Suspected CUSI Cyber Incident Disrupts Utility Payment Portals
Summary
A suspected incident at utility billing provider CUSI disrupted payment portals and account access for utilities in several states beginning Oct. 10. Some services recovered, but the cause, full scope and affected-customer count remain unknown; ransomware has not been
Key points
- Utilities in Texas, Illinois, California and Colorado reported payment or account-access problems involving CUSI portals beginning Oct. 10.
- CUSI has not explained the cause or full scope; ransomware has not been established.
- Some customers were directed to pay by cash, check, mail, in person or drop box while online services were unavailable.
- Recovery varied: several utilities restored services, while Pleasant Valley Mutual Water Company reported no restoration estimate.
- CUSI told McCoy Water Supply Corporation its billing team was adding security protections; the article does not establish that this was the cause or extent of the disruption.
Article Details
- Victim Organization
- CUSI
- Incident Type
- Suspected cyber incident disrupting utility billing and payment services; the cause has not been explained.
- Incident Date
- 2026-10-10
- Disclosure Date
- 2026-10-13
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- CUSI customer portals and payment functions were disrupted. Some customers could not access accounts or make online payments and were directed to use cash, checks, mail, in-person payments, or drop boxes. Restoration varied by utility and payment method.
- Ransom Or Extortion
- Ransomware has not been established; no extortion activity was reported.
- Claim Status
- alleged