ENGIE Data Breach Exposes Customer Details and Energy Contracts - Security Affairs

French multinational energy company ENGIE has warned customers that attackers accessed personal information through a sales tool used by some business partners. The exposed data includes contact details and energy contract information that could help fraudsters impersonate the supplier.

The company confirmed that its internal IT systems weren't compromised and banking information wasn't affected. ENGIE has blocked the attackers' access, notified relevant authorities, and contacted affected customers, according to a spokesperson who spoke to BleepingComputer.

Exposed Information

The compromised data includes customers' names, postal addresses, email addresses, telephone numbers, customer IDs, contract numbers, and energy supply identifiers. For electricity customers, this includes the delivery point identifier (PDL), while for gas customers, it includes the metering and estimation point (PCE).