Energy

Energy sector data breaches expose customer account information, billing and payment data, and employee personal records at utilities, energy providers, and related infrastructure companies. Because energy companies sit at the intersection of consumer data and critical infrastructure, breaches in this sector draw particular scrutiny from regulators and can involve both customer-facing systems and operational technology. Beyond standard identity theft and financial fraud risks affecting millions of ratepayers, breaches at critical infrastructure providers can raise additional concerns about the resilience and security of essential services that communities depend on daily. Affected individuals typically include current and former customers whose billing and account information was stored in compromised systems, as well as employees whose payroll and HR data may also be exposed. This page tracks confirmed data breaches at energy and utility companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to protect their identity and finances.

Eversource Energy Data Breach Investigation: Personal and Financial Information of 3,049 Customers Potentially Exposed

Energy / databreachrights

In April 2026, Eversource Energy suffered a phishing attack in which cybercriminals used stolen employee credentials to access company files. Roughly 3,049 people nationwide are affected, with exposed data potentially including names, addresses, phone numbers, Social Security numbers, driver's license numbers, and financial account information. Affected individuals should first place a fraud alert or credit

Eversource Energy Data Breach Investigation: Personal and Financial Information of 3,049 Customers Potentially Exposed Read More »

FRCC Data Breach Investigation: Social Security Numbers Potentially Exposed

Between March 30 and April 1, 2026, hackers infiltrated FRCC's network and copied files containing sensitive data before the intrusion was detected and stopped. Names and Social Security numbers belonging to affected individuals may have been exposed, raising serious identity theft and fraud risks. Anyone notified should immediately enroll in the offered credit monitoring and