Energy One is trying to determine the initial point of entry and whether personal information has been compromised.