NRG ENERGY, INC.

Direct Energy LP and affiliates experienced a ransomware attack on November 3, 2020, targeting a third-party data analytics vendor. Unauthorized parties accessed and extracted customer files, potentially exposing bank account, credit card, username, password, and SSN data. The vendor did not pay the ransom. Direct Energy suspended the vendor, engaged forensics, notified law enforcement, and offered 24 months of Experian IdentityWorks to affected customers.

Direct Energy LP notified customers of a ransomware attack on a third-party data analytics vendor on November 3, 2020. Unauthorized parties accessed and extracted client files containing customer information, potentially including bank account numbers, credit card data, Social Security numbers, and credentials. The vendor did not pay the ransom. Direct Energy suspended activity with the vendor, notified law enforcement and card networks, and offered two years of identity monitoring.

Direct Energy LP, including its affiliates First Choice Power, LLC and Home Warranty of America, Inc., reported a data breach affecting 12 Maine residents. The breach, discovered on November 3, 2020, was an external system hack that compromised financial account or card numbers along with their access codes. The company notified affected individuals starting December 2, 2020, and offered 24 months of credit monitoring services through Experian.

An external system breach at Direct Energy LP and its affiliates on November 3, 2020, led to the compromise of financial account and/or credit/debit card numbers. The breach affected 12 Maine residents, who were notified and offered 24 months of credit monitoring and identity repair services through Experian.

Direct Energy LP reported a data breach to the Montana Attorney General. The breach was reported on 2020-12-02. The breach occurred on 11/3/2020. 84 Montana residents were affected.