Endesa
Disclosed Jan 12, 20268 months agoConfirmed
Endesa discloses breach of commercial platform exposing customer contract data
Spanish utility Endesa and its Energia XXI operator notified customers that attackers accessed a commercial platform holding contact details, national ID numbers, contract data and IBANs. A threat actor claimed to be selling about 20 million records; passwords were not exposed.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jan 12, 2026 |
| Discovered | Jan 2026 |
| Attack | Hacking |
| Data exposed | Names, Emails, Phone numbers, Addresses, Government IDs, Financial |
| Sector | Energy · ES |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Spanish energy giant Endesa discloses data breach affecting customersbleepingcomputer.com · News | News |
| Endesa data protection noticeendesa.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 12 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.