Company: DK
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0001694426-25-000013
Chunk: 142

Company: Delek US Holdings, Inc.
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 142
---
 have an adverse effect on our business, reputation, and effectiveness. We could also be subject to resulting investigation and remediation costs as well as regulatory enforcement of private litigation and related costs, which could have a material adverse impact on our cash flow and results of operations.

In recent years, several companies have experienced data breaches, resulting in the exposure of sensitive customer data. A breach could also originate from, or compromise, our customers' and vendors' or other third-party networks outside of our control.  Any compromise or breach of our information and payment technology systems could cause interruptions in our operations, damage our reputation, reduce our customers' willingness to visit our sites and conduct business with them, or expose us to litigation from customers or sanctions for violations of the Payment Card Industry Data Security Standards ("PCI-DSS'). In addition, a compromise of our internal data network at any of our refining or terminal locations may have disruptive impacts. These disruptions could range from inconvenience in accessing business information to a disruption in our refining operations. 

The increase in companies and individuals working remotely has increased the frequency and scope of cyber-attacks and the risk of potential cybersecurity incidents, both deliberate attacks and unintentional events. Despite our security measures, we experience attempts by external parties to penetrate and attack our networks and systems. Although such attempts to date have not, to our knowledge, resulted in any material breaches, disruptions, or loss of business-critical information, our systems and procedures for protecting against such attacks and mitigating such risks may prove to be insufficient in the future and such attacks could have an adverse impact on our business and operations, including damage to our reputation and competitiveness, remediation costs, litigation or regulatory actions. In addition, as technologies evolve, and cyber-attacks become more sophisticated, we may incur significant costs to upgrade or enhance our security measures to protect against such attacks and we may face difficulties in fully anticipating or implementing adequate preventive measures or mitigating potential harm. Additionally, our use of AI software may create additional risks related to the unintentional disclosure of proprietary, confidential, personal or otherwise sensitive information. We could also be liable under laws that protect the privacy of personal information, subject to regulatory penalties, experience damage to our reputation or a loss of consumer confidence, or incur additional costs for remediation and modification or enhancement of our information systems to prevent future occurrences, all of which could adversely affect our reputation, business, operations or financial results.

If we lose any of our key personnel, our ability to manage our business and continue our growth could be negatively impacted.

Our future performance