The parent company of Penelec and other electric companies in our state, the First Energy Corporation suffered a data breach incident.
First Energy disabled the online accounts and asked its customers to reset the passwords after it detected hackers making numerous unauthorized attempts to log into customer accounts.
Source: https://www.connectradio.fm/2021/09/07/penelec-customers-must-reset-passwords-after-security-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/firstenergy-corp
"id": "fir14271222",
"linkid": "firstenergy-corp",
"type": "Breach",
"date": "09/2021",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Energy',
'location': 'United States',
'name': 'First Energy Corporation',
'type': 'Electric company'}],
'attack_vector': 'Unauthorized access attempts',
'data_breach': {'type_of_data_compromised': 'Account information'},
'description': 'First Energy Corporation suffered a data breach incident '
'where hackers made numerous unauthorized attempts to log into '
'customer accounts. The company disabled online accounts and '
'asked customers to reset their passwords.',
'impact': {'data_compromised': 'Customer account information'},
'response': {'containment_measures': ['Disabled online accounts',
'Asked customers to reset passwords']},
'threat_actor': 'Unknown hackers',
'title': 'First Energy Corporation Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Weak or stolen passwords'}