Canada

SINs were included but the article doesn’t elaborate

This is a big fuck up and heads should roll

Remind me why the hell a power company needs to collect its customers' socal insurance numbers in the first place?

One of the things that we've been very mindful of … as the world gets more hostile, we're worried about impacts to critical infrastructure like electrical guide grids, pipelines, these sorts of things. A lot of them are controlled by systems that were never meant to be connected to the Internet. Nowadays, as people are looking to optimize efficiency, and connect to cloud services and connect sensors to networks, they're becoming more exposed to threat actors from around the world. Normally, your electrical grid would only be threatened by people that are actually in the country and nearby, but as soon as you connect it to the internet, you're pretty much opening a lot of this up to people from anywhere.

This is why you need to use a Scada system like Ignition, which can replicate the database to a cloud or IT environment, and any non-administrators should be using that. Remote access for admins should be done via a PAM software running in a web browser, and optimally only accessible from a locked down Chromebook style device that cant run executables.