French energy company ENGIE has confirmed that attackers accessed customer data after breaching a tool used by its partners to market energy offers, BleepingComputer reported on 27 October 2026.

An ENGIE spokesperson told BleepingComputer: "ENGIE's internal IT systems were not compromised. ENGIE recently identified unusual data access activity within a tool used by partners as part of their customer prospecting activities and the marketing of energy offers."

According to BleepingComputer, ENGIE cut off the attackers' access to the platform, says the incident is limited to customers in France, has notified the relevant authorities and has contacted affected customers, but did not say how many customers were affected.

ENGIE told BleepingComputer that "the data concerned is limited to customers' contact details and certain information relating to their energy contracts. No banking data is affected."

BleepingComputer says ENGIE's breach notification letters to customers list first and last names, mailing address, email address, phone number, the electricity delivery point (PDL) or gas metering point (PCE) number, customer ID and contract number.

ENGIE did not attribute the attack to a specific group, and BleepingComputer says no ransomware or extortion gang had claimed it before publication. Wire: BleepingComputer (27 Oct).