Company: CF
Filing Date: 2025-02-20
Form Type: 10-K
Source: 0001324404-25-000006
Chunk: 41

Company: CF Industries Holdings, Inc.
Filing Date: 2025-02-20
Form: 10-K
Item: Item 1A
Chunk 41
---
 are located in an area of the United States that experiences extreme weather events, including a relatively high level of hurricane or high wind activity, and several of our other complexes are also located in areas that experience extreme weather events. Extreme weather events, including temperature extremes, depending on their severity and location, have the potential not only to damage our facilities and disrupt our operations, but also to affect adversely the shipping and distribution of our products. Moreover, our facilities may be subject to failure of equipment that may be difficult to replace or have long delivery lead times, due in part to a limited number of suppliers, and could result in operational disruptions.

17

Table of ContentsCF INDUSTRIES HOLDINGS, INC.

Failure, inadequacy, breach of, or unauthorized access to, our information technology systems or those of third-party service providers or customers could negatively affect our business and operations.

We rely on internal and third-party information technology and computer control systems in many aspects of our business, including internal and external communications, the management of our accounting, financial and supply chain functions and plant operations, some of which are within our control and some of which are within the control of third parties, to accumulate, process, store, and transmit large amounts of confidential information. If we do not allocate and effectively manage the resources necessary to build, implement and sustain the proper technology infrastructure, we could be subject to transaction errors, inaccurate financial reporting, processing inefficiencies, the loss of customers, business disruptions, or the loss of or damage to our confidential business information due to a security breach. In addition, our information technology systems may be damaged, disrupted or shut down due to attacks by computer hackers, computer viruses, employee error or malfeasance, power outages, hardware failures, telecommunication or utility failures, catastrophes or other unforeseen events, and in any such circumstances our system redundancy and other disaster recovery planning may be ineffective or inadequate. Security breaches of our systems (or the systems of our customers, suppliers or other business partners) could result in the misappropriation, destruction or unauthorized disclosure of confidential information or personal data belonging to us or to our employees, business partners, customers or suppliers, and may subject us to legal liability.

As with most large systems, our information technology systems (and those of our business partners and other third-parties) have in the past been, and in the future likely will be, subject to computer viruses, malicious codes, unauthorized access and other cyberattacks, and we expect the sophistication and frequency of such attacks to continue to