Science & Tech · Cybersecurity · 12 hrs ago
ENGIE says attackers stole customer data through marketing platform
Attackers stole customer information from an ENGIE marketing platform used by business partners to find prospective customers and promote energy offers.
ENGIE is a French energy company that operates in 30 countries.
The breach was limited to customers in France, but the company has not said how many people were affected.
The exposed information included names, contact details, customer and contract numbers, and energy metering information.
ENGIE says its internal systems were not breached and no banking data was affected.
The company notified authorities and contacted affected customers with advice on avoiding fraud and phishing attempts.
ENGIE has cut off the attackers' access, and no group has claimed responsibility.
ENGIE said attackers stole customer data by accessing a marketing platform used by its business partners.
The incident affected customers in France, but ENGIE did not disclose how many.
The company said its internal IT systems were not compromised and no banking data was affected.
Information accessed included customer contact details and information about energy contracts.
ENGIE said it cut off the attackers’ access, notified authorities and contacted affected customers about fraud and phishing risks.
- Who
- Attackers accessed data belonging to ENGIE customers.
- What
- Customer data was stolen through a marketing platform used by ENGIE’s business partners.
- When
- ENGIE recently identified unusual data access activity; the exact date of the incident was not stated.
- Where
- The affected customers are in France. The platform was used by business partners.
- Why
- Not stated.
This story does not have two clearly opposing sides.
ENGIE identified unusual data access activity in a tool used by partners for customer prospecting and marketing energy offers.
ENGIE cut off the attackers’ access to the compromised platform.
ENGIE notified relevant authorities and contacted affected customers.
- Affected customers
- Customers in France
- Affected total
- Not disclosed
- Compromised platform
- Marketing tool used by business partners
- Data accessed
- Names, contact details, customer IDs, contract numbers and metering point information
- Banking data
- Not affected
3 sources
What people are saying
ENGIE's internal IT systems were not compromised. ENGIE recently identified unusual data access activity within a tool used by partners as part of their customer prospecting activities and the marketing of energy offers,
The investigations conducted to date indicate that the data concerned is limited to customers' contact details and certain information relating to their energy contracts. No banking data is affected,