Company: WELPM
Filing Date: 2025-02-21
Form Type: 10-K
Source: 0000107815-25-000105
Chunk: 68

Company: WISCONSIN ELECTRIC POWER CO
Filing Date: 2025-02-21
Form: 10-K
Item: Item 1A
Chunk 68
---
 complete capital projects, our results of operations, cash flows, and financial condition may be adversely affected.

Our operations are subject to risks beyond our control, including but not limited to, cybersecurity intrusions, terrorist or other physical attacks, acts of war, or unauthorized access to personally identifiable information.

We have been subject to attempted cyber attacks from time to time, and will likely continue to be subject to such attempted attacks; however, these prior attacks have not had a material impact on our system or business operations. All of our assets and systems are potentially vulnerable to disability, failures, or unauthorized access due to physical or cybersecurity intrusions caused by human error, vendor bugs, terrorist or other physical attacks (including potential attacks on our substations and other electric distribution equipment), acts of war, or other malicious acts. Cybersecurity threats could result in a full or partial disruption of our ability to generate, transmit, purchase, or distribute electricity or natural gas or cause environmental repercussions. If our assets or systems were to fail, be physically damaged, or be breached, and were not recovered in a timely manner, we may be unable to perform critical business functions, and data, including sensitive information, could be compromised. Cybersecurity attacks, including attacks targeting utility systems and other critical infrastructure, may increase during periods of heightened or escalating geopolitical tensions.

We operate in an industry that requires the use of sophisticated information technology systems and network infrastructure, which in turn control an interconnected network of generation, distribution, and transmission systems shared with third parties. A successful physical or cybersecurity intrusion may occur despite our security measures or those we require of our vendors, including compliance with reliability and critical infrastructure protection standards. Successful cybersecurity intrusions, including those targeting the electronic control systems used at our generating facilities and electric and natural gas transmission, distribution, and LNG storage systems, could disrupt our operations and result in loss of service to customers. Attacks may come through ransomware, software updates or patches, or firmware that hackers can manipulate. These intrusions may cause unplanned outages at our power plants, which may reduce our revenues or cause us to incur significant costs if we are required to operate our higher cost electric generators or purchase replacement power to satisfy our obligations, and could result in additional maintenance expenses. The risk of such intrusions may also increase our capital and operating costs as a result of having to implement increased security measures for protection of our information technology and infrastructure. 

Our continued efforts to integrate, consolidate, and streamline our operations with those of WEC Energy Group's other subsidiaries have also resulted in increased reliance