Gexa officials say they do not know how many customers' personal information was compromised, but they are sending the letter to customers past and present and even to those who may have enrolled in a Gexa plan, but didn't ultimately end up choosing the provider.
Indictments are pending against the person at the center of the investigation and the computers used have been seized. Further, Gexa says the company knows of no unauthorized use of this personal information.
Gexa says while the breach included names, addresses and Social Security numbers, no credit card numbers were compromised.
As for consumers, the company says they can call the credit reporting agencies to monitor their accounts.
