Company: LEU
Filing Date: 2025-02-07
Form Type: 10-K
Source: 0001065059-25-000006
Chunk: 56

Company: CENTRUS ENERGY CORP
Filing Date: 2025-02-07
Form: 10-K
Item: Item 1A
Chunk 56
---
 such holders on the same day that we provide notice. 

Accordingly, there are situations in which a foreign stockholder or Contravening Person could lose the right to vote its shares or in which we may redeem or exchange shares held by a foreign person or Contravening Person and in which such redemption or exchange could be at the lesser of fair market value and the person’s purchase price for the shares redeemed or exchanged, which could result in a significant loss for that person.

46

General Risk Factors

Failures to protect classified or other sensitive information, or cybersecurity incidents could result in significant liability or otherwise have an adverse effect on our business.

Our business requires us to use and protect classified, sensitive, and other protected information as well as business proprietary information and intellectual property (collectively, “sensitive information”). Our computer networks and other IT systems are designed to protect this information through the use of classified networks and other procedures. We routinely experience various cybersecurity incidents, including threats to our information technology infrastructure, unauthorized attempts to gain access to the Company’s sensitive information, and denial-of-service attacks, as do our customers, suppliers, subcontractors, and other business partners. The threats we face vary from attacks common to most industries to attacks by more advanced and persistent, highly organized adversaries, including nation states, which target us and other government contractors because we possess sensitive information. If we are unable to protect sensitive information, our customers or governmental authorities could question the adequacy of our threat mitigation and detection processes and procedures, and depending on the severity of the incident, U.S. government data, the Company’s data, customers’ data, our employees’ data, our intellectual property, and other sensitive information could be compromised. As a consequence of the persistence, sophistication, and volume of these attacks, we may not be successful in defending against all such attacks. Due to the evolving nature of these security threats and the national security aspects of much of the sensitive information we possess, the impact of any future incident cannot be predicted.

We have a number of suppliers and indirect suppliers with a wide variety of systems and cybersecurity capabilities and we may not be successful in preventing adversaries from exploiting possible weak links in our supply chain. We also must rely on this supply chain for detecting and reporting cyber incidents, which could affect our ability to report or respond to cybersecurity incidents in a timely manner. The costs related to cyber or other security threats or disruptions may not be fully insured or indemnified by other means. Further, these suppliers may incorporate generative artificial intelligence tools into their offerings without