London Hydro Breach: What Families Need to Know About Utility Scams
A major Canadian utility provider was breached, exposing customer data that scammers will use to impersonate power companies. Here's how to protect your family.
Source
GetCyberRight Intelligence
Original headline: London Hydro Breach Fuels Utility Scams
Plain-English summary by GetCyberRight. Read the full report at the source above.
What Happened
Hackers breached London Hydro, a major Canadian electricity provider, stealing customer names, addresses, email addresses, phone numbers, and account details. This information is now likely circulating on underground forums where scammers buy fresh data to launch convincing impersonation attacks. If you're a London Hydro customer or use any utility service, you need to know how these breaches fuel a wave of targeted scams.
The Details
London Hydro confirmed the breach publicly, acknowledging that unauthorized access exposed personally identifiable information (PII) belonging to their customers. The stolen data creates a perfect storm for scammers. With your name, address, and account details, criminals can send emails or make phone calls that look completely legitimate.
Here's what makes utility breaches particularly dangerous: scammers can reference your actual account information, your correct address, and even recent billing dates. When someone calls claiming to be from your power company and already knows these details, it feels real. They'll create urgency, threatening to shut off your electricity within hours unless you pay immediately.
These aren't random spam calls. They're targeted attacks using your stolen information. The scammers know which utility company you use, making their impersonation frighteningly convincing. They'll pressure you to pay with gift cards, prepaid debit cards, or wire transfers. These payment methods are red flags because legitimate utility companies never demand them.
Who Is Affected
London Hydro customers in Ontario, Canada are directly impacted. However, this breach matters to everyone who uses utilities anywhere. Scammers don't limit themselves to one region. They'll test the stolen data templates and tactics on multiple utility providers across North America.
Families with elderly members should be especially alert. Seniors are disproportionately targeted in utility scams because scammers assume they're more likely to respond to authority and urgent threats. If you have parents or grandparents living independently, talk to them about this breach today.
What You Should Do Right Now
Contact your utility provider directly using the phone number on your paper bill or their official website. Never use contact information from an unexpected email or text message. Ask if there are any issues with your account.
Stay one step ahead of scammers
Weekly cybersecurity briefings for families. No spam, just the threats that matter and what to do about them.
Set up a verbal password with your utility company. Many providers now offer this security feature. Anyone calling about your account must provide this password, or you hang up immediately.
Tell your family members, especially older relatives, about this breach. Explain that utility companies never demand immediate payment via gift cards, cryptocurrency, or wire transfers. Real disconnection notices come by mail with multiple warnings.
Watch for phishing emails that reference the London Hydro breach. Scammers will send fake "breach notification" emails with malicious links. Go directly to London Hydro's website by typing the address yourself.
Monitor your email and phone for utility scam attempts over the next several months. This data doesn't expire. Scammers will use it repeatedly in different campaigns.
The Bigger Picture
Utility breaches represent a growing trend in cybercrime. Essential service providers hold valuable data that criminals can weaponize immediately. Unlike credit card breaches where you can cancel a card, you can't change your home address or stop using electricity. This makes the stolen information useful to scammers for years.
Staying informed about breaches affecting services you use helps you recognize scam attempts before you become a victim. When you know your data was compromised, that suspicious call suddenly makes sense.
How GetCyberRight Can Help
Our Breach Monitor tool helps you track whether your email address appears in this breach or other recent data exposures. Knowing your exposure risk lets you take targeted protective action. Check your family's email addresses regularly to stay ahead of potential threats tied to breached data.
Curated from trusted cybersecurity sources by GetCyberRight
Source: GetCyberRight IntelligenceStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles

Fake Documents on WhatsApp Are Installing Spyware on Computers
A live attack campaign is using WhatsApp to send fake business documents that install remote access software on computers across 9 countries.
3 min read1.4 Million Patient Records Exposed in Xsolis Healthcare Breach
A healthcare AI company exposed sensitive patient data from hospitals and clinics. Here's what families need to know and do right now.
4 min readXsolis Health Data Breach: What 1.4 Million People Need to Know
A healthcare AI company exposed protected health information for 1.4 million people. Here's what families should do to protect themselves right now.
3 min readWhatsApp Users Are Getting Hacked Through Fake Business Documents
Scammers are sending fake invoices and business files on WhatsApp that install malware on your computer. Here's how to spot them and stay safe.
4 min read