CONSOLIDATED EDISON COMPANY OF NEW YORK, INC.

Consolidated Edison Company of New York LLC (“ConEd”) reported a data breach to the Oregon Attorney General. The breach was reported on 2023-09-28. The breach occurred during 5/29/2023 - 6/2/2023. The breach was discovered on 7/7/2023. 24,247 individuals were affected. Notice was sent on 8/10/2023.

Consolidated Edison Company of New York LLC (“ConEd”) reported a data breach to the Oregon Attorney General. The breach was reported on 2023-09-27. The breach occurred during 5/29/2023 - 6/2/2023. The breach was discovered on 7/7/2023. 24,247 individuals were affected. Notice was sent on 8/10/2023.

Consolidated Edison Company of New York reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-08-10. 14 Indiana residents were affected. 16,459 individuals affected in total.

ConEd notified NH AG that third-party vendor PBI was impacted by the MOVEit Transfer zero-day vulnerability. The breach occurred May 29-June 2, 2023. ConEd became aware on July 7, 2023. Data of 28 NH retirees (PII/SSN) was accessed. PBI patched systems, notified law enforcement, and offered credit monitoring.

Pension Benefit Information, LLC (PBI) notified individuals of a data breach involving the MOVEit Transfer software vulnerability exploited by an unauthorized third party. Access occurred May 29-30, 2023. PBI patched systems, investigated, and is offering 12 months of credit monitoring. Data involved likely included names and government IDs.