ENGIE says attackers stole French customer data from partner tool
Original title: Energy giant ENGIE discloses data breach affecting customers
Stolen data includes names, contact details and contract identifiers; ENGIE says banking data and internal systems were not affected.
French energy company ENGIE told BleepingComputer that attackers accessed a marketing tool used by partners for customer prospecting and energy-offer marketing. ENGIE said it cut off access, its internal IT systems were not compromised, and the incident is limited to customers in France. It notified authorities and contacted affected customers. Exposed fields named in notification letters include names, postal and email addresses, phone numbers, delivery or metering points, customer IDs and contract numbers. No banking data was affected, and ENGIE did not attribute the attack.
Unconfirmed: ENGIE has not said how many customers were affected or who carried out the access.
- ENGIE operates in 30 countries and employs over 90,000 people.
- The company did not say how many customers were affected.
- No ransomware or extortion gang had claimed this breach before publication.
- A separate Salesforce claim a year ago involved Engie Records, not this incident.
Impact: French customer contact details and energy contract identifiers exposed
- 1.Affected customers should watch for fraud or phishing using the exposed contact and contract details.
From the original article
2 min read at bleepingcomputer.com
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners. [...]
By Sergiu Gatlan · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.