Eversource Energy, which is the largest energy supplier in New England with 4.3 million customers in Connecticut, Massachusetts, and New Hampshire, is notifying customers that their personal information was compromised on an unsecured cloud server.
The personal information that was compromised includes names, addresses, telephone numbers, Social Security numbers, services addresses, and account numbers. The notification letter states that on March 16, 2021, Eversource discovered that the “[c]ompany cloud storage site had been misconfigured so that its files could have been publicly accessed.” It is reported that the files contained in the misconfigured folder, created in 2019, were unencrypted and included the personal information of some 11,000 Massachusetts customers.
The company “made enhancements to its system security and procedures.” Eversource is offering identity theft monitoring for affected individuals for one year.