O&R: PG&E Scam Emails Contain Malware; Delete Immediately

PRESS RELEASE
PEARL RIVER, NY  Jan. 16, 2014 – O&R is alerting its customers to a widespread email scam involving bogus bills that purport to originate from Pacific Gas and Electric Company (PG&E), a San Francisco-based company that is one of the largest electric and gas utilities in the U.S.

PG&E has received calls from people, both within its service area and outside of it, reporting that they have received suspicious emails that appeared to be bills sent by PG&E. O&R has received reports of these fraudulent PG&E bills popping up in O&R customers’ emails as well.

The fraudulent billing message references a fake account number and contains links to spam.  The email provides links to view the bogus bill but if the recipient clicks on the link it takes them to a compromised website that harbours malware.

Everyone who receives the bogus PG&E email should delete it immediately. Do not click on any of the fake email’s accompanying links.

If a customer receives one of these emails requesting information about their fictitious PG&E account, they should take the following precautions:

  • DO NOT respond to the request
  • DO NOT click on any links in the email
  • DO NOT open any attachments
  • DO NOT provide any personal information
  • Delete the email
  • Report these contacts to CorporateSecurity@pge.com

PG&E is investigating the situation along with the appropriate authorities. There has been no security breach and the information referenced in the email message is fake.