Energy sector data breaches expose customer account information, billing and payment data, and employee personal records at utilities, energy providers, and related infrastructure companies. Because energy companies sit at the intersection of consumer data and critical infrastructure, breaches in this sector draw particular scrutiny from regulators and can involve both customer-facing systems and operational technology. Beyond standard identity theft and financial fraud risks affecting millions of ratepayers, breaches at critical infrastructure providers can raise additional concerns about the resilience and security of essential services that communities depend on daily. Affected individuals typically include current and former customers whose billing and account information was stored in compromised systems, as well as employees whose payroll and HR data may also be exposed. This page tracks confirmed data breaches at energy and utility companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their identity and finances.
A ransomware group claims it stole corporate data from PIC GROUP, INC, including employee information, client records, and project documents. PIC GROUP, INC has not publicly confirmed the incident.
PIC GROUP, INC Data Breach Claim: Employee and Client Records Reportedly Exposed Read More »
A ransomware group has claimed responsibility for a data breach at Dudley Land Company, Inc., though the Oklahoma-based land-services firm has not publicly confirmed the incident.
A ransomware extortion group claims to have stolen customer data and sensitive grid infrastructure information from Sangre de Cristo Electric Association, a Colorado utility cooperative.
A ransomware group has claimed responsibility for a cyberattack on Summit Electric Supply, allegedly stealing company and customer data. Summit Electric Supply has not publicly confirmed the incident.
Summit Electric Supply Data Breach Exposes Customer and Business Data Read More »
A ransomware group claims to have breached Webb Electric Company of Florida, a longtime government contractor, potentially exposing sensitive business and personal data.
Webb Electric Company of Florida Data Breach Exposes Federal Contract and Employee Data Read More »
A ransomware group has claimed responsibility for a cyberattack on GE Vernova Inc., alleging theft of sensitive company data. GE Vernova has not publicly confirmed the incident.
GE Vernova Inc. Data Breach Exposes Sensitive Corporate and Personal Information Read More »
Two small, privately owned Colorado water utilities were breached by foreign hackers who altered equipment settings and disabled alarms and remote access, raising concerns about both operational safety and exposed customer information.
CenterPoint Energy confirmed that an unauthorized party stole customer personal information after a hacker claimed to have taken millions of records from the utility’s public API.
CenterPoint Energy Data Breach Exposes Social Security Numbers and Account Information Read More »
Foss Inc., a provider of installation and maintenance services to the energy industry, suffered a ransomware attack in which a threat actor group claims to have accessed sensitive company and personal data.
Foss Inc. Data Breach Exposes Sensitive Personal and Business Information Read More »
A ransomware group has claimed responsibility for a cyberattack on Goldston Oil Corporation, a Houston-based oil and gas company, raising concerns about exposed personal and corporate data.