What happened

ENGIE told BleepingComputer that attackers accessed a partner sales platform and stole French customers’ contact and energy-contract information. The company says access was cut off, its internal IT was unaffected and banking information was not involved. The number affected and intrusion date are undisclosed. No electricity or gas supply disruption, operational-control compromise or state-sponsored role is established. This record uses the disclosure date and a national reference marker, not the location of an attacked power facility. A separate earlier October provider notice is not assumed to be the same event.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.