Cybersecurity
ENGIE confirms customer data breach
ENGIE said attackers used a partner-facing marketing tool to reach customer information, limited the incident to France, and notified authorities and affected customers after cutting off access.
- ENGIE said attackers accessed customer data through a tool used by business partners, not its internal systems.
- The company said the incident was limited to customers in France and that it had notified the relevant authorities.
- ENGIE said the data involved was limited to contact details and some energy contract information, with no banking data affected.
- Breach letters said the exposed information included names, addresses, email addresses, phone numbers, customer IDs and contract numbers.
ENGIE said it found unusual access in a tool used by partners for customer prospecting and energy offer marketing. A spokesperson said the company cut off access to the platform and that its own internal systems were not breached.
The company said the incident was limited to customers in France. It said it had informed the relevant authorities and contacted affected customers.
ENGIE said its investigations showed the information taken was limited to contact details and certain contract data. It said banking data was not affected.
In letters sent to customers, ENGIE said the exposed records included first and last names, mailing addresses, email addresses, phone numbers, PDL or PCE numbers, customer IDs and contract numbers. The company also told customers to watch for fraud and phishing attempts.
Named in this story
Companies
- ENGIE
- confirmed the breach and said internal systems were not compromised
Places
- France
- the country where the affected customers were said to be
How the source tells it
A plain, source-led breach report with little overt framing.
No emotive framing was found in the original.