Spanish Energy Company Endesa Hacked

Spanish energy company Endesa has notified customers that their information was compromised in a data breach, with unauthorized access to its commercial platform affecting customers of its gas distributor Energia XXI. Endesa, majority-owned by Enel Group, serves around 10 million customers in Spain and over 10 million in other European countries.

The hackers accessed and likely exfiltrated basic customer identification data, contact details, national identification numbers, contract information, and payment details including IBANs, while passwords were not compromised and the incident was quickly contained. Endesa says it has implemented safeguards, including blocking compromised accounts, analysing log files, and notifying affected customers, with continuous monitoring of systems under way.

The company states there is no evidence yet that stolen data was used maliciously, though customers are advised to remain vigilant against identity theft and phishing. Endesa started notifying customers roughly a week after a threat actor boasted on a hacker forum about stealing 1.05 terabytes of data and claiming the exfiltrated information contains data for over 20 million Endesa customers. According to Endesa’s incident notice, the breach affected a commercial platform used by its customers and those of Energia XXI. 13 January 2026.