Duke Energy Corporation Company Cyber Security Posture

duke-energy.com

Duke Energy, a Fortune 150 company headquartered in Charlotte, N.C., is one of America’s largest energy holding companies. The company’s electric utilities serve 8.4 million customers in North Carolina, South Carolina, Florida, Indiana, Ohio and Kentucky, and collectively own 54,800 megawatts of energy capacity. Its natural gas utilities serve 1.7 million customers in North Carolina, South Carolina, Tennessee, Ohio and Kentucky. Duke Energy is executing an ambitious clean energy transition, keeping reliability, affordability and accessibility at the forefront as the company works toward net-zero methane emissions from its natural gas business by 2030 and net-zero carbon emissions from electricity generation by 2050. The company is investing in major electric grid upgrades and cleaner generation, including expanded energy storage, renewables, natural gas and nuclear. Our team is available Monday to Friday from 8 a.m. to 5 p.m. EST. If you suspect an emergency, please call 911.

DEC Company Details

Linkedin ID:

duke-energy-corporation

Employees number:

24627 employees

Number of followers:

336869.0

NAICS:

221

Industry Type:

Utilities

Homepage:

duke-energy.com

IP Addresses:

113

Company ID:

DUK_1496589

Scan Status:

In-progress

AI scoreDEC Risk Score (AI oriented)

Between 900 and 1000

This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.

Ailogo

Duke Energy Corporation Company Scoring based on AI Models

Model NameDateDescriptionCurrent Score DifferenceScore
AVERAGE-Industry03-12-2025

This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers.

N/A

Between 900 and 1000

Duke Energy Corporation Company Cyber Security News & History

Past Incidents
3
Attack Types
3
EntityTypeSeverityImpactSeenUrl IDDetailsView
Duke EnergyBreach60310/2024DUK001102424Link
Rankiteo Explanation :
Attack with significant impact with internal employee data leaks

Description: Duke Energy, a North Carolina–based utility company, had used batteries from CATL for marine base electricity storage. However, the company ceased this arrangement after concerns were raised around national security. This issue was highlighted partly due to the intervention by US lawmakers. The incident reflects a broader tension where US energy infrastructure's reliance on Chinese technology may pose risks to supply chain security and national interests.

Duke EnergyCyber Attack60210/2024DUK001103024Link
Rankiteo Explanation :
Attack limited on finance or reputation

Description: Duke Energy, a North Carolina–based utility company, has ceased using contemporary Amperex Technology Co. Ltd. (CATL) for marine base electricity storage due to national security concerns advocated by US lawmakers. This decision follows a Department of Homeland Security report warning against reliance on Chinese utility storage batteries and the risks it poses to the US supply chain. Duke Energy's participation in utilizing CATL's battery technologies for significant energy storage projects has raised issues around strategic dependencies and potential exploitation, aligning with a broader governmental scrutiny of Chinese state-supported firms in crucial industries.

Duke EnergyVulnerability100610/2024DUK001102624Link
Rankiteo Explanation :
Attack threatening the economy of geographical region

Description: Duke Energy, a North Carolina–based utility company, was involved in using battery products supplied by Contemporary Amperex Technology Co. Limited (CATL) for marine base electricity storage. Concerns around national security were raised, which led to dropping CATL as a supplier. This action reflects the increasing scrutiny and apprehension about the involvement of Chinese state-supported companies in critical supply chains within the United States, potentially creating dependencies that could impact national security and economic stability. The situation echoes a broader tension between reliance on foreign technology and the push for domestic alternatives in strategic sectors.

Duke Energy Corporation Company Subsidiaries

SubsidiaryImage

Duke Energy, a Fortune 150 company headquartered in Charlotte, N.C., is one of America’s largest energy holding companies. The company’s electric utilities serve 8.4 million customers in North Carolina, South Carolina, Florida, Indiana, Ohio and Kentucky, and collectively own 54,800 megawatts of energy capacity. Its natural gas utilities serve 1.7 million customers in North Carolina, South Carolina, Tennessee, Ohio and Kentucky. Duke Energy is executing an ambitious clean energy transition, keeping reliability, affordability and accessibility at the forefront as the company works toward net-zero methane emissions from its natural gas business by 2030 and net-zero carbon emissions from electricity generation by 2050. The company is investing in major electric grid upgrades and cleaner generation, including expanded energy storage, renewables, natural gas and nuclear. Our team is available Monday to Friday from 8 a.m. to 5 p.m. EST. If you suspect an emergency, please call 911.

Loading...

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=duke-energy-corporation' -H 'apikey: YOUR_API_KEY_HERE'
newsone

DEC Cyber Security News

2024-12-22T08:00:00.000Z
Duke Energy announces data breach impacting customer personal information

Duke Energy announced a potential data exposure incident from May 2024 that may have affected customer information.

2024-12-19T08:00:00.000Z
Duke Energy responds to customer data breach

The utility has confirmed the letters are not scams and that a hack exposed customers' personal and account information in May.

2025-05-02T02:01:33.000Z
Duke Energy Carolinas class action claims data breach exposed customer data

A new class action lawsuit alleges that Duke Energy Carolinas failed to properly safeguard and secure the sensitive information of its customers during a May ...

2024-12-13T08:00:00.000Z
Some Duke Energy customers affected by ‘cyber incident’

Some Duke Energy customers were affected by a cyber breach their website had earlier this year, according to the company.

2024-07-01T07:00:00.000Z
Duke Energy strengthens the grid, increases resiliency ahead of the 2024 hurricane season

Duke Energy Florida has been preparing ahead of the start of hurricane season to respond quickly and restore power faster when the next storm strikes.

2024-11-20T08:00:00.000Z
Meet Lesly Luque: Women in Tech Giving Back

Leadership roles with Latinas in Tech and Women in Technology of Charlotte fuel Luque's drive to expose others to unique opportunities.

2025-02-14T08:00:00.000Z
Cyber-vulnerable battery systems are catching fire and communicate directly to China

Cyber-vulnerable battery systems are catching fire and communicate directly to China ... Control system cyber incidents have been publicly ...

2023-06-20T07:00:00.000Z
Duke Energy changed security reviews of critical assets following December substation attacks

Duke uses “overlapping security controls” that allow the utility to detect threats earlier, decrease its response time and allow quicker law ...

2025-01-29T08:00:00.000Z
ENGlobal says hackers accessed sensitive personal data in Nov breach

ENGlobal revealed on Tuesday that the attackers who breached the company last November were able to access sensitive personal information from its network ...

similarCompanies

DEC Similar Companies

TATA Power

Tata Power is one of India’s largest integrated power companies and together with its subsidiaries and jointly controlled entities, has an installed/managed capacity of 14,294 MW. The Company has a presence across the entire power value chain - generation of renewable as well as conventional power i

Enedis

Enedis est le gestionnaire du réseau public de distribution d’électricité sur 95 % du territoire français continental. Ses 38 859 collaborateurs assurent chaque jour l’exploitation, l’entretien et le développement de près de 1,3 million de kilomètres de réseau. Raccordement, mise en service, dépann

Tokyo Electric Power Company

Tokyo Electric Power Company Holdings, Inc. (TSE: 9501), headquartered in Tokyo, Japan, is the largest utility in Japan serving millions of homes and businesses. Worldwide the company has more than 34 subsidiaries and 32 affiliates in 8 countries and employs approximately 42,060 people. Consolidated

Xcel Energy

As a leading electric and natural gas energy company, we offer a comprehensive portfolio of energy-related products and services to 3.4 million electricity customers and 1.9 million natural gas customers across our eight states: Colorado, Michigan, Minnesota, New Mexico, North Dakota, South Dakota,

PT PLN (Persero)

Indonesia State Electricity Corporation PLN has a long history in electricity industry of Indonesia. As the sole provider of electricity in Indonesia, PLN is striving to increase quality of services to all Indonesian. In 1972, in accordance with Government Regulation No.17, the State-owned Electric

Correos

Somos la empresa líder en comunicaciones físicas, digitales y de paquetería. Nuestra misión es prestar un servicio integral de calidad, ofreciendo soluciones y servicios en toda la cadena de valor del ecommerce con el objetivo de facilitar la vida a nuestros clientes. Distribuimos más de 5.100 millo

What Do We Measure?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge