Duquesne Light Company (DLC) notified New Hampshire regulators of a data security incident discovered on June 16, 2021. An external actor used phishing emails to compromise a small number of company email accounts, potentially exposing employee and job applicant personal information including names, Social Security numbers, and driver's license numbers. DLC contained the initial breach, discovered a re-compromise on July 27, 2021, and engaged forensic investigators. DLC offered 12 months of Experian IdentityWorks to affected individuals.