NYSEG and RG&E Notify Customers of Unauthorized Access to Customer Data

New York State Electric & Gas (NYSEG) and Rochester Gas and Electric (RG&E), subsidiaries of Iberdrola USA, today began sending precautionary notifications to customers advising them of unauthorized access to customer data.

The companies said that there is no evidence that any customer data has actually been misused, or that there was any malicious intent

The situation involves an employee at an independent software development consulting firm (contracted by NYSEG and RG&E) who allowed unauthorized access to one of the companies' customer information systems. The customer records contain Social Security numbers, dates of birth and, in some cases, financial institution account numbers.

"We take our responsibility to protect customer information very seriously and we have robust information technology security measures in place," said Mark S. Lynch, president of NYSEG and RG&E. "The matter was reported to law enforcement authorities, and as a precautionary measure, we are offering NYSEG and RG&E customers the option of a credit monitoring service at no charge."

NYSEG and RG&E have arranged for Experian to offer customers the option of a year of credit monitoring free of charge, to help identify possible fraudulent activity.