Breaches · 1 day ago
Engie said on Oct. 27, 2026, that a compromised marketing platform used by its partners may have exposed customer records in France; the company has not said how many people were affected. Engie said its own IT systems were not compromised and that no banking data was involved.
The exposed information may include contact details, customer and contract numbers, and gas or electricity supply-point IDs. Those identifiers can help an attacker sound like a real customer when contacting another organization, potentially eliciting more information or prompting a payment without stolen banking details.
For organizations that verify callers or email requests using energy account details, the risk can arrive through a partner’s data exposure rather than a breach of their own systems. Engie says the incident is contained, but that does not prevent exposed identifiers from being reused in impersonation attempts.
2 sources covering this story
Energy Giant Engie Notifies Customers of Supply Chain Breach
An undisclosed number of Engie customers have had their data compromised after a supply chain incident
Energy giant ENGIE discloses data breach affecting customers
French energy giant ENGIE, one of the world's largest power and natural gas providers, confirmed that attackers stole customer data after breaching a marketing platform used by business partners.
Part of the PlainSec briefing for 2026-10-29