Dormant Medium impact Data breach Checked 1d ago

London Hydro data breach exposes customer contact info

Canadian electricity utility London Hydro found that an unauthorized third party used a technical flaw in its customer web portal to access and download contact and account data for some customers. The utility fixed the flaw the same day it was discovered and is offering free Equifax credit monitoring to affected people. No financial, banking, or government ID information was taken.

Started
Jun 18, 2026
Latest activity
Jun 29, 2026
Attributed to
Not confirmedNo credible attribution yet
Where
Canada
Sectors
Energy
Scale
one Canadian municipal electricity utility, London Hydro; the number of affected customers has not been officially disclosed

Current status

As of 2026-09-10, no credible update after 2026-08-13 was found, and London Hydro's incident page still shows its last update as 2026-06-29.

Dormant: No new confirmed activity for a while, and nobody has called an official all clear.

Impact

An unauthorized party accessed and downloaded customer contact details (names, addresses, emails, phone numbers) and account details (account numbers, service addresses, pricing plans, meter numbers) for an unspecified number of London Hydro customers. No passwords, banking data, or government ID numbers were exposed, and the utility says billing and service delivery were not affected.

What to do

If you are a London Hydro customer, watch for an official notice from London Hydro with an Equifax credit monitoring activation code, and treat unsolicited calls, texts, or emails asking for account or payment details as suspicious.

Timeline

  1. Aug 13, 2026

    No new confirmed activity reported, so this incident moved to dormant while it stays open.

    Dormant
  2. Jun 29, 2026

    London Hydro began offering eligible affected customers free Equifax Complete Premier credit monitoring with individual activation codes.

    Containedlondonhydro.com
  3. Jun 26, 2026

    London Hydro said it was still working with authorities and continuing to contact affected individuals.

    Containedlondonhydro.com
  4. Jun 21, 2026

    CBC reported the utility was notifying impacted customers and working with law enforcement, with no financial or government ID data exposed.

    Containedcbc.ca
  5. Jun 20, 2026

    London Hydro confirmed a technical flaw in its customer portal let an unauthorized third party access and download some customers' contact and account information, and said it fixed the flaw the same day it was found.

    Containedlondonhydro.com
  6. Jun 18, 2026

    London Hydro noticed suspicious activity on a customer account and began investigating.

    Emergingcbc.ca

Sources

Related reports