ENGIE notifies customers after breach via partner marketing platform
ENGIE confirmed that attackers accessed a platform used by business partners for prospecting and marketing energy offers, exposing customer data in France, including names, addresses, emails, phone numbers, customer IDs, contract numbers and meter references. According to the company, banking data and internal systems were not affected, the access was blocked and authorities were notified. ENGIE has begun notifying affected customers, but the number of victims and the compromised platform remain undisclosed, and no group has claimed the attack.
What happened
ENGIE, the French energy giant, confirmed that attackers accessed a platform used by business partners for prospecting and marketing energy offers. Customer data in France was exposed: names, addresses, emails, phone numbers, customer IDs, contract numbers and meter references. The company blocked the access, notified authorities and is contacting affected customers.
Why it matters
Personal and contract data can fuel targeted phishing and social engineering scams, with fraud and reputational risk. According to ENGIE, banking data and internal systems were not affected. The number of affected customers and the compromised platform have not been disclosed.
What to do
If your company is an ENGIE customer in France, treat messages citing contract or meter numbers with suspicion and warn staff about scams. Companies sharing customer data with partner platforms should review third-party access and monitor for leaks.
For the technical team
- Affected
- ENGIE Plataforma de prospecção e marketing usada por parceiros comerciais da ENGIE; dados de clientes expostos · Prospecting and marketing platform used by ENGIE's business partners; platform identity undisclosed. Customer data in France.
- Exploitation
- No ransomware or extortion group has publicly claimed responsibility as of the Dark Web Informer post. Sources detail no exploitation beyond the access.
- Fix
- No product fix applicable; ENGIE says it blocked the unauthorized access, notified authorities and contacted affected customers.
- Vector
- Unauthorized access to a third-party platform used by business partners for prospecting and marketing; the intrusion vector was not disclosed. ENGIE's internal systems were not compromised, according to the company.
- More details
- Exposed data: names, mailing addresses, emails, phone numbers, customer IDs, contract numbers and electricity delivery or gas metering point references of customers in France. Infosecurity Magazine describes the case as a supply chain incident. Banking data not affected, per ENGIE. Number of victims and platform identity undisclosed.
Timeline
Engie has begun notifying affected customers; the number of victims of the vendor-side incident remains undisclosed.
New details on the accessed data: names, emails, phone numbers, meter IDs and contract numbers of customers in France; ENGIE says bank details were not exposed and has not said how many customers are affected.
ENGIE details the incident: attackers hit a partner platform used for prospecting, exposing names, addresses, emails, phone numbers and contract numbers; banking data and internal systems were not affected.
Want the next updates in your inbox? Get the daily edition →
See all 4 updates
ENGIE confirms data breach involving customers.
Sources 4 sources
- @BleepinComputer @BleepinComputer
- @DarkWebInformer @DarkWebInformer
- @IntCyberDigest @IntCyberDigest
- Energy Giant Engie Notifies Customers of Supply Chain Breach Infosecurity Magazine
