Stamford residents may have been exposed in a recent Eversource cyberattack that compromised the personal information of nearly 3,000 customers enrolled in the utility’s financial‑hardship program. According to NBC Connecticut, the breach began on April 14 when an attacker accessed Eversource’s systems and eventually obtained tax returns, bank statements, pay stubs, Social Security numbers and benefits information.
The Connecticut Office of Consumer Counsel (OCC) says Eversource did not learn of the intrusion until more than 10 days later. The utility waited another month before issuing a public news release, and employees were informed only after that. Customers received notification letters five days after employees were alerted, a delay the OCC says prevented many from taking timely protective actions.
“We think this should have been shouted from the rooftops very loudly so that customers know this is not just a routine communication,” said Claire Coleman of the OCC. Coleman added that only 6% of the affected customers signed up for credit‑monitoring services, suggesting the delayed notice reduced participation.
Nearly 3,000 individuals in the hardship program had their sensitive documents exposed, according to the OCC’s report. While Coleman has not been notified of any identity‑theft cases among the victims, Quinnipiac University cybersecurity professor Marshall Darling warned that the data is already circulating and urged residents to freeze their credit and rotate passwords.
Eversource responded to NBC Connecticut, stating, “Cybersecurity and the protection of customer information is a fundamental component of providing the safe, reliable energy services our people, businesses and communities need. We have stringent policies and procedures in place to protect against constantly evolving cyber threats… we have been in regular communication with our regulators and local and federal law enforcement.”
The OCC is calling for an independent audit of Eversource’s cybersecurity measures and response protocols. The agency’s report indicates the month‑long gap between the breach discovery and employee notification allowed multiple staff members to fall victim to phishing attempts.
Stamford consumers are advised to monitor their credit reports, consider freezing their credit with the three major bureaus, and change passwords on any accounts that may use the compromised information.
What’s next: The OCC plans to submit its audit request to state regulators within the next two weeks. Eversource has said it will cooperate with the audit and continue working with law‑enforcement agencies. Residents should watch for further communications from the utility and the OCC regarding additional protective steps.
Sources: nbcconnecticut.com
