London Hydro Confirms Data Breach Impacting Customer Information
London Hydro, a utility provider in London, Ontario, disclosed a data breach after detecting suspicious activity on an internal account on Thursday, August 21, 2025. The company resolved the issue the same day and launched an investigation in collaboration with local law enforcement.
The breach exploited a system vulnerability, exposing non-sensitive personal information of an undisclosed number of customers. Compromised data included names, email addresses, phone numbers, account numbers, service addresses, pricing plans, contract start dates, and meter details. Banking information, government IDs, and other highly sensitive data were not affected, and service delivery remained unaffected.
London Hydro notified impacted customers on Friday, August 22, via email, confirming the incident and outlining the exposed data. CEO Ysni Semsedini stated that the utility would continue providing updates through its website as the investigation progresses. Law enforcement has not yet commented on the case.
The company emphasized that while the breach did not involve financial or government-issued identifiers, the exposed details could still pose risks for targeted phishing or social engineering attacks. Further details remain limited pending the ongoing investigation.
London Hydro cybersecurity rating report: https://www.rankiteo.com/company/london-hydro
"id": "LON1782051858",
"linkid": "london-hydro",
"type": "Breach",
"date": "8/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Energy/Utilities',
'location': 'London, Ontario, Canada',
'name': 'London Hydro',
'type': 'Utility Provider'}],
'attack_vector': 'System Vulnerability',
'customer_advisories': 'Email notification sent to impacted customers on '
'2025-08-22',
'data_breach': {'personally_identifiable_information': 'Names, email '
'addresses, phone '
'numbers, account '
'numbers, service '
'addresses',
'sensitivity_of_data': 'Low to moderate (no banking or '
'government IDs)',
'type_of_data_compromised': 'Non-sensitive personal '
'information'},
'date_detected': '2025-08-21',
'date_publicly_disclosed': '2025-08-22',
'date_resolved': '2025-08-21',
'description': 'London Hydro, a utility provider in London, Ontario, '
'disclosed a data breach after detecting suspicious activity '
'on an internal account. The breach exploited a system '
'vulnerability, exposing non-sensitive personal information of '
'customers, including names, email addresses, phone numbers, '
'account numbers, service addresses, pricing plans, contract '
'start dates, and meter details. Banking information, '
'government IDs, and other highly sensitive data were not '
'affected.',
'impact': {'data_compromised': 'Names, email addresses, phone numbers, '
'account numbers, service addresses, pricing '
'plans, contract start dates, meter details',
'identity_theft_risk': 'Potential for targeted phishing or social '
'engineering attacks',
'operational_impact': 'None (service delivery remained unaffected)',
'payment_information_risk': 'None (banking information not '
'affected)'},
'investigation_status': 'Ongoing',
'references': [{'source': 'London Hydro Disclosure'}],
'response': {'communication_strategy': 'Email notification to impacted '
'customers, updates via company '
'website',
'containment_measures': 'Issue resolved on the same day',
'law_enforcement_notified': 'Yes (local law enforcement)'},
'title': 'London Hydro Data Breach Impacting Customer Information',
'type': 'Data Breach'}