The personal information of more than 3,000 Eversource Energy customers in Connecticut, Massachusetts and New Hampshire was exposed following phishing and social engineering attacks that compromised the credentials of two company employees in April.
Eversource officials declined to provide more details about the breach, including how many of the affected customers live in Connecticut. The company said it has notified utility regulators in all three states, along with state and federal law enforcement agencies.
“Our investigation determined that these malicious efforts enabled limited Company data to be accessed through the compromised accounts of two employees,” Eversource said in a statement. “The activity was promptly identified and blocked, and additional security measures were implemented to further strengthen our cybersecurity systems.”…