A system breach at London Hydro, an electricity distributor in Ontario, exposed a customer database described at more than 170,000 accounts, including account and service details.
A utility customer file looks administrative. Depending on what it includes, it may not be.
Consumption Data Is Occupancy Data
Where interval metering is in use, electricity consumption describes a household at fine granularity: when people wake, when they leave, when they return, and — most usefully to a burglar — when the property is unoccupied for an extended period.
That is a physical-security exposure produced by an energy-efficiency programme, and it is not what most privacy frameworks were drafted to address.
No Alternative Supplier, No Consequence
The market discipline that theoretically punishes poor data handling does not operate here. A distribution utility is a regional monopoly. Its customers cannot leave, so a breach carries no commercial penalty and the incentive to invest ahead of an incident is correspondingly weak.
Graded low. The account figure is as reported, the field detail is not established, and we are not asserting that consumption data was among the exposed fields.
Compiled from public reporting, listed below. The exposed field list has not been detailed publicly; the discussion of consumption data is general to metered utilities and labelled as such. Corrections: corrections@forensicpost.com.
- List of recent data breaches in 2026Bright Defense