Engie confirms customer data breach via marketing platform | brief

Per Bleeping Computer, French energy provider Engie recently confirmed that unauthorized actors accessed customer data following a security breach of a marketing platform utilized by its business partners.

The company, which operates in 30 countries with over 90,000 employees, stated that the incident was restricted to a third-party tool used for customer prospecting and marketing energy offers. Engie emphasized that its internal information technology systems remained secure throughout the event. While the exact number of affected individuals remains undisclosed, the breach is limited to customers located in France. Stolen information includes names, mailing and email addresses, phone numbers, contract details and specific metering points. Engie confirmed that no banking data was compromised. Following the discovery, the company notified relevant authorities and contacted impacted customers to provide guidance on mitigating potential phishing or fraud risks. No specific threat group has claimed responsibility for the intrusion. This incident follows a separate 2025 event involving a subsidiary of Engie North America. Industry experts note that once attackers obtain valid credentials, security prevention measures often struggle to block subsequent malicious actions, highlighting the importance of robust monitoring beyond initial access points.

Source: Bleeping Computer