Company: PAGP
Filing Date: 2025-02-28
Form Type: 10-K
Source: 0001581990-25-000006
Chunk: 435

Company: PLAINS GP HOLDINGS LP
Filing Date: 2025-02-28
Form: 10-K
Item: Item 1A
Chunk 435
---
 a disaster, accident, catastrophe, terrorist attack or other such event. The occurrence of such an event, or a series of such events, especially if one or more of them occurs in a highly populated or sensitive area, could negatively impact public perception of PAA’s operations and/or make it more difficult for PAA to obtain the approvals, permits, licenses or real property interests PAA needs in order to operate its assets or complete planned growth projects or other transactions.

PAA’s business is highly dependent on the use of information and operations technology systems and the unavailability or ineffectiveness of such systems, whether due to cybersecurity attacks, data breaches,  human error or other disruptions affecting PAA, or its service providers, could materially and adversely affect PAA’s business, operations, reputation and financial results.

The continuous and uninterrupted operation of the information and operations technology systems and infrastructure PAA uses (collectively, its “IT systems”), which include a broad array of third party and cloud-based software, technologies, tools, and security products, is critical to the operation of its business and essential to its ability to perform day-to-day operations. If PAA is unable to implement, use and maintain effective IT systems, it could have a material adverse effect on its business.

PAA and certain of its service providers have, from time to time, been subject to cyberattacks. The frequency and magnitude of cyberattacks is expected to increase and attackers are becoming more sophisticated. Infrastructure assets including pipelines, may be specifically targeted by certain groups, such as “hacktivists,” state-sponsored groups, criminal organizations or private individuals. PAA may be unable to anticipate, detect or prevent future attacks, particularly as the methodologies used by attackers change frequently or are not recognized until launched, and PAA may be unable to investigate or remediate incidents because attackers are increasingly using techniques and tools designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence.

Any breach or failure of PAA’s IT systems, whether due to cyberattacks or other malfeasance, human error, power failures or other disruptions, could result in interruptions to its operations, damage to its assets, safety incidents, damage to the environment and disclosure of sensitive information (including proprietary business information, critical operating information and data, information regarding our customers, suppliers, royalty owners and business partners, and personally identifiable information of our employees). This could in turn cause PAA to incur significant costs and liabilities, including ransom payments, remediation costs, legal claims, regulatory enforcement