ENGIE discloses data breach affecting French customers via marketing platform

Marketing Platform Compromised

ENGIE, a major global energy provider, confirmed that customer data was stolen following a breach of a marketing platform utilized by its business partners. The company stated that its internal IT systems were not compromised, and the incident was limited to a tool used for customer prospecting and marketing energy offers.

Data Exposed and Scope

The compromised data includes customers' first and last names, mailing addresses, email addresses, phone numbers, Delivery Point (PDL) or Metering and Estimation Point (PCE) details, customer IDs, and contract numbers. ENGIE clarified that no banking data was affected. The breach specifically impacted customers located in France.

Company Response

Upon discovering the incident, ENGIE cut off the attackers' access to the platform. The company has since notified relevant authorities and individually informed affected customers about the breach. They also provided precautionary measures to help customers protect themselves against potential fraud or phishing attempts.

Previous Incidents

This incident follows a previous event approximately one year ago, where the Scattered LAPSUS$ Hunters extortion group claimed to have leaked records from a Salesforce instance belonging to Engie Records, a subsidiary of ENGIE North America. The current attack has not been attributed to any specific threat group, and no ransomware or extortion group has claimed responsibility.