IdaCorp (IDA) Risk Factors

IDACORP and Idaho Power do not have diversified operations or sources of revenue. Idaho Power comprises nearly all of IDACORP's operations, and Idaho Power's business is concentrated solely in the electric power industry. Furthermore, Idaho Power's provision of electric service to retail customers is conducted exclusively in its southern Idaho and eastern Oregon service area. As a result, IDACORP's and Idaho Power's future performance, revenues, and collectability of revenues, as well as expenses, will be affected by regional economic conditions, regulatory and legislative activity, weather conditions, and other events and conditions in its service area and in the electric power industry.

IDACORP and Idaho Power must make judgments and interpretations about the application of the law when determining the provision for income taxes. Amounts of income tax-related assets and liabilities involve judgments and estimates of the timing and probability of recognition of income, deductions, and tax credits, which are subject to challenge by taxing authorities. These judgments may include estimates for potential outcomes regarding tax positions that may be subject to challenge by the taxing authorities. Disputes over interpretations of tax laws may be settled with the taxing authority in examination, upon appeal, or through litigation. The outcome of potential future income tax proceedings or laws, or the state public utility commissions' treatment of those outcomes, could differ materially from the amounts IDACORP and Idaho Power record prior to conclusion of those proceedings, and the difference could negatively affect IDACORP's and Idaho Power's earnings and cash flows. Further, in some instances, the treatment from a ratemaking perspective of any net income tax expense (including from increased tax rates) or benefit could be different than IDACORP or Idaho Power anticipate or request from applicable state regulatory commissions, which could have a negative effect on their financial condition and results of operations. In addition, Idaho Power uses the regulatory flow-through income tax accounting method as described in Note 1 - "Summary of Significant Accounting Policies" to the consolidated financial statements included in this report, and potential changes in income tax laws or interpretations may impact IDACORP's and Idaho Power's income taxes and reporting obligations differently than most other companies.

Idaho Power derives a significant portion of its power supply from its hydropower facilities. During 2023 and 2022, 55 percent and 48 percent, respectively, of Idaho Power's electric power from Idaho Power-owned generation was from hydropower facilities. Due to Idaho Power's heavy reliance on hydropower generation, the impacts of climate change and factors such as precipitation and snowpack, the timing of run-off, and the availability of water in the Snake River Basin can significantly affect its operations. The combination of a long-term trend of declining Snake River base flows, over-appropriation of water, and periods of drought have led to water rights disputes and proceedings among surface water and ground water irrigators and the State of Idaho. Recharging the Eastern Snake Plain Aquifer by diverting surface water to porous locations and permitting it to sink into the aquifer is one approach to the over-appropriation dispute. Diversions from the Snake River for aquifer recharge or the loss of water rights reduce Snake River flows available for hydropower generation. When hydropower generation is reduced, Idaho Power must increase its use of more expensive thermal generating resources and market power purchases; therefore, costs increase and opportunities for wholesale energy sales are reduced, reducing revenues and potentially earnings. Through its power cost adjustment mechanisms, Idaho Power expects to recover most (but not all) of the increase in net power supply costs caused by lower hydropower generation. The timing of recovery of the increased costs, however, may not occur until the subsequent power cost adjustment year, adversely affecting cash flows and liquidity.

Idaho Power provides a noncontributory defined benefit pension plan covering most employees, as well as a defined benefit postretirement benefit plan (consisting of health care and death benefits) that covers eligible retirees. Costs of providing these benefits are based in part on the value of the plans' assets and, therefore, adverse investment performance for these assets or the failure to maintain sustained growth in pension investments over time could increase Idaho Power's plan costs and funding requirements related to the plans. Idaho Power's self-insured costs of health care benefits for eligible employees and retirees have increased in recent years and Idaho Power believes that future legislative changes related to the provision of health care benefits and other external market conditions and factors, could cause such costs to continue to rise. As benefit costs continue to rise, there is no assurance that the IPUC and OPUC will continue to allow recovery. The key actuarial assumptions that affect pension funding obligations are the expected long-term return on plan assets and the discount rate used in determining future benefit obligations. Idaho Power evaluates the actuarial assumptions on an annual basis, taking into account changes in market conditions, trends, and future expectations. Estimates of future investment market performance, changes in interest rates, and other factors Idaho Power and its actuary firms use to develop the actuarial assumptions are inherently uncertain, and actual results could vary significantly from the estimates. Changes in demographics, including timing of retirements or changes in life expectancy assumptions, may also increase Idaho Power's plan costs and funding requirements. Future pension funding requirements and the timing of funding payments are also subject to the impacts of changes in legislation. Depending on the timing of contributions to the plans and Idaho Power's ability to recover costs through rates, cash contributions to the plans could reduce the cash available for the companies' businesses and payment of dividends. For additional information regarding Idaho Power's funding obligations under its benefit plans, see Note 11 - "Benefit Plans" to the consolidated financial statements included in this report.

As part of its normal business operations, Idaho Power purchases coal and natural gas in the open market or under short-term or long-term contracts, often with variable pricing terms. Market prices for coal and natural gas are volatile and influenced by factors impacting supply and demand such as weather conditions, the adequacy and type of generating capacity, fuel transportation availability, economic conditions, regulations related to GHG emissions, changes in technology, moratoriums on federally leased coal, and increases in coal lease costs. Natural gas transportation to Idaho Power's three natural gas plants is limited to one primary pipeline, presenting a heightened possibility of supply constraint and disruptions separate from the risk of counterparty default. Idaho Power's current coal supply arrangements are under long-term contracts for coal originating in Wyoming, Utah, and Colorado, and thus Idaho Power is exposed to risk of disruption of coal production in, or transportation from, those regions. Idaho Power may from time to time enter into new, or renegotiate, these contracts but can provide no assurance that such contracts will be negotiated or renegotiated on satisfactory terms, or at all. There also can be no assurance that counterparties to the natural gas or coal supply agreements will fulfill their obligations to supply natural gas or coal, and they may experience regulatory, financial, or technical problems or unforeseeable events that inhibit their ability to deliver natural gas or coal. Disruptions in transportation of fuel and defaults by coal and natural gas suppliers may cause Idaho Power to seek alternative, and potentially more costly, sources of fuel or rely on other generation sources or wholesale market power purchases. Idaho Power's failure to provide service due to such disruptions may also result in fines, penalties, or cost disallowances through the regulatory process. Idaho Power may not be able to fully or timely recover these increased costs through rates and power cost adjustment mechanisms, which may adversely affect IDACORP's and Idaho Power's financial condition and results of operations.

Idaho Power operates in an industry that requires the continuous use and operation of sophisticated information technology and increasingly complex operational technology systems and network infrastructure. Idaho Power's generation and transmission facilities and its grid operations are potential targets for terrorist acts and threats, acts of war, social unrest, cyber and physical security attacks, and other disruptive activities of individuals or groups, including by nation states or nation state-sponsored groups. There have been cyber and physical attacks within the energy industry on energy infrastructure such as electric substations and fuel pipelines in the past with notable reports in the media of electric industry infrastructure specifically being targeted for and impacted by physical attacks more recently, and there are likely to be additional attacks in the future. Idaho Power and its vendors have been subject to, and will likely continue to be subject to, attempts to gain unauthorized access to systems and confidential information, or to disrupt operations. As noted by the U.S. Department of Homeland Security, the utility industry is continuing to experience an increase in the frequency and sophistication of cybersecurity incidents. Some of Idaho Power's facilities are deemed "critical infrastructure" under federal standards, in that incapacity or destruction of the facilities could have a debilitating impact on security, reliability, or operability of the bulk electric power system, national economic security, and public health and safety. The fact that infrastructure facilities, such as power generation facilities and electric transmission or distribution facilities, are direct targets of, or potential indirect casualties of, an act of terror or war or cyber or physical attack (whether originating internal to Idaho Power or externally), may affect Idaho Power's operations by limiting the ability to generate, purchase, or transmit power. Idaho Power's electric transmission systems are part of an interconnected regional grid, and therefore, it faces the risk of causing or being subject to a long-term power outage due to grid disturbances or disruptions on a neighboring interconnected grid system. Cyber and physical threats and attacks can have cascading impacts that unfold with increasing speed across networks, information systems, and other technologies. Network, information systems, and technology-related events, including those caused by IDACORP or Idaho Power through process breakdowns, human error, security architecture or design vulnerabilities, or by third parties through cyber or physical security attacks, could result in a degradation or disruption in the energy grid and the services of the companies, as well as the ability to record, process, and report customer, business, and financial information. Physical or cyber attacks against key suppliers or service providers could have a similar effect on Idaho Power. Idaho Power's business operations require the continuous availability of information technology systems and network infrastructure, and in the normal course of business, Idaho Power or its vendors collect and store sensitive and confidential customer and employee information and proprietary information of Idaho Power. Idaho Power's technology systems are dependent upon connectivity to the internet and third-party vendors to host, maintain, modify, and update its systems, which may experience significant system failures or cyber attacks that could compromise the security of Idaho Power's assets and information. All information technology systems are vulnerable to being disabled, unauthorized access, unintentional defects, user error, errors in system changes, and cybersecurity incidents. Idaho Power is in the process of pursuing complex business system upgrades, and these significant changes increase the risk of system interruption. Any data security breaches, such as misappropriation, misuse, leakage, falsification or accidental release or loss of information maintained in Idaho Power's information technology systems or on third-party systems, including customer or employee data, could result in violations of privacy and other laws and associated litigation and liability for damages, fines, and penalties; financial loss to Idaho Power or to its customers; customer dissatisfaction or diminished customer confidence; and damage to Idaho Power's reputation, all of which could materially affect Idaho Power's financial condition and results of operations. No security measures can completely shield Idaho Power's systems, infrastructure, and data from vulnerabilities to cyber attacks, human error, intrusions, or other catastrophic events that could result in their failure or reduced functionality, and ultimately the potential loss of sensitive information or the loss of Idaho Power's ability to fulfill critical business functions and provide reliable electric power to customers. Despite the steps Idaho Power may take to detect, mitigate, or eliminate threats and respond to security incidents, the techniques used by those who seek to obtain unauthorized access, and possibly disable or sabotage systems or abscond with information and data, change frequently and Idaho Power may not be able to protect against all such actions. Idaho Power actively monitors developments in cybersecurity and is involved in various related government and industry groups, and the company's board receives security updates at least quarterly. Although Idaho Power continues to make investments in its cybersecurity program, including personnel, technologies, and training of personnel, there can be no assurance that these systems or their expected functionality will be implemented, maintained, or expanded effectively; nor can security measures completely eliminate the possibility of a cybersecurity breach. Further, the implementation of security guidelines and measures has resulted in, and Idaho Power expects to continue to result in, increased costs. Terrorist attacks, acts of war, social unrest, cyber and physical security attacks, and similar incidents can also have indirect impacts by creating political, economic, social, or financial market instability, and can cause damage to or interference with Idaho Power's operating assets, customers, or suppliers. This may result in business interruption, lost revenue, higher commodity prices, disruption in fuel supplies, lower energy consumption, and unstable commodity and financial markets, particularly with respect to electricity and natural gas, any of which may materially adversely affect Idaho Power. These events, and governmental actions in response, could result in a material decrease in revenues and increase costs to protect, repair, and insure Idaho Power's assets and operate its infrastructure, systems, and business.

Changes in the number of customers and customers' use of electricity are affected by a number of factors, such as population growth or decline in Idaho Power's service area, expansion or loss of service area, changes in customer needs and expectations, changes to customer rates, adoption rates of energy efficiency measures, customer-generated power such as from solar panels and gas-fired generators, demand-side management requirements, regulation or deregulation, and adverse economic conditions. Continued inflationary pressures, or an economic downturn or recession, could also negatively impact customer use and reduce revenues and cash flows, thus adversely affecting results of operations. Many electric utilities, including Idaho Power, have experienced a long-term decline in usage per customer, in part attributable to energy efficiency activities. State or federal regulations may be enacted to encourage or require mandatory energy conservation or technological advances that increase energy efficiency, which could further reduce usage per customer. Also, changing customer needs and expectations, increased customer rates as a result of the 2023 Idaho general rate case and any future rate cases, and increased competition from customer-owned generation could lead to lower customer satisfaction, reduced loyalty, difficulty in obtaining rate increases, legislation to deregulate electric service, and customers seeking alternative sources of energy and electric service. If customers choose to generate their own energy, discontinue a portion or all service from Idaho Power, or replace electric power for heating with natural gas, demand for Idaho Power's energy may decline and adversely impact the affordability of its services for remaining customers. While Idaho Power has recently experienced a net growth in usage due to an increase in the number of customers, when adjusted for the impacts of weather, the average monthly usage on a per customer basis for Idaho Power's residential customers has declined from 1,032 kWh in 2012 to 922 kWh in 2023. There is also no guarantee that Idaho Power will continue to experience an increase in the number of customers at the current rate of growth or at all. Rate mechanisms, such as the Idaho FCA for residential and small commercial customers, are designed to address the financial disincentive associated with promoting energy efficiency activities, but there is no assurance that the mechanism will result in full or timely collection of Idaho Power's fixed costs, which are currently collected in large part through the company's volume-based energy rates that are based on historical sales volume. Any undercollection of fixed costs would adversely impact revenues, earnings, and cash flows. The formation of municipal utilities or similar entities for distribution systems within Idaho Power's service area could also result in a load decrease. The loss of loads resulting from some of these events may result in excess infrastructure and stranded costs and require IDACORP and Idaho Power to modify or eliminate large generation, storage, or transmission projects. This could in turn result in reduced revenues as well as write-downs or write-offs if regulators determine that the costs of the projects were incurred imprudently, which could have a material adverse impact on IDACORP's and Idaho Power's financial condition, results of operations, and cash flows. Conversely, if Idaho Power were to experience an unanticipated increase in the demand for energy through, for example, the rapid addition of new industrial and commercial customers or population growth in the service area, Idaho Power may be required to rely on higher-cost purchased power to meet peak system demand and may need to accelerate investment in additional generation or transmission resources. Idaho Power's 2023 IRP preferred resource portfolio and action plan included a need to acquire significant generation and storage resources to meet forecasted increasing energy and capacity needs. There can be no assurance that these energy and capacity needs will not change or that the resources will be adequate to meet load demands, in which case Idaho Power would need to rely on wholesale power purchases and would be subject to the volatility of wholesale markets. If the incremental costs associated with unanticipated changes in loads exceed the incremental revenue received from the sales to the new customers, and Idaho Power is unable to secure timely and full rate relief to recover those increased costs, the resulting imbalance could have an adverse effect on IDACORP's and Idaho Power's financial condition, results of operations, and cash flows.