatory actions, or SEC consent decrees are disclosed in the Risk Factors or MD&A sections provided. The company does not explicitly disclose lobbying directed at climate deregulation or consumer-protection rollbacks. Governance score reflects regulatory compliance framework appropriate to a bank holding company but absence of granular disclosure on board independence, lobbying, and political spending.
Criticisms on file
-
MOVEit Vendor Data Breach (2023): Unauthorized acquisition of names and social security numbers or tax identification numbers of approximately 429,000 consumer and small business customers due to security vulnerability in third-party filesharing software.Source: COLB 10-K Note 16 – Commitments and Contingencies and Related-Party Transactions; MD&A discussion of operational risk.
Disclosed initiatives
-
Regulatory Compliance & Supervisory FrameworkCompany operates under comprehensive federal and state banking regulation, including Federal Reserve, FDIC, OCC, and SEC oversight; subject to regular examination, capital-adequacy testing, and supervisory guidance on risk management, consumer protection, and cybersecurity.Establishes governance standards and compliance infrastructure; no quantified impact disclosed.
-
Cybersecurity & Operational Risk ManagementCompany maintains protective policies and procedures for information security and operational integrity; experienced MOVEit vendor data-breach incident in 2023 affecting approximately 429,000 customer records (names and SSNs/tax IDs); disclosed to customers and regulators.Mitigates cyber and operational risk; disclosed incident demonstrates transparency and compliance with breach-notification regulations.
These are Missionomics' own editorial scores — directional signals built from disclosed facts under a published method, not certifications or definitive ratings of Columbia Banking System, Inc.. Coverage and confidence vary by data point, and figures can lag real-world changes. Read the full Methodology for sourcing, scoring, and correction details — or open Columbia Banking System, Inc. in the app for interactive charts and portfolio building.
Browse Companies · Methodology · Terms of Service · Privacy Policy · Back to Missionomics