Spanish energy giant Endesa says it was hit by data breach, customers
affected and 20 million files allegedly put up for sale

Date:
Tue, 13 Jan 2026 11:30:24 +0000

Description:
A large database is being offered on the dark web.

FULL STORY ======================================================================Endesa Energia suffered unauthorized access, exposing customer data and IBAN numbers Hackers allegedly selling 20m records, 1TB SQL files, on dark web Company warns of phishing, impersonation risks; investigation ongoing

Endesa Energia, the retail arm of one of Europes biggest energy providers, Endesa, S.A., has confirmed it recently suffered a cyberattack which saw it lose sensitive data on an undisclosed number of people.

In a press release, published in Spanish on the companys website, Endesa Energia said it detected unauthorized and illegitimate access to its commercial platform.

Despite the security measures implemented by this company, the unnamed threat actors managed to access, and exfiltrate, certain personal data belonging to the companys customers, including contact data, ID cards, and data related to Endesa Energia contracts. Even more painfully, the attackers stole payment information (mostly IBAN numbers), however passwords were not taken, so the hackers should not have access to peoples accounts. Data for sale

A fully-fledged investigation is ongoing right now, but to tackle the incident, Endesa Energia ousted the hacker from its systems, analyzed the
logs to see how much damage was done, and notified affected customers.

We dont know exactly how many people are affected by this breach, but Spanish law enforcement and data watchdogs were also notified.

So far, there is no evidence that the data was abused, or sold on the dark web, the announcement further explains. However, BleepingComputer found a database for sale on the dark web, appearing to come from this incident.

In a new thread on an underground forum, a cybercriminal is offering the database, allegedly containing 20 million records, to a single exclusive buyer. The ad says the database contains around 1TB in SQL files.

Endesa warns that the crooks might try to usurp or impersonate the users, publish the data, or use it in phishing attacks. That is why we recommend
that you pay special attention to possible suspicious communications that you may receive in the coming days and that you report any anomaly or mistrust that you may detect in this regard, the machine-translated announcement
reads.

Via BleepingComputer

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the
Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/spanish-energy-giant-endesa-says-it-was -hit-by-data-breach-customers-affected-and-20-million-files-allegedly-put-up-f or-sale


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)