Eversource Energy Data Breach Lawsuit Investigation
Received an April 2026 breach notice from Eversource Energy?
Dapeer Law, P.A. is investigating a potential class action against Eversource Energy, a publicly traded New England utility holding company, on behalf of customers whose personal information may have been exposed in the April 2026 phishing incident.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from Eversource Energy dated April 2026.
- Your letter offered enrollment in free IDX identity-protection services, including 24-month credit monitoring, CyberScan dark-web monitoring, and $1 million in identity theft insurance.
- You had personal or financial information held by Eversource Energy in its capacity as a utility services provider.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
In April 2026, cybercriminals conducted a phishing campaign targeting Eversource Energy employees, obtaining the login credentials of two employees. Using those credentials, the attackers accessed a limited number of files containing customer information. Eversource states it immediately blocked the unauthorized access, engaged outside cybersecurity specialists to investigate, and reported the incident to federal law enforcement. The breach was disclosed to the Maine Attorney General on May 21, 2026.
The investigation concluded that the accessed files may have contained names, mailing and utility service addresses, account information, phone numbers, email addresses, Social Security numbers, driver's license numbers, federal identification numbers, and financial account numbers and related details. The specific data elements affected vary by individual. Consumer notification letters were mailed on May 27, 2026. Eversource offered affected individuals two years of complimentary identity-protection services through IDX, including credit monitoring, CyberScan dark-web scanning, $1 million in identity theft insurance, and fully managed recovery assistance.
The potential exposure of Social Security numbers, driver's license numbers, federal identification numbers, and financial account details creates meaningful risk of identity theft and financial fraud. Customers are encouraged to enroll in the offered IDX services promptly and to monitor all financial and utility accounts for unauthorized activity.
What to do if you received a letter
Keep your notice letter
Do not discard it. Your letter contains the activation code for IDX identity-protection services and is important documentation if you decide to participate in a lawsuit.
Enroll in the free 24-month IDX identity protection
Use the activation code in your May 27, 2026 letter to enroll in IDX services before the stated deadline. The package includes credit monitoring, CyberScan, $1 million identity theft insurance, and fully managed recovery. Accepting this benefit does not waive your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring Eversource Energy to implement stronger data security practices, including enhanced employee phishing-resistance training and multi-factor authentication controls.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from Eversource Energy. What should I do? +
Keep the May 27, 2026 letter from Eversource Energy in a safe place. Use the activation code in the letter to enroll in the free IDX identity-protection services before the stated deadline. Consider placing a fraud alert or credit freeze with the major credit bureaus. Review your bank accounts, credit cards, and utility statements for any unauthorized activity. If you experience fraud or identity theft, document it carefully and consult a data breach attorney.
Am I eligible to join a class action against Eversource Energy? +
You may be eligible if you received an Eversource Energy notification letter dated May 27, 2026, or can otherwise confirm your information was involved in the breach. Eligibility may also depend on your state of residence, the categories of data exposed in your individual case, and whether you have documented losses such as fraudulent charges or time spent addressing identity theft.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
According to Eversource Energy's notice, the accessed files may have contained names, mailing and utility service addresses, account information, phone numbers, email addresses, Social Security numbers, driver's license numbers, federal identification numbers, and financial account numbers and related details. The specific data elements involved vary by individual. Review your personal notice letter for the categories that apply to you.
Did Eversource Energy offer free credit monitoring? +
Yes. Eversource Energy is offering affected individuals 24 months of complimentary identity-protection services through IDX. The package includes credit monitoring, CyberScan dark-web monitoring, $1 million in identity theft insurance, and fully managed recovery assistance. Enrollment instructions and an activation code are in the May 27, 2026 notification letter. Enrolling does not waive your right to pursue legal claims.
How many people were affected by the Eversource Energy breach? +
Eversource Energy has not publicly disclosed the total number of individuals affected by this breach. The Maine Attorney General's breach filing is publicly available and linked on this page. This page will be updated as more information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The official breach notice filed with the Maine Attorney General is publicly available on the Maine AG Data Breach Notifications portal. A direct link to the PDF is included on this page. You can also request assistance obtaining a copy through a free consultation with Dapeer Law.
Sources & references
- Official breach notice filing · Maine Attorney General, Data Breach Notifications Portal
- Company · Eversource Energy (eversource.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
