Energy sector data breaches expose customer account information, billing and payment data, and employee personal records at utilities, energy providers, and related infrastructure companies. Because energy companies sit at the intersection of consumer data and critical infrastructure, breaches in this sector draw particular scrutiny from regulators and can involve both customer-facing systems and operational technology. Beyond standard identity theft and financial fraud risks affecting millions of ratepayers, breaches at critical infrastructure providers can raise additional concerns about the resilience and security of essential services that communities depend on daily. Affected individuals typically include current and former customers whose billing and account information was stored in compromised systems, as well as employees whose payroll and HR data may also be exposed. This page tracks confirmed data breaches at energy and utility companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their identity and finances.
Talen Energy Corporation disclosed in a Massachusetts regulatory filing that a security incident exposed names, Social Security numbers, driver’s license numbers, and medical record numbers belonging to certain individuals.
Talen Energy Corporation Data Breach Exposes Social Security Numbers and Medical Records Read More »
SM Energy Company has notified Vermont regulators that a data breach exposed Social Security numbers belonging to individuals connected to the oil and gas producer, with more states likely to follow.
SM Energy Data Breach Exposes Social Security Numbers Read More »
Q2 Artificial Lift Services told Texas regulators that unauthorized access exposed the personal and financial data of roughly 630 people, including Social Security and driver’s license numbers.
Murex Petroleum Corporation confirmed a data breach after the Akira ransomware group stole Social Security numbers, names, and other sensitive files from its network.
Murex Petroleum Data Breach Exposes Social Security Numbers and Financial Records Read More »
A ransomware attack by the PLAY group exposed sensitive personal and financial data belonging to 4,821 Tyree Oil customers, including Social Security numbers, payment card details, and health information.
Tyree Oil Data Breach Exposes Social Security Numbers and Financial Information Read More »
Applied Natural Gas Fuels Inc. disclosed a data breach involving unauthorized access to names, Social Security numbers, passport numbers and driver’s license numbers after detecting suspicious network activity in late 2025.
Applied Natural Gas Fuels Data Breach Exposes Social Security and Passport Numbers Read More »
Beusa Energy LLC disclosed a data breach affecting 7,174 individuals, exposing Social Security numbers, financial account details, driver’s license numbers and protected health information.
Beusa Energy Data Breach Exposes Social Security Numbers and Health Records Read More »
In April 2026, Eversource Energy suffered a phishing attack in which cybercriminals used stolen employee credentials to access company files. Roughly 3,049 people nationwide are affected, with exposed data potentially including names, addresses, phone numbers, Social Security numbers, driver's license numbers, and financial account information. Affected individuals should first place a fraud alert or credit
Between March 30 and April 1, 2026, hackers infiltrated FRCC's network and copied files containing sensitive data before the intrusion was detected and stopped. Names and Social Security numbers belonging to affected individuals may have been exposed, raising serious identity theft and fraud risks. Anyone notified should immediately enroll in the offered credit monitoring and
FRCC Data Breach Investigation: Social Security Numbers Potentially Exposed Read More »