ENGIE has confirmed that attackers stole data belonging to customers in France after breaching a marketing platform used by its business partners, BleepingComputer reported on October 27. The energy company said it had cut off the attackers’ access and that its internal IT systems were not compromised.
An ENGIE spokesperson told the publication that the company detected unusual data access in a tool partners use to find prospective customers and market energy offers. ENGIE did not disclose how many customers were affected or when the intrusion occurred.
The company said its investigation so far indicated that the affected information was limited to customer contact details and certain energy-contract information. No banking data was affected, according to ENGIE.
Customer notification letters described by BleepingComputer provided a more detailed account of the information accessed: first and last names, mailing addresses, email addresses, phone numbers, Delivery Point (PDL) or Metering and Estimation Point (PCE) identifiers, customer IDs and contract numbers.
ENGIE said it notified the relevant authorities and individually informed affected customers. It also reminded those customers of precautions against potential fraud and phishing attempts—the practical concern following the exposure of contact and contract details. The report did not establish that such attempts had occurred.
ENGIE did not attribute the attack to a particular group. BleepingComputer reported that no ransomware operation or extortion gang had publicly claimed the breach before publication.
