Company: CENX
Filing Date: 2025-03-03
Form Type: 10-K
Source: 0000949157-25-000024
Chunk: 35

Company: CENTURY ALUMINUM CO
Filing Date: 2025-03-03
Form: 10-K
Item: Item 1A
Chunk 35
---
, disruptions in our business, and/or adversely affect our ability to timely report our financial results.

19

Our information technology systems are vulnerable to damage or interruption from circumstances largely beyond our control, including, without limitation, fire, natural disasters, power outages, systems failure, security breaches, and cyber- attacks, which include viruses, malware, and ransomware attacks. While we have disaster recovery plans in place, if our information technology systems are damaged or interrupted for any reason, and, if the disaster recovery plans do not effectively resolve such issues on a timely basis, we may be unable to manage or conduct our business operations, suffer reputational harm, and may be subject to governmental investigations and litigation, any of which may adversely impact our business, results of operations, and financial condition.

Cybersecurity incidents, in particular, are increasing in frequency and continue to evolve and become more sophisticated. Cyber security incidents may include, but are not limited to, attempts to gain unauthorized system access to install malicious software such as ransomware or malware, direct fraudulent payments to fictitious vendors, disrupt production process control and financial systems, and release of confidential or otherwise protected information and data. 

Due to the evolving nature and scope of cybersecurity threats, the scope and impact of any incident, cannot be predicted, including the scope of any potential impacts on our business, financial position and results of operations. While the Company continually works to safeguard and strengthen our information technology systems and invest in our information technology infrastructure to mitigate potential risks, there is no assurance that such actions will be sufficient to prevent cyber-attacks or security breaches that damage or interrupt access to information systems or networks, compromise confidential or otherwise protected information, destroy or corrupt data, or otherwise disrupt our operations. In addition, we may not be able to contain a targeted cybersecurity incident to any one particular operating location. Furthermore, although the Company does maintain insurance in its operations, such insurance may not cover all liabilities and losses associated with any sort of cyber incident or security breach. The occurrence of such events could negatively impact our reputation and our competitive position and could result in litigation with third parties, regulatory action, loss of business, potential liability and increased remediation costs, any of which could have a material adverse effect on our financial condition and results of operations. Such security breaches could also result in a violation of applicable U.S. and international privacy and other laws and could have a material adverse effect on our business, results of operations and financial position.

Risks Related to Legal, Regulatory and Compliance Matters

Climate change,