ALBANY -- The PSC, the state Public Service Commission, says NYSEG and Rochester Gas & Electric both failed to keep confidential customer information from getting to third-party sources, according to a new report was released yesterday.
Back in January, NYSEG admitted that unauthorized parties had gotten customers' Social Security numbers, birthdates, and key financial information.
In a statement, PSC Chairman Garry Brown said "our investigation found that NYSEG and RG&E failed to meet industry standards and best practices to protect personally identifiable information of customers. As a result, we are directing the companies to immediately take action to address the vulnerabilities on its computer billing and records systems currently used to take and maintain confidential customer information."

Garry Brown
Both utility companies must update the PSC, within 60 days, on the progress they are making.