Compare peers

… Cyberattacks, including malicious software, data privacy breaches by employees, insiders, or others with authorized access to the Company’s systems, cyber or phishing attacks, ransomware attacks, supply chain vulnerabilities, business email compromises, other attempts to gain unauthorized access to the …

There are numerous and evolving risks to the Company’s data, technology, and information systems from cyber threat actors, including criminal hackers, state-sponsored intrusions, industrial espionage, and employee malfeasance. The Company’s operations are dependent on digital technologies, including …

• A breach of information technology infrastructure, including a breach caused by a cybersecurity attack on Williams, Transco, or NWP, or the third parties with whom they are interconnected, may interfere with the safe operation of assets, result in the disclosure of personal or proprietary information, and cause reputational harm.

A breach of information technology infrastructure, including a breach caused by a cybersecurity attack on Williams, Transco, or NWP, or the third parties with whom they are interconnected, may interfere with the safe operation of assets, result in the disclosure of personal or proprietary information, and cause reputational harm.

For additional information regarding our cybersecurity risk management, strategy and governance, see Item 1C. Cybersecurity.

If our data, IT, operational technology (OT), including industrial control and supervisory control and data acquisition (SCADA) systems were to be breached, damaged or disrupted due to a cybersecurity incident or cyber-attack (directly, indirectly through third parties or through …

… operations There are numerous and evolving risks to Chevron’s cybersecurity and privacy from cyber threat actors, including criminal hackers, state-sponsored intrusions, industrial espionage and employee malfeasance. These cyber threat actors, whether internal or external to Chevron, are becoming …

… Any of the foregoing can be exacerbated by a delay or failure to detect a cyber incident or the full extent of such incident. Further, the company is increasingly experiencing cyber incidents related to its third-party vendors. Some third …

Our IT Systems and Confidential Information, and that of our vendors, service providers and other third-party providers and business partners, are vulnerable to evolving cybersecurity threats, including, without limitation, denial-of-service attacks; malicious software (e.g., ransomware); the …

• Failure to comply with cybersecurity and data privacy laws and regulations could have a material effect on our reputation, results of operations or financial loss.

Our information systems (and those of our third-party business partners and service providers), including our cloud computing environments and operational technology environments, are subject to numerous and evolving cybersecurity threats and attacks, including ransomware and other malware, phishing and …

Our cybersecurity and infrastructure protection technologies, disaster recovery plans and systems, employee training and vendor risk management may not be sufficient to defend us against all unauthorized attempts to access our information or impact our systems. We and our third …

… As cyber threats targeting the energy sector grow in frequency and sophistication, we are required to devote additional resources to maintain and enhance our cybersecurity programs and controls. Failure to comply with applicable cybersecurity laws and regulations, or to effectively …

… other disruptions, including ransomware and other malware, phishing and social engineering schemes, deepfakes, malicious software, data privacy incidents, insiders or others with authorized access, attempts to gain unauthorized access to our data and systems, and other cybersecurity incidents. Any such …

• We are subject to cybersecurity risks. A cyber incident could occur and result in information theft, data corruption, operational disruption, disclosure of business sensitive, confidential or personally identifiable information, misdirected wire transfers, reputational harm, and financial loss.

We are subject to cybersecurity risks. A cyber incident could occur and result in information theft, data corruption, operational disruption, disclosure of business sensitive, confidential or personally identifiable information, misdirected wire transfers, reputational harm, and financial loss.

Cyber incidents targeting our digital work environment or other technologies or energy infrastructure may adversely impact our operations.

… Further, as cyber incidents continue to evolve and cyber attackers become more sophisticated, we may be required to expend additional resources to continue to modify or enhance our protective measures or to investigate and remediate any vulnerability to cyber incidents …

Despite robust cybersecurity measures, the Company has experienced cyber-attacks in the past and expects such threats to continue to evolve, including increasing in magnitude and sophistication. The cyber risk landscape changes over time due to a variety of internal …

… evolving threats, including unauthorized access, ransomware or other malware, service disruptions, threats to the security of facilities and infrastructure, cyber terrorism, critical infrastructure attacks, supply chain attacks and other attacks on third-party vendors. Cyber incidents, whether from insiders or …

… Transportation Security Administration following the Colonial Pipeline cybersecurity incident, the obligations imposed by the U.S. Cyber Incident Reporting for Critical Infrastructure Act. We have been, and may continue to be, required to expend significant resources to comply with such …

Our information systems and network infrastructure have been and continue to be subject to frequent unauthorized access attempts and other cyber attacks, including ransom-related incidents, which could result in increased costs to detect, prevent, respond to, and mitigate these …

Terrorist attacks, including cyber sabotage, aimed at our facilities could adversely affect our business, results of operations, financial position and cash flows.

A breach of information security, including a cybersecurity attack, or failure of one or more key information technology or operational systems, or those of third parties, may adversely affect our operations, financial results or reputation.

… There can be no assurance that our cybersecurity risk management program, processes, or systems we have designed to prevent or limit the effects of cyber incidents or attacks will be sufficient to prevent or detect material consequences arising from such …

Our operations are subject to cyber incidents that could have a material adverse effect on our reputation, business, financial condition, results of operations, and cash flows.

… ransomware, which could be enhanced or facilitated by artificial intelligence. In addition, our vendors (including third-party cloud and IT service providers), midstream providers and other business partners may separately suffer disruptions or breaches from cyberattacks or other cyber-related …

As of the date of this report, though the Company and certain of our service providers have experienced certain cybersecurity incidents, we are not aware of any previous cybersecurity incidents that have materially affected, or are reasonably likely to materially …

… ExxonMobil is regularly subject to attempted cybersecurity disruptions from a variety of sources including state-sponsored actors. See Item 1C in this report for information on ExxonMobil’s program for managing cybersecurity risks. If the measures we are taking to …

… Successful operation of particular facilities or projects may be disrupted by civil unrest, military conflict, acts of sabotage, piracy, terrorism, cybersecurity attacks, the application of national security laws or policies that result in restricting our ability to do business in …