On November 6, 2023, Blue Ridge Electric Membership Corporation (“Blue Ridge Energy”) filed a notice with the Attorney General of Montana after discovering that a data breach at Meridian, one of Blue Ridge Energy’s vendors, experienced a data security incident. In this notice, Blue Ridge Energy explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, Social Security numbers and bank account numbers. Upon completing its investigation, Blue Ridge Energy began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Blue Ridge Electric Membership Corporation, it is essential you understand what is at risk and what you can do about it. While this third-party data breach did not impact Blue Ridge Energy’s computer network, it did affect information provided to Blue Ridge because hackers targeted a vendor that was given the information. As a result, those who were affected face a significantly higher risk of identity theft and fraud. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Meridian / Blue Ridge Energy data breach. For more information, please see our recent piece on the topic here.

What Caused the Meridian / Blue Ridge Energy Data Breach?

The Blue Ridge Energy data breach was only recently announced, and more information is expected soon. However, Blue Ridge Energy’s filing with the Attorney General of Montana provides some important information on what led up to the breach. According to this source, on September 27, 2023, Blue Ridge Energy was informed of a data security incident at Meridian, one of the company’s vendors. In response, Blue Ridge Energy independently monitored the situation, eventually confirming that certain confidential information that the company had received from consumers and provided to Meridian was leaked on the Dark Web. The date of the leak was October 12, 2023.

After learning that sensitive consumer data was accessible to an unauthorized party, Blue Ridge Energy reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, Social Security number and bank account number.

On November 6, 2023, Blue Ridge Energy sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Blue Ridge Electric Membership Corporation

Blue Ridge Electric Membership Corporation is a renewable energy company based out of Lenoir, North Carolina. Blue Ridge Energy provides a range of energy options and services, including residential and commercial electric services, propane and fuel services, solar energy services and EV charging stations. Blue Ridge Energy employs more than 66 people and generates approximately $33 million in annual revenue.