Controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile1 entries
2020
EDPR North America discloses cyber-related data exposure
Issue disclosure
EDP Renewables North America informed customers that its internal systems had been breached. It said that, after a ransomware attack on its parent company and an investigation, it learned attackers had gained unauthorized access to at least some information stored on its systems; it said it had no evidence that customers' personal information was accessed and was sending notification letters.
Company response
Ongoing disclosure — EDP Renewables North America
Renewable energy company EDP Renewables North America (EDPR NA) has started informing customers that its internal systems were breached by cybercriminals.
Source excerpt
In a notification letter to customers, EDPR NA revealed that its parent company was hit with a ransomware attack on April 13, 2020, which prompted an investigation in which both forensic experts and law enforcement were involved.
On May 8, 2020, EDPR NA learned that the attackers gained “unauthorized access to at least some information stored on the Company’s own information systems.”
The company also says that it has been working on identifying the affected individuals, and that it started sending notification letters “out of an abundance of caution,” although it does not have evidence that the attackers were able to access customers’ personal information.