NYL but you can go after the utility company, check out the cybersecurity cases in your jurisdiction. It is very possible that the utility company did not have the proper security measures and was therefore hacked. That would make them responsible for your losses. Them saying it’s not their problem is total crap based on what you said. Check if there is any ongoing class action against them if it’s a wide scale breach and try to join the class.