2024 E.ON România — Customer emails, passwords exposed
Data compromised
Email addresses; passwords
Technical writeup
Data breach exposing customer email addresses and passwords. ANSPDCP (Romania) found company lacked adequate security including 2FA. E.ON fined €25,000.
Root cause
Inadequate security measures; no 2FA