Energy sector data breaches expose customer account information, billing and payment data, and employee personal records at utilities, energy providers, and related infrastructure companies. Because energy companies sit at the intersection of consumer data and critical infrastructure, breaches in this sector draw particular scrutiny from regulators and can involve both customer-facing systems and operational technology. Beyond standard identity theft and financial fraud risks affecting millions of ratepayers, breaches at critical infrastructure providers can raise additional concerns about the resilience and security of essential services that communities depend on daily. Affected individuals typically include current and former customers whose billing and account information was stored in compromised systems, as well as employees whose payroll and HR data may also be exposed. This page tracks confirmed data breaches at energy and utility companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their identity and finances.
Advanced Power Services (NA) LLC notified regulators that a data breach exposed Social Security numbers, government ID numbers, and financial account information belonging to affected individuals.
Green Mountain Power notified Vermont regulators of a data breach exposing customers’ Social Security numbers, financial account codes, and credit or debit card information.
Grayson Rural Electric Cooperative suffered a ransomware attack linked to the group, raising concerns that member and employee personal information was accessed or stolen.
Talen Energy Corporation disclosed in a Massachusetts regulatory filing that a security incident exposed names, Social Security numbers, driver’s license numbers, and medical record numbers belonging to certain individuals.
Talen Energy Corporation Data Breach Exposes Social Security Numbers and Medical Records Read More »
SM Energy Company has notified Vermont regulators that a data breach exposed Social Security numbers belonging to individuals connected to the oil and gas producer, with more states likely to follow.
SM Energy Data Breach Exposes Social Security Numbers Read More »
Q2 Artificial Lift Services told Texas regulators that unauthorized access exposed the personal and financial data of roughly 630 people, including Social Security and driver’s license numbers.
Murex Petroleum Corporation confirmed a data breach after the ransomware group stole Social Security numbers, names, and other sensitive files from its network.
Murex Petroleum Data Breach Exposes Social Security Numbers and Financial Records Read More »
A ransomware attack by the group exposed sensitive personal and financial data belonging to 4,821 Tyree Oil customers, including Social Security numbers, payment card details, and health information.
Tyree Oil Data Breach Exposes Social Security Numbers and Financial Information Read More »
Applied Natural Gas Fuels Inc. disclosed a data breach involving unauthorized access to names, Social Security numbers, passport numbers and driver’s license numbers after detecting suspicious network activity in late 2025.
Applied Natural Gas Fuels Data Breach Exposes Social Security and Passport Numbers Read More »
Beusa Energy LLC disclosed a data breach affecting 7,174 individuals, exposing Social Security numbers, financial account details, driver’s license numbers and protected health information.
Beusa Energy Data Breach Exposes Social Security Numbers and Health Records Read More »