Company Details
dominionenergy
25,183
199,529
22
dominionenergy.com
37
DOM_8891748
Completed

Dominion Energy Company CyberSecurity Posture
dominionenergy.comDominion Energy (NYSE: D), headquartered in Richmond, Va., provides regulated electricity service to 3.6 million homes and businesses in Virginia, North Carolina, and South Carolina, and regulated natural gas service to 500,000 customers in South Carolina. The company is one of the nation’s leading developers and operators of regulated offshore wind and solar power and the largest producer of carbon-free electricity in New England. The company’s mission is to provide the reliable, affordable, and increasingly clean energy that powers its customers every day. Please visit DominionEnergy.com to learn more.
Company Details
dominionenergy
25,183
199,529
22
dominionenergy.com
37
DOM_8891748
Completed
Between 800 and 849

Dominion Energy Global Score (TPRM)XXXX

Description: Dominion Energy, a critical infrastructure provider in the energy sector, faced a sophisticated cybersecurity incident targeting its operational assets. The attack, detected and managed by the company’s **Cyber Security Operations Center (CSOC)**, involved malicious actors attempting to disrupt or exfiltrate data from systems integral to energy distribution. Given Dominion’s role in powering vital services—including residential, commercial, and potentially government-linked facilities—the breach posed risks of cascading outages, regulatory non-compliance, and compromise of sensitive infrastructure data.The incident likely involved **advanced persistent threats (APTs)** or state-sponsored actors, given the high-value target and the company’s proactive collaboration with entities like the **FBI’s InfraGard** and **National Cyber Security Center**. While the article does not specify data exfiltration or physical damage, the nature of Dominion’s operations (e.g., power grids, gas plants) means any successful intrusion could escalate to **systemic disruptions**, financial penalties, or even **public safety hazards** if critical controls were compromised. The response included incident containment, regulatory reporting, and reinforcement of threat intelligence sharing across public-private partnerships to mitigate future risks.


Dominion Energy has 72.41% more incidents than the average of same-industry companies with at least one recorded incident.
Dominion Energy has 53.85% more incidents than the average of all companies with at least one recorded incident.
Dominion Energy reported 1 incidents this year: 1 cyber attacks, 0 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.
Dominion Energy cyber incidents detection timeline including parent company and subsidiaries

Dominion Energy (NYSE: D), headquartered in Richmond, Va., provides regulated electricity service to 3.6 million homes and businesses in Virginia, North Carolina, and South Carolina, and regulated natural gas service to 500,000 customers in South Carolina. The company is one of the nation’s leading developers and operators of regulated offshore wind and solar power and the largest producer of carbon-free electricity in New England. The company’s mission is to provide the reliable, affordable, and increasingly clean energy that powers its customers every day. Please visit DominionEnergy.com to learn more.


Exelon Corporation (Nasdaq: EXC) is the nation’s largest utility company, serving more than 10 million customers through six fully regulated utilities. We believe that reliable and affordable energy is essential to a brighter, more sustainable future. We are a FORTUNE 250 company operating across

Indonesia State Electricity Corporation PLN has a long history in electricity industry of Indonesia. As the sole provider of electricity in Indonesia, PLN is striving to increase quality of services to all Indonesian. In 1972, in accordance with Government Regulation No.17, the State-owned Electric
National Grid lies at the heart of a transforming energy system. Our business areas play a vital role in connecting millions of people to the energy they use, while continually seeking ways to make the energy system clean, fair, and affordable. In the UK we own and develop the high-voltage electri
NTPC Limited is India’s largest power generation utility with roots planted way back in 1975 to accelerate power development in India. Since then it has established itself as the dominant power major with a presence in the entire value chain of the power generation business. From fossil fuels, it ha
The Saudi Electricity Company was established on the 5th of April in the year 2000, incorporated in accordance with Council of Ministers Mandate No. 169 dated November 30th, 1998, the Saudi Electricity Company was born out of the merger of smaller regional power company in the central, eastern, west

Dubai Electricity and Water Authority (DEWA), established on 1 January 1992, stands at the forefront of sustainable energy and water management. With a dedicated workforce of over 11,000 employees, we ensure reliable services across the entire chain of electricity and water production, transmission,
RWE is leading the way to a green energy world. With its investment and growth strategy Growing Green, RWE is contributing significantly to the success of the energy transition and the decarbonisation of the energy system. Around 20,000 employees work for the company in almost 30 countries worldwide

Company profile Eskom Holdings generates, transports and distributes approximately 95% of South Africa’s electricity – making up 60% of the total electricity consumed on the African continent. Eskom is the world’s eleventh-largest power utility in terms of generating capacity, ranks ninth in term

Somos uma companhia de capital aberto com ações (NEOE3) negociadas na Bolsa de Valores de São Paulo. Parte do grupo espanhol Iberdrola, atuamos no Brasil desde 1997, e atualmente, somos uma das líderes do setor elétrico do país. Estamos presentes em 18 estados e no Distrito Federal, com negócios em
.png)
Historically Black South Carolina State University has recently launched four new STEM degree programs to prepare students for careers in a...
ENERGYWIRE | Jay Jones' victory in Virginia's attorney general race added an exclamation point to the Democratic romp in this week's...
DINWIDDIE, Va. (WWBT) - Dominion Energy cut the ribbon on its new high voltage laboratory in Dinwiddie County Friday afternoon.
CLIMATEWIRE | The first American-made offshore wind installation vessel is ready to work, just as the Trump administration is making moves...
Dominion Energy (D) closed at $59.40 in the latest trading session, marking a -1.95% move from the prior day. The stock's performance was...
Dominion Energy has underperformed the Utilities industry over the past year, and analysts are cautious about the stock's prospects.
Learn how utilities must adapt to increased electricity demand for cooling and AI and how they can maintain affordability.
This report provides an exhaustive analysis of why NextEra Energy, Inc. (NEE) is uniquely positioned not merely to participate in this transformation, but to...
The Virginia SCC ordered changes to Dominion's IRP filings, requiring scenarios that meet state clean energy goals and have an increased...

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Dominion Energy is http://www.dominionenergy.com.
According to Rankiteo, Dominion Energy’s AI-generated cybersecurity score is 802, reflecting their Good security posture.
According to Rankiteo, Dominion Energy currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Dominion Energy is not certified under SOC 2 Type 1.
According to Rankiteo, Dominion Energy does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Dominion Energy is not listed as GDPR compliant.
According to Rankiteo, Dominion Energy does not currently maintain PCI DSS compliance.
According to Rankiteo, Dominion Energy is not compliant with HIPAA regulations.
According to Rankiteo,Dominion Energy is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Dominion Energy operates primarily in the Utilities industry.
Dominion Energy employs approximately 25,183 people worldwide.
Dominion Energy presently has no subsidiaries across any sectors.
Dominion Energy’s official LinkedIn profile has approximately 199,529 followers.
Dominion Energy is classified under the NAICS code 22, which corresponds to Utilities.
No, Dominion Energy does not have a profile on Crunchbase.
Yes, Dominion Energy maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/dominionenergy.
As of December 10, 2025, Rankiteo reports that Dominion Energy has experienced 1 cybersecurity incidents.
Dominion Energy has an estimated 4,176 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.
Detection and Response: The company detects and responds to cybersecurity incidents through an enhanced monitoring with the dominion energy csoc team actively monitors and reacts to cyber threats and malicious electronic actions directed towards dominion energy assets...
Title: None
Description: Jeremy leads Cisco's U.S. Public Sector Cybersecurity Threat Intelligence Ecosystem development with 18+ years of experience. He collaborates with governments, universities, and school districts on cybersecurity strategies and initiatives. His role includes overseeing cyber incident response, regulatory compliance, and the Cyber Security Operations Center (CSOC) at Dominion Energy, where the team actively monitors and reacts to cyber threats targeting the company's assets. No specific incident details (e.g., breach, attack, or vulnerability) are provided in the description.
Type: Cyber Attack
Common Attack Types: The most common types of attacks the company has faced is Cyber Attack.

Entity Name: Dominion Energy
Entity Type: Organization
Industry: Energy/Utilities

Entity Name: Cisco (U.S. Public Sector)
Entity Type: Organization
Industry: Technology/Cybersecurity
Location: United States

Enhanced Monitoring: The Dominion Energy CSOC team actively monitors and reacts to cyber threats and malicious electronic actions directed towards Dominion Energy assets.
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as The Dominion Energy CSOC team actively monitors and reacts to cyber threats and malicious electronic actions directed towards Dominion Energy assets..
.png)
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763126988 and Tuleap Enterprise Edition prior to 17.0-3 and 16.13-8 have missing CSRF protections which allow attackers to create or remove tracker triggers. This issue is fixed in Tuleap Community Edition version 17.0.99.1763126988 and Tuleap Enterprise Edition versions 17.0-3 and 16.13-8.
Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API. Attackers have access to create, edit or remove plans. This issue is fixed in Tuleap Community Edition version 17.0.99.1762456922 and Tuleap Enterprise Edtion versions 17.0-2, 16.13-7 and 16.12-10.
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 allow attackers trick victims into changing tracker general settings. This issue is fixed in version Tuleap Community Edition version 17.0.99.1762444754 and Tuleap Enterprise Edition versions 17.0-2, 16.13-7 and 16.12-10.
Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10 allow attackers to access file release system information in projects they do not have access to. This issue is fixed in version 17.0.99.1762431347 of the Tuleap Community Edition and versions 17.0-2, 16.13-7 and 16.12-10 of Tuleap Enterprise Edition.
IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods due to improper allocation of resources without limits.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.