Direct Energy LP

The Maine Office of the Attorney General reported that Direct Energy LP experienced a data breach on November 3, 2020, due to a ransomware attack affecting approximately 249,669 individuals. The breach involved customer personal information, including financial account numbers. Written notifications to affected individuals were issued between December 2 and December 22, 2020, and identity theft protection services were offered for 24 months through Experian.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9f85b235-0769-4891-b791-ef41d4e76dd2.shtml

TPRM report: https://www.rankiteo.com/company/direct-energy

"id": "dir1041072525",
"linkid": "direct-energy",
"type": "Ransomware",
"date": "11/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 249669,
                        'industry': 'Energy',
                        'name': 'Direct Energy LP',
                        'type': 'Company'}],
 'attack_vector': 'Ransomware',
 'customer_advisories': 'Identity theft protection services offered for 24 '
                        'months through Experian',
 'data_breach': {'number_of_records_exposed': 249669,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Customer personal information',
                                              'Financial account numbers']},
 'date_detected': '2020-11-03',
 'description': 'The Maine Office of the Attorney General reported that Direct '
                'Energy LP experienced a data breach on November 3, 2020, due '
                'to a ransomware attack affecting approximately 249,669 '
                'individuals. The breach involved customer personal '
                'information, including financial account numbers. Written '
                'notifications to affected individuals were issued between '
                'December 2 and December 22, 2020, and identity theft '
                'protection services were offered for 24 months through '
                'Experian.',
 'impact': {'data_compromised': ['Customer personal information',
                                 'Financial account numbers'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Written notifications to affected '
                                        'individuals',
              'third_party_assistance': 'Experian'},
 'title': 'Direct Energy LP Data Breach',
 'type': 'Data Breach'}