Pennsylvania utility says MOVEit breach at vendor exposed some customer data

PPL Electric Utilities disclosed that basic customer data held by a third‑party vendor was exposed after the widespread 2023 MOVEit breach—attributed to the Clop ransomware group—and was published online in December 2024; the exposed fields reportedly included names, addresses, phone numbers, emails and account numbers but not financial data, social security numbers, or account passwords, and PPL stated its own systems and critical infrastructure were not affected.