Endesa Investigates Breach After Hacker Claims Theft of 20 Million Records
Learn More
Endesa, the largest power company in Spain, is investigating a possible data breach after a hacker using the handle "Spain" claimed to steal 1.05 terabytes of data on a dark web forum. The hacker claims the stolen data contain info on more than 20 million people.
Apparently hackers broke into a commercial platform that Endesa uses to handle customer info. The company stopped the attack, but the hackers already took stole data. Endesa is a part of the Enel Group.
The exposed data allegedly includes:
- Full names and contact info
- National ID numbers
- Energy contract details
- Bank account numbers (IBANs)
The number of affected individuals, the compromised platform and vector of attack are not disclosed.
Endesa reported the incident to the spanish privacy regulator and claims the says hackers did not get any passwords. Customers should be careful of phishing emails and phone calls.
