Energy

Energy covers utilities, grid operators, and oil and gas companies, along with the vendors that run their industrial control systems. Beyond customer billing and employee records, an incident here can also touch operational technology tied to physical infrastructure, which is why the sector is treated as critical infrastructure in most jurisdictions. There is no single breach-notification law specific to energy; an affected utility notifies individuals under the general breach statute covering them, separately from whatever incident report it owes its own grid or pipeline regulator.