INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Engie Discloses Supply Chain Breach

| 2026-10-28 14:05 CRITICAL LOW DATA BREACH SUPPLY CHAIN
JSON
Executive Summary
AI-generated
Engie, a French multinational energy company, recently identified unusual data access activity within a third-party marketing platform used by its partners in France. The incident occurred on October 28, 2026, and Engie's US retail energy business, Engie Resources, was previously targeted by the same group, which claimed to have obtained 3GB of data in an earlier breach that took place last year. No UK or European energy and utilities clients have reported ransomware since July 2025, according to claims data from insurer Resilience. The compromised data may include full name, postal and email address, telephone number, unique IDs for energy supply, customer ID, and contract number, but no banking data was involved in the breach. Engie has launched an investigation into the incident and enhanced monitoring measures are now in place to ensure that the situation is fully secured.
Technical Mitigations AI-generated
• Patch the third-party marketing platform used by Engie's partners, specifically the tool used for customer prospecting activities and energy offer marketing in France. • Monitor for unusual data access activity within this tool and disable any relevant access immediately if detected. • Implement enhanced monitoring measures to detect potential phishing attempts from trusted sources.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
LAPSUS$LAPSUS$
Target & Sectors
NORTH_AMERICA NORTH_AMERICA financefinance retailretail energyenergy
Incident Timeline
‎July 2025
Ransomware comprises around 70% of incurred losses across claims on record in the sector, according to insurer Resilience.
target_region United Kingdom
According to claims data from insurer Resilience shared with Infosecurity, no UK or European energy and utilities clients have reported ransomware since July 2025.
tactic Ransomware
According to claims data from insurer Resilience shared with Infosecurity, no UK or European energy and utilities clients have reported ransomware since July 2025.
organisation Resilience
According to claims data from insurer Resilience shared with Infosecurity, no UK or European energy and utilities clients have reported ransomware since July 2025.
‎2025/10/28
Extortion group LAPSUS$ claimed to have extracted more than one billion records from compromised over 100 Salesforce instances.
tactic Extortion
However, in October last year, extortion group Scattered LAPSUS$ Hunters listed the firm on its leak site, after compromising over 100 Salesforce instances and claiming to have extracted more than one billion records.
threat_actor LAPSUS$
However, in October last year, extortion group Scattered LAPSUS$ Hunters listed the firm on its leak site, after compromising over 100 Salesforce instances and claiming to have extracted more than one billion records.
general_metric 100 Salesforce instances
However, in October last year, extortion group Scattered LAPSUS$ Hunters listed the firm on its leak site, after compromising over 100 Salesforce instances and claiming to have extracted more than one billion records.
‎2026/10/28
Engie's US retail energy business Engie Resources was the victim of a data breach resulting in the theft of 3GB of sensitive information.
organisation Engie Resources
In that incident, Engie’s US retail energy business Engie Resources was the victim, with the group claiming to have obtained 3GB of data.
data_breach 3 GB
In that incident, Engie’s US retail energy business Engie Resources was the victim, with the group claiming to have obtained 3GB of data.
organisation Engie
No Group Has Claimed Responsibility At the time of writing, no extortion group had admitted responsibility for the breach, which Engie said is now contained.
Tactical Metrics
Metrics
data_breach
3
Gb
In that incident, Engie’s US retail energy business Engie Resources was the victim, with the group claiming to have obtained 3GB of data.
Intelligence Sources
Infosecurity-Magazine 2026-10-28