AMEREN CORPAEE

Ameren lists cyberattacks and data security risks arising from generative or agentic AI as a risk factor.

“the impact of cyberattacks and data security risks on us, our suppliers, or other entities on the grid, including those arising from generative or agentic artificial intelligence, which could, among other things, result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the loss of data, such as customer, employee, financial, and operating system information;”

Ameren cites data security risks from generative or agentic AI including loss of operational control.

“• the impact of cyberattacks and data security risks on us, our suppliers, or other entities on the grid, including those arising from generative or agentic artificial intelligence, which could, among other things, result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the loss of data, such as customer, employee, financial, and operating system information;”

Ameren cites cyberattacks and data security risks from generative or agentic AI as a potential threat.

“• the impact of cyberattacks and data security risks on us, our suppliers, or other entities on the grid, including those arising from generative or agentic artificial intelligence, which could, among other things, result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the loss of data, such as customer, employee, financial, and operating system information;”

Ameren notes data security risks from generative or agentic AI.

“• the impact of cyberattacks and data security risks on us, our suppliers, or other entities on the grid, including those arising from generative or agentic artificial intelligence, which could, among other things, result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the loss of data, such as customer, employee, financial, and operating system information;”

Ameren cites cyberattacks on grid from generative or agentic AI as risk.

“• the impact of cyberattacks and data security risks on us, our suppliers, or other entities on the grid, including those arising from generative or agentic artificial intelligence, which could, among other things, result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the loss of data, such as customer, employee, financial, and operating system information;”

Ameren cites cyberattacks from generative or agentic AI as a risk that could cause loss of operational control or data.

“• the impact of cyberattacks and data security risks on us, our suppliers, or other entities on the grid, including those arising from generative or agentic artificial intelligence, which could, among other things, result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the loss of data, such as customer, employee, financial, and operating system information;”

Ameren cites cyberattacks from generative or agentic AI as a risk that could cause loss of operational control or data.

“• cybersecurity risks, cyber attacks, including ransomware and other ransom-based attacks and those attacks arising from or generated by generative or agentic artificial intelligence, hacking, social engineering, and other forms of malicious cybersecurity and/or privacy events, which could result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the theft or inappropriate release of certain types of information, including sensitive customer, employee, financial, and operating system information;”

Ameren cites failure to keep pace with generative and agentic AI as a risk.

“• failure to keep pace with and the ability to adapt to rapid technological change, including generative and agentic artificial intelligence; and”

Ameren states that widespread adoption of generative and agentic AI may increase cyber attack risks.

“There has been an increase in the number and sophistication of physical and cyber attacks across all industries worldwide. Physical attacks could include sabotaging, vandalizing, or burglarizing transmission and distribution facilities, which are unmanned, widely dispersed, and often in isolated areas, or the theft of physical data and information. Cyber attacks could include viruses, malicious or destructive code, social engineering attacks, denial of service attacks, supply chain attacks, ransomware and other extortion-based attacks, improper access by third parties, attacks on email systems, and attacks leading to data loss, including data stored using cloud technologies, operational control, or exploitation of vulnerabilities specific to internally developed systems or to those provided and/or maintained by our suppliers. This also includes attacks arising from or generated by artificial intelligence, among various other attempts to compromise systems that can lead to security breaches. In addition, the increasingly widespread adoption of artificial intelligence technologies, including generative and agentic artificial intelligence, may increase, accelerate, or enhance cyber attacks and other operational, legal, privacy, and reputational risks in our industry and worldwide. Also, remote working arrangements could increase our data security risks, including loss of data related to sensitive customer, employee, financial, and operating system information, through insider or”

Ameren cites cyberattacks and data security risks from generative or agentic AI as a concern.

“• the impact of cyberattacks and data security risks on us, our suppliers, or other entities on the grid, including those arising from generative or agentic artificial intelligence, which could, among other things, result in the loss of operational control of energy centers and electric and natural gas transmission and distribution systems and/or the loss of data, such as customer, employee, financial, and operating system information;”