The New York State Public Service Commission recently announced that it's investigating a data breach that exposed almost two million customers' personal information.

"An employee from a software consulting firm contracted by New York State Electric & Gas (NYSEG) and Rochester Gas and Electric (RG&E) was allowed unauthorized access to the company’s databases, prompting the investigation, according to a statement by the the Commission on Monday," writes Threatpost' Christopher Brook.

"While NYSEG and RG&E claim there is no proof customers’ data may have been mishandled, they have begun to send preventive notifications regarding the breach to their customers," Brook writes. "The exposed data includes Social Security Numbers, dates of birth and some financial account information, according to a press release issued by the NY Commission on Monday."

Go to "Data Breach Affects Two Million NY Customers, State Commission to Investigate" to read the details.

For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.