Department of Energy and Environmental Protection Public Utilities Regulatory Authority

Electric and gas utilities have begun notifying residential customers with unpaid and/or past-due balances that if they do not take action and contact their utility to enroll in a payment plan, they are at risk of having their gas services terminated on Thursday, May 2, 2024. If your household has received a notification from your utility company, please contact them directly to set up a payment plan to keep your services on. These plans charge no interest, and all customers qualify at least once for one or more of these plans. After engaging with utility providers, customers may also contact PURA’s customer affairs unit for specific questions regarding payment arrangements. View eligibility, utility contact information

Press Releases

PURA Press Release Header

01/07/2022

PURA Releases 2021 Public Utilities Annual Cybersecurity Report

Utilities enhance cybersecurity efforts as threats increase


(New Britain, CT – January 7, 2022) – Connecticut’s Public Utilities Regulatory Authority (PURA) today released its fifth ‘Public Utilities Annual Cybersecurity Report’ reviewing 2021 cybersecurity programs of regulated electric, gas, and water utilities.

This year’s report found that in 2021, phishing attacks remained the largest source of successful cyberattacks and pose a significant risk to all of the state's critical infrastructure entities. Findings also show these phishing attempts have become more automated, are easier to conduct and designed to evade detection.

Additionally, the Authority’s report found that the lack of multi-factor authentication was the primary cause of many successful phishing hacks of utility vendors and business partners.

These emerging trends, and other wide-reaching phishing and ransomware attacks directed at U.S. companies in the energy and utilities industry, highlight the urgency for Connecticut utilities to continue to refine their existing cybersecurity programs.

Many security measures can mitigate the risk of a cyberattack and are being implemented by the Connecticut utilities. Some include requiring multi-factor authentication, enforcing password policies, updating software regularly, establishing protected system back-ups, restricting access to resources, and collecting and retaining audit logs.

As in the past, this year’s report is the result of collaborative efforts between PURA, state agency partners, and Connecticut’s regulated utility companies. Due to the sensitivity of information discussed during the review process, no specific information associated with the companies is disclosed in this report.

To learn more, visit Connecticut’s cybersecurity resource page or view past annual Cybersecurity Reports issued by the Authority.



###



For Immediate Release: January 7, 2022

Contact: Taren O’Connor
Taren.Oconnor@ct.gov
860-999-3498

Joe Cooper
Joe.Cooper@ct.gov
860-944-9459


ct.gov/pura