LeakData breachupdated 27 Oct 2026, 09:32 UTC
ENGIE customer data stolen via breached marketing platform
Attackers got into a marketing system used by ENGIE's business partners and copied customer information. If you are an ENGIE customer, be alert to suspicious messages that use your personal details.
1 source, unconfirmed
| Severity | UnratedData breach |
|---|---|
| Being exploited? | UnclearNo reports either way yet |
| What to do | Check exposureTreat unsolicited messages about your ENGIE account with suspicion and verify them directly through ENGIE's official channels. |
| How sure is this? | 1 source, unconfirmedOnly one publisher so far, details may change |
How the attack works simplified
- 1AttackersTarget a marketing platform
- 2Marketing platformUsed by ENGIE business partners
- 3Customer dataCopied from the platform
- ResultCustomer data stolen
What happened
ENGIE, a French power and natural gas provider, confirmed that attackers stole customer data after breaching a marketing platform used by its business partners.
Why it is dangerous: Customer personal data was taken, which can enable phishing, scams, or identity misuse against the people whose data was exposed.
Are you affected?
You are affected if you are an ENGIE customer whose data was held on the breached marketing platform.
What to do
- Be cautious of unexpected emails, calls, or texts referencing your ENGIE account or energy contract
- Never share passwords or payment details in response to unsolicited requests
- Watch for official notices from ENGIE about the incident and any recommended actions
Timeline
- 27 Oct 2026, 09:25 UTCPublicly disclosed
- 27 Oct 2026, 09:25 UTCReported by BleepingComputer · BleepingComputer
- 27 Oct 2026, 09:32 UTCPicked up by Zero Radar
Sources 1 report, oldest first
Security press established security newsrooms
- Energy giant ENGIE discloses data breach affecting customersBleepingComputer · 27 Oct 2026, 09:25 UTC
Technical details
- ID
- ZR-4b38edd6
- Disclosed
- 27 Oct 2026, 09:25 UTC
- On Zero Radar
- 27 Oct 2026, 09:32 UTC (7 min after disclosure)
- Last change
- 27 Oct 2026, 09:32 UTC
The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works