MA Eversource Customers Exposed To Data Breach: Utility

MASSACHUSETTS — One of the largest energy companies serving Massachusetts is warning its customers about a data breach related to a vendor.

Eversource on Monday emailed customers to warn them that vendor CLEAResult was impacted by a software vulnerability, potentially exposing customer data. Information like energy usage, names and addresses may have been part of the exposure, Eversource said.

"Some file copies were taken from CLEAResult’s systems. CLEAResult has advised us that they moved quickly to take appropriate security measures to fix this vulnerability, are completing their investigation into this incident and complying with all laws," Eversource said.

CLEAResult makes software utilities like Eversource use to track energy efficiency programs.

Eversource provides gas and electric service to scores of communities across Massachusetts between Cape Cod, Boston and Worcester and in western parts of the state.

Eversource advised customers to monitor utility accounts for unusual activity.

"We share your concern about this data breach, and we will continue to make information security a top priority. We are proactively taking additional security measures to ensure the protection of your information and utility accounts," the company said.

Eversource last experienced a major data breach in 2021, when one of the company's cloud servers was left unsecured. That breach included data like Social Security numbers, which were not compromised in the CLEAResult breach.