PPL Electric reports 2023 data breach exposing customer information

PPL Electric Utilities has confirmed that basic customer data was exposed during a data breach linked to the MOVEit file transfer software, which was compromised in June 2023. The breach, attributed to a Russian ransomware group, involved a third-party vendor and affected non-financial information such as names, addresses, phone numbers, emails, and utility account numbers. Importantly, no banking, credit card, social security numbers, or account passwords were included in the exposed data, as PPL does not share such sensitive information with the vendor. Despite the breach being patched within the calendar year, the exposed data was only recently discovered online. PPL has urged customers to remain vigilant against potential scams following the incident. The utility serves 29 counties in Pennsylvania and is owned by PPL Corporation, which reported operating revenues of $8.46 billion for 2024.