# ENGIE discloses breach of French customer data via a partner marketing tool · pwn.watch

> French energy giant ENGIE confirmed that attackers stole customer data after spotting unusual data access in a tool partners use for customer prospecting and marketing energy offers. ENGIE says it cut off the attackers' access, its internal IT systems were not compromised, and the incident is limited to customers in France. Notification letters say the stolen data includes first and last names, mailing address, email address, phone number, Delivery Point (PDL) or Metering and Estimation Point (PCE) number, customer ID and contract number. ENGIE says no banking data is affected. It hasn't said how many customers are affected, and no group has claimed the attack.

Page: https://pwn.watch/i/engie-france-customer-data-breach-oct-2026 · generated 2026-10-27T13:21:03.149Z

## Status
- Severity: medium · status: live · patch: no-fix-needed
- Product: ENGIE (France) customer data in a partner prospecting tool
- Started: 2026-10-27
- Affected: ENGIE energy customers in France whose data was in a partner prospecting and marketing tool

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/engie-france-customer-data-breach-oct-2026/feed.xml
- JSON Feed: https://pwn.watch/i/engie-france-customer-data-breach-oct-2026/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/engie-france-customer-data-breach-oct-2026.json
- This file: https://pwn.watch/i/engie-france-customer-data-breach-oct-2026/llms.txt

## Updates (newest first)
- 2026-10-27: ENGIE confirms to BleepingComputer that attackers stole French customers' contact and energy-contract data from a partner prospecting and marketing tool; it cut off their access and says its internal IT systems were not compromised. (https://www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/)

## Fix brief
# Security brief: ENGIE discloses breach of French customer data via a partner marketing tool

Source: https://pwn.watch/i/engie-france-customer-data-breach-oct-2026 · status: live · severity: medium · updated Oct 27, 2026, 09:38 UTC

## Patch status
**NO FIX NEEDED: no action on your side beyond verification.**

## What it is
French energy giant ENGIE confirmed that attackers stole customer data after spotting unusual data access in a tool partners use for customer prospecting and marketing energy offers. ENGIE says it cut off the attackers' access, its internal IT systems were not compromised, and the incident is limited to customers in France. Notification letters say the stolen data includes first and last names, mailing address, email address, phone number, Delivery Point (PDL) or Metering and Estimation Point (PCE) number, customer ID and contract number. ENGIE says no banking data is affected. It hasn't said how many customers are affected, and no group has claimed the attack.

Severity detail: Customer contact and contract data stolen, no banking data; count undisclosed

- Product: ENGIE (France) customer data in a partner prospecting tool

## Affected versions
- ENGIE energy customers in France whose data was in a partner prospecting and marketing tool

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
No fixed version is listed. Follow the vendor advisory below.

## Specific notes
If you're an ENGIE customer in France: expect targeted phishing that quotes your real name, address, customer ID, contract or PDL/PCE number. Don't pay or log in from links in emails, texts or calls about refunds or account updates; go to ENGIE's site or app directly.

## Latest updates
- Oct 27, 2026: ENGIE confirms to BleepingComputer that attackers stole French customers' contact and energy-contract data from a partner prospecting and marketing tool; it cut off their access and says its internal IT systems were not compromised.

## Write-ups & news
- [Energy giant ENGIE discloses data breach affecting customers](https://www.bleepingcomputer.com/news/security/energy-giant-engie-discloses-data-breach-affecting-customers/)

## Caveats
ENGIE has notified authorities and every affected customer individually. A year earlier, Scattered LAPSUS$ Hunters leaked records they claimed came from a Salesforce instance of Engie Records, the retail energy supply subsidiary of ENGIE North America; that is a separate incident.

---
Machine-readable: https://pwn.watch/i/engie-france-customer-data-breach-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.