Breachesby GlyphEndesa
Disclosed Jan 12, 2026Confirmed
Endesa discloses breach of commercial platform exposing customer contract data
Spanish utility Endesa and its Energia XXI operator notified customers that attackers accessed a commercial platform holding contact details, national ID numbers, contract data and IBANs. A threat actor claimed to be selling about 20 million records; passwords were not exposed.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 12, 2026 |
| Discovered | Jan 2026 |
| Attack | Hacking |
| Data exposed | NamesEmailsPhone numbersAddressesGovernment IDsFinancial |
| Sector | Energy · ES |
| Status | Confirmed |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.