Exploit: Unsecured Database
Eversource Energy: Power Company
Risk to Business: 1.807= Severe
Eversource Energy, the largest energy supplier in New England, has suffered a data breach after customers’ personal information was exposed on an unsecured cloud server. The company serves 4.3 million electric and natural gas customers throughout Connecticut, Massachusetts, and New Hampshire. The unsecured database allegedly contained unencrypted files created in August 2019 that included the personal information of 11,000 Eversource eastern Massachusetts customers.
Risk to Business: 2.177= Severe
Eversource Energy disclosed to customers that the unsecured cloud storage server exposed their name, address, phone number, social security number, service address, and account number. The utility is offering a free 1-year identity monitoring service for impacted customers through Cyberscout.
Customers Impacted: Unknown
How it Could Affect Your Customers’ Business Unsecured data is a rookie move. Make sure that everyone is following cybersecurity best practices to avoid costly mistakes.