ENGIE discloses breach of French customer data via a partner marketing tool
Teaser from the source
French energy giant ENGIE confirmed that attackers stole customer data after spotting unusual data access in a tool partners use for customer prospecting and marketing energy offers. ENGIE says it cut off the attackers' access, its internal IT systems were not compromised, and the incident is limited to customers in France. Notification letters say the stolen data includes first and last names, mailing address, email address, phone number, Delivery Point (PDL) or Metering and Estimation Point (PCE) number, customer ID and contract number. ENGIE says no banking data is affected. It hasn't said how many customers are affected, and no group has claimed the attack.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on discloses
Other advisories
- Not ratedosv:CVE-2026-59158Nuxt Ollama: public runtime configuration discloses the configured cloud API key
- Not ratedosv:CVE-2026-81038Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses
- MediumCVE-2026-112952ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
- MediumCVE-2026-112952ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
- Not ratedosv:CVE-2026-112952ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
- LowCVE-2026-64652GitHub CLI partially discloses authentication tokens in `gh auth status` output in github.com/cli/cli
- LowCVE-2026-64652GitHub CLI partially discloses authentication tokens in `gh auth status` output
- LowCVE-2026-64652GitHub CLI partially discloses authentication tokens in `gh auth status` output
Other news entries
- 123 Reg discloses 'AI cyberattack' on customer data, suspects China nexusNewsThe Register — Security
- Warp discloses breach exposing AI agent logs, user telemetry dataNewsBleepingComputer
- Energy giant ENGIE discloses data breach affecting customersNewsBleepingComputer
- Railway discloses unauthorized access to customer environment variablesBreachpwn.watch
- Nikkei discloses third data breach in a month, 1.8M records exposedNewsBleepingComputer
- SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential TheftNewsThe Hacker News
- Advantest Discloses Data Breach Months After Ransomware AttackNewsSecurityWeek
- Nikkei discloses breaches of employees’ Microsoft, Google email accountsNewsBleepingComputer
Source: https://pwn.watch/i/engie-france-customer-data-breach-oct-2026