PPL says customer information exposed in data breach - MOVEit

[swidup]

https://www.msn.com/en-us/money/companies/ppl-says-customer-information-exposed-in-data-breach/ar-AA1yZKep

"PPL Electric Utilities customer data was exposed during a data breach almost two years ago, according to the company.

The company said in a statement Thursday that it was notified in June 2023 of a widespread breach of the MOVEit file transfer software used by PPL and many other organizations. Despite the vulnerability being discovered then, nonfinancial customer data that appears to have been a part of that breach was only discovered recently, according to PPL.

The data in question was breached from the attack on MOVEit, which is used by one of PPL’s third-party vendors, the company said. It was not a breach of the company’s systems. The issue was not related to PPL’s systems, including ones that manage the flow of electricity and billing, which were not involved or affected, according to PPL.

Data exposed did not include banking or credit card information, Social Security numbers or account passwords because none of that data is shared with the vendor, the statement said. It did not extend beyond basic information such as name, address, phone number, email address and utility account number, according to PPL."