Spanish power giant sparks breach probe amid claims of massive data grab

Spanish energy giant Endesa is warning customers about a data breach after a cybercrim claimed to have walked off with a vast cache of personal information allegedly tied to more than 20 million people.

Endesa is Spain's largest electricity utility and a subsidiary of Italy's Enel Group, supplying power and gas to millions of homes and businesses across the Iberian Peninsula.

In a notice tucked away on its website, Endesa said it uncovered "unauthorized and illegitimate access" to a commercial platform used to manage customer information, prompting the activation of its incident response procedures and an internal investigation.

The company said it acted "immediately" to contain the intrusion, but acknowledged that attackers were able to access and potentially exfiltrate "certain personal data of our customers related to their energy contracts" before the door was shut.

The information involved may include identifying and contact details, national identity numbers, and ...