Talk About an Electric Shock – Power Company Fined $2.7M After Data Breach
Improper cybersecurity oversight cost a power company a $2.7 million penalty in a settlement between the Western Electric Coordinating Council and the company, according to a post by Troutman Sanders.
The post says that the unnamed power company had inadvertently allowed critical cyber security data to be exposed online for 70 days.
“The contractor improperly accessed data from the company’s network and copied that data onto the contractor’s network,” the post explains. “While the information was on the contractor’s network it was accessible online to anyone without password protection. The information exposed records of over 30,000 assets, including records associated with Critical Cyber Assets (CCAs) such as IP addresses and server host names.”
