Company: ENBSF
Filing Date: 2025-02-14
Form Type: 10-K
Source: 0000895728-25-000006
Chunk: 245

Company: ENBRIDGE INC
Filing Date: 2025-02-14
Form: 10-K
Item: Item 1A
Chunk 245
---
 due to their large residential customer bases, we and some of our third-party services providers will process increasing amounts of personal information.

As a result of the foregoing, we could experience loss of revenues, repair, remediation or restoration costs, regulatory action, fines and penalties, litigation, breach of contract or indemnity claims, cyber extortion, ransomware, implementation costs for additional security measures, loss of customers, customer dissatisfaction, reputational harm, liability under laws that protect the privacy of personal information, other adverse consequences, or other costs or financial loss. In light of the Acquisitions, these risks may be heightened, and the consequences magnified. Regardless of the method or form of cyber attack or incident, any or all of the above could materially adversely affect our reputation, business, operations or financial results.

In addition, a cyber attack could occur and persist for an extended period without detection. Any investigation of a cyber attack or other security incident may be inherently unpredictable, and it would take time before the completion of any investigation and availability of full and reliable information. During such time, we may not know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, all or any of which could further increase the costs and consequences of a cyber attack or other security incident, and our remediation efforts may not be successful. The inability to implement, maintain and upgrade adequate safeguards could materially and adversely affect our results of operations, cash flows, and financial condition. Moreover, recent rulemakings may require us to disclose information about a cybersecurity incident before it has been completely investigated or remediated in full or even in part. As cyber attacks continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities.

Furthermore, media reports about a cyber attack or other significant security incident affecting Enbridge, whether accurate or not, or, under certain circumstances, our failure to make adequate or timely disclosures to the public, law enforcement, other regulatory agencies or affected individuals following any such event, whether due to delayed discovery or otherwise, could negatively impact our operating results and result in other adverse consequences, including damage to our reputation or competitiveness, harm to our relationships with customers, partners, suppliers, investors, and other third parties, interruption to our management, remediation or increased protection costs, significant litigation or regulatory action, fines or penalties, all of which could materially adversely affect our business, operations,