I pay my electric bill online and I am very careful using my Proton VPN and turn off WIFI.
I paid the bill earlier this week, 5 days early, the next day I get a text from Duke Energy, it states my address, due date and the exact amount due next week. They provide 2 different websites I can remit payment both are suspect duk.us/61 & duk.us/62, which are obviously fake.
When I pay online, I do not provide a phone #, and they have never texted about a bill.
So I call the company an hour later to inform them they have likely been hacked. The young woman at Duke couldn't give a crap. I urged her many times to tell her boss or the billing dept that they have been hacked and there is a potential of many of their customers being scammed. Her reply was...there are many scams out there. She is obviously a dumbass who is addicted to Fakebook.
She reviewed my account and saw that I paid the day before. She acknowledged that the sites given by the text were not correct. But, it was obvious she wasn't going to tell anyone else they have been hacked.
I checked my email later, and a fake email came in telling me the same info with a different website to go to to pay my bill.
It was very close to Duke's real site.
My point is, all my contact info and account info could only be known by evil doers if they hacked Duke's billing department.
Be careful out there.