Threat watch / Breach
ENGIE: customer data taken from a tool used by its sales partners in France
The energy group ENGIE told customers in France that it found unusual data access in a tool its partners use to prospect and sell energy offers. Names, contact details, contract numbers and meter references were exposed. ENGIE says its own IT systems were not compromised and no bank data is involved. It has not said how many customers are affected.
- Sector
- Energy
- Way in
- Supplier
- Product or vendor
- None named
- How it happened
- Unauthorised access to a tool used by ENGIE's partners for customer prospecting and the marketing of energy offers in France. ENGIE says its internal IT systems were not compromised and that the access was disabled as soon as it was detected. The partner, the platform and the technical method are not public.[1][2][3] Checked 8 Nov 2026
- What was stolen
- Names, postal and email addresses, phone numbers, customer IDs, contract numbers and electricity or gas meter references (PDL or PCE), according to the customer notification. ENGIE says no bank data is involved.[1][2][3][4] Checked 8 Nov 2026
- Who was impacted
- Not public yet Checked 8 Nov 2026
- Threat actor
- Not attributed
Timeline
- Selectra reports ENGIE's email to customers about the incident and warns of fake advisers who could use contract and meter numbers. The email does not give a number of customers. [4]
- ENGIE confirms in a statement to Infosecurity Magazine that it "identified unusual data access activity within a tool used by partners" and that "the relevant access was disabled". It says it opened an in-depth technical investigation and put enhanced monitoring in place. No group has claimed the attack. [1]
- French outlets report that ENGIE informed each affected customer individually and has named neither the number of customers nor the partner. [2][3]