Company: PBR
Filing Date: 2025-04-03
Form Type: 20-F
Source: 0001292814-25-001352
Chunk: 8

Company: PETROBRAS - PETROLEO BRASILEIRO SA
Filing Date: 2025-04-03
Form: 20-F
Item: Item 17
Chunk 8
---
 our operations and lead to the payment of fines and indemnities to the affected parties, all of which may negatively impact our results.
 Finally, due to risks such as those mentioned above, we may face difficulties in obtaining or maintaining operating licenses and may suffer damages to our image and reputation.
 1.b) Failures in our information technology systems, information security systems (cybersecurity) and telecommunications systems and services can adversely impact our operations and reputation. 
 Our operations are highly dependent on information technology and telecommunications systems and services, as well as the degree of technological protection and the strength of the associated internal controls. Interruptions or malfunctions affecting these systems and/or their infrastructure, caused by obsolescence, technical failures, deliberate acts, or even arising from geopolitical factors or derived from third-party systems, digital infrastructure and the cloud may harm or even paralyze our business and adversely impact our operations and reputation. These situations may also lead to unforeseen costs for the recovery of information and assets, in addition to the imposition of fines or legal sanctions.
  
Annual Report and Form 20-F 2024 |

Failures in information security (including industrial and automation systems), whether external, intentional or not (e.g., malware, hackers, cyberterrorism) or internal (e.g., neglect or misuse of IT assets by employees or contractors who are in a hybrid work environment working on-site and remotely), may also impact our business and reputation, our relationship with stakeholders and external agents (government, regulatory bodies, partners, suppliers, among others), our strategic positioning towards our competitors and our operational and financial results. Additionally, the use of artificial intelligence (AI) in cyberattacks or in decision-making systems and processes may amplify existing risks and create new threats that may impact our businesses.
 Artificial intelligence systems can demonstrate disparities among subgroups or languages due to biased training data or may be subject to risks such as data poisoning, which can compromise the integrity of the model, or hallucination, which can generate incorrect or misleading information. Biased training data, data poisoning and hallucination may all negatively impact internal decision-making processes based on AI. Moreover, AI may be used by external agents to automate and escalate already known cyber-attacks, making them more efficient and difficult to detect in a timely manner.
 Additionally, we are subject to increasing regulations related to AI, cybersecurity and information security, including among other aspects, adequate protection of data and digital assets, supervision of cyber risks, and incident reporting. Failure to comply with these regulations at the national and international levels may result in legal