Company: ENBSF
Filing Date: 2025-02-14
Form Type: 10-K
Source: 0000895728-25-000006
Chunk: 244

Company: ENBRIDGE INC
Filing Date: 2025-02-14
Form: 10-K
Item: Item 1A
Chunk 244
---
 programming errors, phishing attacks, denial of service attacks, acts of vandalism, computer viruses, malware, hacking, malicious attacks, software vulnerabilities, employee errors and/or malfeasance, or other attacks, security or data breaches or other cybersecurity incidents. Cyber threat actors have attacked and continue to threaten to attack energy infrastructure, including our assets, and various government agencies have increasingly stressed that these attacks are targeting critical infrastructure, including pipelines, public utilities, and power generation facilities, and are increasing in sophistication, magnitude, and frequency. Additionally, these risks may escalate during periods of heightened geopolitical tensions. In addition, new cybersecurity legislation, regulations and orders have been recently implemented or proposed, resulting in additional actual and anticipated regulatory oversight and compliance requirements, which will require significant internal and external resources. We cannot predict the potential impact to our business of potential future legislation, regulations or orders relating to cybersecurity.

We have experienced an increase in the number of attempts by external parties to access our systems or our company data without authorization, and we expect this trend to continue. Although we devote significant resources and security measures to prevent unwanted intrusions and to protect our systems and data, whether such data is housed internally or by external third parties, we and our third-party vendors have experienced, and expect to continue to experience, cyber attacks of varying degrees in the conduct of our business, including denial of service attacks. To date, these prior cyber attacks have not, to our knowledge, had a material adverse effect on our business, operations or financial results. However, we have experienced an increasing number of cybersecurity threats in recent years and there is a risk that any such incidents could have a material adverse effect on us in the future.

51

Our technology systems or those of our vendors or other service providers are expected to become the target of further cyber attacks or security breaches which could compromise our data and systems or our access thereto by us, our customers or others, affect our ability to correctly record, process and report transactions, result in the loss of information, or cause operational disruption or incidents. There can be no assurance that our business continuity plans will be completely effective in avoiding disruption and business impacts. Furthermore, we and some of our third-party service providers (who may in turn also use third-party service providers) collect, process or store sensitive data in the ordinary course of our business, including personal information of our employees, residential gas distribution customers, land owners and investors, as well as intellectual property or other proprietary business information of ours or our customers or suppliers. In light of the Acquisitions,