New River Electrical experienced a severe cybersecurity incident when the notorious ransomware organization BlackLock targeted their systems, resulting in a substantial data breach. The attack compromised sensitive operational and client data, causing significant disruptions in their services. Although the exact financial and reputational losses are not detailed, the incident required intervention from cybersecurity firm Resecurity, which managed to alert the company prior to the public data leak. This allowed New River Electrical to prepare their corporate communications and mitigate some of the damage from the attack.

On December 3, 2024, the Vermont Office of the Attorney General reported a data breach involving New River Electrical Corp. The breach occurred between April 30 and May 6, 2024, and involved unauthorized access resulting from a cyber-attack, potentially affecting individuals' names and other unspecified data elements, though the total number of affected individuals is currently unknown.