Spanish power giant sparks breach probe amid claims of massive data grab

Endesa confirmed unauthorized access to a commercial customer-data platform that may have exposed personal data — including contact details, national identity numbers and some bank IBANs — and has notified affected customers and Spain's data protection authority. A threat actor claiming the handle "Spain" alleges theft of a 1.05 TB dataset covering more than 20 million individuals, but Endesa has not confirmed the claimed scale or the method of compromise; investigations are ongoing.