Cybersecurity News: London Hydro Data Breach Exposes Customer Information London Hydro, a major utility provider in Ontario, has reported a data breach compromising customer information. The incident, disclosed in recent days, involved unauthorized access to sensitive data, though specific details on the scope and nature of the exposed information remain limited. The breach was detected by London Hydro’s security team, prompting an investigation in collaboration with cybersecurity experts. While the utility has not confirmed whether financial or personal data was accessed, the incident underscores ongoing risks to critical infrastructure and customer privacy. Authorities, including law enforcement and regulatory bodies, have been notified. London Hydro has not yet released a full timeline of the breach or identified potential threat actors. The incident serves as a reminder of the vulnerabilities faced by utility providers and the importance of robust cybersecurity measures in safeguarding customer data.

London Hydro Confirms Data Breach Impacting Customer Information London Hydro, a utility provider in London, Ontario, disclosed a data breach after detecting suspicious activity on an internal account on Thursday, August 21, 2025. The company resolved the issue the same day and launched an investigation in collaboration with local law enforcement. The breach exploited a system vulnerability, exposing non-sensitive personal information of an undisclosed number of customers. Compromised data included names, email addresses, phone numbers, account numbers, service addresses, pricing plans, contract start dates, and meter details. Banking information, government IDs, and other highly sensitive data were not affected, and service delivery remained unaffected. London Hydro notified impacted customers on Friday, August 22, via email, confirming the incident and outlining the exposed data. CEO Ysni Semsedini stated that the utility would continue providing updates through its website as the investigation progresses. Law enforcement has not yet commented on the case. The company emphasized that while the breach did not involve financial or government-issued identifiers, the exposed details could still pose risks for targeted phishing or social engineering attacks. Further details remain limited pending the ongoing investigation.