1. News
  2. Alerts
  3. ENGIE · Data breach
AlertENGIE · Data breach1 min read

ENGIE confirms hackers stole customer contact details in France

ENGIE says hackers stole customer contact and contract details in France, which scammers can use to make fake bills and calls look real.

By the Dashline deskSource: BleepingComputer
ENGIE confirms hackers stole customer contact details in France
Photo: BleepingComputer
Act this week
What happenedAttackers broke into a marketing platform used by ENGIE's partners and stole customer data, though ENGIE says its own systems were not breached.
Who is affectedENGIE energy customers in France, whose names, addresses, emails, phone numbers, meter numbers, customer IDs and contract numbers were exposed.
What to do
  1. 1Read any breach letter from ENGIE carefully and keep it for your records.
  2. 2Treat unexpected emails, texts or calls about your energy contract as possible scams.
  3. 3Do not click links or share payment details; contact ENGIE through its official website or app.
  4. 4Watch your bills and accounts for anything unusual and report it to ENGIE.

French energy company ENGIE has confirmed that hackers stole contact and contract details from some of its customers in France. The attackers did not break into ENGIE directly. They got into a marketing tool that business partners use to find new customers and promote energy offers.

What was taken

Letters sent to affected customers say the attackers saw first and last names, mailing addresses, email addresses, phone numbers, customer IDs and contract numbers. They also saw a number that identifies the home's delivery or metering point. ENGIE says no banking data was affected.

Details like these make scam messages believable. A fake bill or a call that quotes your real contract number is easy to trust. ENGIE has reminded affected customers to watch for fraud and phishing, which means fake messages meant to trick you into clicking or paying. The alert box above covers the steps to take.

What is not known

ENGIE did not say how many customers are affected. It says the incident is limited to customers in France, so people elsewhere can relax on this one. It says it cut off the attackers' access and that its own internal IT systems were not compromised. It has told the authorities and contacted affected customers. No group has claimed the attack, and ENGIE has not named one.

The takeaway

If you are an ENGIE customer in France, treat any unexpected message about your energy contract as a possible scam, even if it quotes real details.

More articles

You should really read these.

Next step

Let’s talk