Eversource Energy suffers a data breach after customer sensitive data was disclosed on an unsecured cloud server.
- Eversource Energy suffers a data breach after customer’s personal information was disclosed on an unsecured cloud server.
- The unsecured cloud storage server exposed their name, phone number, address, service address, social security number and account number.
- For those affected by the data breach, Eversource is offering a free 1-year identity monitoring service through Cyberscout.
Eversource Energy suffers a data breach after customer sensitive data was disclosed on an unsecured cloud server.
Eversource Energy, a publicly traded, fortune 500 energy delivery company in New England, powering 4.3 million electric and natural gas customers throughout Connecticut, Massachusetts, and New Hampshire.
Eversource Energy informed its clients through a data breach notification that the unsecured cloud storage server exposed their name, phone number, address, service address, social security number and account number.
Eversource Energy offers a free 1-year identity monitoring service through Cyberscout to those affected by the data breach.
The company gave internal frequently asked questions documentation to the customers who were calling Cyberscout to learn more about the data breach. The document is used by Cyberscout staff to answer client’s questions about the data breach.
According to the FAQ shared with BleepingComputer, Eversource conducted a security review on March 16th and discovered a "cloud data storage folder" that was misconfigured so that anyone could access its contents. As soon as they found the unsecured folder, they immediately secured it and began investigating what data was stored on the folder.
The uncovered folder contained unencrypted files created in August 2019 that included the personal information of 11,000 Eversource eastern Massachusetts customers.
At this time, Eversource states that there is no indication that any of this data was exploited by unauthorized people.
Customers are urged to register for the free of charge identity theft monitoring provided by Eversource Energy to be alerted if their social security number is fraudulently used.
Affected users should also be on the lookout for possible phishing emails pretending to be from Eversource, or other companies, that employ the exposed data to collect further information.
For the latest cyber threats and the latest hacking news please follow us on Facebook, Linkedin, and Twitter.
You may be interested in reading: How to Survive the COVID Time Cyber Security Threats?