Engie notifies customers after partner marketing-tool data breach
Original title: Energy Giant Engie Notifies Customers of Supply Chain Breach
Exposed fields may include names, contact details and French energy contract identifiers; Engie says banking data and its own IT were not involved.
French energy group Engie has notified an undisclosed number of customers that personal data may have been exposed. According to the customer notice, the data can include name, postal and email address, telephone number, energy supply IDs, customer ID and contract number. Engie said no banking data was involved and that its own IT systems were not compromised. It blamed a third-party marketing platform used by partners for customer prospecting and energy offers in France, said the relevant access was disabled, and described the incident as contained. No extortion group had claimed this breach at the time of writing.
Unconfirmed: The number of affected customers is undisclosed, and no group has claimed this breach.
- Engie employs over 90,000 people in 30 countries and reported 2025 revenue of almost €72bn.
- Engie warned that the data could be used for impersonation, fraud or phishing.
- A separate October claim by Scattered LAPSUS$ Hunters concerned Engie Resources, not this incident.
- Resilience said no UK or European energy clients had reported ransomware since July 2025.
Impact: Customer identity and energy contract details exposed; no banking data
- 1.Watch for fraud and phishing emails that use the exposed personal details.
From the original article
2 min read at infosecurity-magazine.com
An undisclosed number of Engie customers have had their data compromised after a supply chain incident
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.