Security News > 2021 > April > Eversource Energy data breach caused by unsecured cloud storage

Eversource Energy data breach caused by unsecured cloud storage
2021-04-20 17:45

Eversource, the largest energy supplier in New England, has suffered a data breach after customers' personal information was exposed on an unsecured cloud server.

Eversource Energy is the latest energy delivery company in New England, powering 4.3 million electric and natural gas customers throughout Connecticut, Massachusetts, and New Hampshire.

In a data breach notification shared with BleepingComputer, Eversource Energy is warning customers that the unsecured cloud storage server exposed their name, address, phone number, social security number, service address, and account number.

For those affected by the data breach, Eversource is offering a free 1-year identity monitoring service through Cyberscout.

After receiving the data breach notification, an Eversource customer called Cyberscout to learn more about the breach.

According to the FAQ shared with BleepingComputer, Eversource performed a security review on March 16th and found a "Cloud data storage folder" that was misconfigured so that anyone could access its contents.


News URL

https://www.bleepingcomputer.com/news/security/eversource-energy-data-breach-caused-by-unsecured-cloud-storage/