Dominion Resources

Dominion Resources, operating under the aliases Dominion Resources and Dominion, is a prominent energy company headquartered in the United States. The organization provides electricity and natural gas services to residential, commercial, and industrial customers across multiple states. Its operations encompass power generation, transmission, and distribution, with a diversified portfolio that includes nuclear, natural gas, solar, and wind energy assets. As a Fortune 500 company, Dominion maintains significant infrastructure critical to energy delivery in its service territories, reflecting its role as a major utility provider in regulated and competitive markets. The company’s scale positions it as a substantial entity within the U.S. energy sector, serving millions of customers and managing extensive transmission networks.

A distinguishing aspect of Dominion’s operations involves its handling of sensitive data, particularly through third-party partnerships. In 2014, a cybersecurity incident involving a subcontractor compromised the personal information of approximately 1,700 participants in Dominion’s employee wellness program. The breach occurred when an attacker accessed the subcontractor’s systems, exposing names, addresses, email addresses, phone numbers, genders, dates of birth, and encrypted passwords. This event underscored vulnerabilities associated with third-party vendor relationships in critical infrastructure sectors. Dominion’s response included notifying affected individuals, recommending username and password changes, and offering complimentary credit monitoring services. The company subsequently terminated its contract with the subcontractor responsible for scheduling services, demonstrating a corrective action to mitigate future risks.

The incident highlights Dominion’s exposure to supply chain security challenges common in large-scale utility operations. While the breach did not directly compromise Dominion’s core energy infrastructure, it revealed dependencies on external vendors for ancillary services. The organization’s adherence to regulatory obligations was evident through its breach notification and remediation efforts, aligning with standard practices for protecting personally identifiable information. As a publicly traded entity with essential service responsibilities, Dominion’s operational resilience remains closely tied to both physical infrastructure security and data protection protocols across its ecosystem of partners and subsidiaries. The company continues to operate within a complex regulatory landscape that governs both energy delivery and consumer data safeguards.