Company: TVC
Filing Date: 2025-11-13
Form Type: 10-K
Source: 0001376986-25-000056
Chunk: 662

Company: Tennessee Valley Authority
Filing Date: 2025-11-13
Form: 10-K
Item: Item 1A
Chunk 662
---
 based on threats to expose sensitive data, including data from employees, customers, and financial parties, to gain operational control, or to expose security vulnerabilities specific to TVA’s facilities.  In such a case, a cyber attack could compromise sensitive data, significantly disrupt operations, require additional expenditures for cybersecurity, negatively affect TVA’s cash flows, results of operations, financial condition, and reputation, and pose health and safety risks to TVA personnel and the customers and communities that TVA serves.

Because the investigation of any cybersecurity breach is inherently unpredictable and would require substantial time to complete, TVA may not be able to quickly remediate the consequences of any breach, which may increase the costs and enhance the negative consequences associated with a breach.  Additionally, the theft, damage, or improper disclosure of sensitive data may subject TVA to penalties and claims from third parties or increased governmental oversight.  These claims could negatively affect TVA's cash flows, results of operations, financial condition, and reputation. 

Cyber attacks on third parties or the failure of their technology infrastructure could interfere with or harm TVA.

TVA relies on many third parties for services, including for transferring funds to non-TVA entities or receiving delivery of products in the ordinary course of business, that are heavily computerized and use assets such as information technology and networking systems.  These providers' systems are susceptible to cybersecurity and data breaches and outages from fire, floods, power loss, telecommunications failures, physical attack, and similar events.  If any of these third parties were to experience interference from cyber attacks or significant system failures or outages, which events have occurred in the past and may occur again in the future, the services they provide TVA could be disrupted.  This disruption could interfere with TVA’s ability to perform its obligations to others, transfer funds, obtain fuel or critical parts, supplies, or services, or make payments, which in turn could negatively affect TVA’s cash flows, results of operations, financial condition, and reputation.  Additionally, the theft, damage, or improper disclosure of sensitive data held by these third parties may subject TVA to further harm.

The failure of TVA’s information technology systems could have adverse consequences to TVA.

TVA’s operations are dependent upon the proper functioning of its internal systems, including the information technology systems that support TVA’s underlying business processes.  Any significant failure or malfunction of such information technology systems may result in disruptions of TVA’s operations.  TVA relies on information technology systems, including the internet and