New England’s energy provider Eversource suffered a data leak in March that compromised the personal information of thousands of customers.
Eversource Energy, which provides service to 4.3 million electricity, natural gas and water users, sent across notifications to its customers to notify them about the breach.
According to the notification sent out by Eversource, the company identified misconfigured cloud storage on March 16 that exposed the personal information of customers, such as their names, addresses, phone numbers, social security numbers, service addresses, and account numbers. Further investigation revealed the leaked data belonged to customers residing in eastern Massachusetts.
The data leak was detected and fixed on the same day and the company’s security team confirmed the exposed data wasn’t used illegally or stolen or misused by unauthorized third parties. CyberScout, the cybersecurity company handling customer services on behalf of Eversource, published a document with additional details about the security incident, stating the exposed files were created in August 2019 and included personal information of 11,000 Eversource customers residing in eastern Massachusetts.
- Data Leak At New England Energy Supplier, Eversource March 16, 2021: