The Registrants face physical security and cybersecurity risks. Threat sources, including sophisticated nation-state actors, continue to seek to exploit potential vulnerabilities in the electric and natural gas utility industry, grid infrastructure, and other energy infrastructures, and these attacks and disruptions, both physical and cyber, are becoming increasingly sophisticated and dynamic. Continued implementation of advanced digital technologies increases the potentially unfavorable impacts of such attacks. Additionally, the U.S. government has warned that the Ukraine conflict may increase the risks of attacks targeting critical infrastructure in the United States.
A security breach of the Registrants' physical assets or information systems or those of the Registrants competitors, vendors, business partners and interconnected entities in RTOs and ISOs, or regulators could materially impact Registrants by, among other things, impairing the availability of electricity and gas distributed by Registrants and/or the reliability of transmission and distribution systems, or by leading to the theft or inappropriate release of certain types of information, including critical infrastructure information, sensitive customer, vendor, or employee data, or other confidential data. The risk of these system-related events and security breaches occurring continues to intensify, and while the Registrants have been, and will likely continue to be, subjected to physical and cyber-attacks, to date none have directly experienced a material breach or material disruption to its network or information systems or our operations. However, as such attacks continue to increase in sophistication and frequency, the Registrants may be unable to prevent all such attacks in the future.
If a significant breach were to occur, the Registrants' reputation could be negatively affected, customer confidence in the Registrants or others in the industry could be diminished, or the Registrants could be subject to legal claims, loss of revenues, increased costs, or operations shutdown. Moreover, the amount and scope of insurance maintained against losses resulting from any such events or security breaches may not be sufficient to cover losses or otherwise adequately compensate for any disruptions to business that could result.
The Utility Registrants' deployment of smart meters throughout their service territories could increase the risk of damage from an intentional disruption of the system by third parties.
In addition, new or updated security regulations or unforeseen threat sources could require changes in current measures taken by the Registrants or their business operations and could adversely affect their consolidated financial statements.