Key facts: Eversource Energy data breach
- Date occurred
- April 14, 2026
- Date discovered
- April 27, 2026
- Date reported
- May 21, 2026
- Target entity
- Eversource Energy
- Source of breach
- Phishing campaign compromising employee credentials
- Data types
- Names, addresses, account information, phone numbers, email addresses, social security numbers, driver's license numbers, federal identification numbers, financial account information
- Status
- Confirmed; reported on May 21, 2026.
- Severity
- High; exposure of sensitive PII including Social Security and driver's license numbers creates a high risk of identity theft.
What happened in the Eversource Energy data breach?
Eversource Energy (eversource.com) disclosed a high-severity data breach on May 21, 2026. The incident, which originated from a phishing campaign, compromised the credentials of two employees. This unauthorized access allowed a third party to view files containing sensitive customer information. The breach affected a total of 3,049 individuals.
According to the report, the breach occurred on April 14, 2026, and was discovered by the company on April 27, 2026. The compromised data included names, Social Security numbers, driver’s license numbers, and financial account information. The high severity reflects the sensitive nature of the records, which could facilitate identity theft or financial fraud. While the investigation is concluded, affected individuals should remain vigilant against potential misuse of their data.
Who is behind the incident?
The attacker or cause of the incident has not been identified.
Impact and risks for Eversource Energy customers
For the 3,049 affected customers, the exposure of Social Security numbers and financial account information presents significant risks. Unauthorized parties could potentially use this data for identity theft, opening fraudulent accounts, or conducting targeted phishing attacks using the stolen contact details. This level of exposure requires immediate attention to prevent financial loss.
Such incidents typically lead to long-term monitoring requirements for victims. Affected individuals are encouraged to freeze their credit, monitor bank statements closely, and implement multi-factor authentication on all sensitive accounts. Proactive transparency from companies like Eversource Energy is essential for mitigating these risks effectively.
How to protect against similar security incidents
Following the breach at Eversource Energy involving sensitive personal information like Social Security numbers, affected individuals and organizations should take immediate steps to secure their data.
- Implement credit freezes and monitoring. Contact major credit bureaus to place a freeze on your credit report to prevent unauthorized accounts. Monitor your financial statements and credit reports for any suspicious activity or unrecognized charges.
- Enhance account security with MFA. Enable phishing-resistant multi-factor authentication (MFA) on all financial and personal accounts. Use a hardware security key or an authenticator app rather than SMS-based codes where possible.
- Protect against social engineering. Be wary of unsolicited emails or phone calls asking for personal information, even if they appear to come from Eversource Energy. Verify the identity of any requester through official, known-good communication channels.
- Deploy attack surface management. Organizations should implement continuous monitoring to identify and remediate vulnerabilities that could be exploited by phishing. Conduct regular security awareness training to help employees recognize and report sophisticated phishing attempts.
Taking these steps can significantly reduce the risk of identity theft following a data exposure of this nature.
Frequently asked questions
On May 21, 2026, Eversource Energy (eversource.com) disclosed a security breach. According to initial reports, a phishing campaign compromised the credentials of two employees, allowing unauthorized access to files containing the personal information of 3,049 individuals.
The Eversource Energy breach was publicly reported on May 21, 2026. The actual incident occurred on April 14, 2026, and was discovered by the organization on April 27, 2026.
The types of data involved in the Eversource Energy incident included names, addresses, account information, phone numbers, email addresses, social security numbers, driver’s license numbers, federal identification numbers, and financial account information.
If you interacted with Eversource Energy, there’s a possibility your personal information could be affected. This incident involved highly sensitive data such as Social Security and driver’s license numbers. Stay alert for updates and take precautionary measures to secure your accounts and monitor your credit.
Eversource Energy has taken steps to secure its systems and plans to notify affected individuals starting May 27, 2026. Companies in this situation typically review security protocols, provide guidance on protective actions like credit monitoring, and deploy attack surface management to prevent future credential compromise.
Is your organization exposed to a similar risk?
UpGuard continuously monitors vendors for exposed credentials and infrastructure risk, so you can catch the next breach before it becomes a headline.
