EVERSOURCE ENERGY
ent_019e230fdabe122a265919409b3b9ae1
Disclosures
7
Leak Site · State AG · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
11,674
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- EVERSOURCE ENERGY
- Normalized
- eversource energy— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- SJ7XXD41SQU3ZNWUJ746
- SEC EDGAR CIK
- 0000072741
- Domain
- None on record
Disclosure history (7)newest first
- GLOBALLeak Siteas victim2026-10-12
Sector: Energy Distribution | Revenue: $14B USD
- Indiana State AGas victim2026-05-27
Eversource Energy reported a data breach to the Indiana Attorney General. The breach occurred on 2026-04-27 and was reported on 2026-05-27. 1 Indiana residents were affected. 3,049 individuals affected in total.
- Massachusetts State AGas victim2026-05-21
Eversource Energy notified customers of a data security incident in April 2026. A cybercriminal phishing campaign resulted in the unauthorized use of two employees' credentials to access files containing customer information, including names, addresses, SSNs, driver's license numbers, and financial account numbers. Eversource blocked the attacker's activities, engaged external experts, and reported the incident to federal law enforcement. Affected individuals are offered 24 months of identity protection services.
- Maine State AGas victim2026-05-21
Eversource Energy reported an external system breach (hacking) occurring on April 14, 2026, discovered on April 27, 2026. The incident affected 3,049 individuals, including 1 Maine resident. The breach involved the acquisition of personal identifiers, including government IDs. Eversource provided written notification and offered 24 months of identity protection services through IDX.
- Vermont State AGas victim2026-05-21
Eversource Energy reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-21. The reporting organization type is Other Commercial. 1 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Info.
- New Hampshire State AGas victim2026-05-21
Eversource Energy notified the New Hampshire Attorney General of a phishing incident affecting approximately 9 NH residents. The attack, occurring between April 14 and April 26, 2026, compromised employee credentials to access SharePoint files containing customer PII (SSN, financial data). Eversource engaged forensic investigators, notified the FBI, and is offering 24 months of credit monitoring to affected individuals.
- Maine State AGas victim2021-04-16
Subsidiary disclosures (2)filed by group companies
◈ These filings were made by or about subsidiaries of EVERSOURCE ENERGY — not by EVERSOURCE ENERGY itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.
- Massachusetts State AGvia NSTAR ELECTRIC COMPANY2021-04-16
NSTAR Electric Company dba Eversource Energy reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-04-16. 10,198 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGvia NSTAR ELECTRIC COMPANY2021-04-16
NSTAR Electric Company (dba Eversource Energy) reported a security incident to the New Hampshire Attorney General on April 16, 2021. On March 16, 2021, the company discovered an Azure cloud storage folder was misconfigured, allowing potential public access. The folder contained personal information (names, addresses, SSNs, utility account info) for 128 New Hampshire residents who had Massachusetts service addresses. No financial account data was involved. The company restricted access immediately, investigated, and found no evidence of unauthorized access or misuse. Notices were sent to affected residents, who were offered 24 months of credit monitoring.