Endesa electric company hacked: Canary Islands customers warned after major data breach
Endesa Energía, one of the main electricity providers that supplies thousands of homes across Spain and the Canary Islands, has confirmed a serious cyberattack on its commercial platform. The breach allowed a hacker to steal personal data from customer accounts, including ID numbers and bank details.
The company reported that a malicious actor managed to get past its security systems and access confidential information linked to electricity and gas contracts. Endesa has already begun emailing affected customers across the islands to alert them.
Early investigations suggest the hacker may have viewed and downloaded names, addresses, contact numbers, national identity documents, and IBAN bank account numbers. Endesa emphasises that customer login passwords were not accessed.
There is no evidence yet that the stolen data has been used fraudulently, but the company warns that the attacker could attempt identity theft, post the information on dark web forums, or use it to send scam emails or messages. Residents in the Canary Islands, where many rely heavily on Endesa for power, are being urged to stay alert for suspicious calls, texts, or emails.
Endesa says it considers it “unlikely” that the breach will lead to serious harm for customers, but it advises anyone concerned to report questionable activity to its dedicated helpline: 800 760 366.
Once the incident was discovered, Endesa activated emergency security protocols to contain the breach, reduce the impact, and prevent a repeat occurrence.
The specialist cybersecurity site Escudo Digital first reported the attack on 6th January. According to its findings, the hacker claimed on a dark web forum to have stolen more than 1TB of data, potentially involving over 20 million people. The leaked information reportedly includes full names, postal addresses, financial records such as IBAN and billing history, energy supply identifiers (CUPS), details about electricity and gas contracts, and regulatory data used by energy companies.
This incident is particularly concerning for residents and businesses in the Canary Islands, where energy supply issues have been a repeated source of public frustration.
Share:
