The Energy Authority Company Cyber Security Posture
teainc.orgThe Energy Authority (TEA®) is the strategic partner of choice in providing energy solutions to public power. We are wholly-owned and directed by our public power Members who participate in our organization's decision-making. Today, over 55 public power utilities across the nation are TEA Members and Partners, representing more than 30,000 MW of combined generation assets across all fuel types. Portfolio management, trading, optimization, renewables procurement, deep-dive analytics, collaboration, and resource planning—that’s the power of The Energy Authority. TEA understands the unique needs of multi-member organizations and the value in economies of scale. TEA turns data into insight and insight into action.
EA Company Details
tea
545 employees
8729.0
221
Utilities
teainc.org
Scan still pending
THE_1518327
In-progress
EA Risk Score (AI oriented)Between 800 and 900
This score is AI-generated and less favored by cyber insurers, who prefer the TPRM score.
EA Global Score.png)
The Energy Authority Company Scoring based on AI Models
| Model Name | Date | Description | Current Score Difference | Score |
|---|---|---|---|---|
| AVERAGE-Industry | 03-12-2025 | This score represents the average cybersecurity rating of companies already scanned within the same industry. It provides a benchmark to compare an individual company's security posture against its industry peers. | N/A | Between 800 and 900 |
The Energy Authority Company Cyber Security News & History
| Entity | Type | Severity | Impact | Seen | Url ID | Details | View |
|---|---|---|---|---|---|---|---|
| Tea | Breach | 85 | 4 | 7/2025 | TEA752072825 | Link | |
Rankiteo Explanation : Attack with significant impact with customers data leaksDescription: Cybercriminals breached a legacy data storage system used by the Tea app, gaining unauthorized access to approximately 72,000 images, including selfies and driver’s license photos. The breach affected users who signed up before February 2024. The stolen data, originally archived for compliance, was publicly accessible in a Firebase storage bucket without authentication. The situation escalated when online communities collated the data, mapping users' locations, some traced back to U.S. Army bases, and batches of data appeared on cybercriminal forums. | |||||||
The Energy Authority Company Subsidiaries
The Energy Authority (TEA®) is the strategic partner of choice in providing energy solutions to public power. We are wholly-owned and directed by our public power Members who participate in our organization's decision-making. Today, over 55 public power utilities across the nation are TEA Members and Partners, representing more than 30,000 MW of combined generation assets across all fuel types. Portfolio management, trading, optimization, renewables procurement, deep-dive analytics, collaboration, and resource planning—that’s the power of The Energy Authority. TEA understands the unique needs of multi-member organizations and the value in economies of scale. TEA turns data into insight and insight into action.
Access Data Using Our API
Get company history
Rapid.png)
EA Cyber Security News
Federal Power Act Section 202(c) Puerto Rico Electric Power Authority (PREPA)
On May 16, 2025, Department of Energy (DOE) issued two emergency orders, pursuant to section 202(c) of the Federal Power Act, to the Puerto ...
Energy
Energy and telecommunications infrastructures are among the most critical components of modern society. The increasing reliance on ICT has elevated the ...
Staten Island students showcase skills from groundbreaking cybersecurity fellowship | In Class column
Six students made presentations about their experience in the New York Power Authority's first paid cybersecurity fellowship program. The ...
Iberian blackout: Cyberattack is not to blame – but the threat to power grids is real. Here's why
Millions of people across Spain and Portugal experienced a major power outage on Monday, causing significant travel disruptions and bringing ...
DOE Orders Fossil Units Online After Puerto Rico Blackouts, Citing Dispatchable Capacity Need
The U.S. Department of Energy (DOE) has invoked emergency authority to compel Puerto Rico's public utility to dispatch mothballed oil-fired and ...
Cybersecurity concerns bar Guam Power Authority from obtaining batteries from US adversaries
GPA Assistant General Manager John Cruz said the power authority had ensured that inverters to be used in Phase 4 projects were not sourced from ...
Opinion: CT lawmakers must choose between cyber investments and PURA ‘adversarial approach’
Connecticut utilities need PURA's support for advancing cybersecurity on energy infrastructure. The problem is, when it comes to these critical initiatives,
UK Energy Sector Targeted by Hackers, Says UK Cybersecurity Authority
Hackers are believed to target the UK”s energy sector and some industrial control systems have likely been compromised, according to a recent report from ...
FERC proposes enhanced cybersecurity standards to protect US bulk power systems from malicious threats
FERC proposes enhanced cybersecurity standards to protect US bulk power systems from malicious threats.
EA Similar Companies
Southern Company
Together with our subsidiaries, we deliver clean, safe, reliable and affordable energy to our 9 million customers. Our focus is doing so with service excellence. That means we are leaders who take action to meet our customers’ and communities’ needs while advancing our commitment to net zero emiss
Neoenergia
Somos uma companhia de capital aberto com ações (NEOE3) negociadas na Bolsa de Valores de São Paulo. Parte do grupo espanhol Iberdrola, atuamos no Brasil desde 1997, e atualmente, somos uma das líderes do setor elétrico do país. Estamos presentes em 18 estados e no Distrito Federal, com negócios em
EDP
Our story began more than 40 years ago. Today we are a global company, among the largest players in the energy sector in Europe and the 4th largest producer of wind energy. We are proud to be a leading utility integrated in the Dow Jones Sustainability Indexes (World). We want to build a new energy
Pacific Gas and Electric Company
Pacific Gas and Electric Company, incorporated in California in 1905, is one of the largest combination natural gas and electric utilities in the United States. Based in San Francisco, the company is a subsidiary of PG&E Corporation. There are approximately 20,000 employees who carry out Pacific
A2A
A2A is the Italian Life Company that deals with the environment, water and energy and, thanks to the circular use of natural resources, takes care of the necessary conditions for life and quality thereof. Listed on Borsa Italiana (the Italian Stock Exchange), with over 12,000 employees, A2A is a le
TSSPDCL
With a vision to fulfill the expectations of the Government, the Telangana Southern Power Distribution Company Limited, which came into being on 2nd June 2014, with an objective of electricity to the people at an affordable price. With its headquarters at Hyderabad, the TSSPDCL encompasses an area
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
EA CyberSecurity History Information
How many cyber incidents has EA faced?
Total Incidents: According to Rankiteo, EA has faced 1 incident in the past.
What types of cybersecurity incidents have occurred at EA?
Incident Types: The types of cybersecurity incidents that have occurred incident Breach.
How does EA detect and respond to cybersecurity incidents?
Detection and Response: The company detects and responds to cybersecurity incidents through incident response plan activated with Yes and third party assistance with Cybersecurity Experts Hired and law enforcement notified with Yes and recovery measures with Securing Systems.
Incident Details
Can you provide details on each incident?
Incident : Data Breach
Title: Tea App Data Breach
Description: Cybercriminals gained unauthorized access to a legacy data storage system containing user images, including driver's license photos, from the Tea app.
Date Detected: 2024-xx-xx
Date Publicly Disclosed: 2024-xx-xx
Type: Data Breach
Attack Vector: Unauthorized Access to Storage System
Vulnerability Exploited: Publicly Accessible Firebase Storage Bucket
Threat Actor: Unknown Cybercriminals
Motivation: Unknown
What are the most common types of attacks the company has faced?
Common Attack Types: The most common types of attacks the company has faced is Breach.
How does the company identify the attack vectors used in incidents?
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Publicly Accessible Firebase Storage Bucket.
Impact of the Incidents
What was the impact of each incident?
Incident : Data Breach TEA752072825
Data Compromised: Driver's License Photos, Selfies, Publicly Viewable Images
Systems Affected: Legacy Data Storage System
Customer Complaints: ['Users Incensed Online']
Brand Reputation Impact: Negative
Identity Theft Risk: High
What types of data are most commonly compromised in incidents?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Driver's License Photos, Selfies and Publicly Viewable Images.
Which entities were affected by each incident?
Incident : Data Breach TEA752072825
Entity Type: Mobile Application
Industry: Social Media
Location: Global
Size: Millions of Users
Customers Affected: Users who signed up before February 2024
Response to the Incidents
What measures were taken in response to each incident?
Incident : Data Breach TEA752072825
Incident Response Plan Activated: Yes
Third Party Assistance: Cybersecurity Experts Hired
Law Enforcement Notified: Yes
Recovery Measures: Securing Systems
What is the company's incident response plan?
Incident Response Plan: The company's incident response plan is described as Yes.
How does the company involve third-party assistance in incident response?
Third-Party Assistance: The company involves third-party assistance in incident response through Cybersecurity Experts Hired.
Data Breach Information
What type of data was compromised in each breach?
Incident : Data Breach TEA752072825
Type of Data Compromised: Driver's License Photos, Selfies, Publicly Viewable Images
Number of Records Exposed: 72,000 Images
Sensitivity of Data: High
Data Exfiltration: Yes
File Types Exposed: Images
Personally Identifiable Information: Yes
Ransomware Information
How does the company recover data encrypted by ransomware?
Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Securing Systems.
References
Where can I find more information about each incident?
Incident : Data Breach TEA752072825
Source: Recorded Future News
Incident : Data Breach TEA752072825
Source: 404media
Where can stakeholders find additional resources on cybersecurity best practices?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Recorded Future News, and Source: 404media.
Investigation Status
What is the current status of the investigation for each incident?
Incident : Data Breach TEA752072825
Investigation Status: Ongoing
Initial Access Broker
How did the initial access broker gain entry for each incident?
Incident : Data Breach TEA752072825
Entry Point: Publicly Accessible Firebase Storage Bucket
High Value Targets: Driver's License Photos, Selfies
Data Sold on Dark Web: Driver's License Photos, Selfies
Post-Incident Analysis
What were the root causes and corrective actions taken for each incident?
Incident : Data Breach TEA752072825
Root Causes: Publicly Accessible Firebase Storage Bucket
What is the company's process for conducting post-incident analysis?
Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Cybersecurity Experts Hired.
Additional Questions
General Information
Who was the attacking group in the last incident?
Last Attacking Group: The attacking group in the last incident was an Unknown Cybercriminals.
Incident Details
What was the most recent incident detected?
Most Recent Incident Detected: The most recent incident detected was on 2024-xx-xx.
What was the most recent incident publicly disclosed?
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2024-xx-xx.
Impact of the Incidents
What was the most significant data compromised in an incident?
Most Significant Data Compromised: The most significant data compromised in an incident were Driver's License Photos, Selfies and Publicly Viewable Images.
What was the most significant system affected in an incident?
Most Significant System Affected: The most significant system affected in an incident was Legacy Data Storage System.
Response to the Incidents
What third-party assistance was involved in the most recent incident?
Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was Cybersecurity Experts Hired.
Data Breach Information
What was the most sensitive data compromised in a breach?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Driver's License Photos, Selfies and Publicly Viewable Images.
What was the number of records exposed in the most significant breach?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 72.0K.
References
What is the most recent source of information about an incident?
Most Recent Source: The most recent source of information about an incident are Recorded Future News and 404media.
Investigation Status
What is the current status of the most recent investigation?
Current Status of Most Recent Investigation: The current status of the most recent investigation is Ongoing.
Initial Access Broker
What was the most recent entry point used by an initial access broker?
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Publicly Accessible Firebase Storage Bucket.
What Do We Measure?
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
