Supply chain β›“ Supply Chain

Eversource Energy Third-Party Breach (August 2023)

πŸ“… 2023-08-01 🏒 CLEAResult
Primary Source β†—

Incident Details

Eversource reports data breach as companies across Connecticut struggle with cyber attacks.. Eversource joined M&T Bank and a number of other major U.S. companies to report. An Eversource substation in Greenwich, Conn. In August 2023, the company sent alerts to some Connecticut customers in energy efficiency programs that account data may have been exposed in an external vendor’s vulnerability to a widely used software platform. Eversource has become the latest company to deal with a cyber attack as banks, hospitals and businesses across Connecticut and the nation continue to struggle with data breaches. Third-party company: CLEAResult.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
CLEAResult
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-08-01 Breach occurred
  2. 2023-08-31 Publicly disclosed