---
ticker: NSC
company: Norfolk Southern Corporation
filing_type: 10-K
year_current: 2025
year_prior: 2024
risks_added: 1
risks_removed: 0
risks_modified: 5
risks_unchanged: 2
source: SEC EDGAR
url: https://riskdiff.com/nsc/2025-vs-2024/
markdown_url: https://riskdiff.com/nsc/2025-vs-2024/index.md
generated: 2026-05-10
---

# Norfolk Southern Corporation: 10-K Risk Factor Changes 2025 vs 2024

> Source: U.S. Securities and Exchange Commission (EDGAR)  
> Generated: 2026-05-10  
> All data extracted directly from official filings. No hallucinated content.

> **[AI-Generated Summary]** The paragraph below was produced by a language
> model and may contain errors. All other content on this page is deterministically
> extracted from the original SEC filing.

> Norfolk Southern substantially expanded its risk disclosure framework by introducing a new TECHNOLOGY RISKS category while maintaining its core risk structure with 2 unchanged items. The company materially enhanced disclosure across five existing risk categories - CLIMATE CHANGE RISKS, REGULATORY AND LEGISLATIVE RISKS, OPERATIONAL RISKS, HUMAN CAPITAL RISKS, and MACROECONOMIC AND MARKET RISKS - reflecting evolving business challenges and regulatory environments. This restructuring demonstrates Norfolk Southern's heightened focus on emerging technology vulnerabilities alongside deepened articulation of established operational and market-related exposures.

---

## Summary

| Status | Count |
|--------|-------|
| New risks added | 1 |
| Risks removed | 0 |
| Risks modified | 5 |
| Unchanged | 2 |

---

## New in Current Filing: TECHNOLOGY RISKS

A significant cybersecurity incident or other disruption to our technology infrastructure resulting from internal and external threats could disrupt our business operations. To conduct business, we extensively rely on information and operational technology systems. The threat landscape is vast, with potential attacks from cybercriminals, nation-states, state-sponsored actors and others including, but not limited to, service denials, unauthorized access, compromised equipment or rolling stock, extortion, or theft of data or money. As a result, our business continuity and disaster recovery plans and activities may not be sufficient for all eventualities, resulting in the potential for a data breach or significant service or operational disruption or failure involving one or more information or operational technology systems operated by us or under control of third parties, including computer hardware, software, cloud services and transportation and communications equipment. Such failures or disruptions can adversely impact our business by, among other things, preventing intercompany communications and disrupting operations that may result in direct or indirect monetary losses, damage to equipment or property, or loss of confidence in corporate competency. Any one or more of these events could have a material adverse effect on our results of operations, financial position, or operations. Although we maintain security programs designed to protect our information and operational technology systems, we are continually targeted by threat actors attempting to access our networks and we may be unable to detect or prevent a breach of our systems or disruption to our service in the future. In addition, while we have previously experienced technology outages and cybersecurity events that have impacted our systems and service, future events may result in more significant impacts to our operations, reputation or financial results. These potentially impactful future events could include service disruptions, unauthorized access to our systems, viruses, ransomware, and/or the compromise, acquisition, or destruction of our K16 K16 K16 data. We also could be impacted by cybersecurity events targeting third parties that we rely on for business operations, including third party vendors that have access to our systems or data and third parties who provide services and are in our supply chain. Such a direct or indirect cybersecurity incident could interrupt our service, cause safety failures or operational difficulties, decrease revenues, increase operating costs, impact our efficiency, damage our corporate reputation, and/or expose us to litigation or government action or increased regulation, which could result in penalties, fines or judgments. In addition, our failure to comply with or adhere to privacy-related or data protection laws and regulations could result in government investigations and proceedings against us, or litigation, resulting in adverse reputational impacts, penalties, and legal liability. Our business may be seriously harmed if we fail to develop, implement, maintain, upgrade, enhance, protect and integrate our information or operational technology systems. If we fail to develop, acquire or implement new technology, or otherwise fail to maintain, protect or integrate our information or operational technology systems, we may suffer a competitive disadvantage within the rail industry and with companies providing alternative modes of transportation service. The techniques used by cybersecurity threat actors to obtain unauthorized access, disable or degrade service or sabotage systems change frequently, as data breaches and other cybersecurity events have become increasingly commonplace. Consequently, these techniques may be difficult to detect and cybersecurity events are therefore increasingly difficult to prevent. The rapid evolution and increased adoption of emerging technologies, such as artificial intelligence and machine learning, may make it more difficult to anticipate cybersecurity threats and implement adequate protective countermeasures. If we fail to adequately develop or maintain our information or operational technology systems or cybersecurity infrastructure, we may become increasingly vulnerable to cybersecurity events, or other breaches or disruptions to our information or operational technology systems.

---

## Modified: CLIMATE CHANGE RISKS

**Key changes:**

- Reworded sentence: "Severe weather conditions and other natural phenomena resulting from changing weather patterns and rising sea levels or other causes, including hurricanes, floods, fires, landslides, extreme temperatures, significant precipitation, and earthquakes, have caused, and may again cause damage to our network, our workforce to be unavailable, and us to be unable to use our equipment, or otherwise cause significant interruptions to our operations."

**Prior (2024):**

Severe weather and disasters have caused, and could again cause, significant business interruptions and expenditures. Severe weather conditions and other natural phenomena resulting from changing weather patterns and rising sea levels or other causes, including hurricanes, floods, fires, landslides, extreme temperatures, significant precipitation, and earthquakes, have caused, and may again cause damage to our network, our workforce to be unavailable and us to be unable to use our equipment. Additionally, shifts in weather patterns caused by climate change are expected to increase the frequency, severity or duration of certain adverse weather conditions, which could cause more significant business interruptions that result in increased costs, increased liabilities, and decreased revenues. Concern over climate change has led to significant federal, state, and international legislative and regulatory efforts to limit greenhouse gas (GHG) emissions. Restrictions, caps, taxes, or other legislative or regulatory controls on GHG emissions, including diesel exhaust, could significantly increase our operating costs and decrease the amount of traffic we handle. In addition, legislation and regulation related to climate change or GHG emissions could negatively affect the markets we serve and our customers. Even without legislation or regulation, government incentives and adverse publicity relating to climate change or GHG emissions could negatively affect the markets for certain of the commodities we carry, or our customers that use commodities we carry to produce energy (including coal), use significant amounts of energy in producing or delivering the commodities we carry, or manufacture or produce goods that consume significant amounts of energy associated with GHG emissions. K16 K16 K16

**Current (2025):**

Severe weather and disasters have caused, and could again cause, significant business interruptions and expenditures. Severe weather conditions and other natural phenomena resulting from changing weather patterns and rising sea levels or other causes, including hurricanes, floods, fires, landslides, extreme temperatures, significant precipitation, and earthquakes, have caused, and may again cause damage to our network, our workforce to be unavailable, and us to be unable to use our equipment, or otherwise cause significant interruptions to our operations. Additionally, shifts in weather patterns caused by climate change are expected to increase the frequency, severity, or duration of certain adverse weather conditions, which could cause more significant business interruptions that result in increased costs, increased liabilities, and decreased revenues. Our inability to quickly and effectively restore operations following adverse weather and disasters could materially impact our business and results of operations. To the extent such weather events or natural disasters become more frequent or severe, disruptions to our business and those of our customers and costs to repair damaged property and equipment or maintain or resume operations could increase. Furthermore, climate change may contribute to an increase in the incidence and severity of natural disasters and adverse weather conditions and reduce the availability or increase the cost of insurance for such events. Concern over climate change has led to significant federal, state, and international legislative and regulatory efforts to limit greenhouse gas (GHG) emissions. Restrictions, caps, taxes, or other legislative or regulatory controls on GHG emissions, including diesel exhaust, could significantly increase our operating costs and decrease the amount of traffic we handle. In addition, legislation and regulation related to climate change or GHG emissions could negatively affect the markets we serve and our customers. Even without legislation or regulation, government incentives and adverse publicity relating to climate change or GHG emissions could negatively affect the markets for certain of the commodities we carry, or our customers that use commodities we carry to produce energy (including coal), use significant amounts of energy in producing or delivering the commodities we carry, or manufacture or produce goods that consume significant amounts of energy associated with GHG emissions.

---

## Modified: REGULATORY AND LEGISLATIVE RISKS

**Key changes:**

- Reworded sentence: "Governmental legislation, regulation, and Executive Orders over commercial, operational, tax, safety, security, or cybersecurity matters could negatively affect us, our customers, the rail industry, or the markets we serve."
- Reworded sentence: "Railroads are also subject to the enactment of laws by Congress and regulation by the DOT (including the FRA) and the DHS (including the TSA), which regulate many aspects of our operations related to safety, security, and cybersecurity."
- Reworded sentence: "Our operations are subject to extensive federal, state and local environmental laws and regulations concerning, among other things: emissions to the air; discharges to waterways or groundwater supplies; handling, storage, transportation, use, and disposal of waste and other materials; and, the cleanup of hazardous material or petroleum releases."
- Reworded sentence: "Our inability to comply with the extensive federal, state and local environmental laws and regulations to which we are subject could result in significant liabilities, fines, or sanctions, including those related to the investigation or remediation of known and unknown environmental contamination, or otherwise adversely impact our operations."
- Added sentence: "international trade relationships may adversely impact our customers, our industry, and our business."

**Prior (2024):**

Governmental legislation, regulation, and Executive Orders over commercial, operational, tax, safety, security, or cybersecurity matters could negatively affect us, our customers, the rail industry or the markets we serve. Congress can enact laws, agencies can promulgate regulations, and Executive Orders can be issued that increase or alter regulation in a way that negatively affects us, our customers, the rail industry or the markets we serve. Railroads presently are subject to commercial and operational regulation by the STB, which has jurisdiction to varying extents over rates, routes, customer access provisions, fuel surcharges, conditions of service, and the extension or abandonment of rail lines. The STB also has jurisdiction over the consolidation, merger, or acquisition of control of and by rail common carriers. Additional or updated regulation of the rail industry by Congress or the STB, whether under new, existing or amended laws or regulations, could have a significant negative impact on our ability to negotiate prices for rail services, on our railway operating revenues, and on the efficiency, conduct, or complexity of our operations. Such additional or updated industry regulation, as well as enactment of any new or updated tax laws, could also negatively impact cash flows from our operating activities and, therefore, result in reduced capital spending on our rail network or abandonment of lines. Railroads are also subject to the enactment of laws by Congress and regulation by the DOT (including the FRA) and the DHS (including the TSA), which regulate many aspects of our operations related to safety, security and cybersecurity. Additional or updated safety, security, or cybersecurity regulation by Congress, the DOT or DHS could have a negative impact on our business and the efficiency, conduct, or complexity of our operations including (but not limited to) increased operating costs, capital expenditures, claims and litigation. Our inability to comply with the requirements of existing or updated laws, regulations, or Executive Orders that govern our operations or the rail industry, including but not limited to those pertaining to commercial, operational, tax, safety, security, or cybersecurity matters, could have a material adverse effect on our financial position, results of operations or liquidity. We are addressing multiple governmental actions as a result of the Incident, as noted in "Incident Risks" above. K12 K12 K12 Federal and state environmental laws and regulations could negatively impact us and our operations. Our operations are subject to extensive federal and state environmental laws and regulations concerning, among other things: emissions to the air; discharges to waterways or groundwater supplies; handling, storage, transportation, and disposal of waste and other materials; and, the cleanup of hazardous material or petroleum releases. The risk of incurring environmental liability, for acts and omissions, past, present, and future, is inherent in the railroad business. This risk includes property owned by us, whether currently or in the past, that is or has been subject to a variety of uses, including our railroad operations and other industrial activity by past owners or our past and present tenants. Environmental problems that are latent or undisclosed may exist on these properties, and we could incur environmental liabilities or costs, the amount and materiality of which cannot be estimated reliably at this time, with respect to one or more of these properties. Moreover, lawsuits and claims involving other unidentified environmental sites and matters are likely to arise from time to time. Our inability to comply with the extensive federal and state environmental laws and regulations to which we are subject could result in significant liabilities or otherwise adversely impact our operations. As noted in "Incident Risks" above, in connection with the Incident, we are experiencing negative impacts related to environmental matters, including extensive cleanup costs and litigation related to alleged environmental impacts of the Incident.

**Current (2025):**

Governmental legislation, regulation, and Executive Orders over commercial, operational, tax, safety, security, or cybersecurity matters could negatively affect us, our customers, the rail industry, or the markets we serve. Congress can enact laws, agencies can promulgate regulations, and Executive Orders can be issued that increase or alter regulation in a way that negatively affects us, our customers, the rail industry, or the markets we serve. Railroads presently are subject to commercial and operational regulation by the STB, which has jurisdiction to varying extents over rates, routes, customer access provisions, fuel surcharges, conditions of service, and the extension or abandonment of rail lines. The STB also has jurisdiction over the consolidation, merger, or acquisition of control of and by rail common carriers. Additional or updated regulation of the rail industry by Congress or the STB, whether under new, existing or amended laws or regulations, could have a significant negative impact on our ability to negotiate prices for rail services, on our railway operating revenues, and on the efficiency, conduct, or complexity of our operations. Such additional or updated industry regulation, as well as enactment of any new or updated tax laws, could also negatively impact cash flows from our operating activities and, therefore, result in reduced capital spending on our rail network or abandonment of lines. Railroads are also subject to the enactment of laws by Congress and regulation by the DOT (including the FRA) and the DHS (including the TSA), which regulate many aspects of our operations related to safety, security, and cybersecurity. Additional or updated safety, security, or cybersecurity regulation by Congress, the DOT, or DHS could have a negative impact on our business and the efficiency, conduct, or complexity of our operations including (but not limited to) increased operating costs, capital expenditures, claims, and litigation. Our inability to comply with, or operational practices and costs necessary to adhere to, the requirements of existing or updated laws, regulations, or Executive Orders that govern our operations or the rail industry, including but not limited to those pertaining to commercial, operational, tax, safety, security, or cybersecurity matters, as such requirements may be interpreted or enforced from time to time (such as in connection with a pending regulatory or other legal proceedings or lawsuits), could have a material adverse effect on our financial position, results of operations, or liquidity. We are addressing multiple governmental actions as a result of the Incident, as noted in "Incident Risks" above. K12 K12 K12 Federal and state environmental laws and regulations could negatively impact us and our operations. Our operations are subject to extensive federal, state and local environmental laws and regulations concerning, among other things: emissions to the air; discharges to waterways or groundwater supplies; handling, storage, transportation, use, and disposal of waste and other materials; and, the cleanup of hazardous material or petroleum releases. The risk of incurring environmental liability, for acts and omissions, past, present, and future, is inherent in the railroad business. This risk includes property owned by us, whether currently or in the past, that is or has been subject to a variety of uses, including our railroad operations and other industrial activity by past owners or our past and present tenants. Environmental problems that are latent or undisclosed may exist on these properties, and we could incur environmental liabilities or costs, the amount and materiality of which cannot be estimated reliably at this time, with respect to one or more of these properties. Moreover, lawsuits and claims involving other unidentified environmental sites and matters are likely to arise from time to time. Our inability to comply with the extensive federal, state and local environmental laws and regulations to which we are subject could result in significant liabilities, fines, or sanctions, including those related to the investigation or remediation of known and unknown environmental contamination, or otherwise adversely impact our operations. As noted in "Incident Risks" above, in connection with the Incident, we are experiencing negative impacts related to environmental matters, including extensive cleanup costs and litigation related to alleged environmental impacts of the Incident. U.S. international trade relationships may adversely impact our customers, our industry, and our business. We transport a significant number of shipments that have either been imported into the U.S. or are destined for export from the U.S. Trade discussions and arrangements between the U.S. and various of its trading partners are fluid, and existing and future trade agreements are, and are expected to continue to be, subject to a number of uncertainties, including the imposition of new tariffs or adjustments and changes to the products covered by existing tariffs. Any decision by the U.S. government to adopt actions such as border taxes on imports, an increase in customs duties or tariffs, or the renegotiation of U.S. trade agreements, or any other action that could have a negative impact on international trade, including corresponding actions taken by other countries in response to U.S. governmental actions, could cause a reduction in the volume of shipments by many of our customers. Any changes in tax and trade policies in the U.S. and corresponding actions by other countries could adversely impact our financial performance. In addition, compliance with any new laws, regulations, or policies with regard to any of the foregoing may increase our operating costs or require significant capital expenditures. Any failure to comply with applicable laws, regulations or policies in the U.S. or other countries could result in substantial fines or possible revocation of our authority to conduct our operations, which could materially adversely affect us. K13 K13 K13

---

## Modified: OPERATIONAL RISKS

**Key changes:**

- Reworded sentence: "A significant adverse event on our network may significantly impede our ability to operate and serve our customers."
- Reworded sentence: "Transportation of certain hazardous materials or third party-owned equipment (typically used to transport such materials) creates risks of significant losses in terms of personal injury and property (including environmental) damage and compromises critical parts of our rail network."
- Reworded sentence: "We have obtained insurance for potential losses for third-party liability and first-party property damages (see Note 18 in Item 8 "Notes to Consolidated Financial Statements"); however, insurance is available from a limited number of insurers and may not continue to be available or, if available, may not be obtainable on terms acceptable to us."
- Reworded sentence: "Any future improvements, expenditures, legislation, or regulation changing or materially increasing the efficiency or reducing the cost of one or more alternative modes of transportation in the regions in which we operate (such as granting materially greater latitude for motor carriers with respect to size or weight limitations or adoption and utilization of K14 K14 K14 autonomous commercial vehicles) could have a material adverse effect on our ability to compete with other modes of transportation."
- Reworded sentence: "Deterioration in the supply chain or service provided by connecting carriers, or in our relationship with those connecting carriers, could result in our inability to meet our customers' demands or require us to use alternate train routes, which could result in significant additional costs and network inefficiencies."

**Prior (2024):**

A significant cybersecurity incident or other disruption to our technology infrastructure could disrupt our business operations. To conduct business, we extensively rely on information and operational technology systems, and improvements in those technologies, in all aspects of our business. The threat landscape is vast and includes hobbyists, cybercriminals, nation-states and state-sponsored activities. Attacks from these entities include, but is not limited to, denial of service, unauthorized access, theft of money, and data and extortion. System upgrades, redundancy and other continuity measures may be ineffective or inadequate, and our business continuity and disaster recovery planning may not be sufficient for all eventualities. Regardless of the cause, significant disruption or failure of one or more of information or operational technology systems operated by us or under control of third parties, including computer hardware, software, cloud services and communications equipment, can result in us experiencing a service interruption, data breach, or other operational difficulties. Such failures or disruptions can adversely impact our business by, among other things, preventing intercompany communications and disrupting operations that may result in direct or indirect monetary losses, damage to equipment or property, or loss of confidence in corporate competency. These events could have a materially adverse effect on our business, reputation, results of operations and financial condition. Although we maintain comprehensive security programs designed to protect our information technology systems, including our risk-based approach to cybersecurity, our reliance on the Framework for Improving Critical Infrastructure Cybersecurity drafted by the U.S Department of Commerce's National Institute of Standards and Technology (NIST CSF) and our layered defense system, we are continually targeted by threat actors attempting to access our networks and we may be unable to detect or prevent a breach of our systems or disruption to our service in the future. While we have previously experienced technology outages and cybersecurity events that have impacted our systems and service, future events may result in more significant impacts to our operations, reputation or financial results. These potentially impactful future events could include service disruptions, unauthorized access to our systems, viruses, ransomware, and/or compromise, acquisition, or destruction of our data. We also could be impacted by cybersecurity events targeting third parties that we rely on for business operations, including third party vendors that have access to our systems or data and third parties who provide services and are in our supply chain. Such a direct or indirect cybersecurity incident could interrupt our service, cause safety failures or operational difficulties, decrease revenues, increase operating costs, impact our efficiency, damage our corporate reputation, and/or expose us to litigation or government action or increased regulation, which could result in penalties, fines or judgments. In addition, our failure to comply with or adhere to privacy-related or data protection laws and regulations could result in government investigations and proceedings against us, or litigation, resulting in adverse reputational impacts, penalties, and legal liability. K13 K13 K13 Our business may be seriously harmed if we fail to develop, implement, maintain, upgrade, enhance, protect and integrate our information technology systems. If we fail to develop, acquire or implement new technology, or otherwise fail to maintain, protect or integrate our information technology systems, we may suffer a competitive disadvantage within the rail industry and with companies providing alternative modes of transportation service. As a common carrier by rail, we must offer to transport hazardous materials, which exposes us to significant costs and claims. Transportation of certain hazardous materials or third party-owned equipment (typically used to transport such materials) creates risks of significant losses in terms of personal injury and property (including environmental) damage and compromise critical parts of our rail network. The costs of a catastrophic rail accident involving hazardous materials or third party-owned equipment could exceed our insurance coverage. We have obtained insurance for potential losses for third-party liability and first-party property damages (see Note 17 in Item 8 "Notes to Consolidated Financial Statements"); however, insurance is available from a limited number of insurers and may not continue to be available or, if available, may not be obtainable on terms acceptable to us. Any future legislation preventing the transportation of hazardous materials through specific cities could have negative impacts including increased network congestion and operating costs, reduced operating efficiency, and increased risk of an accident involving hazardous materials. With regard to the risks arising from the transportation of hazardous materials, the Incident and the Incident Proceedings have given rise to significant costs to us and impacts on our rail network, as noted in "Incident Risks" above. With respect to third party-owned equipment, the primary risk arises from the potential for a latent defect we are unable to identify despite robust safety inspection protocols. We face competition from other transportation providers. We are subject to competition from motor carriers, railroads and, to a lesser extent, ships, barges, and pipelines, on the basis of transit time, pricing, and quality and reliability of service. While we have primarily used internal resources to build or acquire and maintain our rail system, trucks and barges have been able to use public rights-of-way maintained by public entities. Any future improvements, expenditures, legislation, or regulation changing or materially increasing the efficiency or reducing the cost of one or more alternative modes of transportation in the regions in which we operate (such as granting materially greater latitude for motor carriers with respect to size or weight limitations or adoption and utilization of autonomous commercial vehicles) could have a material adverse effect on our ability to compete with other modes of transportation. Capacity constraints could negatively impact our service and operating efficiency. We have experienced and may again experience capacity constraints on our rail network related to employee or equipment shortages, increased demand for rail services, severe weather, congestion on other railroads, including passenger activities, or impacts from changes to our network structure or composition. Such constraints could result in operational inefficiencies or adversely affect our operations. Significant increases in demand for rail services could result in the unavailability of qualified personnel and resources like locomotives. Changes in workforce demographics, training requirements, and availability of qualified personnel, particularly for engineers and conductors, have negatively impacted and may again negatively impact our ability to meet short-term demand for rail service. Unpredicted increases in demand for rail services may exacerbate such risks and could negatively impact our operational efficiency. Constraints on the supply chain or the operations of carriers with which we interchange may adversely affect our operations. Our ability to provide rail service to our customers depends in large part upon a functioning global supply chain and our ability to maintain collaborative relationships with connecting carriers (including shortlines and regional railroads) with respect to, among other matters, freight rates, revenue division, car supply and locomotive availability, data exchange and communications, reciprocal switching, interchange, and trackage rights. Deterioration in the supply chain or service provided by connecting carriers, or in our relationship with those connecting carriers, could result in our inability to meet our customers' demands or require us to use alternate train K14 K14 K14 routes, which could result in significant additional costs and network inefficiencies. Additionally, any significant consolidations, mergers or operational changes among other railroads may alter our market access and reach. We may be negatively affected by terrorism or war. Any terrorist attack, or other similar event, any government response thereto, and war or risk of war could cause significant business interruption. Because we play a critical role in the nation's transportation system, we could become the target of such an attack or have a significant role in the government's preemptive approach or response to an attack or war. Although we currently maintain insurance coverage for third-party liability arising out of war and acts of terrorism, we maintain only limited insurance coverage for first-party property damage and damage to property in our care, custody, or control caused by certain acts of terrorism. In addition, premiums for some or all of our current insurance programs covering these losses could increase dramatically, or insurance coverage for certain losses could be unavailable to us in the future. We may be negatively affected by supply constraints resulting from disruptions in the fuel markets or the nature of some of our supplier markets. We consumed approximately 377 million gallons of diesel fuel in 2023. Fuel availability could be affected by limitation in the fuel supply or by imposition of mandatory allocation or rationing regulations. A severe fuel supply shortage arising from production curtailments, increased demand in existing or emerging foreign markets, disruption of oil imports, disruption of domestic refinery production, damage to refinery or pipeline infrastructure, political unrest, war or other factors could impact us as well as our customers and other transportation companies. Due to the capital-intensive nature, as well as the industry-specific requirements of the rail industry, high barriers of entry exist for potential new suppliers of core railroad items, such as locomotives and rolling stock equipment. Additionally, we compete with other industries for available capacity and raw materials used in the production of locomotives and certain track and rolling stock materials. Changes in the competitive landscapes of these limited supplier markets could result in increased prices or significant shortages of materials. Pandemics, epidemics or endemic diseases could further negatively impact us, our customers, our supply chain and our operations. The magnitude and duration of a pandemic, epidemic or endemic disease, and its impact on our customers and general economic conditions can influence the demand for our services and affect our revenues. In addition, such outbreaks could affect our operations and business continuity if a significant number of our essential employees, overall or in a key location, are unable to work from contraction of or exposure to the disease or if governmental orders prevent our employees or critical suppliers from working. To the extent such diseases adversely affect our business and financial results, they may also have the effect of heightening many of the other risks described in the risk factors included herein, or may affect our operating and financial results in a manner that is not presently known to us.

**Current (2025):**

A significant adverse event on our network may significantly impede our ability to operate and serve our customers. The nature of our operations inherently comes with the risk that one or more significant adverse events or outages may occur on or impact our network resulting in our inability or restricted ability to provide rail transportation services to our customers. These events include but are not limited to, a mainline accident, a hazardous material discharge, a climate-related network outage, or a technology-related network outage. Any one or more of these incidents could expose us to significant operational and managerial challenges, as well as reputational damage, requiring a significant amount of time and focus of our Board and management team, as well as significant lost revenues, expenses, liabilities, fines, and penalties, including amounts that may have a material adverse effect on our financial position, results of operations, or liquidity. One or more of these events may also result in subsequent legislative, regulatory, operational or other responsive actions taken, changes or protocols adopted (including by us), or requirements imposed that may, either individually or in the aggregate, have a material adverse effect on our financial position, results of operations, liquidity, or operations, or on our customers, the rail industry, or the markets we serve. If we are unable to successfully execute on our strategic initiatives, our business and future results of operations may suffer. Our growth strategy includes increasing the volume of shipments moving through our railway networks. We are reliant on the success of our strategic plans and initiatives to execute on this growth strategy, as well as to help offset increasing costs. These strategic plans include marketing, service, growth, and productivity initiatives. The timely and effective execution of our strategies are dependent upon, among other factors, (i) our ability to maintain satisfactory relations with our customers, employees, and other key stakeholders, (ii) our ability to effectively control costs, (iii) the progress and success of our safety programs and inspection technologies, and (iv) our ability to timely and effectively maintain and upgrade technology systems and other infrastructure for our railway networks. Our failure to successfully execute on our strategic initiatives may expose us to a number of risks, including, that our projected volume growth may differ from actual results, and prior capital investments based on our projections may contribute to excess capacity that could negatively impact our profitability. As a common carrier by rail, we must offer to transport hazardous materials, which exposes us to significant costs and claims. Transportation of certain hazardous materials or third party-owned equipment (typically used to transport such materials) creates risks of significant losses in terms of personal injury and property (including environmental) damage and compromises critical parts of our rail network. The costs of a catastrophic rail accident involving hazardous materials or third party-owned equipment could exceed our insurance coverage. We have obtained insurance for potential losses for third-party liability and first-party property damages (see Note 18 in Item 8 "Notes to Consolidated Financial Statements"); however, insurance is available from a limited number of insurers and may not continue to be available or, if available, may not be obtainable on terms acceptable to us. Any future legislation preventing the transportation of hazardous materials through specific cities could have negative impacts including increased network congestion and operating costs, reduced operating efficiency, and increased risk of an accident involving hazardous materials. With regard to the risks arising from the transportation of hazardous materials, the Incident and the Incident Proceedings have given rise to significant costs to us and impacts on our rail network, as noted in "Incident Risks" above. With respect to third party-owned equipment, the primary risk arises from the potential for a latent defect we are unable to identify despite robust safety inspection protocols. We face competition from other transportation providers. We are subject to competition from motor carriers, railroads and, to a lesser extent, ships, barges, and pipelines, on the basis of transit time, pricing, and quality and reliability of service. While we have primarily used internal resources to build or acquire and maintain our rail system, trucks and barges have been able to use public rights-of-way maintained by public entities. Any future improvements, expenditures, legislation, or regulation changing or materially increasing the efficiency or reducing the cost of one or more alternative modes of transportation in the regions in which we operate (such as granting materially greater latitude for motor carriers with respect to size or weight limitations or adoption and utilization of K14 K14 K14 autonomous commercial vehicles) could have a material adverse effect on our ability to compete with other modes of transportation. In addition, our industry continues to evolve, including customer demands for faster transit times and increased visibility, and the potential for increased competition (due to growth in the market, competitors with improved financial capacity or technology, or business combinations resulting in one or more competitors providing a wider variety of services and products at competitive prices) which may, either individually or in the aggregate, have a material adverse effect on our business or results of operations. Capacity constraints could negatively impact our service and operating efficiency. We have experienced and may again experience capacity constraints on our rail network related to employee or equipment shortages, increased demand for rail services, severe weather, congestion on other railroads, including passenger activities, or impacts from changes to our network structure or composition. Such constraints could result in operational inefficiencies or adversely affect our operations. Significant increases in demand for rail services could result in the unavailability of qualified personnel and resources like locomotives. Changes in workforce demographics, training requirements, and availability of qualified personnel, particularly for engineers and conductors, have negatively impacted and may again negatively impact our ability to meet short-term demand for rail service. Unpredicted increases in demand for rail services may exacerbate such risks and could negatively impact our operational efficiency. Constraints on the supply chain or the operations of carriers with which we interchange may adversely affect our operations. Our ability to provide rail service to our customers depends in large part upon a functioning global supply chain and our ability to maintain collaborative relationships with connecting carriers (including shortlines and regional railroads) with respect to, among other matters, freight rates, revenue division, car supply and locomotive availability, data exchange and communications, reciprocal switching, interchange, and trackage rights. Deterioration in the supply chain or service provided by connecting carriers, or in our relationship with those connecting carriers, could result in our inability to meet our customers' demands or require us to use alternate train routes, which could result in significant additional costs and network inefficiencies. Additionally, any significant consolidations, mergers, or operational changes among other railroads may alter our market access and reach. We may be negatively affected by terrorism or war. Any terrorist attack, or other similar event, any government response thereto, and war or risk of war could cause significant business interruption or other operational challenges. Because we play a critical role in the nation's transportation system, we could become the target of such an attack or have a significant role in the government's preemptive approach or response to an attack or war. Although we currently maintain insurance coverage for third-party liability arising out of war and acts of terrorism, we maintain only limited insurance coverage for first-party property damage and damage to property in our care, custody, or control caused by certain acts of terrorism. In addition, premiums for some or all of our current insurance programs covering these losses could increase dramatically, or insurance coverage for certain losses could be unavailable to us in the future. We may be negatively affected by supply constraints resulting from disruptions in our fuel markets or supplier markets. We consumed approximately 373 million gallons of diesel fuel in 2024. Fuel availability could be affected by limitation in the fuel supply or by imposition of mandatory allocation or rationing regulations. A severe fuel supply shortage arising from production curtailments, increased demand in existing or emerging foreign markets, disruption of oil imports, disruption of domestic refinery production, damage to refinery or pipeline infrastructure, political unrest, war, or other factors could impact us as well as our customers and other transportation companies. Due to the capital-intensive nature, as well as the industry-specific requirements of the rail industry, high barriers of entry exist for potential new suppliers of core railroad items, such as locomotives and rolling stock equipment. As a result, we are dependent on certain key suppliers and manufacturers of locomotive and railroad items. Disruption to one or more of our key suppliers or manufacturers, including as a result of stopped or restricted production, labor stoppage or restriction, or significant supply shortage or outage could negatively impact our operating efficiency K15 K15 K15 and increase costs. Additionally, we compete with other industries for available capacity and raw materials used in the production of locomotives and certain track and rolling stock materials. Changes in the competitive landscapes of these limited supplier markets could also result in significantly increased prices or material shortages. We may be negatively affected by energy prices. Fuel and energy costs have a significant impact on our operations. Volatility in energy prices could have a significant effect on a variety of items including, but not limited to: the economy; demand for transportation services; business related to the energy sector, including crude oil, natural gas, and coal; fuel prices; and, fuel surcharges, each of which could have a material impact on our business and results of operations. In addition, we may also experience a disruption in energy supplies as a result of new or increased regulation, as a result of war or geopolitical conflicts, weather-related events or natural disasters, or other factors beyond our control, which could have a material adverse effect on our business. Pandemics, epidemics, or endemic diseases could further negatively impact us, our customers, our supply chain, and our operations. The magnitude and duration of a pandemic, epidemic, or endemic disease, and its impact on our customers and general economic conditions can influence the demand for our services and affect our revenues. In addition, such outbreaks could affect our operations and business continuity if a significant number of our essential employees, overall or in a key location, are unable to work from contraction of or exposure to the disease or if governmental orders prevent our employees or critical suppliers from working. To the extent such diseases adversely affect our business and financial results, they may also have the effect of heightening many of the other risks described in the risk factors included herein or may affect our operating and financial results in a manner that is not presently known to us. Our business is capital intensive, and we must make capital decisions based upon expectations of future usage of our assets. We make significant investments in our railroad infrastructure, including railroad property, track infrastructure, locomotives, freight cars, intermodal equipment, technology, and other assets to support our network, much of which is costly and requires significant capital outlay. The amount and timing of capital investments depend on various factors, including expectations of future carload traffic. In many cases, we must make advance commitments to purchase or modify equipment prior to such equipment being needed. As a result, we must predict volume levels and other requirements and make commitments based on those projections. A significant variance in our expectations or projections could result in too much or too little equipment relative to our actual needs and volumes, thereby negatively impacting our operations or financial results.

---

## Modified: HUMAN CAPITAL RISKS

**Key changes:**

- Reworded sentence: "Failure to attract, retain, and transition key executive officers, or skilled professional or technical employees could adversely impact our business and operations."
- Reworded sentence: "In the third and fourth quarters of 2024, the Company reached tentative collective bargaining agreements with ten of these labor unions, a majority of which were subsequently ratified by union membership and became effective January 1, 2025."

**Prior (2024):**

Failure to attract and retain key executive officers, or skilled professional or technical employees could adversely impact our business and operations. Our success depends on our ability to attract and retain skilled employees, including a sufficient number of craft employees to enable us to efficiently conduct our operations. Difficulties in recruiting and retaining skilled employees, including train and engine workers, key executives, and other skilled professional and technical employees; the unexpected loss of such individuals; and/or our inability to successfully transition key roles could each have a material adverse effect on our business and operations. The vast majority of our employees belong to labor unions, and the renegotiation of labor agreements or any provisions thereof, or any strikes or work stoppages (including any entered into in connection with any such negotiations), could adversely affect our operations. Approximately 80% of our railroad employees are covered by collective bargaining agreements with various labor unions. We entered into updated labor agreements with these labor unions in December 2022 and future national labor agreements, or renegotiation of labor agreements or provisions of labor agreements, could significantly increase our costs for health care, wages, and other benefits. Additionally, if our craft employees were to engage in a strike, work stoppage, or other slowdown, including in connection with the renegotiation of any such agreements or any provisions thereof, we could experience a significant disruption in our operations, thereby adversely impacting our results of operations.

**Current (2025):**

Failure to attract, retain, and transition key executive officers, or skilled professional or technical employees could adversely impact our business and operations. Our success depends on our ability to attract and retain skilled employees, including key executive officers to oversee our operational, productivity, marketing, and technological initiatives, as well as a sufficient number of skilled professional and craft employees to enable us to K17 K17 K17 efficiently conduct our operations. Difficulties in recruiting and retaining skilled employees, including train and engine workers, key executives, and other skilled professional and technical employees; the loss of such individuals; and/or our inability to successfully transition key executive, professional, technical, or skilled roles could each have a material adverse effect on our financial position, results of operations, and operations. The loss of one or more key employees could also result in the depletion of our institutional knowledge base and may result in our inability or increased difficulty in successfully transitioning key roles, which could materially adversely impact our business. The vast majority of our employees belong to labor unions, and the renegotiation of labor agreements or any provisions thereof, or any strikes or work stoppages (including any entered into in connection with any such negotiations), could adversely affect our operations. Approximately 80% of our railroad employees are covered by collective bargaining agreements with various labor unions. In the third and fourth quarters of 2024, the Company reached tentative collective bargaining agreements with ten of these labor unions, a majority of which were subsequently ratified by union membership and became effective January 1, 2025. Future national labor agreements, or renegotiation of labor agreements or provisions of labor agreements, could significantly increase our costs for health care, wages, and other benefits. In addition, if our craft employees were to engage in or threaten a strike, work stoppage, or other slowdown, including in connection with the renegotiation of any collective bargaining agreements or any provisions thereof, we could experience a significant disruption in our operations, customer base, or belief in our ability to provide consistent service, thereby adversely affecting our operations or ability to provide services.

---

## Modified: MACROECONOMIC AND MARKET RISKS

**Key changes:**

- Reworded sentence: "Because our business is dependent on the rail shipping needs of our customers, negative changes in domestic and global economic conditions, K18 K18 K18 including reduced import and export volumes, could affect the producers and consumers of the freight we carry."

**Prior (2024):**

We may be negatively impacted by changes in general economic conditions. Negative changes in domestic and global economic conditions, including reduced import and export volumes, could affect the producers and consumers of the freight we carry. Economic conditions could also result in bankruptcies of one or more large customers. We may be negatively affected by energy prices. Volatility in energy prices could have a significant effect on a variety of items including, but not limited to: the economy; demand for transportation services; business related to the energy sector, including crude oil, natural gas, and coal; fuel prices; and, fuel surcharges. The state of capital markets could adversely affect our liquidity. We rely on the capital markets to provide some of our capital requirements, including the issuance of debt instruments and the sale of certain receivables. Significant instability or disruptions of the capital markets, including the credit markets, or deterioration of our financial position due to internal or external factors could restrict or eliminate our access to, and/or significantly increase the cost of, various financing sources, including bank credit facilities and issuance of corporate bonds. Instability or disruptions of the capital markets and deterioration of our financial position, alone or in combination, could also result in a reduction of our credit rating to below investment grade, which could prohibit or restrict us from accessing external sources of short- and long-term debt financing and/or significantly increase the associated costs.

**Current (2025):**

We may be negatively impacted by changes in general economic conditions. Because our business is dependent on the rail shipping needs of our customers, negative changes in domestic and global economic conditions, K18 K18 K18 including reduced import and export volumes, could affect the producers and consumers of the freight we carry. Recessionary economic cycles and downturns in customers' business cycles, especially in market segments and industries where we have a significant concentration of customers, may substantially reduce our volumes, and lead to excess capacity in the industry, resulting in pressure on rates we are able to obtain for our services. Economic conditions could also result in bankruptcies of one or more of our customers. Changes in general economic conditions are beyond our control, and it may be difficult for us to adjust our business model. We are impacted by industrial production, inflation, unemployment, and consumer spending. We have been and may in the future be, materially impacted by adverse developments in these aspects of the economy. The state of capital markets could adversely affect our liquidity. We rely on the capital markets to provide some of our capital requirements, including the issuance of debt instruments and the sale of certain receivables. Significant instability or disruptions of the capital markets, including the credit markets, or deterioration of our financial position due to internal or external factors could restrict or eliminate our access to, and/or significantly increase the cost of, various financing sources, including bank credit facilities and issuance of corporate bonds. Instability or disruptions of the capital markets and deterioration of our financial position, alone or in combination, could also result in a reduction of our credit rating to below investment grade, which could prohibit or restrict us from accessing external sources of short- and long-term debt financing and/or significantly increase the associated costs.

---

*Data sourced from SEC EDGAR. Last updated 2026-05-10.*