Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
EVERSOURCE ENERGY
bd_c5622f9e262c6888 · schema v1 · pii pii-v1
Full breach record for EVERSOURCE ENERGY →Eversource Energy notified the New Hampshire Attorney General of a phishing incident affecting approximately 9 NH residents. The attack, occurring between April 14 and April 26, 2026, compromised employee credentials to access SharePoint files containing customer PII (SSN, financial data). Eversource engaged forensic investigators, notified the FBI, and is offering 24 months of credit monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_867123e23f9768f0Maine State AGfiled 2026-05-21Verified by operator
- bd_b78e35812ecebc50Vermont State AGfiled 2026-05-21Verified
- bd_c4e9a718e3076047Indiana State AGfiled 2026-05-27(6d gap)Verified
- bd_160d257e6f33cfdaMassachusetts State AGfiled 2026-05-01(20d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/eversource-energy-20260521.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2026
- Raw hash
- 7549f8bd2885c34f7b2523a5aaa4edeb9858c8c6b54d3da8a5c1ad546cc287f1
Reporting entity
- Name
- EVERSOURCE ENERGYnorm: eversource energy
Victim entity
- Name
- EVERSOURCE ENERGYnorm: eversource energy
Incident
- Discovered
- Apr 26, 2026
- Materiality determined
- —
- Notification sent
- May 27, 2026
- Affected individuals
- 9
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- phishing_link
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.