ENGIE says partner sales tool exposed French customer contract data
Original title: ENGIE Data Breach Exposes Customer Details and Energy Contracts
Exposed records include names, phones, emails, customer IDs and energy supply identifiers; banking data was not included.
ENGIE warned customers in France that attackers accessed personal data through a sales tool some business partners use to market electricity and gas offers. The company says its internal IT systems were not compromised and financial information was not affected. It blocked the attackers, notified authorities and contacted affected customers. The partner, customer count and intrusion timeline have not been disclosed, and no group has claimed the attack.
Unconfirmed: ENGIE has not named the partner, the number of customers, the intrusion dates, or an attacker.
- Exposed fields include postal addresses, contract numbers and customer IDs.
- Electricity records include the delivery point identifier (PDL).
- Gas records include the metering and estimation point (PCE).
- No ransomware group has claimed responsibility, and ENGIE has not named an attacker.
- Customers were told to verify unexpected payment or data requests through official channels.
Impact: exposure of contact details and energy contract identifiers
- 1.Verify unexpected payment or data requests through ENGIE's official website or app.
- 2.Do not share SMS codes, passwords or banking details with unexpected callers.
- 3.Treat a known contract number as insufficient proof a caller is legitimate.
From the original article
2 min read at securityaffairs.com
ENGIE says attackers accessed French customers’ contact and energy contract data through a partner sales tool. Banking data was not affected. French multinational energy company ENGIE warned customers in France that attackers accessed personal information through a sales tool used by some business partners.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.