CSX CORP

Previous wording

Legislation passed by Congress or state or local assemblies; new regulations issued by federal, state or local agencies; executive orders issued by the President of the United States or governors; or other governmental actions could significantly affect the revenues, costs (including income taxes), and profitability of the Company's business. In addition, statutes, regulations, orders or other governmental actions that, among other things, impose price constraints, restrict access to government funding, or affecting rail-to-rail competition could adversely affect the Company's profitability.

Current wording

Legislation passed by Congress or state or local assemblies; new regulations issued by federal, state or local agencies; executive orders issued by the President of the United States or governors; or other governmental actions could significantly affect the revenues, costs (including income taxes), and profitability of the Company's business. In addition, statutes, regulations, orders or other governmental actions that, among other things, impose price constraints, restrict access to government funding, or affect rail-to-rail competition could adversely affect the Company's profitability.

Previous wording

The Company, its third-party vendors and other companies in the rail and transportation industries have been subject to, and are likely to continue to be the target of, data breaches, cyber-attacks and other similar incidents. These incidents may include, among other things, malware, ransomware, distributed denial of service attacks, social engineering, phishing, theft, malfeasance or improper access by employees or third-party vendors, software bugs, server malfunctions, software or hardware failures, human error, fraud, or other modes of attack or disruption. Attacks of these nature are increasing in frequency, levels of persistence, intensity and sophistication, including by nation-state threat actors or those associated with nation-states. Further, the Company may be at increased risk of experiencing a cyber-attack as a result of being a component of the critical U.S. infrastructure. If such an event takes place, the Company may be required to incur significant expenses in excess of existing cybersecurity insurance coverage. As cybersecurity threats continue to evolve, the Company may be required to expend significant additional resources to continue to modify or enhance its protective measures or to investigate and remediate any information security vulnerabilities, data breaches, cyber-attacks or other similar incidents. The Company or its third-party vendors may also experience cybersecurity incidents as a result of employees, third-party vendors and other third parties with which they interact working remotely on less secure systems and environments.

Current wording

The Company, its third-party vendors and other companies in the rail and transportation industries have been subject to, and are likely to continue to be the target of, data breaches, cyber-attacks and other similar incidents. These incidents may include, among other things, malware, ransomware, distributed denial of service attacks, social engineering, phishing, theft, malfeasance or improper access by employees or third-party vendors, software bugs, server malfunctions, software or hardware failures, human error, fraud, or other modes of attack or disruption. Attacks of these nature are increasing in frequency, levels of persistence, intensity and sophistication, including by nation-state threat actors or those associated with nation-states. Further, the Company may be at increased risk of experiencing a cyber-attack as a result of being a component of the critical U.S. infrastructure. If such an event takes place, the Company may be required to incur significant expenses in excess of existing cybersecurity insurance coverage. As cybersecurity threats continue to evolve, including the increased maturity of artificial intelligence leveraged by threat actors, the Company may be required to expend significant additional resources to continue to modify or enhance its protective measures or to investigate and remediate any information security vulnerabilities, data breaches, cyber-attacks or other similar incidents. The Company or its third-party vendors may also experience cybersecurity incidents as a result of employees, third-party vendors and other third parties with which they interact working remotely on less secure systems and environments.

Previous wording

Despite the Company’s efforts to protect its information technology systems, it may not be able to prevent or anticipate all data breaches, cyber-attacks or other similar incidents, detect or react to such incidents in a timely manner or adequately remediate any such incident. Due to applicable laws, rules and regulations or contractual obligations, CSX may be held responsible for data breaches, cyber-attacks or other similar incidents attributed to its third-party vendors as they relate to the information CSX shares with them.

Current wording

Despite the Company’s efforts to protect its information technology systems, it may not be able to prevent or anticipate all data breaches, cyber-attacks or other similar incidents, detect or react to such incidents in a timely manner or adequately remediate any such incident. Due to applicable laws, rules and regulations or contractual obligations, CSX may be held responsible for data breaches, cyber-attacks

Previous wording

CSXT has experienced, and in the future could experience, rail network difficulties related to: (i) locomotive or crew shortages; (ii) labor shortages or other service disruptions in the supply chain affecting trucking, ports, handling facilities, customer facilities or other railroads; (iii) unpredictable increases in demand; (iv) extreme weather conditions; (v) regulatory changes resulting in forced access or impacting where and how fast CSXT can transport freight or maintain routes; (vi) reductions in availability of pooled equipment, including chassis; (vii) impacts from changes in network capacity or structure; or (viii) increased passenger activities, which could impact CSXT's operational fluidity, leading to deterioration of service, asset utilization and overall efficiency.

Current wording

CSXT has experienced, and in the future could experience, rail network difficulties related to: (i) locomotive or crew shortages; (ii) labor shortages or other service disruptions in the supply chain affecting trucking, ports, handling facilities, customer facilities or other railroads; (iii) unpredictable increases in demand; (iv) extreme weather conditions; (v) regulatory changes resulting in forced access or impacting where and how fast CSXT can transport freight or maintain routes; (vi) reductions in availability of pooled equipment, including chassis; (vii) impacts from changes in network capacity or structure; (viii) increased passenger activities; or (ix) derailments and other accidents, which could impact CSXT's operational fluidity, leading to deterioration of service, asset utilization and overall efficiency.

Previous wording

The Company experiences competition in pricing, service, reliability and other factors from various transportation providers including railroads and motor carriers that operate similar routes across its service area and, to a less significant extent, barges, ships and pipelines. Other transportation providers generally use public rights-of-way that are built and maintained by governmental entities, while CSXT and other railroads must build and maintain rail networks largely using internal resources. Any future improvements or expenditures materially increasing the quality or reducing the cost of alternative modes of transportation such as through the use of automation, autonomy or electrification, or legislation providing for less stringent size or weight restrictions on trucks, could negatively impact the Company's competitive position. Additionally, any future consolidation in the rail industry could materially affect the regulatory and competitive environment in which the Company operates.

Current wording

The Company experiences competition in pricing, service, reliability and other factors from various transportation providers including railroads and motor carriers that operate similar routes across its service area and, to a less significant extent, barges, ships and pipelines. Other transportation providers generally use public rights-of-way that are built and maintained by governmental entities, while CSXT and other railroads must build and maintain rail networks largely using internal resources. Any future improvements or expenditures materially increasing the quality or reducing the cost of alternative modes of transportation such as through the use of automation, autonomy or electrification, or legislation providing for less stringent size or weight restrictions on trucks, could negatively impact the Company's competitive position. Additionally, any currently proposed or other future consolidation in the rail industry could materially affect the regulatory and competitive environment in which the Company operates.