Duquesne Light Company
bd_857f20628d60b160 · schema v1 · pii pii-v1
Full breach record for Duquesne Light Company →2 incidents on fileDuquesne Light Company (DLC) notified New Hampshire regulators of a data security incident discovered on June 16, 2021. An external actor used phishing emails to compromise a small number of company email accounts, potentially exposing employee and job applicant personal information including names, Social Security numbers, and driver's license numbers. DLC contained the initial breach, discovered a re-compromise on July 27, 2021, and engaged forensic investigators. DLC offered 12 months of Experian IdentityWorks to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Jun 16, 2021
Discovered
Nov 1, 2021
Filed
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.