PPL Electric Utilities said in an emailed statement that the vendor notified it in June 2023 of a breach through a widespread bug in the MOVEit file transfer software, which affected hundreds of organizations and exposed the data of tens of millions of people. At least one cybersecurity organization has linked the published PPL data to an individual using the moniker “nam3l3ess,” who has posted information from dozens of other entities affected by the MOVEit breach, including Delta Air Lines and Amazon. A Pennsylvania utility company says that basic customer data stolen from one of its vendors in 2023 was recently exposed online, but the incident did not affect its core systems. “The information did not extend beyond basic information such as name, address, phone number, email address and account number,” the spokesperson said. It did not include “banking or credit card information, social security numbers or account passwords,” because PPL did not share such information with the vendor.
This Cyber News was published on therecord.media. Publication date: Fri, 14 Feb 2025 18:05:37 +0000