2026 ENGIE — French customer contact and energy-contract data taken through a partner marketing platform
Data compromised
Customers’ first and last names, postal and email addresses, phone numbers, Delivery Point (PDL) or Metering and Estimation Point (PCE) identifiers, customer IDs and contract numbers. ENGIE says no banking data is affected. The incident is limited to customers in France.
Technical writeup
ENGIE told BleepingComputer (coverage dated October 27, 2026) that it notified the relevant authorities and contacted affected customers. The number of customers has not been disclosed. Tom’s Hardware Italia reports that no criminal group had claimed the attack as of its reporting. companyConfirmed true.
Root cause
Attackers got into a tool that ENGIE’s sales partners use for customer prospecting and marketing energy offers. ENGIE says it spotted unusual data access in that tool, cut off the attackers’ access, and that its internal IT systems were not compromised. The incident date is not given in the notice; October 23 is the notice date.